- Resolves: RHEL-77983 - Defects found by OpenScanHub - Resolves: RHEL-79673 - Improve the "result" field of ipa-healthcheck if replicas are busy - Resolves: RHEL-80496 - Can't rename users member of automember rule [rhel-9] - Resolves: RHEL-81141 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9] - Resolves: RHEL-89736 - dsconf backend replication monitor fails if replica id starts with 0 [rhel-9] - Resolves: RHEL-89745 - ns-slapd crash in dbmdb_import_prepare_worker_entry() [rhel-9] - Resolves: RHEL-89753 - Nested group does not receive memberOf attribute [rhel-9] - Resolves: RHEL-89769 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-9] - Resolves: RHEL-89782 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-9] - Resolves: RHEL-95768 - Improve error message when bulk import connection is closed [rhel-9] - Resolves: RHEL-101189 - lib389/replica.py is using unexisting datetime.UTC in python3.9 - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9] - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9] - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9] - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9] - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9] - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9] - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9] - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9] - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9] - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9] - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9] - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9] - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9] - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9] - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9] - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9] - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9] - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9] - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9] - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9] - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9] - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z] - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z] - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z] - Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-9.8.z] - Resolves: RHEL-190775 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-9.8.z] - Resolves: RHEL-210875 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-9.8.z] - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Don't pass gcc-only compiler flags to other compilers, e.g. clang (based on https://src.fedoraproject.org/rpms/Judy/pull-request/3 from Timm Baeder) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Remove timestamp to make the man pages non-conflicting Resolves: #1915251 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - enable polkit support to allow normal users to access modems (rh #1995186) - depend ModemManager on polkit package (rh #1995186) - Update to 1.18.0 - Upgrade to 1.18.2 - Include libqrtr-glib build dependency (rh #1996716) - Rebuild to update libqmi's libqrtr support (rh #2032807) - Update to 1.20.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - enable polkit support to allow normal users to access modems (rh #1995186) - depend ModemManager on polkit package (rh #1995186) - Update to 1.18.0 - Upgrade to 1.18.2 - Include libqrtr-glib build dependency (rh #1996716) - Rebuild to update libqmi's libqrtr support (rh #2032807) - Update to 1.20.2 - Update to 1.53.3 (dev) - Add more IPv6 prefix delegation options (RHEL-85765) - Fix order of parsing port/controller properties in nmcli (RHEL-85767) - Improve interface activation logic (RHEL-85766) - Fix WireGuard IPv6 firewall rules (RHEL-85763) - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83061) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-85770) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168) Resolves: RHEL-83061 Resolves: RHEL-59083 Resolves: RHEL-87596 Resolves: RHEL-85770 Resolves: RHEL-85764 Resolves: RHEL-85778 Resolves: RHEL-87168 - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Add hard dependency on iputils (RHEL-134751) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83061) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-85770) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168) Resolves: RHEL-83061 Resolves: RHEL-59083 Resolves: RHEL-87596 Resolves: RHEL-85770 Resolves: RHEL-85764 Resolves: RHEL-85778 Resolves: RHEL-87168 - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Add hard dependency on iputils (RHEL-134751) - Fix 802.1x auth for bridge interface (RHEL-151941) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Add hard dependency on iputils (RHEL-134751) - Fix 802.1x auth for bridge interface (RHEL-151941) - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Add hard dependency on iputils (RHEL-134751) - Fix 802.1x auth for bridge interface (RHEL-151941) - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629) - Fix CVE-2026-10805 (RHEL-191624) - Update to 2.0.36 - Backport fix for CVE-2026-41651. - Resolves: #RHEL-170504 - Update to 2.0.16 - Disable libdecor until it is added to centos/RHEL9 - Build with SDL_STATIC_PIC instead of SDL_STATIC - Build with SDL_STATIC_PIC and SDL_STATIC to actually make the static version of SDL2 - Re-enable libdecor support now that it's available in RHEL 9 Resolves: rhbz#2003471 - Update to 2.0.18 Resolves: rhbz#2028076 - Fix multilib conflict with SDL_revision.h (rhbz#2008838) - Backport fix for building against wayland-1.20+ - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359) - Move libSDL2main to -devel and refresh split CMake target patch Resolves: rhbz#2038390 - Update to 2.0.20 Resolves: rhbz#2039137 - Drop backported patches included in this release - Backport Wayland fixes with Wayland-by-default from upstream Resolves: rhbz#2051963 - Update to 2.26.0 Resolves: rhbz#2051959 - Drop backported patches included in this release - wla-redhat-Add-a-udev-rule-to-avoid-managing-slave-NICs-.patch [RHEL-5880] - Resolves: RHEL-5880 ([Azure][RHEL-9]68-azure-sriov-nm-unmanaged.rules cannot stop NetworkManager-wait-online.service checking SRIOV interface) - wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-40957] - Resolves: RHEL-40957 ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs) - wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-40957] - Resolves: RHEL-40957 ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs) * Rebase to 2.13.1.1 [RHEL-91090] - Resolves: RHEL-91090 (Rebase to v2.13.1.1 [rhel-9]) - wla-docs-add-waagent-manpage-3401.patch [RHEL-109496] - Resolves: RHEL-109496 ([Azure][WALA][RHEL-9] Missing man page) - wla-Use-systemctl-instead-of-service-to-manager-services.patch [RHEL-97572] - Resolves: RHEL-97572 ([Azure][RHEL-9][WALA][Image mode] Cannot find 'service' command) - Rebase to 2.14.0.1 [RHEL-116436] - Resolves: RHEL-116436 (Rebase to v2.14.0.1) - wla-Remove-10-azure-unmanaged-sriov.rules.patch [RHEL-124218] - Resolves: RHEL-124218 ([Azure][WALA][RHEL-9] Remove 10-azure-unmanaged-sriov.rules) - wla-Jira-https-issues.redhat.com-browse-RHEL-133507.patch [RHEL-133507] - Resolves: RHEL-133507 (Backport ConditionVirtualization=|microsoft for waagent in RHEL 9.x) - wla-Change-redhat-waagent-network-setup.service-path-to-.patch [RHEL-82232] - Resolves: RHEL-82232 ([Azure][image mode][WALA][RHEL-9] Unable to setup the persistent firewall rules) - Update to 1.6.3 - Add source tarbal PGP signature verification - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + accountsservice-0.6.55-5 - Own /usr/share/accountsservice - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Bring in RHEL-8 patches Resolves: #2014692 - Synchronize permissions and group ownership for icon and users dirs between rpm file manifest and daemon expectations. Resolves: #2057576 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.37.92 - Update to 3.38.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + adwaita-icon-theme-40.0~rc-1 - Update to 40.rc - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Update upstream URLs - Update to 40.1.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt to ship adwaita-icon-theme-devel in CRB - Resolves: #2021357 - 9.5 stable - Update AlmaLinux Secure Boot certificate - 9.6 beta - 9.6 stable - 9.7 beta - 9.7 stable - 9.8 beta - 9.8 stable - Fix vconsole layout doesn't work for ostree (jkonecny) Resolves: RHEL-101057 - test: make dnf substitutions test check only relevant values (rvykydal) - test: add new substitution members in dnf tests (rvykydal) - pyanaconda: payload: return exception details for payload failures (k.koukiou) - ui: tui: installation_source: show error message in the TUI screen (k.koukiou) Resolves: RHEL-4705 - storage: fix mount point assignment of non-formatted swap partitions (rvykydal) Related: RHEL-16355 - storage: include only fstab devices in fsset swap devices property (rvykydal) Resolves: RHEL-16355 - Fix: UnboundLocalError: local variable 'e' referenced before assignment (k.koukiou) Related to: RHEL-4705 - Emit authselect in KS when fingerprint is enabled (adamkankovsky) Resolves: RHEL-85175 - Set Authselect agruments after run in Security module (adamkankovsky) Resolves: RHEL-85175 - Authselect code simplification (adamkankovsky) Resolves: RHEL-85175 - custom: Reallocate partitions when removing a partition (vtrefny) Resolves: RHEL-114169 - Fixing authselect logical differences not resolved during backporting (adamkankovsky) Resolves: RHEL-85175 - bootloader: efi: utilize grub2-common script for handling config file generation (k.koukiou) Resolves: RHEL-36187 - Fix permissions of the ssh config created by Anaconda (ppolawsk) Resolves: RHEL-129787 - pyanaconda: rpm_ostree: fix _handle_boot_if_not_mount_point method issues (k.koukiou) Related: RHEL-74145 - ostree needs to have /boot be bindmounted into sysroot. (a.badger) Resolves: RHEL-74145 - Only show compatible translations in text mode (mkolman) Resolves: RHEL-144834 - Fix user input in driver disk menu is not displayed (adamkankovsky) Resolves: RHEL-4737 - AlmaLinux changes - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Add OpenJDK bindings - Resolves: RHEL-62405 - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Fix the usage ot patch macro - Disable building on i686 - Add noarch to ExclusiveArch - Fix test declarations - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Add OpenJDK bindings - Resolves: RHEL-62405 - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Fix the usage ot patch macro - Disable building on i686 - Add noarch to ExclusiveArch - Fix test declarations - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Bump 1.0.0.20201109 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Enable CI. Related: rhbz#1956212 - Delete unnecessary xemacs in tests/tests.yml. Related: rhbz#1956212 - Fix covscan report. Related: rhbz#1963073 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to add anthy-unicode-devel to CRB. Related: rhbz#2068287 - Fix covscan report. Related: rhbz#2068287 - Rebuild with regenerated Requires on Java - Fix patch usage - Rebuild - Rebuild - set javac source / target version to 1.8 to fix issues with Java 11 - Fix improper access control vulnerability - Resolves: CVE-2025-48734 - Fix ambiguous reference in AbstractTestCollection to build on Java 11. - Rebuild to verify xmvn/maven switch to jakarta-annotations. - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Backport fix to build with maven-antrun-plugin 3.0.0 - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Ensure Java 8 level bytecode when built on Java 11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Update to upstream version 1.21 - Add missing BuildRequires - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 0.14.1 - 0.14.2 - 0.14.3 - Build appstream-compose library for appstream-generator >= 0.8.4 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 0.14.5 Resolves: rhbz#1998881 - Rebase to 0.15.5 Resolves: rhbz#2134785 - Create symlinks manually to make it build (the symlinks were not created because of reverting the patch to upgrade to Meson 0.62) - Rebase to 0.16.1 Resolves: rhbz#2169103 - Drop unneeded downstream hacks to build with older Meson - 0.14.1 - 0.14.2 - 0.14.3 - Build appstream-compose library for appstream-generator >= 0.8.4 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 0.14.5 Resolves: rhbz#1998881 - Rebase to 0.15.5 Resolves: rhbz#2134785 - Create symlinks manually to make it build (the symlinks were not created because of reverting the patch to upgrade to Meson 0.62) - Rebase to 0.16.1 Resolves: rhbz#2169103 - Drop unneeded downstream hacks to build with older Meson - 0.14.1 - 0.14.2 - 0.14.3 - Build appstream-compose library for appstream-generator >= 0.8.4 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 0.14.5 Resolves: rhbz#1998881 - Rebase to 0.15.5 Resolves: rhbz#2134785 - Create symlinks manually to make it build (the symlinks were not created because of reverting the patch to upgrade to Meson 0.62) - Rebase to 0.16.1 Resolves: rhbz#2169103 - Drop unneeded downstream hacks to build with older Meson - 0.14.1 - 0.14.2 - 0.14.3 - Build appstream-compose library for appstream-generator >= 0.8.4 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 0.14.5 Resolves: rhbz#1998881 - Rebase to 0.15.5 Resolves: rhbz#2134785 - Create symlinks manually to make it build (the symlinks were not created because of reverting the patch to upgrade to Meson 0.62) - Rebase to 0.16.1 Resolves: rhbz#2169103 - Drop unneeded downstream hacks to build with older Meson - 0.14.1 - 0.14.2 - 0.14.3 - Build appstream-compose library for appstream-generator >= 0.8.4 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 0.14.5 Resolves: rhbz#1998881 - Rebase to 0.15.5 Resolves: rhbz#2134785 - Create symlinks manually to make it build (the symlinks were not created because of reverting the patch to upgrade to Meson 0.62) - Rebase to 0.16.1 Resolves: rhbz#2169103 - Drop unneeded downstream hacks to build with older Meson - Add OSGi metadata - Update jansi path for jansi 1.x and jline path for jline 2.x - Update to upstream version 5.2.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add parent to biz.aQute.bnd/pom.xml (fixes [WARNING] JAR will be empty - no content was marked for inclusion!) - Remove scope from dependencies in pom.xml files (fixes missing dependencies, dependencies marked with scope provided are ignored by the rpm dependency generator) - Drop some more commands: shell, exportreport, mbr (uses parts that are not packaged) - Resolves: rhbz#2033709 - Add requires on java-devel - Add OSGi metadata - Update jansi path for jansi 1.x and jline path for jline 2.x - Update to upstream version 5.2.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add parent to biz.aQute.bnd/pom.xml (fixes [WARNING] JAR will be empty - no content was marked for inclusion!) - Remove scope from dependencies in pom.xml files (fixes missing dependencies, dependencies marked with scope provided are ignored by the rpm dependency generator) - Drop some more commands: shell, exportreport, mbr (uses parts that are not packaged) - Resolves: rhbz#2033709 - Add requires on java-devel - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Remove patches - Remove Vim support - Update to latest upstream release 9.0.2 - Detection of latest Python releases (#1889725) - Update to latest upstream release 9.0.4 - Add patch to fix problem with not respecting newline configuration. - Remove unused patches. - remove ImageMagic requirement - remove asciidoc-music sub-package (lilypond requirement) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update source url - new upstream release 9.1.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - resolves: #1742373 update to 0.60.7 - resolves: #1761152 update to 0.60.8 - remove RPATH from markdown-filter.so - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - resolves: #1742373 update to 0.60.7 - resolves: #1761152 update to 0.60.8 - remove RPATH from markdown-filter.so - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.28.1 - Switch to meson build system - Update source URLs - Tighten -devel subpackage deps - Tighten soname globs - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 2.28.2 Resolves: #1965879 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.28.1 - Switch to meson build system - Update source URLs - Tighten -devel subpackage deps - Tighten soname globs - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 2.28.2 Resolves: #1965879 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to Fedora Rawhide - Remove patches which are upstream - resolves: RHEL-56802 - Fix parsing of multipath.conf resolves: RHEL-93649 - Don't build with ImageMagick on EL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: CVE-2019-19004 : integer overflow in input-bmp.c - Resolves: CVE-2019-19005 : fix bitmap double free in main.c - Resolves: rhbz#1961993 - Add gating tests from rhel-8 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: rhbz#2121828 CVE-2022-32323 - heap-buffer overflow via the ReadImage() at input-bmp.c - Resolves: rhbz#2121828 Fix the gating tests by using only local test Upstream testsuite will not work as this package code is very old - fix file attributes on /run/avahi-daemon (RHEL-5633) - avahi-client: fix resource leak (RHEL-27722) - fix resource leak in avahi_time_event_queue_new (RHEL-27717) - Fix CVE-2024-52616 (RHEL-67722) - Fix CVE-2024-52615 (RHEL-94846) - fix file attributes on /run/avahi-daemon (RHEL-5633) - avahi-client: fix resource leak (RHEL-27722) - fix resource leak in avahi_time_event_queue_new (RHEL-27717) - Fix CVE-2024-52616 (RHEL-67722) - Fix CVE-2024-52615 (RHEL-94846) - fix file attributes on /run/avahi-daemon (RHEL-5633) - avahi-client: fix resource leak (RHEL-27722) - fix resource leak in avahi_time_event_queue_new (RHEL-27717) - Fix CVE-2024-52616 (RHEL-67722) - Fix CVE-2024-52615 (RHEL-94846) - fix file attributes on /run/avahi-daemon (RHEL-5633) - avahi-client: fix resource leak (RHEL-27722) - fix resource leak in avahi_time_event_queue_new (RHEL-27717) - Fix CVE-2024-52616 (RHEL-67722) - Fix CVE-2024-52615 (RHEL-94846) - fix file attributes on /run/avahi-daemon (RHEL-5633) - avahi-client: fix resource leak (RHEL-27722) - fix resource leak in avahi_time_event_queue_new (RHEL-27717) - Fix CVE-2024-52616 (RHEL-67722) - Fix CVE-2024-52615 (RHEL-94846) - fix file attributes on /run/avahi-daemon (RHEL-5633) - avahi-client: fix resource leak (RHEL-27722) - fix resource leak in avahi_time_event_queue_new (RHEL-27717) - Fix CVE-2024-52616 (RHEL-67722) - Fix CVE-2024-52615 (RHEL-94846) - fix file attributes on /run/avahi-daemon (RHEL-5633) - avahi-client: fix resource leak (RHEL-27722) - fix resource leak in avahi_time_event_queue_new (RHEL-27717) - Fix CVE-2024-52616 (RHEL-67722) - Fix CVE-2024-52615 (RHEL-94846) - fix file attributes on /run/avahi-daemon (RHEL-5633) - avahi-client: fix resource leak (RHEL-27722) - fix resource leak in avahi_time_event_queue_new (RHEL-27717) - Fix CVE-2024-52616 (RHEL-67722) - Fix CVE-2024-52615 (RHEL-94846) - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 2.9.0 - Disable Python 2 build on RHEL 9+ - Disable Python 2 build entirely - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Drop build dependency on python-freezegun - Resolves: rhbz#1947517 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 2.9.1. - Fixes CVE-2021-20095 Resolves: rhbz#1955615 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - rebase to the latest upstream (RHEL-88142) - rebase to the latest upstream (RHEL-88142) - rebase to the latest upstream (RHEL-88142) - rebase to the latest upstream (RHEL-88142) - Fix an off by one error while calling mbrtowc() Resolves: #2115206 - Add a null check in parameter_brace_transform() function Resolves: CVE-2022-3715 - Restore audit logs in bash-4.3 or newer versions Resolves: RHEL-22619 - Fix an issue with adding newline in bracketed paste mode Resolves: #2168963 - Fix a performance regression while using large number of environment variables Resolves: RHEL-20020 - Rebuild with LLVM 18 (RHEL-28684) - Fic bio* tools (RHEL-61615) - Explicitely disable blazesym support (RHEL-49640) - Fix gating tests of libbpf gating. - Rebase to the latest version (RHEL-63883) - Rebuild with libbpf 1.5.0 - Rebase to version 0.34.0 (RHEL-78920) - Rebuild with LLVM 20 (RHEL-81773) - Fix biosnoop pattern option (RHEL-90848) - Fix bpf-klockstat on aarch64 and ppc64le (RHEL-78619) - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-78166) - Remove unsupported slaratetop tool (RHEL-78162) - Fix bpf-klockstat on aarch64 and ppc64le debug (RHEL-78619) - Remove macro in comment. - Rebase to version 0.35.0 (RHEL-79001) - Fix bpf-ksnoop (RHEL-96166) - Fix bpf-javagc (RHEL-78173) - Rebuild with LLVM 21 (RHEL-108343) - Rebuild with LLVM 18 (RHEL-28684) - Fic bio* tools (RHEL-61615) - Explicitely disable blazesym support (RHEL-49640) - Fix gating tests of libbpf gating. - Rebase to the latest version (RHEL-63883) - Rebuild with libbpf 1.5.0 - Rebase to version 0.34.0 (RHEL-78920) - Rebuild with LLVM 20 (RHEL-81773) - Fix biosnoop pattern option (RHEL-90848) - Fix bpf-klockstat on aarch64 and ppc64le (RHEL-78619) - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-78166) - Remove unsupported slaratetop tool (RHEL-78162) - Fix bpf-klockstat on aarch64 and ppc64le debug (RHEL-78619) - Remove macro in comment. - Rebase to version 0.35.0 (RHEL-79001) - Fix bpf-ksnoop (RHEL-96166) - Fix bpf-javagc (RHEL-78173) - Rebuild with LLVM 21 (RHEL-108343) - Update to version 1.78. - Remove unnecessary parent from POM file. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - skipped tests as they require user input with jdk11, changed way of javadoc generation - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Decode IDN names on input in all situations in utilities (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix failures in idna system test (RHEL-66172) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Copy named.* files from /var/named into /usr/share/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix failures in idna system test (RHEL-66172) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Copy named.* files from /var/named into /usr/share/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix NSEC3 signer validation (CVE-2026-10723) - Decode IDN names on input in all situations in utilities (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix failures in idna system test (RHEL-66172) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Copy named.* files from /var/named into /usr/share/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix failures in idna system test (RHEL-66172) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Copy named.* files from /var/named into /usr/share/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix NSEC3 signer validation (CVE-2026-10723) - Prevent name.c:670 attributes assertion failed (RHEL-30407) - Add extra checks for relative names - logrotate: skip if empty and remove old variants (RHEL-113942) - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Copy named.* files from /usr/share/named into var/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add missing bind-chroot subdirectories - Add sysusers named user creation (RHEL-132053) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Correct changelog version of previous change - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Copy named.* files from /usr/share/named into var/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add missing bind-chroot subdirectories - Add sysusers named user creation (RHEL-132053) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Correct changelog version of previous change - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct backport issue in the patch (CVE-2026-1519) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Copy named.* files from /usr/share/named into var/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add missing bind-chroot subdirectories - Add sysusers named user creation (RHEL-132053) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Correct changelog version of previous change - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct backport issue in the patch (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Correct changelog version of previous change - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct backport issue in the patch (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204, RHEL-213495) - Fix RPZ wildcard expansion self-referential CNAME (CVE-2026-11331, RHEL-213495) - Reject invalid signed wildcard records (CVE-2026-11721, RHEL-213417) - Fix cache exhaustion via dns_slabheaders (CVE-2026-11622, RHEL-213389) - Reject out-of-zone NSEC next owner names (CVE-2026-13321, RHEL-213314) - Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704) - Prevent name.c:670 attributes assertion failed (RHEL-30407) - Add extra checks for relative names - logrotate: skip if empty and remove old variants (RHEL-113942) - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Copy named.* files from /usr/share/named into var/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add missing bind-chroot subdirectories - Add sysusers named user creation (RHEL-132053) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Correct changelog version of previous change - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Copy named.* files from /usr/share/named into var/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add missing bind-chroot subdirectories - Add sysusers named user creation (RHEL-132053) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Correct changelog version of previous change - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct backport issue in the patch (CVE-2026-1519) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Copy named.* files from /usr/share/named into var/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add missing bind-chroot subdirectories - Add sysusers named user creation (RHEL-132053) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Correct changelog version of previous change - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct backport issue in the patch (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Correct changelog version of previous change - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct backport issue in the patch (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204, RHEL-213495) - Fix RPZ wildcard expansion self-referential CNAME (CVE-2026-11331, RHEL-213495) - Reject invalid signed wildcard records (CVE-2026-11721, RHEL-213417) - Fix cache exhaustion via dns_slabheaders (CVE-2026-11622, RHEL-213389) - Reject out-of-zone NSEC next owner names (CVE-2026-13321, RHEL-213314) - Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704) - Initial commit on c9s - Initialize gating - Update to 0.72.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to bison 3.7.1 (#1859887) - Update to bison 3.7.2 (#1876120) - Update to bison 3.7.3 (#1887766) - Update to bison 3.7.4 (#1897780) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuild with updated binutils (#1960667) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rename manpages: some names conflict with the man-pages package Resolves: rhbz#2222868 - Add explicit requires to the devel subpackages Related: rhbz#2229142 - Fix soname of the 64-bit version libraries Resolves: RHEL-24851 - Spec file cleanup - Remove unused patches Related: RHEL-5770 - Add explicit requires to the devel subpackages - Note: the the cblas64 seems to be linked against the libblas (not the 64 version) - this is not a regression, however in the Fedora it uses libblas64 instead. - Resolves: RHEL-5768 - Rename manpages: some names conflict with the man-pages package Resolves: rhbz#2222868 - Add explicit requires to the devel subpackages Related: rhbz#2229142 - Fix soname of the 64-bit version libraries Resolves: RHEL-24851 - Spec file cleanup - Remove unused patches Related: RHEL-5770 - Add explicit requires to the devel subpackages - Note: the the cblas64 seems to be linked against the libblas (not the 64 version) - this is not a regression, however in the Fedora it uses libblas64 instead. - Resolves: RHEL-5768 - Rename manpages: some names conflict with the man-pages package Resolves: rhbz#2222868 - Add explicit requires to the devel subpackages Related: rhbz#2229142 - Fix soname of the 64-bit version libraries Resolves: RHEL-24851 - Spec file cleanup - Remove unused patches Related: RHEL-5770 - Add explicit requires to the devel subpackages - Note: the the cblas64 seems to be linked against the libblas (not the 64 version) - this is not a regression, however in the Fedora it uses libblas64 instead. - Resolves: RHEL-5768 - Update to 5.72 - Bump release to rebuild for RHEL-9.5 - Fix ConfigurationDirectory startup warning Related: RHEL-71798 - Fix plugin_init() startup warnings Related: RHEL-68934 - Update to 5.83 Resolves: RHEL-94819 Resolves: RHEL-56073 Resolves: RHEL-1924 - Fix problem with menu handling Resolves: RHEL-103966 - Update to 5.85 Resolves: RHEL-142552 - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use pkgconfig for BuildRequires - Depend on tracker only on Fedora - Relax Requires: icedax to Recommends - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Switch to Tracker 3 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop dependencies on cdrdao, cdrkit, and dvd+rw-tools for el9+ (#1973071) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Improve default checksum hash algorithm (#1935460) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use pkgconfig for BuildRequires - Depend on tracker only on Fedora - Relax Requires: icedax to Recommends - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Switch to Tracker 3 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop dependencies on cdrdao, cdrkit, and dvd+rw-tools for el9+ (#1973071) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Improve default checksum hash algorithm (#1935460) - Dropped explicit brlapi dependency (brltty) and relaxed brltty dependency (brlapi) Related: rhbz#1765611 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Fixed brlapi.key to pass the RPM verification - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New version Resolves: rhbz#1910328 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fixed brlapi multilib Resolves: rhbz#1915335 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild with regenerated Requires on Java - Fix patch usage - Disable building on i686 - Add noarch to ExclusiveArch - Update to 1.14.2; this adds new APIs, but is ABI-backwards-compatible - Restore removal of pre-built documentation with its minified JS bundle - Switch from autotools to meson; enable the tests, since the meson build system permits us to use a shared boost library - Install examples in the -doc subpackage - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name of a future package that continues to provide API/ABI version 1.0 after the upgrade. - Update comments based on the new plan for the version 1.16 API/ABI - Fix typo %{_?isa} for %{?_isa} in virtual Provides - Tidy up BR’s, including dropping make - Working (but weak, dependent on SHA1) source signature verification - Added API/ABI version to descriptions - Verify source with new strong signatures from upstream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.14.2; this adds new APIs, but is ABI-backwards-compatible - Restore removal of pre-built documentation with its minified JS bundle - Switch from autotools to meson; enable the tests, since the meson build system permits us to use a shared boost library - Install examples in the -doc subpackage - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name of a future package that continues to provide API/ABI version 1.0 after the upgrade. - Update comments based on the new plan for the version 1.16 API/ABI - Fix typo %{_?isa} for %{?_isa} in virtual Provides - Tidy up BR’s, including dropping make - Working (but weak, dependent on SHA1) source signature verification - Added API/ABI version to descriptions - Verify source with new strong signatures from upstream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2025-68114 (memory corruption) and CVE-2025-67873 (heap buffer overflow) Resolves: RHEL-137760 - Rebuild for rhel-9.8 Resolves: RHEL-137760 - Fix CVE-2025-68114 (memory corruption) and CVE-2025-67873 (heap buffer overflow) Resolves: RHEL-137760 - Rebuild for rhel-9.8 Resolves: RHEL-137760 - Rebuild for rhel-9.8.z - Fix CVE-2025-68114 (memory corruption) and CVE-2025-67873 (heap buffer overflow) Resolves: RHEL-137760 - Rebuild for rhel-9.8 Resolves: RHEL-137760 - Fix CVE-2025-68114 (memory corruption) and CVE-2025-67873 (heap buffer overflow) Resolves: RHEL-137760 - Rebuild for rhel-9.8 Resolves: RHEL-137760 - Rebuild for rhel-9.8.z - remove any relation to podman-catatonit - Related: #2151322 - rebuild for 9.3 - Resolves: #2209677 - bump release to preserve upgrade path from 9.2 - Resolves: #2209677 - update to https://github.com/openSUSE/catatonit/releases/tag/v0.2.0 - Related: Jira:RHEL-2112 - add rpminspect.yaml - Resolves: RHEL-70588 - update to https://github.com/openSUSE/catatonit/releases/tag/v0.2.1 - Related: RHEL-60277 - Initial commit on c9s - Initialize gating - Update to 0.29.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Set maven-javadoc-plugin source to 1.8 for Java 11 build. - Ignore 5 test failures from upstream when run on Java 9 or above. - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Remove unnecessary dependency on parent POM. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - cifs.upcall: fix UAF in get_cachename_from_process_env() - Resolves: RHEL-28047 - pam_cifscreds: fix NULL arg warning passed to pam_syslog() - Resolves: RHEL-28050 - mount.cifs.rst: add missing reference for sssd - mount.cifs.rst: update section about xattr/acl support - Resolves: RHEL-22495 - Implement CLDAP Ping to find the closest site - Resolves: RHELPLAN-17597 - resolves: RHEL-61732 - Update to version 7.1 - Fix damaged test filename - resolves: RHEL-82680 - Update to version 7.2 - resolves: RHEL-131406 - fix regression with cifscreds(1) - resolves: RHEL-146305 - Enable debug logs in cifs.upcall - resolves: RHEL-61732 - Update to version 7.1 - Fix damaged test filename - resolves: RHEL-82680 - Update to version 7.2 - resolves: RHEL-110765 - fix regression with cifscreds(1) - resolves: RHEL-127499 - Enable debug logs in cifs.upcall - Update to version 7.6 - resolves: RHEL-185761 - CVE-2026-12505 cifs-utils: LPE via cifs.spnego - resolves: RHEL-192982 - fix krb5 mount regression - Random memory override Resolves: rhbz#2180445 - Rebuilt for gating Related: rhbz#2180445 - Rebuilt for gating Related: rhbz#2180445 - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE Resolves: rhbz#2223308 - Publishing cjose devel package Resolves: RHEL-18066 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - pull in some upstream fixes (PR, previous commit) - use latest %cmake macros - s/define/global/ - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Provide a sysusers.d file - Bump release to match upstream - Provide a sysusers.d file - Bump release to match upstream - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - update to https://github.com/containers/composefs/releases/tag/v1.0.7 - Related: RHEL-60277 - Resolves: RHEL-24163 - Report crypto errors back to cfg reload (RHEL-24163) - Resolves: RHEL-65699 - New upstream release (RHEL-65699) - Resolves: RHEL-84616 - totemsrp: Check size of orf_token msg (fixes CVE-2025-30472) - Resolves: RHEL-122942 - New upstream release (RHEL-122942) - Resolves: RHEL-24163 - Report crypto errors back to cfg reload (RHEL-24163) - Resolves: RHEL-65699 - New upstream release (RHEL-65699) - Resolves: RHEL-84616 - totemsrp: Check size of orf_token msg (fixes CVE-2025-30472) - Resolves: RHEL-122942 - New upstream release (RHEL-122942) - Resolves: RHEL-163816 - Resolves: RHEL-163837 - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091) - totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: rhbz#2040997 skip cppunit-devel - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: rhbz#2040997 skip cppunit-devel - update URL (RHEL-5215) - Rebase to upstream crash 8.0.5 - Rebase to upstream crash 8.0.6 - Rebase to upstream crash 9.0.0 - vmware_guestdump: Version 7 support - Fix incorrect task state during exit - Add multi-threads support in crash target - Call cmd_bt silently after "set pid" - x86_64: Add gdb multi-stack unwind support - arm64: Add gdb multi-stack unwind support - ppc64: Add gdb multi-stack unwind support - Fix the issue of "page excluded" messages flooding - Fix "kmem -p" option on Linux 6.16-rc1 and later kernels - x86_64: filter unwanted warning message for "bt -T" cmd - doc: Update requirements for building on Fedora - gdb: Fix a regression for eppic extension on gdb-16.2 - Fix crash initialization failure on LoongArch with recent GDB versions - gdb: Disable DT_DEBUG lookup by GDB inside the vmcore - Add blk_mq shared tags support for dev -d/-D - Rebase to upstream crash 9.0.1 - Debrand for AlmaLinux - Change test to compare contents instead of checksum, cleanup (RhBug:2130179) - Add zstd compression support (RHEL-67689) - Add git build require, needed for binary patches (RHEL-67689) - Update to 3.19 - Drop upstreamed patches - Added patch to correctly handle SELinux labels in Kubernetes - Added latest upstream rseq patch - Update to cryptsetup 2.7.2 - Use OpenSLL Argon implementation instead of the built-in one - Resolves: RHEL-32377 - patch: Warn if Argon2 keyslot is unlocked in FIPS mode. - patch: Enable Argon2 in FIPS with openssl backend. - patch: Abort online reencryption for misconfigured devices. - patch: Harden online reencryption checks in initialization phase. - patch: Fix detection of direct-io with suspended devices. - patch: Return suspended status also for unknow target types. - patch: Do not handle device as suspended on error. - Resolves: RHEL-39003 RHEL-41238 - Specbump for correct target release. - Resolves: RHEL-39003 RHEL-41238 - patch: Ignore unknown VMK entry 24 in bitlk metadata. - Resolves: RHEL-94860 - Update to cryptsetup 2.8.1. - Resolves: 100089 - patch: Improve check for a function attribute support. - Resolves: 100089 - patch: Read integrity profile info from top level device. - patch: Fix possible use of uninitialized variable. - patch: Reinstate pbkdf serialization flag in device activation. - patch: Fix LUKS2 device status in inline HW mode and detached header. - patch: Set inline integrity flag if no underlying dm-integrity device. - patch: Fix wrong device size status reports in cryptsetup and integritysetup. - Resolves: RHEL-122297 RHEL-125152 RHEL-125167 RHEL-132585 RHEL-140106 - RHEL-46785 - fix errors during installability tests about modified cups-browsed.conf - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source - RHEL-17124 [cups-browsed] Prints to remote RAW queues are converted to PDF documents - RHEL-70015 Double-sided printing issues on Thunderbird or Firefox // HP printers - RHEL-6519 RFE: Synchronize server defaults with clients - RHEL-65587 texttopdf omits Chinese characters when creating PDF documents - RHEL-93931 RFE: Add Allow list for FoomaticRIPCommandLine PPD values - fix posttrans script - fix return value when libppd is not used - RHEL-117507 cups-filter: output of landscape print have the top and left portions cut off - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source - RHEL-17124 [cups-browsed] Prints to remote RAW queues are converted to PDF documents - RHEL-70015 Double-sided printing issues on Thunderbird or Firefox // HP printers - RHEL-6519 RFE: Synchronize server defaults with clients - RHEL-65587 texttopdf omits Chinese characters when creating PDF documents - RHEL-93931 RFE: Add Allow list for FoomaticRIPCommandLine PPD values - fix posttrans script - fix return value when libppd is not used - RHEL-117507 cups-filter: output of landscape print have the top and left portions cut off - CVE-2026-64612 cups-filters: handle libpng errors via longjmp()/setjmp() to prevent process abort on malformed PNG files - Rebase to v78 - Add support for legacy monitor.conf file location - Fix a test failure. - Resolves: RHEL-10382 - Resolves: RHEL-8204 - Resolves: RHEL-29151 - Add explicit package version requirements. (Jeff Moyer) - Related: RHEL-29151 - Rebase to v82 - Resolve: RHEL-97669 - Rebase to v78 - Add support for legacy monitor.conf file location - Fix a test failure. - Resolves: RHEL-10382 - Resolves: RHEL-8204 - Resolves: RHEL-29151 - Add explicit package version requirements. (Jeff Moyer) - Related: RHEL-29151 - Rebase to v82 - Resolve: RHEL-97669 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - rebase to upstreamed py3 version (bz 1796232) - Rebuilt for Python 3.9 - BR setuptools explicitly - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - rebase to 0.3.12 - follow yet another package/tree renaming - replace inkscape by rsvg (#bz 1833047) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for Python 3.8.0rc1 (#1748018) - Subpackage python2-dbus has been removed See https://fedoraproject.org/wiki/Changes/RetirePython2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.2.16 (#1788491) - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.2.18 (#1985856) - Verify GPG signature of sources - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.38.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.39.1 - Update to 0.40.0 - Avoid hardcoding man page compression - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Use full path for dconf in posttrans script (#1950829) - Backport patch for permissions restore - Indicate bundle of GVDB - Resolves: #1974362 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Remove screen build dependency (#1962907) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - re-apply dejagnu-1.6-runtest.patch (#1990804) - Rebase to 1.6.3 Resolves: #1954158 - re-re-apply dejagnu-1.6-runtest.patch (#2042478) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.38.0 - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 40.alpha - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Drop amtk dependency Related: #1948445 - Resolves: rhbz#1971430 Update license to GPLv3+ - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - Fix duplicate LV names when converting pools to RAID1 with more than 2 legs. - Workaround for NVMe WWID changing after kernel update. - Fix temporary LVs not cleaned when converting in use LV to a thin pool. - Check FS resize is supported before extending LV. - Fix issue affecting memory locking before suspend (2.03.27). - Fix race causing lvm2 not recognizing active devices. - Update to upstream version 2.03.32. - See WHATS_NEW and WHATS_NEW_DM for more information. - Fix vgremove hanging immediately after lockstart. - Add repair option for RAID volumes with too many transiently failed devices. - Update to upstream version 2.03.33. - See WHATS_NEW and WHATS_NEW_DM for more information. - Add message when activating RAID volumes with snapshots. - Allow integrity to use multiple segments for metadata. - Handle wrong XFS reported size when shrinking LV immediately after growing. - Workaround for NVMe WWID changing after kernel update. - Fix temporary LVs not cleaned when converting in use LV to a thin pool. - Check FS resize is supported before extending LV. - Fix issue affecting memory locking before suspend (2.03.27). - Fix race causing lvm2 not recognizing active devices. - Update to upstream version 2.03.32. - See WHATS_NEW and WHATS_NEW_DM for more information. - Fix vgremove hanging immediately after lockstart. - Add repair option for RAID volumes with too many transiently failed devices. - Update to upstream version 2.03.33. - See WHATS_NEW and WHATS_NEW_DM for more information. - Add message when activating RAID volumes with snapshots. - Allow integrity to use multiple segments for metadata. - Handle wrong XFS reported size when shrinking LV immediately after growing. - Fix false positive warnings about stray FDs on s390x. - Fix duplicate LV names when converting pools to RAID1 with more than 2 legs. - Workaround for NVMe WWID changing after kernel update. - Fix temporary LVs not cleaned when converting in use LV to a thin pool. - Check FS resize is supported before extending LV. - Fix issue affecting memory locking before suspend (2.03.27). - Fix race causing lvm2 not recognizing active devices. - Update to upstream version 2.03.32. - See WHATS_NEW and WHATS_NEW_DM for more information. - Fix vgremove hanging immediately after lockstart. - Add repair option for RAID volumes with too many transiently failed devices. - Update to upstream version 2.03.33. - See WHATS_NEW and WHATS_NEW_DM for more information. - Add message when activating RAID volumes with snapshots. - Allow integrity to use multiple segments for metadata. - Handle wrong XFS reported size when shrinking LV immediately after growing. - Workaround for NVMe WWID changing after kernel update. - Fix temporary LVs not cleaned when converting in use LV to a thin pool. - Check FS resize is supported before extending LV. - Fix issue affecting memory locking before suspend (2.03.27). - Fix race causing lvm2 not recognizing active devices. - Update to upstream version 2.03.32. - See WHATS_NEW and WHATS_NEW_DM for more information. - Fix vgremove hanging immediately after lockstart. - Add repair option for RAID volumes with too many transiently failed devices. - Update to upstream version 2.03.33. - See WHATS_NEW and WHATS_NEW_DM for more information. - Add message when activating RAID volumes with snapshots. - Allow integrity to use multiple segments for metadata. - Handle wrong XFS reported size when shrinking LV immediately after growing. - Fix false positive warnings about stray FDs on s390x. - Add 0128-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch - Add 0129-multipath-tools-add-helper-mpath_fill_sockaddr__.patch - Add 0130-libmpathutil-add-support-for-Unix-pathname-sockets.patch - Add 0131-libmpathutil-move-systemd_listen_fds-support-into-mu.patch - Add 0132-multipathd-move-uxsock_trigger-to-uxlsnr.c.patch - Add 0133-multipathd-uxlsnr-use-symbolic-values-for-pollfd-ind.patch - Add 0134-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch - Add 0135-multipathd-allow-receiving-two-socket-fds-from-syste.patch - Add 0136-multipathd-listen-on-pathname-and-abstract-socket-by.patch - Add 0137-libmpathcmd-try-both-abstract-and-pathname-sockets.patch - Add 0138-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch - Add 0139-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch * Fixes RHEL-78758 ("RFE: Enable multipathd to communicate with a process in another network namespace") - Resolves: RHEL-78758 - Add 0140-multipath-clean-up-find_multipaths-value-names.patch - Add 0141-multipathd-Add-multipathd-man-page-section-about-soc.patch * Fixes RHEL-82307 ("There is no man page for RFE: Enable multipathd to communicate with a process in another network namespace") - Fix multipath_conf_syntax OSCI test. - Resolves: RHEL-82307 - Add 0142-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch - Add 0143-libmultipath-add-helper-function-check_path_wwid_cha.patch - Add 0144-multipathd-re-add-paths-skipped-because-they-were-of.patch * Fixes RHEL-82534 ("multipathd does not monitor multipath devices created externally while there are offline paths.") - Resolves: RHEL-82534 - Add 0145-multipath-tools-add-DellEMC-ME4-PowerVault-ME4-to-ha.patch - Add 0146-multipath-tools-add-HPE-as-vendor-for-OPEN-XP8-array.patch - Add 0147-multipath-tools-add-HP-HSVX740-to-hwtable.patch - Add 0148-multipath-tools-add-DellEMC-ME5-PowerVault-ME5-to-ha.patch - Add 0149-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch * Fixes RHEL-103109 ("Update multipath builtin config to add new device defaults") - Resolves: RHEL-103109 - Add 0150-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch - Add 0151-libmpathpersist-check-released-key-against-the-reser.patch - Add 0152-multipathd-remove-thread-from-mpath_pr_event_handle.patch - Add 0153-libmpathpersist-remove-uneeded-wrapper-function.patch - Add 0154-libmpathpersist-reduce-log-level-for-persistent-rese.patch - Add 0155-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch - Add 0156-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch - Add 0157-libmpathpersist-limit-changing-prflag-in-update_map_.patch - Add 0158-multipathd-Don-t-call-update_map_pr-unnecessarily.patch - Add 0159-libmpathpersist-remove-useless-function-send_prout_a.patch - Add 0160-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch - Add 0161-limpathpersist-redesign-failed-release-workaround.patch - Add 0162-libmpathpersist-fail-the-release-if-all-threads-fail.patch - Add 0163-limpathpersist-Handle-changing-key-corner-case.patch - Add 0164-libmpathpersist-fix-command-keyword-ordering.patch - Add 0165-libmpathpersist-use-conf-timeout-for-updating-persis.patch - Add 0166-libmapthpersist-Handle-REGISTER-AND-IGNORE-changing-.patch - Add 0167-libmultipath-rename-prflag_value-enums.patch - Add 0168-libmpathpersist-use-a-switch-statement-for-prout-com.patch - Add 0169-libmpathpersist-Add-safety-check-for-preempting-on-k.patch - Add 0170-limpathpersist-remove-update_map_pr-code-for-NULL-pp.patch - Add 0171-libmpathpersist-move-update_map_pr-to-multipathd.patch - Add 0172-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch - Add 0173-libmpathpersist-clean-up-duplicate-function-declarat.patch - Add 0174-multipathd-wrap-setting-and-unsetting-prflag.patch - Add 0175-multipathd-unregister-PR-key-when-path-is-restored-i.patch - Add 0176-libmpathpersist-Fix-up-reservation_key-checking.patch - Add 0177-libmpathpersist-change-how-reservation-conflicts-are.patch - Add 0178-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch - Add 0179-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch - Add 0180-libmpathpersist-Restore-old-reservation-key-on-failu.patch - Add 0181-libmpatpersist-update-reservation-key-before-checkin.patch - Add 0182-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch - Add 0183-libmpathpersist-Don-t-always-fail-registrations-for-.patch - Add 0184-libmpathpersist-Don-t-try-release-workaround-for-inv.patch - Add 0185-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch - Add 0186-libmpathpersist-reregister-keys-when-self-preempting.patch - Add 0187-libmpathpersist-handle-updating-key-race-condition.patch - Add 0188-libmpathpersist-handle-preempting-all-registrants-re.patch - Add 0189-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch - Add 0190-libmpathpersist-Handle-RESERVE-with-reservation-held.patch - Add 0191-libmpathpersist-use-check_holding_reservation-in-mpa.patch - Add 0192-libmpathpersist-Fix-unregistering-while-holding-the-.patch - Add 0193-libmpathpersist-Fix-race-between-restoring-a-path-an.patch - Add 0194-multipathd-Fix-tracking-of-old-PR-key.patch * Fixes RHEL-118515 ("There are many bugs in multipath's persistent reservation handling") - Resolves: RHEL-118515 - Add 0195-multipathd-Fix-race-while-registering-PR-key.patch - Add 0196-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch * Fixes RHEL-118515 ("There are many bugs in multipath's persistent reservation handling") - Resolves: RHEL-118515 - Add 0197-multipath-tools-update-NFINIDAT-InfiniBox-config-in-.patch * Fixes RHEL-128396 ("Update the multipath.conf stanza for Infinidat storage [rhel-9]") - Resolves: RHEL-128396 - Add 0198-multipathd-print-path-offline-message-even-without-a.patch * Fixes RHEL-133814 ("log_checker_err is not printing messages repeatedly for failed path [rhel-9]") - Add 0199-libmultipath-improve-cleanup-of-uevent-queues-on-exi.patch - Add 0200-uevent_dispatch-use-while-in-wait-loop.patch - Add 0201-libmultipath-uevent_dispatch-process-uevents-one-by-.patch - Add 0202-libmultipath-uevent_listen-don-t-delay-uevents.patch - Add 0203-libmultipath-uevent-use-struct-to-pass-parameters-ar.patch - Add 0204-libmultipath-is_uevent_busy-check-servicing_uev-unde.patch - Add 0205-multipathd-make-multipathd-show-status-busy-checker-.patch * Fixes RHEL-135904 (VM reboot in RHOSP environment fails with error "Could not open '/dev/dm-95': No such file or directory") - Resolves: RHEL-133814 - Resolves: RHEL-135904 - Add 0206-libmultipath-add-purge_disconnected-configuration-op.patch - Add 0207-multipathd-implement-purge-functionality-for-disconn.patch * Fixes RHEL-141291 ("Add purge_disconnected support to multipathd [rhel-9]") - Resolves: RHEL-141291 - Add 0208-libmpathpersist-fix-register-retry-status-checking.patch - Add 0209-multipathd-remember-number-of-registered-keys-when-i.patch - Add 0210-libmpathpersist-fix-code-for-skipping-multipathd-pat.patch * Fixes RHEL-148462 ("Improve multipathd's handling of updating persistent reservations on restored paths. [rhel-9]") - Resolves: RHEL-148462 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - suggest lynx rather than elinks to satisfy text-www-browser - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - add Docbook 5.1 (no dtd and xsd schemas provided) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop netstandard-targeting-pack-2.1 - Resolves: RHEL-111815 - Update to RC 1 - Resolves: RHEL-114572 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to RC 1 - Resolves: RHEL-114572 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 6.0.125 and Runtime 6.0.25 - Resolves: RHEL-15349 - Update to .NET SDK 6.0.126 and Runtime 6.0.26 - Resolves: RHEL-19801 - Update to .NET SDK 6.0.127 and Runtime 6.0.27 - Resolves: RHEL-23785 - Update to .NET SDK 6.0.128 and Runtime 6.0.28 - Resolves: RHEL-27541 - Update to .NET SDK 6.0.129 and Runtime 6.0.29 - Resolves: RHEL-31198 - Update to .NET SDK 6.0.130 and Runtime 6.0.30 - Resolves: RHEL-35308 - Update to .NET SDK 6.0.132 and Runtime 6.0.32 - Resolves: RHEL-45320 - Update to .NET SDK 6.0.133 and Runtime 6.0.33 - Resolves: RHEL-52385 - Update to .NET SDK 6.0.135 and Runtime 6.0.35 - Resolves: RHEL-60799 - Update to .NET SDK 6.0.136 and Runtime 6.0.36 - Resolves: RHEL-65365 - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ#2228571 - Update to .NET SDK 7.0.111 and Runtime 7.0.11 - Resolves: RHEL-2000 - Update to .NET SDK 7.0.112 and Runtime 7.0.12 - Resolves: RHEL-11698 - Update to .NET SDK 7.0.113 and Runtime 7.0.13 - Resolves: RHEL-14467 - Update to .NET SDK 7.0.114 and Runtime 7.0.14 - Resolves: RHEL-15351 - Update to .NET SDK 7.0.115 and Runtime 7.0.15 - Resolves: RHEL-19802 - Update to .NET SDK 7.0.116 and Runtime 7.0.16 - Resolves: RHEL-23790 - Update to .NET SDK 7.0.117 and Runtime 7.0.17 - Resolves: RHEL-27545 - Update to .NET SDK 7.0.118 and Runtime 7.0.18 - Resolves: RHEL-31203 - Update to .NET SDK 7.0.119 and Runtime 7.0.19 - Resolves: RHEL-35314 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94417 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94421 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to 3.1.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - fix crash when user has sieve script that includes two missing scripts (RHEL-37160) - rebuild with updated tests - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212) - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224) - fix sysusers config file name (RHEL-77322) - add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098) - fix building with latest openssl (RHEL-140619) - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679) - rebuild - fix CVE-2026-42006: IMAP parser list_count_limit bypass via open parentheses (RHEL-188468) - fix crash when user has sieve script that includes two missing scripts (RHEL-37160) - rebuild with updated tests - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212) - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224) - fix sysusers config file name (RHEL-77322) - add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098) - fix building with latest openssl (RHEL-140619) - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679) - rebuild - Resolves: RHEL-78150, CVE-2020-11023, CVE-2020-11022 - Resolves: RHEL-78150, CVE-2020-11023, CVE-2020-11022 - Resolves: RHEL-78150, CVE-2020-11023, CVE-2020-11022 - Rebased to dyninst 13.0.0 + buildability patches - Dropping testsuite - Rebased to dyninst 13.0.0 + buildability patches - Dropping testsuite - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to upstream version 4.2 - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to version 4.2. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66230] - Resolves: RHEL-66230 ([Regression] [aarch64] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6]) - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-58631] - Resolves: RHEL-58631 ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater) - Update to edk2-stable202411 - Resolves: RHEL-58063 ([edk2,rhel-9] rebase to edk2-stable202411) - edk2-Fix-amd-sev-firmware-file-for-amd-snp.patch [RHEL-72447] - Resolves: RHEL-72447 ( QEMU should creating new json file that will correctly describe firmware for amd-sev-snp [rhel-9]) - edk2-OvmfPkg-Use-the-OvmfPkg-version-of-CcProbeLib.patch [RHEL-70865] - edk2-Update-dbx-revocation-list-to-2025-02-24-version.patch [RHEL-83019] - Resolves: RHEL-70865 (SNP guest failed to boot with SVSM using OVMF.amdsev.fd [rhel-9.7]) - Resolves: RHEL-83019 (The newer revocation file and Server 2025 required to update it [rhel-9]) - edk2-update-dbx-to-20250610.patch [RHEL-96869] - Resolves: RHEL-96869 ([edk2,rhel-9] dbx update 20250610) - edk2-MdePkg-Acpi66.h-Add-ACPI-6.6-header.patch [RHEL-109010] - edk2-OvmfPkg-WorkArea.h-Add-MAILBOX_GDT.patch [RHEL-109010] - edk2-OvmfPkg-Add-the-Test-command-in-TDX-MailBox.patch [RHEL-109010] - edk2-OvmfPkg-Add-the-ResetVector-in-TDX-MailBox.patch [RHEL-109010] - edk2-OvmfPkg-TdxDxe-Support-5-level-paging-for-ResetVecto.patch [RHEL-109010] - edk2-OvmfPkg-IoMmuDxe-Fix-1M-and-2M-buffer-handling.patch [RHEL-69780] - Resolves: RHEL-109010 (TD guest dmesg reports ACPI BIOS Warning (bug): Incorrect checksum in table [APIC] - 0x29) - Resolves: RHEL-69780 (Fail to create AMD SEV SLES 15 SP4 guest via virt-install --cdrom [rhel-9.8]) - edk2-OvmfPkg-MemEncryptSevLib-Evict-cache-lines-during-SN.patch [RHEL-121983] - edk2-MdePkg-Add-the-COHERENCY_SFW_NO-CPUID-bit-field.patch [RHEL-121983] - edk2-OvmfPkg-ResetVector-Make-ReceivedVc-a-flag-in-SEV-ES.patch [RHEL-121983] - edk2-OvmfPkg-MemEncryptSevLib-Check-if-SEV-SNP-coherency-.patch [RHEL-121983] - Resolves: RHEL-121983 ([edk2] VM panic on booting SNP guest with large memory on Genoa) - edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126100] - edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126100] - Resolves: RHEL-126100 ([edk2,rhel-9] dbx update to 20251016 / v1.6.1) - edk2-openssl-flatten-contents-of-openssl-tarball.patch [RHEL-115922] - edk2-Bumped-openssl-submodule-to-version-3.0.7-29.1.patch [RHEL-115922] - Resolves: RHEL-115922 (CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap [rhel-9.8]) - edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66230] - Resolves: RHEL-66230 ([Regression] [aarch64] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6]) - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-58631] - Resolves: RHEL-58631 ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater) - Update to edk2-stable202411 - Resolves: RHEL-58063 ([edk2,rhel-9] rebase to edk2-stable202411) - edk2-Fix-amd-sev-firmware-file-for-amd-snp.patch [RHEL-72447] - Resolves: RHEL-72447 ( QEMU should creating new json file that will correctly describe firmware for amd-sev-snp [rhel-9]) - edk2-OvmfPkg-Use-the-OvmfPkg-version-of-CcProbeLib.patch [RHEL-70865] - edk2-Update-dbx-revocation-list-to-2025-02-24-version.patch [RHEL-83019] - Resolves: RHEL-70865 (SNP guest failed to boot with SVSM using OVMF.amdsev.fd [rhel-9.7]) - Resolves: RHEL-83019 (The newer revocation file and Server 2025 required to update it [rhel-9]) - edk2-update-dbx-to-20250610.patch [RHEL-96869] - Resolves: RHEL-96869 ([edk2,rhel-9] dbx update 20250610) - edk2-MdePkg-Acpi66.h-Add-ACPI-6.6-header.patch [RHEL-109010] - edk2-OvmfPkg-WorkArea.h-Add-MAILBOX_GDT.patch [RHEL-109010] - edk2-OvmfPkg-Add-the-Test-command-in-TDX-MailBox.patch [RHEL-109010] - edk2-OvmfPkg-Add-the-ResetVector-in-TDX-MailBox.patch [RHEL-109010] - edk2-OvmfPkg-TdxDxe-Support-5-level-paging-for-ResetVecto.patch [RHEL-109010] - edk2-OvmfPkg-IoMmuDxe-Fix-1M-and-2M-buffer-handling.patch [RHEL-69780] - Resolves: RHEL-109010 (TD guest dmesg reports ACPI BIOS Warning (bug): Incorrect checksum in table [APIC] - 0x29) - Resolves: RHEL-69780 (Fail to create AMD SEV SLES 15 SP4 guest via virt-install --cdrom [rhel-9.8]) - edk2-OvmfPkg-MemEncryptSevLib-Evict-cache-lines-during-SN.patch [RHEL-121983] - edk2-MdePkg-Add-the-COHERENCY_SFW_NO-CPUID-bit-field.patch [RHEL-121983] - edk2-OvmfPkg-ResetVector-Make-ReceivedVc-a-flag-in-SEV-ES.patch [RHEL-121983] - edk2-OvmfPkg-MemEncryptSevLib-Check-if-SEV-SNP-coherency-.patch [RHEL-121983] - Resolves: RHEL-121983 ([edk2] VM panic on booting SNP guest with large memory on Genoa) - edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126100] - edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126100] - Resolves: RHEL-126100 ([edk2,rhel-9] dbx update to 20251016 / v1.6.1) - edk2-openssl-flatten-contents-of-openssl-tarball.patch [RHEL-115922] - edk2-Bumped-openssl-submodule-to-version-3.0.7-29.1.patch [RHEL-115922] - Resolves: RHEL-115922 (CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap [rhel-9.8]) - edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66230] - Resolves: RHEL-66230 ([Regression] [aarch64] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6]) - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-58631] - Resolves: RHEL-58631 ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater) - Update to edk2-stable202411 - Resolves: RHEL-58063 ([edk2,rhel-9] rebase to edk2-stable202411) - edk2-Fix-amd-sev-firmware-file-for-amd-snp.patch [RHEL-72447] - Resolves: RHEL-72447 ( QEMU should creating new json file that will correctly describe firmware for amd-sev-snp [rhel-9]) - edk2-OvmfPkg-Use-the-OvmfPkg-version-of-CcProbeLib.patch [RHEL-70865] - edk2-Update-dbx-revocation-list-to-2025-02-24-version.patch [RHEL-83019] - Resolves: RHEL-70865 (SNP guest failed to boot with SVSM using OVMF.amdsev.fd [rhel-9.7]) - Resolves: RHEL-83019 (The newer revocation file and Server 2025 required to update it [rhel-9]) - edk2-update-dbx-to-20250610.patch [RHEL-96869] - Resolves: RHEL-96869 ([edk2,rhel-9] dbx update 20250610) - edk2-MdePkg-Acpi66.h-Add-ACPI-6.6-header.patch [RHEL-109010] - edk2-OvmfPkg-WorkArea.h-Add-MAILBOX_GDT.patch [RHEL-109010] - edk2-OvmfPkg-Add-the-Test-command-in-TDX-MailBox.patch [RHEL-109010] - edk2-OvmfPkg-Add-the-ResetVector-in-TDX-MailBox.patch [RHEL-109010] - edk2-OvmfPkg-TdxDxe-Support-5-level-paging-for-ResetVecto.patch [RHEL-109010] - edk2-OvmfPkg-IoMmuDxe-Fix-1M-and-2M-buffer-handling.patch [RHEL-69780] - Resolves: RHEL-109010 (TD guest dmesg reports ACPI BIOS Warning (bug): Incorrect checksum in table [APIC] - 0x29) - Resolves: RHEL-69780 (Fail to create AMD SEV SLES 15 SP4 guest via virt-install --cdrom [rhel-9.8]) - edk2-OvmfPkg-MemEncryptSevLib-Evict-cache-lines-during-SN.patch [RHEL-121983] - edk2-MdePkg-Add-the-COHERENCY_SFW_NO-CPUID-bit-field.patch [RHEL-121983] - edk2-OvmfPkg-ResetVector-Make-ReceivedVc-a-flag-in-SEV-ES.patch [RHEL-121983] - edk2-OvmfPkg-MemEncryptSevLib-Check-if-SEV-SNP-coherency-.patch [RHEL-121983] - Resolves: RHEL-121983 ([edk2] VM panic on booting SNP guest with large memory on Genoa) - edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126100] - edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126100] - Resolves: RHEL-126100 ([edk2,rhel-9] dbx update to 20251016 / v1.6.1) - edk2-openssl-flatten-contents-of-openssl-tarball.patch [RHEL-115922] - edk2-Bumped-openssl-submodule-to-version-3.0.7-29.1.patch [RHEL-115922] - Resolves: RHEL-115922 (CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap [rhel-9.8]) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Enable Intel Control-flow Enforcement Technology (CET) Resolves: rhbz#1808811 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - New upstream release (38) - Resolves: #2024374 - Bump to re-run tests; no code changes - Resolves: #2024374 - Fix inheritance of buildflags - Resolves: #2144520 - Rebuilt for RHEL-26187 - Update to 1.1.13.1 Resolves: https://issues.redhat.com/browse/RHEL-68048 - Bump release - Update to 1.1.13.1 Resolves: https://issues.redhat.com/browse/RHEL-68048 - Bump release - Don't install 15_nvidia_gbm.json - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Added missing Minpack license Dropped unnecessary dependencies Resolves: #1967481 - Remove glew-devel BR Resolves: #1981397 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.4.0 Resolves: #2032423 - Backport upstream patches Resolves: #2137486 - Update to 0.29.37 - Resolves: RHEL-61659 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: #1961175 (Missing man page for enchant-lsmod) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 2.2.11 - Update to 2.2.12 - Update to 2.2.13 - Update to 2.2.14 - Update to 2.2.15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Include support for Nuspell. - Disable nuspell support for RHEL (#1925839) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for rhbz#2190221 - Resolves: rhbz#2190221 - Fix gating.yaml - Related: rhbz#2190221 - Resolves: RHEL-62668 (WebKitGTK 2.46.1: Middle mouse button inserts primary clipboard twice) - Resolves: RHEL-111953 (WebKitGTK 2.49.4: JavaScript evaluation result serialization changes) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix important Covscan defects resolves: #1938712 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Force C++14 as this code is not C++17 ready - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to (unreleased) version 2.6.0 to resolve licensing issues Resolves #1989405 - Add modified upstream test suite as a gating test Related #1989405 - Bump version for rebuild (binutils) Resolves: bz#1964183 Resolves: bz#1964189 - 0.27.4 Resolves: bz#1989848 - Do not duplicate changelog file Resolves: bz#1989848 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure Resolves: bz#1993247 - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header Resolves: bz#1993284 - Fix test for CVE-2021-29470 Resolves: bz#1993284 - Include missing tests for CVEs Resolves: bz#1993247 Resolves: bz#1993284 - Properly install POC files Resolves: bz#1993247 Resolves: bz#1993284 - Exiv2 0.27.5 Resolves: bz#2018421 Fix stack exhaustion issue in the printIFDStructure function leading to DoS Resolves: bz#2003670 - Remove RPATH Resolves: bz#2018421 - Bump version for rebuild (binutils) Resolves: bz#1964183 Resolves: bz#1964189 - 0.27.4 Resolves: bz#1989848 - Do not duplicate changelog file Resolves: bz#1989848 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure Resolves: bz#1993247 - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header Resolves: bz#1993284 - Fix test for CVE-2021-29470 Resolves: bz#1993284 - Include missing tests for CVEs Resolves: bz#1993247 Resolves: bz#1993284 - Properly install POC files Resolves: bz#1993247 Resolves: bz#1993284 - Exiv2 0.27.5 Resolves: bz#2018421 Fix stack exhaustion issue in the printIFDStructure function leading to DoS Resolves: bz#2003670 - Remove RPATH Resolves: bz#2018421 - Rebuilt for -devel add to CRB Resolves: RHEL-18979 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to version 1.11.4. - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to upstream version 1.11.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to version 1.11.6. - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix TypeError: 'NoneType' object is not callable in magic.close() Resolves: RHEL-136523 - handle end-of-stream when encoding with verification (CVE-2021-0561) - don't free memory that is still used after realloc() error (CVE-2020-22219) - handle end-of-stream when encoding with verification (CVE-2021-0561) - don't free memory that is still used after realloc() error (CVE-2020-22219) - Backport upstream patches for CVE-2024-42472 - Require bubblewrap version that has new --bind-fd option backported for addressing CVE-2024-42472 - Fix previous changelog entry - Use sysusers_create_compat macro to create user & group Resolves: RHEL-82605 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165643 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170171 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update %python_sitearch for python-3.8 (#1799346) - Let xmvn_install store artifacts under /app - Remove Python 2 support (#1805232) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update %python_sitearch for python-3.9 - Redefine __python2 macro to point to /app/bin/python2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Override RPM's fontconfig auto-provide to handle /app/share/fonts - Sync with Fedora - Correctly substitute /app/lib in flatpak-builder defaults.json ldflags (by klember) - Include fonts-dirs.xml in fontconfig flatpak configuration (by tagoh) - Add 05-flatpak-fontpath.conf that forces a different MD5 for fontconfig cache to avoid conflict between caches on host and flatpak (by tagoh) - Sync with Fedora - Add a seed for <dir prefix="xdg">fonts</dir> (by tagoh) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Link with -Wl,-z,now. Related: rhbz#2044860 - Remove BuildRequires xprop entirely. If present, the configure script will call it looking for a property on the root window that Fedora's X server does not set, and which would not work anyway since there is no X server running in the buildroot, so we can just remove the dependency. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 1.3.6 Resolves: bz#1976712 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 1.3.8 Resolves: bz#2025415 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 5.13.1 - Provide the right font configuration - Drop ttf format since upstream affirms that otf is to be preferred - Rollback to FA4 - Add epoch to inter-subpackages requirement - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix postun scriptlet to remove the entry from xml catalog. - New upstream release. - Fix the score calculation on matching for multiple values. - Enable 11-lcdfilter-default.conf. Resolves: rhbz#1965684 - Rebase to the latest release. Resolves: rhbz#2023161 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - New upstream release. - Update deps to font(notosans) https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts - New upstream release. - Fix missing a file in the archive. Resolves: rhbz#2050478 - New upstream release. - Rebase to 2.14 and revert Noto Default change happened in f36. Resolves: rhbz#2075393 - Fix the wrong behavior on remap-dir in config. Resolves: rhbz#2150227 - Resolves: RHEL-26716 - CVE-2024-25081 and CVE-2024-25082 fontforge: various flaws - Resolves: RHEL-138206 CVE-2025-15279 GUtils BMP File Parsing Heap-based Buffer Overflow - Resolves: RHEL-138228 CVE-2025-15275 SFD File Parsing Heap-based Buffer Overflow - Resolves: RHEL-138158 CVE-2025-15269 SFD File Parsing Use-After-Free - Resolves: RHEL-138222 CVE-2025-15270 SFD File Parsing Remote Code Execution Vulnerability - 2.0.4-2 ✅ validate fontconfig files by default - 2.0.5-1 ✅ do not add empty urls to appstream files - 3.0.1-1 🐞 Workaround Fedora problems created by rpm commit 93604e2 - 3.0.3-1 🐞 Fix bugs in the 3.0.2 refactoring - 3.0.2-1 🐞 Workaround Fedora problems created by rpm commit 93604e2 harder - Revert to 2.0.5 - Insert Epoch in Requires/Provides/Obsoletes - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.6.17, fixes CVE-2026-33554 - Update to 1.6.17, fixes CVE-2026-33554 - Update to 1.6.18, fixes CVE-2026-50031 - Comment out unneeded options from mods-available/eap Resolves: RHEL-30830 - Rebuild for OpenSSL rebase to 3.2.1 Resolves: RHEL-33857 - Backport fixes for BlastRADIUS CVE Resolves: RHEL-46567 - Ignore home server ping packets Resolves: RHEL-54312 - Rebuild for OpenSSL rebase to 3.5 Resolves: RHEL-88052 - Expose ca_path_reload_interval in configuration files Resolves: RHEL-93552 - Rebase to upstream 3.0.27 Resolves: RHEL-102101 - Reintroduce "Ignore home server ping packets" Resolves: RHEL-128083 - Bump release number Resolves: RHEL-128083 - Comment out unneeded options from mods-available/eap Resolves: RHEL-30830 - Rebuild for OpenSSL rebase to 3.2.1 Resolves: RHEL-33857 - Backport fixes for BlastRADIUS CVE Resolves: RHEL-46567 - Ignore home server ping packets Resolves: RHEL-54312 - Rebuild for OpenSSL rebase to 3.5 Resolves: RHEL-88052 - Expose ca_path_reload_interval in configuration files Resolves: RHEL-93552 - Rebase to upstream 3.0.27 Resolves: RHEL-102101 - Reintroduce "Ignore home server ping packets" Resolves: RHEL-128083 - Bump release number Resolves: RHEL-128083 - Comment out unneeded options from mods-available/eap Resolves: RHEL-30830 - Rebuild for OpenSSL rebase to 3.2.1 Resolves: RHEL-33857 - Backport fixes for BlastRADIUS CVE Resolves: RHEL-46567 - Ignore home server ping packets Resolves: RHEL-54312 - Rebuild for OpenSSL rebase to 3.5 Resolves: RHEL-88052 - Expose ca_path_reload_interval in configuration files Resolves: RHEL-93552 - Rebase to upstream 3.0.27 Resolves: RHEL-102101 - Reintroduce "Ignore home server ping packets" Resolves: RHEL-128083 - Bump release number Resolves: RHEL-128083 - Comment out unneeded options from mods-available/eap Resolves: RHEL-30830 - Rebuild for OpenSSL rebase to 3.2.1 Resolves: RHEL-33857 - Backport fixes for BlastRADIUS CVE Resolves: RHEL-46567 - Ignore home server ping packets Resolves: RHEL-54312 - Rebuild for OpenSSL rebase to 3.5 Resolves: RHEL-88052 - Expose ca_path_reload_interval in configuration files Resolves: RHEL-93552 - Rebase to upstream 3.0.27 Resolves: RHEL-102101 - Reintroduce "Ignore home server ping packets" Resolves: RHEL-128083 - Bump release number Resolves: RHEL-128083 - Comment out unneeded options from mods-available/eap Resolves: RHEL-30830 - Rebuild for OpenSSL rebase to 3.2.1 Resolves: RHEL-33857 - Backport fixes for BlastRADIUS CVE Resolves: RHEL-46567 - Ignore home server ping packets Resolves: RHEL-54312 - Rebuild for OpenSSL rebase to 3.5 Resolves: RHEL-88052 - Expose ca_path_reload_interval in configuration files Resolves: RHEL-93552 - Rebase to upstream 3.0.27 Resolves: RHEL-102101 - Reintroduce "Ignore home server ping packets" Resolves: RHEL-128083 - Bump release number Resolves: RHEL-128083 - Comment out unneeded options from mods-available/eap Resolves: RHEL-30830 - Rebuild for OpenSSL rebase to 3.2.1 Resolves: RHEL-33857 - Backport fixes for BlastRADIUS CVE Resolves: RHEL-46567 - Ignore home server ping packets Resolves: RHEL-54312 - Rebuild for OpenSSL rebase to 3.5 Resolves: RHEL-88052 - Expose ca_path_reload_interval in configuration files Resolves: RHEL-93552 - Rebase to upstream 3.0.27 Resolves: RHEL-102101 - Reintroduce "Ignore home server ping packets" Resolves: RHEL-128083 - Bump release number Resolves: RHEL-128083 - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658, CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662) - Try next DNS entry on connect failure Resolves: RHEL-113722 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Fix use of nsc_process_message Resolves: RHEL-155994 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Try next DNS entry on connect failure Resolves: RHEL-113722 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Fix use of nsc_process_message Resolves: RHEL-155994 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix incorrect bounds checks in planar codec (CVE-2026-45700) Resolves: RHEL-186991 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Fix use of nsc_process_message Resolves: RHEL-155994 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix incorrect bounds checks in planar codec (CVE-2026-45700) Resolves: RHEL-186991 - Backport several CVE fixes (CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-213169, RHEL-222785, RHEL-222966, RHEL-223605 - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658, CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662) - Try next DNS entry on connect failure Resolves: RHEL-113722 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Fix use of nsc_process_message Resolves: RHEL-155994 - Update to 0.6.1 (#1946415) - Apply coverity fixes also to bundled libmy - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.6.1 (#1946415) - Apply coverity fixes also to bundled libmy - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - null-terminate buffer in fuse_req_getgroups() - Bump release to test gating Related: RHEL-69609 - Rebase to get hardware support for CERTPX-13842 - Resolves: #RHEL-16637 - Resolves: #RHEL-35373 - Resolves: #RHEL-61930 - Rebase to get new hardware support - Resolves: #RHEL-82423 - Rebase to get new hardware support - Resolves: #RHEL-82423 - Rebase to get new hardware support - Resolves: #RHEL-125778 - Use AlmaLinux cert - 8.0.4 - %build: --with-libatomic-ops=yes - drop libatomic_ops dep - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild (poppler) - Rebuilt for libarrow 19 - Update to 3.10.2 - Rebuild for libarrow 19 in poppler's sidetag - Add definitions of missing int16_t and int32_t - Rebuild (poppler) - Enable blosc - Update to 3.10.3 - Fix *.py scripts packaging - Rebuilt for Python 3.14 - Update to 1.23 - Update to 1.23 - Initial Fedora packaging, package split off from gdk-pixbuf2 - Use actual gdk-pixbuf2 package names in package description and summary - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Initial Fedora packaging, package split off from gdk-pixbuf2 - Use actual gdk-pixbuf2 package names in package description and summary - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix leak on new connections Resolves: RHEL-98562 - Allow adding custom parameters to Xorg Resolves: RHEL-81194 - Instead of allowing adding custom parameters to Xorg, only allow adding -nocursor. Allowing adding custom parameters is a potential security issue. Related: RHEL-81194 - Remove adding -nocursor option. Using a cursor-theme already allows this. Related: RHEL-81194 - Fix precedence order when loading sessions Resolves: RHEL-4133 - Fix issue on conflicting sessions when they are remote Resolves: RHEL-123357 - Fix Handle GDM_SUPPORTED_SESSION_TYPES being unset Resolves: RHEL-117034 - Now Plymouth will quit even when no monitor is connected. Resolves: RHEL-129215 - Fix recording wtmp/utmp/btmp Resolves: RHEL-129305 - Terminate conflicting sesions started outside of GDM Resolves: RHEL-4108 - Remove adding -nocursor option. Using a cursor-theme already allows this. Related: RHEL-81194 - Fix precedence order when loading sessions Resolves: RHEL-4133 - Fix issue on conflicting sessions when they are remote Resolves: RHEL-123357 - Fix Handle GDM_SUPPORTED_SESSION_TYPES being unset Resolves: RHEL-117034 - Now Plymouth will quit even when no monitor is connected. Resolves: RHEL-129215 - Fix recording wtmp/utmp/btmp Resolves: RHEL-129305 - Terminate conflicting sesions started outside of GDM Resolves: RHEL-4108 - Update how GDM handles Registering session/display to properly terminate plymouth Resolves: https://redhat.atlassian.net/browse/RHEL-178706 - retrigger new build in correct target Resolves: https://redhat.atlassian.net/browse/RHEL-178706 - Create display in "legacy-xorg" mode checking displays in tty Resolves: https://redhat.atlassian.net/browse/RHEL-180820 - Fix leak on new connections Resolves: RHEL-98562 - Allow adding custom parameters to Xorg Resolves: RHEL-81194 - Instead of allowing adding custom parameters to Xorg, only allow adding -nocursor. Allowing adding custom parameters is a potential security issue. Related: RHEL-81194 - Remove adding -nocursor option. Using a cursor-theme already allows this. Related: RHEL-81194 - Fix precedence order when loading sessions Resolves: RHEL-4133 - Fix issue on conflicting sessions when they are remote Resolves: RHEL-123357 - Fix Handle GDM_SUPPORTED_SESSION_TYPES being unset Resolves: RHEL-117034 - Now Plymouth will quit even when no monitor is connected. Resolves: RHEL-129215 - Fix recording wtmp/utmp/btmp Resolves: RHEL-129305 - Terminate conflicting sesions started outside of GDM Resolves: RHEL-4108 - Remove adding -nocursor option. Using a cursor-theme already allows this. Related: RHEL-81194 - Fix precedence order when loading sessions Resolves: RHEL-4133 - Fix issue on conflicting sessions when they are remote Resolves: RHEL-123357 - Fix Handle GDM_SUPPORTED_SESSION_TYPES being unset Resolves: RHEL-117034 - Now Plymouth will quit even when no monitor is connected. Resolves: RHEL-129215 - Fix recording wtmp/utmp/btmp Resolves: RHEL-129305 - Terminate conflicting sesions started outside of GDM Resolves: RHEL-4108 - Update how GDM handles Registering session/display to properly terminate plymouth Resolves: https://redhat.atlassian.net/browse/RHEL-178706 - retrigger new build in correct target Resolves: https://redhat.atlassian.net/browse/RHEL-178706 - Create display in "legacy-xorg" mode checking displays in tty Resolves: https://redhat.atlassian.net/browse/RHEL-180820 - Backport Fedora change to provide a sysusers.d file to get user() and group() provides (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format) - Resolves: RHEL-78739 - Bump release - Backport Fedora change to provide a sysusers.d file to get user() and group() provides (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format) - Resolves: RHEL-78739 - Bump release - Update to 3.13.1 - fix CVE-2026-23868: double free in GifMakeSavedImage (RHEL-154864) - rebuild - fix CVE-2026-23868: double free in GifMakeSavedImage (RHEL-154864) - rebuild - fix CVE-2026-26740: buffer overflow in EGifGCBToExtension (RHEL-157133) - Bundle mozjs (#1958111) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.68.3 Resolves: #1993764 - Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914 - Update to 1.68.4 - Increate test timeouts to make it more reliable on armv7 Resolves: #2005774 - Update to 1.68.5 Resolves: #2054085 - Update to 1.68.6 Resolves: #2066167 - Guard against invalid gobject property access Resolves: #2170044 - Always initialize callback return value Resolves: #2196877 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.37.0 - Switch to the meson build system - Update to 3.38.0 - Temporarily ship previous soname for ABI compat - Drop compat ABI version - Update to 3.38.1 - Update to 3.38.2 - Drop old obsoletes - BR python3-gobject-devel rather than pygobject3-devel - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2024-34397, signal subscription vulnerabilities - Resolves: RHEL-35775 - Add support for x-gvfs-trash mount option - Resolves: RHEL-52360 - Add patches for CVE-2024-52533 and CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-94483 - Resolves: RHEL-102844 - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114059 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add support for x-gvfs-trash mount option - Resolves: RHEL-52360 - Add patches for CVE-2024-52533 and CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-94483 - Resolves: RHEL-102844 - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114059 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Add patch for CVE-2025-14087 and CVE-2025-14512 - Fix CVE-2026-58016: broken node element nesting validation in D-Bus introspection XML parsing - Resolves: RHEL-190632 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Add patch for CVE-2025-14087 and CVE-2025-14512 - Fix CVE-2026-58016: broken node element nesting validation in D-Bus introspection XML parsing - Resolves: RHEL-190632 - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context - Resolves: RHEL-212261 - Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list - Resolves: RHEL-190589 - Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators - Resolves: RHEL-212236 - Fix CVE-2026-58011: range validation in g_date_time_add_full() - Resolves: RHEL-212194 - Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW - Resolves: RHEL-212217 - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking - Resolves: RHEL-212157 - Fix CVE-2026-15588: limit D-Bus auth line read length - Update locales for Croatia to use EUR as currency symbol (RHEL-140105) - Optimize trylock for high cache contention workloads. (RHEL-141072) - Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018) - Fix race condition in io/tst-stat symlink test (RHEL-142209) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279) - Update locales for Croatia to use EUR as currency symbol (RHEL-140105) - Optimize trylock for high cache contention workloads. (RHEL-141072) - Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018) - Fix race condition in io/tst-stat symlink test (RHEL-142209) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279) - Update locales for Croatia to use EUR as currency symbol (RHEL-140105) - Optimize trylock for high cache contention workloads. (RHEL-141072) - Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018) - Fix race condition in io/tst-stat symlink test (RHEL-142209) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279) - Update to 2.64.4 - Switch to meson build system - Tighten soname globs - Update to 2.64.5 - Add missing dep for generating links to libstdc++ docs - Fix gmmproc and generate_wrap_init.pl to be executable (#1917035) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 2.66.0 - Backport upstream fix for C++20 compatibility (#1947838) - Update generated header files for C++20 compatibility (#1947838) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 2.66.1 - Update to 2.64.4 - Switch to meson build system - Tighten soname globs - Update to 2.64.5 - Add missing dep for generating links to libstdc++ docs - Fix gmmproc and generate_wrap_init.pl to be executable (#1917035) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 2.66.0 - Backport upstream fix for C++20 compatibility (#1947838) - Update generated header files for C++20 compatibility (#1947838) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 2.66.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Remove arch check from glmConfigVersion.cmake, fix #1758009 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix #1863634 - FTBFS in Fedora rawhide/f33 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Disable strict aliasing due to bugs in testsuite (#1923456) - New upstream release (#1823615) - pkgconfig support is no longer supported in upstream and not shipped - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Remove arch check from glmConfigVersion.cmake, fix #1758009 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix #1863634 - FTBFS in Fedora rawhide/f33 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Disable strict aliasing due to bugs in testsuite (#1923456) - New upstream release (#1823615) - pkgconfig support is no longer supported in upstream and not shipped - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Ship gnome-autoar-devel in CRB Resolves: RHEL-120219 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + gnome-bluetooth-3.34.2-1 - Update to 3.34.2 + gnome-bluetooth-3.34.3-1 - Update to 3.34.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Require PulseAudio _or_ Pipewire for Bluetooth audio + gnome-bluetooth-3.34.3-4 - Revert “Require PulseAudio _or_ Pipewire for Bluetooth audio” - Closes: #1928166 + gnome-bluetooth-3.34.4-1 - Update to 3.34.4 + gnome-bluetooth-3.34.5-1 - Update to 3.34.5 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Move things around a bit in the menus to be more logical Related: RHEL-32792 - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file) - Resolves: #2129021 (Hide some errors in non-debug builds) - Resolves: #2228374 (Rebuild to move gnome-software-devel into CRB) - Resolves: RHEL-843 (Rebase GNOME Software to its GNOME 45 version) - Resolves: RHEL-22268 (Prefer VENDOR_NAME in app origin) - Fix some minor rpmlint complaints - Pull recent patches from upstream - Add support for ELF constructors and destructors - Fix a minor licensing problem - Upstream patch for efibind.h - Latest ELF constructors/destructors patch - Minor spec cleanups - Update to 3.0.11 (via patches generated from git) - Plus newer upstream fixes (also via patches generated from git) - Fix shell exit failures in make - Fix .reloc section generation - Fix CHAR8 definition - Fix "make DESTDIR=..." - Change the installed .a/.o layout - Provide makefiles for consumers to use. - Make the -devel noarch since it's just headers. - Add a bunch of compatibility symlinks for the 3.0.8 filesystem layout These will go away once we've migrated everything using them in fedora to use the newer make system... - Make a compat subpackage to provide the old paths to our libraries, linker script, and includes. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix a mistake building -compat - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix some minor rpmlint complaints - Pull recent patches from upstream - Add support for ELF constructors and destructors - Fix a minor licensing problem - Upstream patch for efibind.h - Latest ELF constructors/destructors patch - Minor spec cleanups - Update to 3.0.11 (via patches generated from git) - Plus newer upstream fixes (also via patches generated from git) - Fix shell exit failures in make - Fix .reloc section generation - Fix CHAR8 definition - Fix "make DESTDIR=..." - Change the installed .a/.o layout - Provide makefiles for consumers to use. - Make the -devel noarch since it's just headers. - Add a bunch of compatibility symlinks for the 3.0.8 filesystem layout These will go away once we've migrated everything using them in fedora to use the newer make system... - Make a compat subpackage to provide the old paths to our libraries, linker script, and includes. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix a mistake building -compat - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add Requires on python-markdown for g-ir-doc-tool (#1979144) - Add license texts and documentation files (#1979144) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914 - Add Conflicts for i686/x86_64 devel subpackage (#1915339) - Change Conflicts syntax (#1915339) - Fix FTBFS for a possible Meson rebase - Resolves: rhbz#2140108 - update gating.yaml and rebuild - Related: #2000051 - fix gating.yaml as we have no functional gating tests - Related: #2000051 - update to 2.0.2 - Related: #2061316 - limit to golang arches only - Related: #2061316 - rebuild - Resolves: #2037812 - fix RHEL9.2 build - thanks to Debarshi Ray - Related: #2124478 - update license to SPDX standard - Related: #2176063 - fix license tag - Related: Jira:RHEL-2112 - update to https://github.com/cpuguy83/go-md2man/releases/tag/v2.0.3 - Related: Jira:RHEL-2112 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Update Noto CJK to Sans 2.004 and Serif 2.002 - Drop some Noto CJK Language Specific OTFs sub packages - Resolves: RHEL-13738 - Add google-noto-sans-cjk-jp-fonts back - Resolves: RHEL-13738 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix license and covscan issues Resolves: #1938732 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild Resolves: #2035319 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix license and covscan issues Resolves: #1938732 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild Resolves: #2035319 - Fixed gvpack to run Resolves: rhbz#2029565 - Rebuilt for graphviz-ruby addition Resolves: RHEL-17134 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.3.13 - Rebuild to include in GNOME megaupdate - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 + grilo-0.3.13-5 - Clarify license - Fix TLS not being validated correctly - Resolves: rhbz#1976719 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop the BuildRequires on liboauth Resolves: #1996880 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.3.13 - Rebuild to include in GNOME megaupdate - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 + grilo-0.3.13-5 - Clarify license - Fix TLS not being validated correctly - Resolves: rhbz#1976719 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop the BuildRequires on liboauth Resolves: #1996880 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - New version Resolves: rhbz#1818181 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.8.2 - Update to 1.8.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.8.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.9.1 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.8.2 - Update to 1.8.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.8.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.9.1 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - fix for CVE-2025-3887 Resolves: RHEL-93059 - Fix for CVE-2026-52720: validate framebuffer update rectangles in librfb plugin Resolves: RHEL-184459 - Fix integer overflows in vmnc decoder (CVE-2026-52722) Resolves: RHEL-184422 - Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read Resolves: RHEL-184403 - Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718) Resolves: RHEL-184388 - Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082 in dvbsuboverlay and jpegparser Resolves: RHEL-156242, RHEL-156255 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - fix for CVE-2025-3887 Resolves: RHEL-93059 - Fix for CVE-2026-52720: validate framebuffer update rectangles in librfb plugin Resolves: RHEL-184459 - Fix integer overflows in vmnc decoder (CVE-2026-52722) Resolves: RHEL-184422 - Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read Resolves: RHEL-184403 - Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718) Resolves: RHEL-184388 - Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082 in dvbsuboverlay and jpegparser Resolves: RHEL-156242, RHEL-156255 - Fix buffer overflow in DTLS connection peer certificate subject DN handling (CVE-2026-59692) Resolves: RHEL-193572 - Fix incorrect bytes-per-pixel handling in rfbsrc plugin (CVE-2026-59691) Resolves: RHEL-193557 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - fix for CVE-2025-3887 Resolves: RHEL-93059 - Fix for CVE-2026-52720: validate framebuffer update rectangles in librfb plugin Resolves: RHEL-184459 - Fix integer overflows in vmnc decoder (CVE-2026-52722) Resolves: RHEL-184422 - Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read Resolves: RHEL-184403 - Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718) Resolves: RHEL-184388 - Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082 in dvbsuboverlay and jpegparser Resolves: RHEL-156242, RHEL-156255 - Fix buffer overflow in DTLS connection peer certificate subject DN handling (CVE-2026-59692) Resolves: RHEL-193572 - Fix incorrect bytes-per-pixel handling in rfbsrc plugin (CVE-2026-59691) Resolves: RHEL-193557 - Fix ADPCM decoder negotiation and input size check (CVE-2026-19387) Resolves: RHEL-235496 - Rebuild for z-stream Resolves: RHEL-156256, RHEL-156259 - Rebuild to fix missing binaries due to buildsystem oversight - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.33 - Switch to meson build system - Explicitly byte-compile python files using py_byte_compile macro - Update to 1.33.1 - Remove unused runtime dependency on python3-parameterized - Update URL (#1905556) - Disable test suite on non-Fedora - Update to 1.33.2 - Drop no longer needed python3-anytree requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to trigger shipping devel package (RHEL-19019) - Reduce the height of window titlebars - Actually reduce the height of window titlebars - Stop looking for modules in cwd (CVE-2024-6655) - Resolves: RHEL-46993 - Resolves: RHEL-4130 - Resolves: RHEL-22853 - Resolves: RHEL-4098 - Dummy commit to get ci to rerun - Related: RHEL-4098 - Resolves: RHEL-4098 - Update to 3.24.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Opt-out of LTO (#1898054) - Update to 3.24.3 - Use https source URLs - Re-enable LTO now that we have upstream fix in place (#1898054) - Switch to meson build system - Tighten soname globs - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.24.4 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.24.5 - Update to 3.24.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Opt-out of LTO (#1898054) - Update to 3.24.3 - Use https source URLs - Re-enable LTO now that we have upstream fix in place (#1898054) - Switch to meson build system - Tighten soname globs - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.24.4 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.24.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 4.8.1 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix decrement number feature Resolves: #2062786 - Add build and test suite fix for single core VMs Related: #2062786 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to trigger shipping devel package (RHEL-19019) - Upstream update. - Upstream update. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Upstream update to 1.47.15. - BR: %{__make}. - Upstream update to 1.47.16. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Upstream update to 1.48.1. - Upstream update to 1.48.2. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Import from RHEL 8 and old Fedora; port to libidn2 - Resolves: #1944157 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to Fedora Rawhide resolves: RHEL-56803 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Include patch to work with colon but no port - Update to 2.9.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update pci, usb and vendor ids Resolves: RHEL-6948 - Update pci, usb and vendor ids Resolves: RHEL-27162 - Update pci, usb and vendor ids Resolves: RHEL-27163 - Update pci, usb and vendor ids Resolves: RHEL-56968 - Update pci, usb and vendor ids Resolves: RHEL-56969 - Update pci and vendor ids Resolves: RHEL-56969 - Update pci, usb and vendor ids Resolves: RHEL-78355 - Update pci, usb and vendor ids Resolves: RHEL-78358 - Update pci, usb and vendor ids Resolves: RHEL-110947 - Update pci and vendor ids Resolves: RHEL-110948 - Resolves: RHEL-1616 Space, back-spc, enter key not working on gtk4 - Resolves: RHEL-1616 Make ibus-tests to depend on ibus-libs - Resolves: RHEL-1616 Fix RESOURCE_LEAK in OpenScanHub - Resolves: RHEL-39398 ship ibus-gtk4 in RHEL 9 CRB - Resolves: RHEL-1616 Space, back-spc, enter key not working on gtk4 - Resolves: RHEL-1616 Make ibus-tests to depend on ibus-libs - Resolves: RHEL-1616 Fix RESOURCE_LEAK in OpenScanHub - Resolves: RHEL-39398 ship ibus-gtk4 in RHEL 9 CRB - Resolves: RHEL-1616 Space, back-spc, enter key not working on gtk4 - Resolves: RHEL-1616 Make ibus-tests to depend on ibus-libs - Resolves: RHEL-1616 Fix RESOURCE_LEAK in OpenScanHub - Resolves: RHEL-39398 ship ibus-gtk4 in RHEL 9 CRB - Update to upstream 1.5 (RHEL-2969) - Disable compat build (RHEL-2969) - add some IMA setup tools (RHEL-33751) - Skip unsupported file systems for sample appraisal rule (RHEL-62817) - ima-setup: run zipl after building initramfs for s390x (RHEL-72293) - update to upstream 1.6.2 (RHEL-82793) - Verify IMA signature to make sure it's correct (RHEL-105471) - Drop old libimaevm.so.4 (RHEL-82797) - Initial packaging. - Update to 3.0.2. - Update spec per reviewer comments. - Add main package as dependency to python package. - Rebuilt for Python 3.10 - New upstream release 3.1.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Release bump, no changes - iproute-6.11.0-1.el9 - Fix gating yaml - Add tmt test plan - Add image-mode testing - image-mode: double test duration - iproute-6.14.0-1.el9 - iproute-6.14.0-2.el9 - iproute-6.17.0-1.el9 - iproute-6.17.0-2.el9 - Fix for wrong comment in ipset-config file - Fix patch "Parse port before trying by service name" - Bump release for gated side-tag - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Fixed ctrl+space problem Resolves: rhbz#1854822 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add missing perl(lib) and perl(Symbol) requires (#1897247) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuild to pick up OpenSSL 3.0 Beta ABI (#1984097) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Initial package renamed from glassfish-servlet-api. - Also ship the API in the old javax namespace to aid transition - Add compat symlink for packages constructing the classpath manually. - Correct mvn_file macro invokation - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Re-add provides on glassfish-servlet-api - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.13.1 (#1831402) - Fix docs build failures with Sphinx 3 (#1823532) - Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 2.14 Related: rhbz#2001066 + disable JAS_DEC_DEFAULT_MAX_SAMPLES (RHEL-76762) - Add script to obtain bundled library versions from OpenJDK sources - Related: RHEL-119329 - Update get_bundle_versions.sh to match other scripts - * get_bundle_versions.sh: Add license - * get_bundle_versions.sh: Set compile-command in Emacs - * get_bundle_versions.sh: Use different error codes for different failures - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086) - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002) - Add OpenJDK 8u support to get_bundle_versions.sh - Print bundle updates and backouts at end of openjdk_news.sh output - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-119329 - Update to 8u472-b08 (GA). - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118767 - Resolves: RHEL-119455 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Change portablerhel - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Change portablerhel - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Add CVEs to NEWS file - Related: RHEL-188852 - Update to 8u504-b01 (GA). - Update release notes for 8u504-b01. - Bump FreeType version to 2.14.3 following JDK-8385390 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235603 - Add CVEs for August 2026 release - Bump release for PQC build - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Related: RHEL-235603 - Change portablerhel - Add script to obtain bundled library versions from OpenJDK sources - Related: RHEL-119329 - Update get_bundle_versions.sh to match other scripts - * get_bundle_versions.sh: Add license - * get_bundle_versions.sh: Set compile-command in Emacs - * get_bundle_versions.sh: Use different error codes for different failures - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086) - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002) - Add OpenJDK 8u support to get_bundle_versions.sh - Print bundle updates and backouts at end of openjdk_news.sh output - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-119329 - Update to 8u472-b08 (GA). - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118767 - Resolves: RHEL-119455 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Change portablerhel - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Change portablerhel - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Add CVEs to NEWS file - Related: RHEL-188852 - Update to 8u504-b01 (GA). - Update release notes for 8u504-b01. - Bump FreeType version to 2.14.3 following JDK-8385390 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235603 - Add CVEs for August 2026 release - Bump release for PQC build - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Related: RHEL-235603 - Change portablerhel - Add script to obtain bundled library versions from OpenJDK sources - Related: RHEL-119329 - Update get_bundle_versions.sh to match other scripts - * get_bundle_versions.sh: Add license - * get_bundle_versions.sh: Set compile-command in Emacs - * get_bundle_versions.sh: Use different error codes for different failures - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086) - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002) - Add OpenJDK 8u support to get_bundle_versions.sh - Print bundle updates and backouts at end of openjdk_news.sh output - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-119329 - Update to 8u472-b08 (GA). - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118767 - Resolves: RHEL-119455 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Change portablerhel - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Change portablerhel - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Add CVEs to NEWS file - Related: RHEL-188852 - Update to 8u504-b01 (GA). - Update release notes for 8u504-b01. - Bump FreeType version to 2.14.3 following JDK-8385390 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235603 - Add CVEs for August 2026 release - Bump release for PQC build - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Related: RHEL-235603 - Change portablerhel - Add script to obtain bundled library versions from OpenJDK sources - Related: RHEL-119329 - Update get_bundle_versions.sh to match other scripts - * get_bundle_versions.sh: Add license - * get_bundle_versions.sh: Set compile-command in Emacs - * get_bundle_versions.sh: Use different error codes for different failures - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086) - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002) - Add OpenJDK 8u support to get_bundle_versions.sh - Print bundle updates and backouts at end of openjdk_news.sh output - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-119329 - Update to 8u472-b08 (GA). - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118767 - Resolves: RHEL-119455 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Change portablerhel - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Change portablerhel - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Add CVEs to NEWS file - Related: RHEL-188852 - Update to 8u504-b01 (GA). - Update release notes for 8u504-b01. - Bump FreeType version to 2.14.3 following JDK-8385390 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235603 - Add CVEs for August 2026 release - Bump release for PQC build - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Related: RHEL-235603 - Change portablerhel - Add script to obtain bundled library versions from OpenJDK sources - Related: RHEL-119329 - Update get_bundle_versions.sh to match other scripts - * get_bundle_versions.sh: Add license - * get_bundle_versions.sh: Set compile-command in Emacs - * get_bundle_versions.sh: Use different error codes for different failures - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086) - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002) - Add OpenJDK 8u support to get_bundle_versions.sh - Print bundle updates and backouts at end of openjdk_news.sh output - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-119329 - Update to 8u472-b08 (GA). - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118767 - Resolves: RHEL-119455 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Change portablerhel - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Change portablerhel - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Add CVEs to NEWS file - Related: RHEL-188852 - Update to 8u504-b01 (GA). - Update release notes for 8u504-b01. - Bump FreeType version to 2.14.3 following JDK-8385390 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235603 - Add CVEs for August 2026 release - Bump release for PQC build - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Related: RHEL-235603 - Change portablerhel - Add script to obtain bundled library versions from OpenJDK sources - Related: RHEL-119329 - Update get_bundle_versions.sh to match other scripts - * get_bundle_versions.sh: Add license - * get_bundle_versions.sh: Set compile-command in Emacs - * get_bundle_versions.sh: Use different error codes for different failures - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086) - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002) - Add OpenJDK 8u support to get_bundle_versions.sh - Print bundle updates and backouts at end of openjdk_news.sh output - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-119329 - Update to 8u472-b08 (GA). - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118767 - Resolves: RHEL-119455 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Change portablerhel - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Change portablerhel - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Add CVEs to NEWS file - Related: RHEL-188852 - Update to 8u504-b01 (GA). - Update release notes for 8u504-b01. - Bump FreeType version to 2.14.3 following JDK-8385390 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235603 - Add CVEs for August 2026 release - Bump release for PQC build - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Related: RHEL-235603 - Change portablerhel - Add script to obtain bundled library versions from OpenJDK sources - Related: RHEL-119329 - Update get_bundle_versions.sh to match other scripts - * get_bundle_versions.sh: Add license - * get_bundle_versions.sh: Set compile-command in Emacs - * get_bundle_versions.sh: Use different error codes for different failures - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086) - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002) - Add OpenJDK 8u support to get_bundle_versions.sh - Print bundle updates and backouts at end of openjdk_news.sh output - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-119329 - Update to 8u472-b08 (GA). - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118767 - Resolves: RHEL-119455 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Change portablerhel - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Change portablerhel - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Add CVEs to NEWS file - Related: RHEL-188852 - Update to 8u504-b01 (GA). - Update release notes for 8u504-b01. - Bump FreeType version to 2.14.3 following JDK-8385390 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235603 - Add CVEs for August 2026 release - Bump release for PQC build - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Related: RHEL-235603 - Change portablerhel - Add script to obtain bundled library versions from OpenJDK sources - Related: RHEL-119329 - Update get_bundle_versions.sh to match other scripts - * get_bundle_versions.sh: Add license - * get_bundle_versions.sh: Set compile-command in Emacs - * get_bundle_versions.sh: Use different error codes for different failures - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086) - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002) - Add OpenJDK 8u support to get_bundle_versions.sh - Print bundle updates and backouts at end of openjdk_news.sh output - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-119329 - Update to 8u472-b08 (GA). - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118767 - Resolves: RHEL-119455 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Change portablerhel - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Change portablerhel - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Add CVEs to NEWS file - Related: RHEL-188852 - Update to 8u504-b01 (GA). - Update release notes for 8u504-b01. - Bump FreeType version to 2.14.3 following JDK-8385390 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235603 - Add CVEs for August 2026 release - Bump release for PQC build - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Related: RHEL-235603 - Change portablerhel - Add script to obtain bundled library versions from OpenJDK sources - Related: RHEL-119329 - Update get_bundle_versions.sh to match other scripts - * get_bundle_versions.sh: Add license - * get_bundle_versions.sh: Set compile-command in Emacs - * get_bundle_versions.sh: Use different error codes for different failures - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086) - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002) - Add OpenJDK 8u support to get_bundle_versions.sh - Print bundle updates and backouts at end of openjdk_news.sh output - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-119329 - Update to 8u472-b08 (GA). - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118767 - Resolves: RHEL-119455 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Change portablerhel - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Change portablerhel - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Add CVEs to NEWS file - Related: RHEL-188852 - Update to 8u504-b01 (GA). - Update release notes for 8u504-b01. - Bump FreeType version to 2.14.3 following JDK-8385390 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235603 - Add CVEs for August 2026 release - Bump release for PQC build - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Related: RHEL-235603 - Change portablerhel - Add script to obtain bundled library versions from OpenJDK sources - Related: RHEL-119329 - Update get_bundle_versions.sh to match other scripts - * get_bundle_versions.sh: Add license - * get_bundle_versions.sh: Set compile-command in Emacs - * get_bundle_versions.sh: Use different error codes for different failures - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086) - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002) - Add OpenJDK 8u support to get_bundle_versions.sh - Print bundle updates and backouts at end of openjdk_news.sh output - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-119329 - Update to 8u472-b08 (GA). - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118767 - Resolves: RHEL-119455 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Change portablerhel - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Change portablerhel - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Add CVEs to NEWS file - Related: RHEL-188852 - Update to 8u504-b01 (GA). - Update release notes for 8u504-b01. - Bump FreeType version to 2.14.3 following JDK-8385390 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235603 - Add CVEs for August 2026 release - Bump release for PQC build - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Related: RHEL-235603 - Change portablerhel - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Set portablesuffix to el8 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Set portablesuffix to el8 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Bump release for PQC build - Related: RHEL-235625 - Set portablesuffix to el8 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Set portablesuffix to el8 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Set portablesuffix to el8 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Bump release for PQC build - Related: RHEL-235625 - Set portablesuffix to el8 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Set portablesuffix to el8 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Set portablesuffix to el8 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Bump release for PQC build - Related: RHEL-235625 - Set portablesuffix to el8 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Set portablesuffix to el8 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Set portablesuffix to el8 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Bump release for PQC build - Related: RHEL-235625 - Set portablesuffix to el8 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Set portablesuffix to el8 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Set portablesuffix to el8 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Bump release for PQC build - Related: RHEL-235625 - Set portablesuffix to el8 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Set portablesuffix to el8 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Set portablesuffix to el8 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Bump release for PQC build - Related: RHEL-235625 - Set portablesuffix to el8 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Set portablesuffix to el8 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Set portablesuffix to el8 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Bump release for PQC build - Related: RHEL-235625 - Set portablesuffix to el8 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Set portablesuffix to el8 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Set portablesuffix to el8 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Bump release for PQC build - Related: RHEL-235625 - Set portablesuffix to el8 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Set portablesuffix to el8 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Set portablesuffix to el8 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Bump release for PQC build - Related: RHEL-235625 - Set portablesuffix to el8 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Set portablesuffix to el8 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Set portablesuffix to el8 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Bump release for PQC build - Related: RHEL-235625 - Set portablesuffix to el8 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Set portablesuffix to el8 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Set portablesuffix to el8 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Bump release for PQC build - Related: RHEL-235625 - Set portablesuffix to el8 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Set portablesuffix to el8 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Set portablesuffix to el8 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Bump release for PQC build - Related: RHEL-235625 - Set portablesuffix to el8 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Set portablesuffix to el8 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Set portablesuffix to el8 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Bump release for PQC build - Related: RHEL-235625 - Set portablesuffix to el8 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Set portablesuffix to el8 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Set portablesuffix to el8 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Bump release for PQC build - Related: RHEL-235625 - Set portablesuffix to el8 - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Use el9 portable packages - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Use el9 portable packages - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Use el9 portable packages - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Use el9 portable packages - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Use el9 portable packages - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Use el9 portable packages - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Use el9 portable packages - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Use el9 portable packages - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Use el9 portable packages - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Use el9 portable packages - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Use el9 portable packages - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Use el9 portable packages - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Use el9 portable packages - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Use el9 portable packages - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Use el9 portable packages - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Use el9 portable packages - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Use el9 portable packages - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Use el9 portable packages - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Use el9 portable packages - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Use el9 portable packages - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Use el9 portable packages - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Use el9 portable packages - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Use el9 portable packages - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Use el9 portable packages - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Use el9 portable packages - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Use el9 portable packages - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Use el9 portable packages - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Use el9 portable packages - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Use el9 portable packages - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Use el9 portable packages - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Use el9 portable packages - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Use el9 portable packages - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Use el9 portable packages - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Use el9 portable packages - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Use el9 portable packages - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Use el9 portable packages - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Use el9 portable packages - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Use el9 portable packages - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Use el9 portable packages - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Use el9 portable packages - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Use el9 portable packages - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Use el9 portable packages - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Use el9 portable packages - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Use el9 portable packages - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Use el9 portable packages - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Use el9 portable packages - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Use el9 portable packages - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Use el9 portable packages - Add generated Requires on multiple versions of java-headless - Related: rhbz#2164437 - Make OpenJDK 17 the default JRE/JDK - Related: RHEL-62403 - Include java-21-headless in generated auto-requires - Related: RHEL-62409 - Drop generated Requires on various Java versions - Related: RHEL-62409 - Use Java 11 build tool bindings for package builds - Rebuild - Rebuild - Update to upstream version 6.4.0 - Add generated Requires on multiple versions of java-headless - Related: rhbz#2164437 - Make OpenJDK 17 the default JRE/JDK - Related: RHEL-62403 - Include java-21-headless in generated auto-requires - Related: RHEL-62409 - Drop generated Requires on various Java versions - Related: RHEL-62409 - Use Java 11 build tool bindings for package builds - Rebuild - Rebuild - Update to upstream version 6.4.0 - Add generated Requires on multiple versions of java-headless - Related: rhbz#2164437 - Make OpenJDK 17 the default JRE/JDK - Related: RHEL-62403 - Include java-21-headless in generated auto-requires - Related: RHEL-62409 - Drop generated Requires on various Java versions - Related: RHEL-62409 - Use Java 11 build tool bindings for package builds - Rebuild - Rebuild - Update to upstream version 6.4.0 - Add generated Requires on multiple versions of java-headless - Related: rhbz#2164437 - Make OpenJDK 17 the default JRE/JDK - Related: RHEL-62403 - Include java-21-headless in generated auto-requires - Related: RHEL-62409 - Drop generated Requires on various Java versions - Related: RHEL-62409 - Use Java 11 build tool bindings for package builds - Rebuild - Rebuild - Update to upstream version 6.4.0 - Add generated Requires on multiple versions of java-headless - Related: rhbz#2164437 - Make OpenJDK 17 the default JRE/JDK - Related: RHEL-62403 - Include java-21-headless in generated auto-requires - Related: RHEL-62409 - Drop generated Requires on various Java versions - Related: RHEL-62409 - Use Java 11 build tool bindings for package builds - Rebuild - Rebuild - Update to upstream version 6.4.0 - Add generated Requires on multiple versions of java-headless - Related: rhbz#2164437 - Make OpenJDK 17 the default JRE/JDK - Related: RHEL-62403 - Include java-21-headless in generated auto-requires - Related: RHEL-62409 - Drop generated Requires on various Java versions - Related: RHEL-62409 - Use Java 11 build tool bindings for package builds - Rebuild - Rebuild - Update to upstream version 6.4.0 - Add generated Requires on multiple versions of java-headless - Related: rhbz#2164437 - Make OpenJDK 17 the default JRE/JDK - Related: RHEL-62403 - Include java-21-headless in generated auto-requires - Related: RHEL-62409 - Drop generated Requires on various Java versions - Related: RHEL-62409 - Use Java 11 build tool bindings for package builds - Rebuild - Rebuild - Update to upstream version 6.4.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL-9.2.0 - Resolves: #2121499 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - make is no longer in buildroot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to the upstream v3.4.1 @ 7bf9f85d (bz 2140043) - Fix a stack corruption on s390x - Update to the upstream v3.5.0 @ b178ef6b (RHEL-30957) - Use proper SPDX license identifiers - Update to the upstream v3.6.0 @ 11829386 (RHEL-64947) - Fix SAST findings in jq 1.6 - Resolves: RHEL-28653 - Fix CVE-2024-23337 - Resolves: RHEL-92975 - Fix CVE-2025-48060 - Resolves: RHEL-92993 - Fix CVE-2026-39979 out-of-bounds read in jv_parse_sized() - Resolves: RHEL-168202 - Fix CVE-2026-40164 - Denial of Service via crafted JSON object causing hash collisions - Resolves: RHEL-168185 - Add a patch to backport fixes applied on upstream master branch - Re-enable RDRAND as json-c can detect broken implementations in CPUs now - Disable -Werror during build - Add upstream patch fixing usage of errno in json_parse_uint64() - Add a patch to fix a test - Add a patch to fix generation of user-documentation - Run the testssuite with valgrind on %valgrind_arches - Build using Ninja instead of Make - Add a patch to move Doxyfile into doc subdir - Remove pre-built html documentation - Update Doxyfile during %prep - Add a patch to apply some optimizations to arraylist - Hardlink the files in %_pkgdocdir - Use new cmake macros - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Start providing versioned symbols - Resolves: rhbz#2001067 - Add a patch to backport fixes applied on upstream master branch - Re-enable RDRAND as json-c can detect broken implementations in CPUs now - Disable -Werror during build - Add upstream patch fixing usage of errno in json_parse_uint64() - Add a patch to fix a test - Add a patch to fix generation of user-documentation - Run the testssuite with valgrind on %valgrind_arches - Build using Ninja instead of Make - Add a patch to move Doxyfile into doc subdir - Remove pre-built html documentation - Update Doxyfile during %prep - Add a patch to apply some optimizations to arraylist - Hardlink the files in %_pkgdocdir - Use new cmake macros - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Start providing versioned symbols - Resolves: rhbz#2001067 - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix FTBFS - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix FTBFS - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix issues discovered by static analysis - Resolves: RHEL-34073 - check weak-updates directory exists before using it - Resolves: RHEL-106279 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #1761398 Add symbol namespace support to ksc - Resolves: #2032138 add Red Hat Enterprise Linux 9 support - Resolves: #2043447 ksc: Support Authorization header in bugzilla API - Resolves: #2066226 Drop mandatory kernel-abi-stablelist dependency - Resolves: #2066228 - Explicitly require target specification - Resolves: #2066228 - Explicitly require target specification - Resolves: #2066231 - update to ksc 1.12 - Resolves: #2066231 - add manpage docs - Resolves: #2165820 - The email method always mark CentOS Stream as release - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Disable packaging of gtk+-based lame-mp3x (#1760961, #1760995 #c1) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rename manpages: some names conflict with the man-pages package Resolves: rhbz#2222868 - Add explicit requires to the devel subpackages Related: rhbz#2229142 - Fix soname of the 64-bit version libraries Resolves: RHEL-24851 - Spec file cleanup - Remove unused patches Related: RHEL-5770 - Add explicit requires to the devel subpackages - Note: the the cblas64 seems to be linked against the libblas (not the 64 version) - this is not a regression, however in the Fedora it uses libblas64 instead. - Resolves: RHEL-5768 - Rename manpages: some names conflict with the man-pages package Resolves: rhbz#2222868 - Add explicit requires to the devel subpackages Related: rhbz#2229142 - Fix soname of the 64-bit version libraries Resolves: RHEL-24851 - Spec file cleanup - Remove unused patches Related: RHEL-5770 - Add explicit requires to the devel subpackages - Note: the the cblas64 seems to be linked against the libblas (not the 64 version) - this is not a regression, however in the Fedora it uses libblas64 instead. - Resolves: RHEL-5768 - Rename manpages: some names conflict with the man-pages package Resolves: rhbz#2222868 - Add explicit requires to the devel subpackages Related: rhbz#2229142 - Fix soname of the 64-bit version libraries Resolves: RHEL-24851 - Spec file cleanup - Remove unused patches Related: RHEL-5770 - Add explicit requires to the devel subpackages - Note: the the cblas64 seems to be linked against the libblas (not the 64 version) - this is not a regression, however in the Fedora it uses libblas64 instead. - Resolves: RHEL-5768 - Rename manpages: some names conflict with the man-pages package Resolves: rhbz#2222868 - Add explicit requires to the devel subpackages Related: rhbz#2229142 - Fix soname of the 64-bit version libraries Resolves: RHEL-24851 - Spec file cleanup - Remove unused patches Related: RHEL-5770 - Add explicit requires to the devel subpackages - Note: the the cblas64 seems to be linked against the libblas (not the 64 version) - this is not a regression, however in the Fedora it uses libblas64 instead. - Resolves: RHEL-5768 - Fixing CVE-2025-47151 Resolves: RHEL-126685 CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso - update to v2019.2 - update URL - add Requirement on tex(preview.sty) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add perl dependencies needed for build - update to 2020.2 and l2h-2020 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix digest calculation of sha256 (RHEL-20391) - Fix digest calculation of sha256 (RHEL-20391) - Fix CVE-2026-10846: DNS response spoofing via missing address/port/TXID and question section validation (RHEL-210701) - Fix digest calculation of sha256 (RHEL-20391) - Fix digest calculation of sha256 (RHEL-20391) - Fix CVE-2026-10846: DNS response spoofing via missing address/port/TXID and question section validation (RHEL-210701) - Fix digest calculation of sha256 (RHEL-20391) - Fix digest calculation of sha256 (RHEL-20391) - Fix CVE-2026-10846: DNS response spoofing via missing address/port/TXID and question section validation (RHEL-210701) - update to 1.0.0 - package shared ledmon library by Tony Asleson - update to 1.1.0 - Fix string2ibpi function (RHEL-95751) - Bump release (RHEL-95751) - Update to 1.79.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.80.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Make gnuplot build dependency optional, used only by tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - update to 1.0.12 (#1827949) - drop obsolete patch - fixes CVE-2020-11863, CVE-2020-11864, CVE-2020-11865, CVE-2020-11866 - update to 1.0.13 (#1846926) - fixes CVE-2020-13999 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - update to 1.0.12 (#1827949) - drop obsolete patch - fixes CVE-2020-11863, CVE-2020-11864, CVE-2020-11865, CVE-2020-11866 - update to 1.0.13 (#1846926) - fixes CVE-2020-13999 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003 Resolves: https://redhat.atlassian.net/browse/RHEL-191886 Resolves: https://redhat.atlassian.net/browse/RHEL-191933 Resolves: https://redhat.atlassian.net/browse/RHEL-191938 - CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003 Resolves: https://redhat.atlassian.net/browse/RHEL-191886 Resolves: https://redhat.atlassian.net/browse/RHEL-191933 Resolves: https://redhat.atlassian.net/browse/RHEL-191938 - CVE fix for: CVE-2026-44950 Resolves: https://redhat.atlassian.net/browse/RHEL-222029 - CVE fix for: CVE-2026-59679 Resolves: https://redhat.atlassian.net/browse/RHEL-221957 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Backport upstream MR #1 to fix RHBZ #1888993 (metacity crash) - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Apply patch: 0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch Resolves: https://issues.redhat.com/browse/RHEL-16614 - Apply patch: 0002-suppression-Add-has_strict_flexible_array_data_membe.patch Resolves: https://issues.redhat.com/browse/RHEL-16629 - Add git as a build requirement as we need git to apply the patches aboves that apply binaries. - Use %autosetup to handle applying the patches using git. - autoreconf after the patches touched at least one Makefile.am file. - Fix SPDX Licensing string - Update to upstream 2.5 tarball - Drop patches (as they are now upstream): 0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch 0002-suppression-Add-has_strict_flexible_array_data_membe.patch - Add BuildRequires: python3-devel - Remove BuildRequires: %{_bindir}/python3 - Update to upstream 2.6 tarball - Update to changing SONAME (libabigail.so.5.0.0) - Add BuildRequires xxhash-devel - Disable abidb as its dependencies are not present in RHEL 9.6 - Resolves https://issues.redhat.com/browse/RHEL-64069 - Update to upstream 2.7 tarball - Add binutils-devel as buildrequire to potentially enable the CTF backend. This will allow the enabling of the CTF backend for binutils-devel > 2.35.2 - Update to changing SONAME (libabigail.so.6.0.0) - Add --enable-ctf to the configure command line - Update to upstream 2.8 tarball - Update to changing SONAME (libabigail.so.7.0.0) - Rebuild for c9s - Resolves: RHEL-102573 - Update to upstream 2.9 tarball - Update to changing SONAME (libabigail.so.8.0.0) - Simplify the %check section - Resolves: RHEL-121666 - Initial RHEL packaging based on Fedora package with rpmautospec disabled, disabled documentation (no gi-docgen in RHEL 9) and downstream patch to be able to compile with glib2 2.68 (thanks to Milan Crha) - Resolves: RHEL-3234 - Add gating configuration (needs a new build) - Fix building in C99 mode - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Backport a patch from upstream to fix handling unknown tags in AppStream metadata - Resolves: #RHEL-34564 - add includedir to pkg-config --cflags (#1742986) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - New upstream release (#1891067) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New upstream release (#1941663) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixed error while loading shared libraries in tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixed error while loading shared libraries in tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Workaround __openat_missing_mode compiler error. (Keith Seitz, RH BZ 1890813) - Remove workaround for 1890813 now that binutils is fixed. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Bumped NVR to release subpackage Related: rhbz#2058409 - Use getaddrinfo instead of gethostbyname. (Keith Seitz) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: rhbz#1962772 - Add gating tests for ding-libs in RHEL 9 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9 - Resolves: rhbz#2048667 - Request to add libdhash-devel package into CRB - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1) - Remove %setup -q /usr/bin/git init -q /usr/bin/git config user.name "rpm-build" /usr/bin/git config user.email "<rpm-build>" /usr/bin/git config gc.auto 0 /usr/bin/git add --force . /usr/bin/git commit -q --allow-empty -a\ --author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base" - Update to 1.3.0, which simplifies the license expression due to crate dependency changes. - Update to 1.5.0 - Update to BPF 6.6 rebase (RHEL-10695) - Fix bug in bpf_xdp_query causing stack corruption (RHEL-26037) - Update to BPF 6.8 rebase (RHEL-30776) - Update to BPF 6.12 rebase (RHEL-30778) - Update to BPF 6.14 stable backport (RHEL-99685) - Update to BPF 6.17 stable backport (RHEL-118560) - Update to BPF 6.6 rebase (RHEL-10695) - Fix bug in bpf_xdp_query causing stack corruption (RHEL-26037) - Update to BPF 6.8 rebase (RHEL-30776) - Update to BPF 6.12 rebase (RHEL-30778) - Update to BPF 6.14 stable backport (RHEL-99685) - Update to BPF 6.17 stable backport (RHEL-118560) - Fix upgrades from non-alternativized versions/packages - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek) - src/gettext: fix warning if gettext is already present (giulio.benetti) - Update README.md (vpodzime) - fix build on shells where test == fails (tbier) - Add POT file to git and do not rebuild it during every build (vtrefny) - Fix memory leak in bs_size_new_from_str (vtrefny) - Translated using Weblate (Turkish) (oguzersen) - add translation platform widget (jean-baptiste) - Update translation files (noreply) - Do not regenerate POT file during 'make release' (vtrefny) - Remove Zanata from our build and release processes (vtrefny) - Add PO files to git (vtrefny) - Sync spec with downstream (vtrefny) - Rebuilt for Python 3.9 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add Travis build status badge (vtrefny) - Add Travis CI config and Dockerfiles for running tests (vtrefny) - Add ansible playbook for installing test dependencies (vtrefny) - remove msgcat dependency (Aduskett) - Translated using Weblate (Bengali (India)) (akarshan.biswas) - Update translation files (noreply) - Added translation using Weblate (Bengali (India)) (akarshan.biswas) - Fix library version in pkgconfig file (vtrefny) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Translated using Weblate (Hebrew) (sh.yaron) - Added translation using Weblate (Hebrew) (sh.yaron) - Add support to ppc64le for debian build (74309971+gururajrkatti) - Translated using Weblate (Finnish) (ricky.tigg) - tools: Read input from stdin when not running in a tty (vtrefny) - travis: Print logs after failed tests (vtrefny) - tests: Run pylint and pycodestyle on bscalc (vtrefny) - bscalc: Add option to print only single "human readable" result (vtrefny) - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny) - Translated using Weblate (Asturian) (fitoschido) - Update translation files (noreply) - Translated using Weblate (Spanish) (fitoschido) - Sync spec with downstream (vtrefny) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - updated to 2.1.0 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - updated to 10.2+2.0.1 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for ICU 65 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - new upstream release - Rebuild for ICU 67 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - new upstream release - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Disable LTO - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Correctly build with new cmake macros - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - resolves: rhbz#1915369 - Split out a cmocka-doc package - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Disable LTO - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Correctly build with new cmake macros - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - resolves: rhbz#1915369 - Split out a cmocka-doc package - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: rhbz#1962772 - Add gating tests for ding-libs in RHEL 9 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9 - Resolves: rhbz#2048667 - Request to add libdhash-devel package into CRB - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - spec: Fix building with new cmake macros - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 0.1.16 - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343) - Fix memory leaks and resource leaks - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix issues detected by static analyzers - Update to 0.1.18 - Don't print empty requires - Remove Python 2 support - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Ship libdazzle-devel in CRB Resolves: RHEL-126955 - Add db_converter into -utils subpackage - It allowes to convert BerkeleyDB database format to GDBM/LMDB format - Resolves: RHEL-35607 - Rebase db_converter tool to the latest version - Use a fixed path, /usr/lib64/libc.so.6 for 64-bit targets - Adress rpminspect issue - missing debuginfo for db_converter - Add db_converter into -utils subpackage - It allowes to convert BerkeleyDB database format to GDBM/LMDB format - Resolves: RHEL-35607 - Rebase db_converter tool to the latest version - Use a fixed path, /usr/lib64/libc.so.6 for 64-bit targets - Adress rpminspect issue - missing debuginfo for db_converter - Add db_converter into -utils subpackage - It allowes to convert BerkeleyDB database format to GDBM/LMDB format - Resolves: RHEL-35607 - Rebase db_converter tool to the latest version - Use a fixed path, /usr/lib64/libc.so.6 for 64-bit targets - Adress rpminspect issue - missing debuginfo for db_converter - Add db_converter into -utils subpackage - It allowes to convert BerkeleyDB database format to GDBM/LMDB format - Resolves: RHEL-35607 - Rebase db_converter tool to the latest version - Use a fixed path, /usr/lib64/libc.so.6 for 64-bit targets - Adress rpminspect issue - missing debuginfo for db_converter - Add db_converter into -utils subpackage - It allowes to convert BerkeleyDB database format to GDBM/LMDB format - Resolves: RHEL-35607 - Rebase db_converter tool to the latest version - Use a fixed path, /usr/lib64/libc.so.6 for 64-bit targets - Adress rpminspect issue - missing debuginfo for db_converter - Initial Fedora packaging - Version bump for resync - Version bump for rebuild - Update to 0.1.1 Resolves: rhbz#2140414 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: rhbz#1962772 - Add gating tests for ding-libs in RHEL 9 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9 - Resolves: rhbz#2048667 - Request to add libdhash-devel package into CRB - Rebuild for CRB Resolves: RHEL-120218 - Rebuild for CRB again, tpelka messed up Resolves: RHEL-120218 - Fix calculating a difference between two same-version RPM transacations (RHEL-17494) - Fix reinstalling packages which conflicts with themselves in dnf_transaction_commit() (RHEL-1454) - Do not set a default SELinux creation context if SELinux appears to be disabled (RHEL-43232) - Add persistence configuration option (RHEL-78024) - module: Warn if module config file is inaccessible (RHEL-62833) - history DB: Add "persistence" column (RHEL-100623) - conf: Add bootc_unsafe_paths (RHEL-100622) - Introduce $releasever_major, $releasever_minor variables, shell-style variable substitution (RHEL-95006) - Fix comparison of RPM items in the transaction (RHEL-81779) - Fix a crash when parsing multiple key files fails (RHEL-145618) - Mark all protected packages as user installed for all transactions (RHEL-76112) - Add `filterUnneededExtraUserinstalled` and Python version to the API - Describe all problems even when there are protected removals (RHEL-115194) - Clearer error for protected package broken dependencies - Added patch for almalinux bugtracker - Rebuilt for CRB inclusion Resolves: RHEL-135108 - update to 6.0.1 (#1761253) - use gpgverify macro - rebuild for libdvdread ABI bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 6.1.0 (#1815805) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - update to 6.0.2 (#1761254) - use new gpgverify macro - track ABI to avoid accidental bumps - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 6.1.1 (#1815806) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix static analyzer detected issues. Resolves: RHEL-24989 - Avoid double-free memory corruption. Resolves: RHEL-130877 - Fix static analyzer detected issues. Resolves: RHEL-24989 - Avoid double-free memory corruption. Resolves: RHEL-130877 - Add libeconf-devel to a public repo. Resolves: RHEL-126957 - Disable parallel build - Resolves: #1975438 - Add -j1 also into build section - Resolves: #1975438 - Rebase to upstream release 13.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebase to 0.1.11 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild libestr to include devel package in the CRB resolves: rhbz#2071651 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - add fix for contemporary glm - fix build with latest boost - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - new upstream release - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - add -devel subpackage into CRB - Resolves: RHEL-38617 - libevdev 1.9.1 - this time with sources - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - libevdev 1.10 rc1 - libevdev 1.10 rc2 - libevdev 1.10.0 - libevdev 1.10.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - libevdev 1.11.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 0.6.22 - .spec cleanup - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix integer underflow in MakerNote decoding (CVE-2026-40386) - Fix integer overflow in Nikon MakerNote handling (CVE-2026-40385) Resolves: RHEL-170253, RHEL-170234 - Ship libexttextcat-devel in CRB Resolves: RHEL-126949 - Update to upstream 1.22.0 - Resolves: RHEL-46648 - Update to upstream 2.1.0 - Resolves: RHEL-73064 - Update to upstream 2.3.1 - Resolves: RHEL-97660, RHEL-97651, RHEL-90252 - bump release to rebuild in sidetag - Resolves: RHEL-97660, RHEL-97651, RHEL-90252 - Rebuilt for RHEL-9.8 - Resolves: RHEL-97660, RHEL-97651, RHEL-90252 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Address CVE-2020-12762 Resolves: rhbz#2203172 - Rebuild Resolves: rhbz#2227786 - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1) - fix RHEL-21257 - logger sending process start time not current time with log messages - fix RHEL-16071 - issues in libblkid - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value - fix RHEL-14612 - Userspace mount options are not preserved for NFS - lscpu: update tests, follow max freq for scaling (RHEL-12783) - lscpu: another tests update (RHEL-12783) - fix RHEL-34165 - lsipc: fix semaphore USED counter - fix RHEL-25265 - libblkid: Check offset in LUKS2 header - fix RHEL-25559 - more: fix poll() use - fix RHEL-25559 - more: make sure we have data on stderr - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing - fix RHEL-56983 - sulogin: fix POSIX locale use - fix RHEL-113638 - lscpu: update ARM identifiers - fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification - fix RHEL-123527 - mount: improve --all documentation - fix RHEL-123531 - libblkid: use snprintf() instead of sprintf() - fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation - fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104] - fix RHEL-132706 - use sysusers.d for uuidd - Use __cc macro instead of hard-coding gcc - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Upstream patch to fix gcc-10 build - Update to 1.6.0 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Gating rebuild [bz#1974188] - Resolves: bz#1974188 (Define tests, including gating tests, for dtc) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Use __cc macro instead of hard-coding gcc - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Upstream patch to fix gcc-10 build - Update to 1.6.0 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Gating rebuild [bz#1974188] - Resolves: bz#1974188 (Define tests, including gating tests, for dtc) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Upgrade to 1.13 Resolves: rhbz#2122193 - rebuilt - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Re-work flex subpackages and provide shared libraries (#1327851): - Remove and obsolete the flex-devel subpackage containing static libraries - Provide shared libraries in a new subpackage named libfl2 - Provide development files in a new subpackage named libfl-devel - Provide static libraries in a new subpackage named libfl-static - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add make to BuildRequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.94.5 Resolves: rhbz#2148088 - Update to 1.94.6 Resolves: RHEL-19611 - Update to 1.94.5 Resolves: rhbz#2148088 - Update to 1.94.6 Resolves: RHEL-19611 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - New upstream release - New upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.20.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.20.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.20.4 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to the latest upstream 0.14.3 (RHEL-88597) - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Adjust glibc32 build dependency (RHEL-105072) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Debrand for AlmaLinux - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 2.5.24 release - Add libcurl for Lumix WIFI support - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix configure check for symbol versioning with GCC 10 (rhbz #1862745) - New upstream release 2.5.25 (#1839543) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New upstream release 2.5.26 (#1887201) - Add support for hwdb output (#1658259) - New upstream release 2.5.27 (#1931187) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - fix for CVE-2023-36664 - Resolves: rhbz#2217810 - fix for CVE-2023-38559 - Resolves: rhbz#2224372 - fix for CVE-2023-43115 - Resolves: RHEL-10185 - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass) - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - New upstream release 1.14.47 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Avoid use of deprecated networking functions (#2050712) - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Run the fstrim command twice resolves: RHEL-88508 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Run the fstrim command twice resolves: RHEL-88508 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Run the fstrim command twice resolves: RHEL-88508 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Run the fstrim command twice resolves: RHEL-88508 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Run the fstrim command twice resolves: RHEL-88508 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - New upstream version - Add new API requested by fwupd - Add the GUsbEndpoint methods to the docs - Fix hotplug handling and signal emission during enumerate - Do not double-reference USB devices - Resolves: rhbz#1965885 - Backport a patch to fix a rare multithreaded crash on device replug - Resolves: rhbz#2227760 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.3.2 upstream release - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Ship libhandy-devel in CRB Resolves: RHEL-126951 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Version 4.2 - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package) - Drop/obsolete eepromer subpackage, deprecated for 6 years - Drop python2 conditionals - Minor cleanups - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Version 4.3 - Resolves: rhbz#1989260 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt - Resolves: rhbz#2072719 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: rhbz#1962772 - Add gating tests for ding-libs in RHEL 9 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9 - Resolves: rhbz#2048667 - Request to add libdhash-devel package into CRB - Add quirks for four more dell touchpads (RHEL-69798) - Add support for the Wacom Intuos Pro (RHEL-105483) - Rename existing patches for better order clarity - Fix crash when the Wacom Intuos Pro 3rd gen sends absolute wheel events - Handle BTN_STYLUS3 (RHEL-147703) - Rebuild to get -devel in compose - Resolves: RHEL-45353 - Disable RDMA on arm 32-bit (rhbz #1778517) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.9.0 git snapshot - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix upgrades from non-alternativized versions/packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Upgrade to 1.5.4 (#1926007) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix URLs Resolves: #1967489 - Fix for CVE-2020-10759 - New upstream release - Export the JcatBlobKind and JcatBlobMethod on the result - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - New upstream release - Export the old JCatEngine property to preserve internal ABI - New upstream release - Allow verifying expired certificates with an additional argument - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New upstream release - Fall back to the AliasId for validation - Fix jcat_context_verify_blob() to use self verify for checksums - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase jose-14 upstream version Resolves: #RHEL-38079 - Rebase to 1.24 Resolves: rhbz#2024090 - Fix libnozzle tests failing & covscan warning on api_knet_handle_new test Resolves: rhbz#2024090 Rebase to 1.25 for PMTUd fixes Resolves: rhbz#2161168 Rebase to 1.28 for startup and performance fixes threads: add config check to match min value with pong timeouts rx: allow links to be active faster links: fix ping interval and pong timeout value checking crypto: Try crypt and decrypt on crypto_init tx: Remove expensive memsets log: Add a TRACE log level Resolves: #RHEL-11787 - Rebase to 1.24 Resolves: rhbz#2024090 - Fix libnozzle tests failing & covscan warning on api_knet_handle_new test Resolves: rhbz#2024090 Rebase to 1.25 for PMTUd fixes Resolves: rhbz#2161168 Rebase to 1.28 for startup and performance fixes threads: add config check to match min value with pong timeouts rx: allow links to be active faster links: fix ping interval and pong timeout value checking crypto: Try crypt and decrypt on crypto_init tx: Remove expensive memsets log: Add a TRACE log level Resolves: #RHEL-11787 - Fix for CVE-2022-3515 (#2135703) - Fix for CVE-2022-47629 (#2161571) - Fix SAST reports (RHEL-25067) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Suppress documentation in Flatpak builds - build gir with non-parallel to avoid strange behavior. - Update License field for liblangtag-data. It is actually Unicode but not UCD. - Add gcc buildrequires - Use make macros - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add CI test. Resolves: rhbz#2008783 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Suppress documentation in Flatpak builds - build gir with non-parallel to avoid strange behavior. - Update License field for liblangtag-data. It is actually Unicode but not UCD. - Add gcc buildrequires - Use make macros - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add CI test. Resolves: rhbz#2008783 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Suppress documentation in Flatpak builds - build gir with non-parallel to avoid strange behavior. - Update License field for liblangtag-data. It is actually Unicode but not UCD. - Add gcc buildrequires - Use make macros - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add CI test. Resolves: rhbz#2008783 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Bump build number - Update to version 4.23.4 - resolves: RHEL-114548 - Update to version 4.23.4 - resolves: RHEL-132995 - Fix Time Machine backup - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba - Remove libldb dependency to samba-common-libs - resolves: RHEL-133003 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 2112377 - move liblockfile to BaseOS - Add skipempty to liblognorm json type resolves: rhbz#1990737 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild resolves: rhbz#2227729 - New upstream release v10 Resolves: RHEL-122139 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: RHEL-30424 - Addressing findings from static application security testing - use upstream patch for libcrypto - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - fix missing HAVE_SSIZE_T macro using patch from https://github.com/awesomized/libmemcached/pull/117 - add LIBMEMCACHED_AWESOME macro from https://github.com/awesomized/libmemcached/pull/115 - Remove unstable test - Related: rhbz#1981785 - Add requires cyrus-sasl-devel to devel subpackage - Related: rhbz#1981785 - Disable unstable test for udp - Related: rhbz#1981785 - Remove aes implementation from the sources completely - Resolves: rhbz#1995795 - Add flag to linker flags - Related: rhbz#1995795 - Fix rpath - Related: rhbz#1995795 - use upstream patch for libcrypto - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - fix missing HAVE_SSIZE_T macro using patch from https://github.com/awesomized/libmemcached/pull/117 - add LIBMEMCACHED_AWESOME macro from https://github.com/awesomized/libmemcached/pull/115 - Remove unstable test - Related: rhbz#1981785 - Add requires cyrus-sasl-devel to devel subpackage - Related: rhbz#1981785 - Disable unstable test for udp - Related: rhbz#1981785 - Remove aes implementation from the sources completely - Resolves: rhbz#1995795 - Add flag to linker flags - Related: rhbz#1995795 - Fix rpath - Related: rhbz#1995795 - use upstream patch for libcrypto - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - fix missing HAVE_SSIZE_T macro using patch from https://github.com/awesomized/libmemcached/pull/117 - add LIBMEMCACHED_AWESOME macro from https://github.com/awesomized/libmemcached/pull/115 - Remove unstable test - Related: rhbz#1981785 - Add requires cyrus-sasl-devel to devel subpackage - Related: rhbz#1981785 - Disable unstable test for udp - Related: rhbz#1981785 - Remove aes implementation from the sources completely - Resolves: rhbz#1995795 - Add flag to linker flags - Related: rhbz#1995795 - Fix rpath - Related: rhbz#1995795 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add cve-2023-27371.patch Related: rhbz#2174640 CVE-2023-27371 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add cve-2023-27371.patch Related: rhbz#2174640 CVE-2023-27371 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating.yaml - Release bump - Fix gating.yaml - Release bump - libmnl: zero attribute padding - Release 2.11.1 - Ignore Packager documents when running ModuleIndex.update_from_*() - Add python overrides for XMD in PackagerV3 - Add python override to ignore the GType return when reading packager files - Add PackagerV3.get_mdversion() - Release 2.11.2 - Extend read_packager_[file|string]() to support overriding the module name and stream. - Fix issue with ModuleIndex when input contains only Obsoletes documents - Fix import issue when built with Python 2 support - Add support for 'buildorder' to Packager documents - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 2.12.1 bump (bug #1956346) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 2.13.0 bump (bug #1984403) - Enable accept_overflowed_buildorder in tier0 tests (bug #1984403) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for ICU 65 - Fix missing #include for gcc-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuild for ICU 67 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Disable player match that breaks Bluetooth on Mediatek MT7925 adapters (RHEL-140110) - Rebase to 1.16.0 resolves: rhbz#2168628 - Rebase to 1.18.1 resolves: RHEL-14476 - Fix assertion in ext-mode BLOCK_STATUS (CVE-2023-5871) resolves: RHEL-15143 - Backport unit test of recent libnbd API addition resolves: RHEL-16292 - Rebase to 1.20.0 resolves: RHEL-31883 - Rebase to libnbd 1.20.2 resolves: RHEL-31883 - Fix multiple flaws in TLS server certificate checking resolves: RHEL-49801 - Print full NBD error from server resolves: RHEL-50665 - Rebase to libnbd 1.20.3 - Add nbdcopy --blkhash option resolves: RHEL-85509 - Apply upstream patch to fix 3 findings from static application security testing Resolves: RHEL-27656 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Bump build number - Update to version 4.23.4 - resolves: RHEL-114548 - Update to version 4.23.4 - resolves: RHEL-132995 - Fix Time Machine backup - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba - Remove libldb dependency to samba-common-libs - resolves: RHEL-133003 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Update to 1.0.8 - Cleanup spec - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - conntrack: don't cancel nest on unknown layer 4 protocols - expect/conntrack: Avoid spurious covscan overrun warning - conntrack: fix build with kernel 5.15 and musl - New version 1.0.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - extra: use inet_ntop instead of inet_ntoa - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase onto upstream version 1.0.5 - libnfnetlink: Check getsockname() return code - include: Silence gcc warning in linux_list.h - Bump release for CI - Add nfs.conf to nfsv4-client-utils package (RHEL-72013) - mountstats/nfsiostat: bugfixes for iostat (RHEL-72243) - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143) - nfsd: allow more than 64 backlogged connections (RHEL-87752) - mountstats: verify that old and new types are the same (RHEL-88553) - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408) - gssd: do not use krb5_cc_initialize (RHEL-85412) - ensure services are stopped when nfs-utils is uninstalled (RHEL-88422) - Fix dependency definition in rpc-statd.service (RHEL-116079) - nfsrahead: modify get_device_info logic (RHEL-134397) - gssd: protect kerberos ticket cache access (RHEL-138462) - Replace statfs64 with statfs (RHEL-127105) - NFS export symlink vulnerability fix (RHEL-127105) - mountd: Minor refactor of get_rootfh() (RHEL-127105) - mountd: Separate lookup of the exported directory and the mount path (RHEL-127105) - support: Add a mini-library to extract and apply RPC credentials (RHEL-127105) - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127105) - Add requires for selinux-policy (RHEL-127105) Resolves: CVE-2025-12801 - Fix debug printing for tcp option reset expression - new version 1.2.1 - New version 1.2.2 - set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149] - Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149] - spec: Avoid variable name clash, add missing dist tag (Phil Sutter) [RHEL-14149] - tests: Fix objref test case (Phil Sutter) [RHEL-28515] - expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515] - obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515] - utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515] - obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515] - obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515] - obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515] - obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515] - obj: Return value on setters (Phil Sutter) [RHEL-28515] - object: getters take const struct (Phil Sutter) [RHEL-28515] - utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515] - obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515] - obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515] - table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515] - set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515] - obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515] - flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515] - table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515] - chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515] - expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515] - expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515] - include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515] - expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515] - expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515] - udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515] - obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515] - set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515] - set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515] - expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515] - Bump release for side-tag build with fixed libmnl (Phil Sutter) [RHEL-28515] - fix CONTINUATION frames DoS (CVE-2024-28182, CVE-2024-27316) - fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135) - fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135) - fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.8.32 release - Update to 1.8.36 release (rh #2066742) - Include OWE wireless security (rh #2066737) - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512) - Rebuilt (outage) - Update to 1.8.38 release - Update to 1.8.40 release - Demote WEP (rh #2030997) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Upstreal released new version 1.3.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to upstream 2.0.0 release - Resolves: rhbz#2039220 - Rebase to version 1.9 - Backport URI parser API - Backport fix for RHEL-49544 - Update to latest upstream version RHEL-61573 - Update libnvme to version 1.11 (RHEL-67145) - TLS Fixes (RHEL-53980) - Update to version 1.13 (RHEL-88847) - Rebase to version 1.16.1 (RHEL-114102) - Respin for RHEL-114102 - Fix linked list corruption RHEL-146273 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - new upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - update to 1.3.4 - include soname in file list - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - update to 1.3.4 - include soname in file list - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 1.1.28 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: rhbz#1962772 - Add gating tests for ding-libs in RHEL 9 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9 - Resolves: rhbz#2048667 - Request to add libdhash-devel package into CRB - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - libpcap should print an error on wrong IPv4 address - Enabling rdma support in libpcap - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Using make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New version 1.10.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: #1938778 - review of important potential issues detected by static analyzers in libpcap - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix findings from static application security testing (SAST) Resolves: https://issues.redhat.com/browse/RHEL-29753 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + libpeas-1.26.0-5 - Remove unused Python macro that caused errors on install (#1863667) - Update to 1.28.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.30.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 + libpeas-1.30.0-3 - Correct license for some of the icons - Resolves: rhbz#1971434 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.4.91 - improve full pinyin auto correction - bug fixes - Update to 2.4.92 - update pinyin data - bug fixes - Update to 2.6.0 - bug fixes - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix PAC buffer overflow (#1883584) - Disable mozjs backend by default, obsolete it by webkit subpackage - Depend on KDE only on Fedora (#1902608) - Tweak KDE conditionals to only apply at runtime - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add Copyright.txt. Resolves: rhbz#1986586 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop pacrunner subpackage. Resolves: rhbz#1990974 - Drop networkmanager subpackage. Resolves: rhbz#1996028 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Multiple translation updates - Add usersubstr check for substrings of N characters from the username patch by Danny Sauer - Translation updates - Fix regression with enabling the cracklib check during build - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - cracklib-dicts is a hard requirement, not a recomendation. - Resolves rhbz#1947882 - added i18n updates for de, fr, ja, ko, zh_CN - Resolves: rhbz#1963858 - Resolves: rhbz#1938621 - rebuilt - Explicitly rebuild the localization - Resolves: rhbz#1938621 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Compile libqhullcpp with -fPIC - Resolves: RHEL-5625 - Release bump to enable added gating.yaml - Resolves: RHEL-5625 - Compile libqhullcpp with -fPIC - Resolves: RHEL-5625 - Release bump to enable added gating.yaml - Resolves: RHEL-5625 - Compile libqhullcpp with -fPIC - Resolves: RHEL-5625 - Release bump to enable added gating.yaml - Resolves: RHEL-5625 - Rebuild for ICU 65 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuild for ICU 67 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2215766, insecure credentials submission - add missing gating.yaml - fix rpminspect issue Related: #2215766 - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb) - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb) - rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13 - disable multiple build options - disable multiple packages - remove unnecessary files - libblk.so -> libblk.a - remove python3-rgw from ceph-common deps - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebase to 16.2.4 - Add libcephsqlite packages - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Apply fmt-header-only patches - Update licence field - Drop unnecessary dependencies - Drop fmt-devel from build requires - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb) - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb) - rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13 - disable multiple build options - disable multiple packages - remove unnecessary files - libblk.so -> libblk.a - remove python3-rgw from ceph-common deps - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebase to 16.2.4 - Add libcephsqlite packages - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Apply fmt-header-only patches - Update licence field - Drop unnecessary dependencies - Drop fmt-devel from build requires - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb) - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb) - rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13 - disable multiple build options - disable multiple packages - remove unnecessary files - libblk.so -> libblk.a - remove python3-rgw from ceph-common deps - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebase to 16.2.4 - Add libcephsqlite packages - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Apply fmt-header-only patches - Update licence field - Drop unnecessary dependencies - Drop fmt-devel from build requires - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to upstream 1.5.0 resolves: rhbz#1818082 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to upstream 1.6.0 resolves: rhbz#1883910 - Enable all missing features - Fix linking to external lz4 library - Minor spec cleanups - Update to upstream 1.6.1 resolves: rhbz#1932286 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix for rpmlint reporting crypto-policy-non-compliance-openssl resolves: rhbz#2032923 - Add missing tests Related: rhbz#2032923 - Changes for tests to compile and run appropriately Related: rhbz#2032923 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: rhbz#1962772 - Add gating tests for ding-libs in RHEL 9 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9 - Resolves: rhbz#2048667 - Request to add libdhash-devel package into CRB - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections resolves: rhbz#1990735 - Add patch to comply with crypto policies - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName - Enable openssl resolves: rhbz#1972067 - Rebuild resolves: rhbz#2227723 - Propagate return value from prepare_repo_download_targets (RHEL-85607) - Rebase to 1.19.0 (RHEL-62033) - Resolves: rhbz#1786466 Do not use %{?_isa} for GDB dependency. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Correct a License tag to LGPLv2+ (RHEL-16103) - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224) - Fix memory leaks in parse_entitlement_data() (RHEL-25499) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix annocheck failure (#2044876) - add gating.yaml file - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix annocheck failure (#2044876) - add gating.yaml file - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - SELinux userspace 3.5-rc3 release - SELinux userspace 3.5 release - SELinux userspace 3.6-rc1 release - SELinux userspace 3.6 release - restorecon: Include <selinux/label.h> (RHEL-50821, RHEL-54385) - Close old selabel handle when setting a new one (RHEL-76472) - Include more parameters in the module checksum (#2173959) - SELinux userspace 3.6-rc1 release - SELinux userspace 3.6 release - Preserve file context and ownership in policy store (RHEL-31216, RHEL-54389) - open lock_file with O_RDWR (RHEL-60503) - Set new restorecon handle before doing restorecon (RHEL-76472) - improve performance of semanage store rebuild (RHEL-79100) - SELinux userspace 3.6-rc1 release - SELinux userspace 3.6 release - sepol_compute_sid: Do not destroy uninitialized context (RHEL-28964) - Fix static analyzer issues (RHEL-28966) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 2.4.3 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Release bump due to dropped autotools patch Resolves: rhbz#1956444 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 2.10.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.10.4 - Switch to meson build system - Update upstream URL - Tighten soname globs - Update to 2.10.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, and aarch64 flags Related: rhbz#1991688 - Update to 2.10.7 - Fix NEWS file to not be executable - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 2.10.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.10.4 - Switch to meson build system - Update upstream URL - Tighten soname globs - Update to 2.10.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, and aarch64 flags Related: rhbz#1991688 - Update to 2.10.7 - Fix NEWS file to not be executable - Fix configure tests compromised by LTO - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.13 - spec file cleanup - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Backport upstream commit b09dbd9557 ("ip: Enforce strict aliasing") Fixes JIRA RHEL-27868 - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1) - fix RHEL-21257 - logger sending process start time not current time with log messages - fix RHEL-16071 - issues in libblkid - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value - fix RHEL-14612 - Userspace mount options are not preserved for NFS - lscpu: update tests, follow max freq for scaling (RHEL-12783) - lscpu: another tests update (RHEL-12783) - fix RHEL-34165 - lsipc: fix semaphore USED counter - fix RHEL-25265 - libblkid: Check offset in LUKS2 header - fix RHEL-25559 - more: fix poll() use - fix RHEL-25559 - more: make sure we have data on stderr - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing - fix RHEL-56983 - sulogin: fix POSIX locale use - fix RHEL-113638 - lscpu: update ARM identifiers - fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification - fix RHEL-123527 - mount: improve --all documentation - fix RHEL-123531 - libblkid: use snprintf() instead of sprintf() - fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation - fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104] - fix RHEL-132706 - use sysusers.d for uuidd - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Bump build number - Update to version 4.23.4 - resolves: RHEL-114548 - Update to version 4.23.4 - resolves: RHEL-132995 - Fix Time Machine backup - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba - Remove libldb dependency to samba-common-libs - resolves: RHEL-133003 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - fix crash in ogg vorbis (#RHEL-65096) (CVE-2024-50612) - apply patch for CVE-2026-37555 Resolves: RHEL-174543 - Some static analysis fixes for unitialized structs Resolves: RHEL-25498 - Fix a memory leak in parse_package() of repo conda (RHEL-25496) - Backport "Implement color filtering when adding update targets" Resolves: RHEL-103995 - Backport "Implement color filtering when adding update targets" Resolves: RHEL-103995 - Backport "choice rules: also do solver_choicerulecheck for package downgrades" Resolves: RHEL-141449 - Backport "Implement color filtering when adding update targets" Resolves: RHEL-103995 - Backport "choice rules: also do solver_choicerulecheck for package downgrades" Resolves: RHEL-141449 - Fix a buffer overflow when decompressing solv pages (CVE-2026-48864) (RHEL-178982) - Some static analysis fixes for unitialized structs Resolves: RHEL-25498 - Fix a memory leak in parse_package() of repo conda (RHEL-25496) - Backport "Implement color filtering when adding update targets" Resolves: RHEL-103995 - Backport "Implement color filtering when adding update targets" Resolves: RHEL-103995 - Backport "choice rules: also do solver_choicerulecheck for package downgrades" Resolves: RHEL-141449 - Backport "Implement color filtering when adding update targets" Resolves: RHEL-103995 - Backport "choice rules: also do solver_choicerulecheck for package downgrades" Resolves: RHEL-141449 - Fix a buffer overflow when decompressing solv pages (CVE-2026-48864) (RHEL-178982) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.2.9 - Resolves: #1832567 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Set alignment for rendering to default - Resolves: #2029329 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - fix NSS incompatibility, thanks to George Joseph Resolves: rhbz#2211526 - Change the xattr entry hash to use an unsighed char by default - Related: RHEL-10467 - rebuild to incorporate libss-devel package - Related: RHEL-19059 - Bump release to perform build verification for gating changes - Related: RHEL-71250 - Fix: e2fsprogs: online resize fails - Related: RHEL-76095 - ext2fs: make sure we have at least EXT2_FIRST_INO + 1 inodes - Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7 - Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9] - Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID - Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9] - Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649 - Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9] - Resolves: RHEL-103434 - cache_credentials = true not working - Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9] Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted. - Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release - Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8 - Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites - Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name - Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none' - Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so - Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges - Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache - Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group - Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified - Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c' - Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation - Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root - Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9] - Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7 - Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9] - Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID - Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9] - Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649 - Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9] - Resolves: RHEL-103434 - cache_credentials = true not working - Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9] Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted. - Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release - Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8 - Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites - Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name - Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none' - Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so - Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges - Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache - Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group - Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified - Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c' - Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7 - Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9] - Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID - Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9] - Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649 - Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9] - Resolves: RHEL-103434 - cache_credentials = true not working - Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9] Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted. - Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release - Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8 - Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites - Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name - Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none' - Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so - Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges - Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache - Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group - Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified - Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c' - Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation - Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root - Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9] - Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7 - Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9] - Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID - Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9] - Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649 - Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9] - Resolves: RHEL-103434 - cache_credentials = true not working - Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9] Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted. - Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release - Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8 - Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites - Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name - Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none' - Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so - Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges - Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache - Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group - Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified - Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c' - Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7 - Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9] - Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID - Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9] - Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649 - Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9] - Resolves: RHEL-103434 - cache_credentials = true not working - Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9] Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted. - Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release - Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8 - Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites - Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name - Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none' - Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so - Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges - Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache - Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group - Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified - Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c' - Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation - Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root - Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9] - Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7 - Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9] - Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID - Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9] - Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649 - Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9] - Resolves: RHEL-103434 - cache_credentials = true not working - Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9] Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted. - Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release - Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8 - Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites - Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name - Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none' - Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so - Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges - Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache - Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group - Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified - Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c' - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Adjust glibc32 build dependency (RHEL-105072) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Debrand for AlmaLinux - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Upgrade to 1.9.5 - Use systemd-sysusers - Upgrade to 1.9.7 - FIPS correction ref: https://issues.redhat.com/browse/RHEL-376 - Upgrade to 1.10.0 - Upgrade to 1.10.1 - Fix erroneous my_strncat implementation Resolves: RHEL-83777 - resolves: rhbz#2190418 - Rebuilt to retrigger brew build - resolves: RHEL-16479 - Rebase to version 2.4.1 - resolves: RHEL-33758 - Rebase to version 2.4.2 - Rebase to version 2.4.3 - resolves: RHEL-89882 - resolves: RHEL-16480 - Rebase to version 1.4.9 - resolves: RHEL-33756 - Rebase to version 1.4.10 - Update to version 1.4.12 - resolves: RHEL-59791 - Update to version 1.4.13 - resolves: RHEL-89880 - Update to version 1.4.14 - resolves: RHEL-114549 - resolves: RHEL-16481 - Rebase to version 0.16.0 - resolves: RHEL-33755 - Rebase to version 0.16.1 - Update to version 0.16.2 - resolves: RHEL-89881 - Update to version 0.17.1 - resolves: RHEL-114550 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use new macros, update config.\* locations - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52931) - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337) - backport documentation change for CVE-2023-52355 (RHEL-17328) - fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112543) - fix CVE-2025-8176: use after free in tiffmedian (RHEL-120238) - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159331) - rebuild - fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189387) - fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52931) - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337) - backport documentation change for CVE-2023-52355 (RHEL-17328) - fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112543) - fix CVE-2025-8176: use after free in tiffmedian (RHEL-120238) - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159331) - rebuild - Remove regions from the map Resolves: rhbz#2097831 - Add libtimezonemap-devel to CRB Resolves: RHEL-13916 - Rebased to libtirpc-1.3.3 (bz 2118157) - bindresvport.c: fix a potential resource leakage (bz 2135405) - clnt_raw.c: fix a possible null pointer dereference (bz 2138317) - getnetconfigent: avoid potential DoS (bz 2150611) - Null pointers so they are not used again (RHEL-11371) - Add gating tests (rhel-7883) - Fix rpc_gss_seccreate() usage of the passed in gss credential. (RHEL-27936) - rpcb_clnt.c: Eliminate double frees in delete_cache() (RHEL-11183) - exception build (RHEL-11183) - rpcb_clnt.c (fixed): Eliminate double frees in delete_cache() (RHEL-11183) - Support abstract addresses for rpcbind (RHEL-47027) - Harden libltdl loaders (RHEL-39991) - Rebase to version 3.3.1 (RHEL-76155) - Rebuild without side-tags (RHEL-76155) - Fix trace messages (RHEL-86597) - Rebase to 1.8.4 (RHEL-67585) - Rebuild without side-tags (RHEL-67585) - Rebase to 1.6.4 (RHEL-36547) - Rebase to 1.8.1 (Related: RHEL-76155) - Rebuild without side-tags (RHEL-81923) - tests: Fix targetcli_config.json (RHEL-16229) - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block() - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109413) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 20200313 version (#1813493) - Update to 20200413 version (#1823434) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix memory leak in vasnprint. Resolves: rhbz#1938800 (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1) - Related rhbz#1938800: Fix spelling in license GPLV2+ -> GPLv2+ - Related rhbz#1938800: Fix CI tests and convert them to tmt - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 2.5. - Resolves: RHEL-16030 - Rebase to version 2.12. Follow fedora and get rid of explicit % attr for library files - Resolves: RHEL-114115 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - New upstream release 0.1.7 (rhbz#1805154) - Add tests-examples sub-package and %check - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Translation update Resolves: rhbz#2139662 - Fix findings from static application security testing Resolves: RHEL-35693 - Update translations Resolves: RHEL-12110 - allow 32 char usernames (#RHEL-55983) - create temporary edit files at symlink target location (RHEL-85754) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.2.0 (#1831940) - Update to 1.2.1 (#1854129) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Backport fix for CVE-2024-24806 Resolves: RHEL-24791 - Rebuilt for CRB inclusion Resolves: RHEL-135108 - Update to 0.48.12 - Fix multilib conflicts in vala-gen-introspect - Update to 0.48.13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.48.14 - Update to 0.48.15 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 0.48.17 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.48.19 - Update to 0.48.12 - Fix multilib conflicts in vala-gen-introspect - Update to 0.48.13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.48.14 - Update to 0.48.15 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 0.48.17 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.48.19 - Rebuilt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.5 - rhbz#2075057 - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - new upstream release - Rebuild for ICU 65 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuild for ICU 67 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix multilib conflicts in lvconfig.h - Use make_build/make_install macros - Drop unneeded ldconfig_scriptlets macro call - Remove a no longer needed -mmmx CFLAGS addition - Disable strict aliasing - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 4.3 - Add GPG signature check for the source - Fix pycached stuff - Remove old python_provide macro - Remove ldconfig_scriptlets macro - Only use VFST for now, HFST can be provided in a later update - Bump release for a new Copr build - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - The dictionary data directory will now be /usr/lib/voikko on all architectures - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there - This was suggested in the review of the voikko-fi package, see rhbz#1919688 - Use the license macro - Add Requires: voikko-fi - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: rhbz#1977691 bump release number to add libvoikko-devel package to CRB - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.3.7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.3.7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add patch to fix integer overflows. - Disable LTO to fix build - Resolves: RHEL-40655 - Add patch for double free Resolves: RHEL-93910 - Add patch for superindex full Resolves: RHEL-150344 - Add a set of newer Wacom tablets description files - Add support for the Cintiq Pro 27 (RHEL-101886) - Add support for the Intuos Pro 3rd Gen series (RHEL-101881) - Rearrange the OSD buttons for the Intuos Pro 3rd Gen (RHEL-101881) - Use separate Ring/Ring2 assignments - Add stylus definitions for the propen group (RHEL-122207) - Add tablet definitions for the latest Cintiqs (RHEL-122206) - Fix the overlap for button assignments in the SVG (RHEL-126355) - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Bump build number - Update to version 4.23.4 - resolves: RHEL-114548 - Update to version 4.23.4 - resolves: RHEL-132995 - Fix Time Machine backup - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba - Remove libldb dependency to samba-common-libs - resolves: RHEL-133003 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Add fix for mzbz#1819244 - Fix tools subpackage dependency - Bump the release to "6" to accommodate the 9.1.0.z release bumps - Bump the release to "7" to accommodate the 9.1.0.z release bumps as libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1 - Added fix for CVE-2023-4863 - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658, CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662) - Try next DNS entry on connect failure Resolves: RHEL-113722 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Fix use of nsc_process_message Resolves: RHEL-155994 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Try next DNS entry on connect failure Resolves: RHEL-113722 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Fix use of nsc_process_message Resolves: RHEL-155994 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix incorrect bounds checks in planar codec (CVE-2026-45700) Resolves: RHEL-186991 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Fix use of nsc_process_message Resolves: RHEL-155994 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix incorrect bounds checks in planar codec (CVE-2026-45700) Resolves: RHEL-186991 - Backport several CVE fixes (CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-213169, RHEL-222785, RHEL-222966, RHEL-223605 - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658, CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662) - Try next DNS entry on connect failure Resolves: RHEL-113722 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Fix use of nsc_process_message Resolves: RHEL-155994 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - document that libwmf bundles a modified old copy of gd 2.0.1 https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - add gating.yaml file - ship libwmf-devel in CRB - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - update to 3.36.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.0 - Tighten soname globs - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74 - fixes rhbz #1971048 - and https://github.com/mate-desktop/mate-panel/issues/1230 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix missing #includes for gcc-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix missing #includes for gcc-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.7.1 and switch to meson build system - Update to 1.8.0 - Update to 1.9.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.9.90 - Update to 1.9.91 - Update to 1.10.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt to add -devel subpackage to CRB Resolves: #2059251 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - new upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - new upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - new upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - new upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update OpenSSL certificates set up Resolves: RHEL-118292 - Update to openwsman-2.8.1 Resolves: RHEL-97643 - Add libwsman-client.so.4 for backward compatibility Related: RHEL-97643 - Support added for post-quantum cryptography Resolves: RHEL-127516 - Fix bogus 'sscg' arguments Related: RHEL-118292 - Explicitly force linking with '-Wl,-z,defs' - Trim %changelog starting with v4.4.0 - Remove memcheck conditional - Disable LTO - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add a patch to add support for LTO builds - Enable LTO - Add a patch to fix Wformat-overflow - New upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New upstream release - Add explicit BR: perl-core - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Initial import (#1980342) - Update to 0.1.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Update to 0.1.2 - Add explicit package version requirement for the devel package for rpminspect. - Upstream version bump - Upstream version bump - Upstream version bump - Upstream version bump - Fix build with Clang 20 - Upstream version bump - Add annocheck exceptions for BPF objects (Felix) - Re-enable debug builds (Felix) - Add libcap-ng-devel to BuildDepends - Upstream version bump - Drop upstreamed patch - Upstream version bump - Upstream version bump - Upstream version bump - Upstream version bump - Upstream version bump - Fix build with Clang 20 - Upstream version bump - Add annocheck exceptions for BPF objects (Felix) - Re-enable debug builds (Felix) - Add libcap-ng-devel to BuildDepends - Upstream version bump - Drop upstreamed patch - Upstream version bump - libxkbcommon 0.10.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - libxkbcommon 1.0.0 - libxkbcommon 1.0.1 - libxkbcommon 1.0.2 - libxkbcommon 1.0.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 0.3.24 - Add missing libzstd-devel BuildRequires - Add missing files to the %files tests section - Resolves: RHEL-116442 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - New upstream release (rhbz#1823108) - New upstream release (rhbz#1825622) - Fixes document end before directive (rhbz#1824226) - New upstream release (rhbz#1842769) - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: RHEL-111202 - Move libyang-devel to CRB - Resolves: RHEL-126845 - Rebase libyang to version 2.1.148 - Resolves: RHEL-111202 - Move libyang-devel to CRB - Resolves: RHEL-126845 - Rebase libyang to version 2.1.148 - Fix integer overflow and OOM in LYB parser string/value reading - Resolves: RHEL-177019 - Resolves: RHEL-111202 - Move libyang-devel to CRB - Resolves: RHEL-126845 - Rebase libyang to version 2.1.148 - Resolves: RHEL-111202 - Move libyang-devel to CRB - Resolves: RHEL-126845 - Rebase libyang to version 2.1.148 - Fix integer overflow and OOM in LYB parser string/value reading - Resolves: RHEL-177019 - Rebuilt for adding libzip-tools subpackage to pungi Appstream repo - Rebuild for ICU 65 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuild for ICU 67 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Upgrade to version 0.9.25 - Use OpenLDAP git directly in place of GitHub mirror - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Upgrade to version 0.9.26 - Upgrade to version 0.9.27 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Upgrade to version 0.9.28 - Specfile refactoring - Upgrade to version 0.9.29 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Upgrade to version 0.9.25 - Use OpenLDAP git directly in place of GitHub mirror - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Upgrade to version 0.9.26 - Upgrade to version 0.9.27 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Upgrade to version 0.9.28 - Specfile refactoring - Upgrade to version 0.9.29 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix memory leaks found by static analysis - Resolves: RHEL-80167 - Add patch to fix build failure with GCC 10 - Enable SystemTAP SDT support (#1386412) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - New upstream release - Add requires systemtap-sdt-devel to lttng-ust-devel (#1386412) - New upstream release - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - apply upstream fix for CVE-2022-33099 - Enable gating - Fix up CVE-2022-33099 patch - Rebase to lua 5.4.4 - Resolves CVE-2021-44964 - Resolves CVE-2021-43519 - Apply upstream patch for CVE-2022-28805 - Disable bootstrap mode forgotten on 5.4 rebase (#2135419) - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Run the fstrim command twice resolves: RHEL-88508 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le - Fix duplicate LV names when converting pools to RAID1 with more than 2 legs. - Workaround for NVMe WWID changing after kernel update. - Fix temporary LVs not cleaned when converting in use LV to a thin pool. - Check FS resize is supported before extending LV. - Fix issue affecting memory locking before suspend (2.03.27). - Fix race causing lvm2 not recognizing active devices. - Update to upstream version 2.03.32. - See WHATS_NEW and WHATS_NEW_DM for more information. - Fix vgremove hanging immediately after lockstart. - Add repair option for RAID volumes with too many transiently failed devices. - Update to upstream version 2.03.33. - See WHATS_NEW and WHATS_NEW_DM for more information. - Add message when activating RAID volumes with snapshots. - Allow integrity to use multiple segments for metadata. - Handle wrong XFS reported size when shrinking LV immediately after growing. - Workaround for NVMe WWID changing after kernel update. - Fix temporary LVs not cleaned when converting in use LV to a thin pool. - Check FS resize is supported before extending LV. - Fix issue affecting memory locking before suspend (2.03.27). - Fix race causing lvm2 not recognizing active devices. - Update to upstream version 2.03.32. - See WHATS_NEW and WHATS_NEW_DM for more information. - Fix vgremove hanging immediately after lockstart. - Add repair option for RAID volumes with too many transiently failed devices. - Update to upstream version 2.03.33. - See WHATS_NEW and WHATS_NEW_DM for more information. - Add message when activating RAID volumes with snapshots. - Allow integrity to use multiple segments for metadata. - Handle wrong XFS reported size when shrinking LV immediately after growing. - Fix false positive warnings about stray FDs on s390x. - Rebase to 3.1.10 - Rebase to 3.1.11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebase to 3.1.12 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix package conflicts - Rebase to 3.1.13 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 3.2.6 - Introduction of a new '*-doc' subpackage - Rebase to 3.1.10 - Rebase to 3.1.11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebase to 3.1.12 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix package conflicts - Rebase to 3.1.13 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 3.2.6 - Introduction of a new '*-doc' subpackage - Rebase to 10.5.26 - Rebase to 10.5.27 - Rebase to 10.5.29 - Release bump for rebuild - Release bump for rebuild - Rebase to 10.5.26 - Rebase to 10.5.27 - Rebase to 10.5.29 - Release bump for rebuild - Release bump for rebuild - Rebase to 10.5.26 - Rebase to 10.5.27 - Rebase to 10.5.29 - Release bump for rebuild - Release bump for rebuild - Rebase to 0.3.4 and enable testing with Python 3.11 Resolves: RHEL-309 - Update to 0.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to upstream version 3.5.1 - Update to version 3.5.1. - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to upstream version 0.12.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to upstream version 0.13.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to version 3.1.0. - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to version 3.1.1. - Update to upstream version 3.1.1 - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Mass rebuild for javapackages-tools 201902 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Add patch for NPE during testCompile - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Mass rebuild for javapackages-tools 201902 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to version 3.0.0-M3. - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to upstream version 3.0.0~M3 - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to version 3.0.0-M3. - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to upstream version 3.0.0~M3 - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to version 3.0.0-M3. - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to upstream version 3.0.0~M3 - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Mass rebuild for javapackages-tools 201902 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to version 3.2.0. - Update to upstream version 3.2.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Non-bootstrap build - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Mass rebuild for javapackages-tools 201902 - Update to upstream version 3.2.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add generated Requires on multiple versions of java-headless - Related: rhbz#2164437 - Make OpenJDK 17 the default JRE/JDK - Related: RHEL-62403 - Include java-21-headless in generated auto-requires - Related: RHEL-62409 - Drop generated Requires on various Java versions - Related: RHEL-62409 - Use Java 11 build tool bindings for package builds - Rebuild - Rebuild - Update to upstream version 6.4.0 - Add generated Requires on multiple versions of java-headless - Related: rhbz#2164437 - Make OpenJDK 17 the default JRE/JDK - Related: RHEL-62403 - Include java-21-headless in generated auto-requires - Related: RHEL-62409 - Drop generated Requires on various Java versions - Related: RHEL-62409 - Use Java 11 build tool bindings for package builds - Rebuild - Rebuild - Update to upstream version 6.4.0 - Add generated Requires on multiple versions of java-headless - Related: rhbz#2164437 - Make OpenJDK 17 the default JRE/JDK - Related: RHEL-62403 - Include java-21-headless in generated auto-requires - Related: RHEL-62409 - Drop generated Requires on various Java versions - Related: RHEL-62409 - Use Java 11 build tool bindings for package builds - Rebuild - Rebuild - Update to upstream version 6.4.0 - Add generated Requires on multiple versions of java-headless - Related: rhbz#2164437 - Make OpenJDK 17 the default JRE/JDK - Related: RHEL-62403 - Include java-21-headless in generated auto-requires - Related: RHEL-62409 - Drop generated Requires on various Java versions - Related: RHEL-62409 - Use Java 11 build tool bindings for package builds - Rebuild - Rebuild - Update to upstream version 6.4.0 - Disable beanshell modules - Ignore jTidy crashes when generating maven plugin descriptors. - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Disable unused ant scripting support. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to upstream version 3.2.0 - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Update to version 3.2.0. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bump release - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to version 4.2.1. - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to upstream version 5.1.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Disable beanshell modules - Ignore jTidy crashes when generating maven plugin descriptors. - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Disable unused ant scripting support. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Mass rebuild for javapackages-tools 201902 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Disable beanshell modules - Ignore jTidy crashes when generating maven plugin descriptors. - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Disable unused ant scripting support. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Disable beanshell modules - Ignore jTidy crashes when generating maven plugin descriptors. - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Disable unused ant scripting support. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Disable beanshell modules - Ignore jTidy crashes when generating maven plugin descriptors. - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Disable unused ant scripting support. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Disable beanshell modules - Ignore jTidy crashes when generating maven plugin descriptors. - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Disable unused ant scripting support. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to version 1.7.0. - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Enable tests - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to version 3.2.0. - Update to upstream version 3.2.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Mass rebuild for javapackages-tools 201902 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Remove unneeded dependency on plexus-component-api - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Mass rebuild for javapackages-tools 201902 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to upstream version 3.2.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to version 3.2.1. - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add boolean dependencies between plugin and provider subpackages - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to version 3.0.0-M4. - Update to upstream version 3.0.0~M4 - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add boolean dependencies between plugin and provider subpackages - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to version 3.0.0-M4. - Update to upstream version 3.0.0~M4 - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add boolean dependencies between plugin and provider subpackages - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to version 3.0.0-M4. - Update to upstream version 3.0.0~M4 - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add boolean dependencies between plugin and provider subpackages - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to version 3.0.0-M4. - Update to upstream version 3.0.0~M4 - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add boolean dependencies between plugin and provider subpackages - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to version 3.0.0-M4. - Update to upstream version 3.0.0~M4 - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add maven-openjdk21 - Resolves: RHEL-62407 - Suggest maven-openjdk17 - Resolves: RHEL-62398 - Rebuild with regenerated Requires on Java - Fix patch usage - Switch to Fedora tests - Disable building on i686 - Add noarch to ExclusiveArch - Implement new non-conflicting Java bindings - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072 - Add maven-openjdk25 binding - Mass rebuild for javapackages-tools 201902 - Update to upstream version 1.7.2 - Unretire package in Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Bump version for package rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo - Resolves: #2182069 - Update memkind source file to 1.10.0 upstream - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Avoid uninitialized variable in testsuite - Update memkind source file to 1.10.1 upstream - Work around false positive warning with gcc-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update memkind source file to 1.11.0 upstream - Fix annocheck pie test failure (2044880) - Avoid bogus volatile in gnome modules support code caught by gcc-11 - Update to latest version (#1889242) - Update to 0.56.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.58.2 Resolves: rhbz#1997067 - Update to 0.63.3 - Backport fix for CVE-2023-1972 - Backport fix for Backport fix for https://sourceware.org/bugzilla/show_bug.cgi?id=30079 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 2.41 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.42 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 2.43.1 - Fix invalid SPDX expression in license tag - Set mingw_env before in run_mingw_make - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Add dependency on cmake-rpm-macros - Add pkgconfig provides - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Set __debug_package 1 in %mingw_debug_package (#2284193) - Rust fixes - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Fix meson deprecation warnings - Backport fix for CVE-2023-1972 - Backport fix for Backport fix for https://sourceware.org/bugzilla/show_bug.cgi?id=30079 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 2.41 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.42 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 2.43.1 - Fix invalid SPDX expression in license tag - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 14.0.1 - Update to 14.1.1 - Build GCC with plugin support - Update to 20240607 snapshot - Update to 20240701 snapshot - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 14.2.1 - Rebuild for fixed default msvcrt in mingw-crt - Rebuild on fixed mingw-crt - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 11.0.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 11.0.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 12.0.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Add libbcryptprimitives.dll Related: https://bugzilla.redhat.com/show_bug.cgi?id=2299374 - Pass --with-default-msvcrt=msvcrt when building mingw32/64 crt - Set mingw_env before in run_mingw_make - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Add dependency on cmake-rpm-macros - Add pkgconfig provides - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Set __debug_package 1 in %mingw_debug_package (#2284193) - Rust fixes - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Fix meson deprecation warnings - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 14.0.1 - Update to 14.1.1 - Build GCC with plugin support - Update to 20240607 snapshot - Update to 20240701 snapshot - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 14.2.1 - Rebuild for fixed default msvcrt in mingw-crt - Rebuild on fixed mingw-crt - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 14.0.1 - Update to 14.1.1 - Build GCC with plugin support - Update to 20240607 snapshot - Update to 20240701 snapshot - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 14.2.1 - Rebuild for fixed default msvcrt in mingw-crt - Rebuild on fixed mingw-crt - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 11.0.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 11.0.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 12.0.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Pass --with-default-msvcrt=msvcrt when building mingw32/64-headers - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 14.0.1 - Update to 14.1.1 - Build GCC with plugin support - Update to 20240607 snapshot - Update to 20240701 snapshot - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 14.2.1 - Rebuild for fixed default msvcrt in mingw-crt - Rebuild on fixed mingw-crt - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 11.0.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 11.0.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 12.0.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuild for fixed mingw-crt - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 11.0.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 11.0.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 12.0.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuild for fixed mingw-crt - Backport fix for CVE-2023-1972 - Backport fix for Backport fix for https://sourceware.org/bugzilla/show_bug.cgi?id=30079 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 2.41 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 2.42 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 2.43.1 - Fix invalid SPDX expression in license tag - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 14.0.1 - Update to 14.1.1 - Build GCC with plugin support - Update to 20240607 snapshot - Update to 20240701 snapshot - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 14.2.1 - Rebuild for fixed default msvcrt in mingw-crt - Rebuild on fixed mingw-crt - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 11.0.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 11.0.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 12.0.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Add libbcryptprimitives.dll Related: https://bugzilla.redhat.com/show_bug.cgi?id=2299374 - Pass --with-default-msvcrt=msvcrt when building mingw32/64 crt - Set mingw_env before in run_mingw_make - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Add dependency on cmake-rpm-macros - Add pkgconfig provides - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Set __debug_package 1 in %mingw_debug_package (#2284193) - Rust fixes - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Fix meson deprecation warnings - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 14.0.1 - Update to 14.1.1 - Build GCC with plugin support - Update to 20240607 snapshot - Update to 20240701 snapshot - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 14.2.1 - Rebuild for fixed default msvcrt in mingw-crt - Rebuild on fixed mingw-crt - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 14.0.1 - Update to 14.1.1 - Build GCC with plugin support - Update to 20240607 snapshot - Update to 20240701 snapshot - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 14.2.1 - Rebuild for fixed default msvcrt in mingw-crt - Rebuild on fixed mingw-crt - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 11.0.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 11.0.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 12.0.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Pass --with-default-msvcrt=msvcrt when building mingw32/64-headers - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 14.0.1 - Update to 14.1.1 - Build GCC with plugin support - Update to 20240607 snapshot - Update to 20240701 snapshot - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to 14.2.1 - Rebuild for fixed default msvcrt in mingw-crt - Rebuild on fixed mingw-crt - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 11.0.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 11.0.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 12.0.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuild for fixed mingw-crt - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 11.0.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 11.0.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 12.0.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuild for fixed mingw-crt - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to upstream release 20201225 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to upstream release 20210805 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to version 2.28.2 - Update to version 3.5.5 - Update to ustream version 3.5.13 - Update to version 3.5.13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to upstream version 3.7.13 - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixing gating issue - rebuild Resolves: rhbz#2184763 - Fixing mellon_create_metadata.sh script Resolves: RHEL-35898 - Publishing diagnostic module in CRB repository Resolves: RHEL-33585 - Import into RHEL - Fedora contributions by: Charalampos Stratakis <cstratak@redhat.com> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Jan Vcelak <jvcelak@fedoraproject.org> Jaroslav Škarvada <jskarvad@redhat.com> Jeff Law <law@redhat.com> Lukas Zachar <lzachar@redhat.com> Miro Hrončok <miro@hroncok.cz> Tom Stellard <tstellar@redhat.com> - Fix license information - Split libmpdec++ into a mpdecimal++ subpackage - This prevents packages only using the libmpdec library from transitively depending on libstdc++ - Import into RHEL - Fedora contributions by: Charalampos Stratakis <cstratak@redhat.com> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Jan Vcelak <jvcelak@fedoraproject.org> Jaroslav Škarvada <jskarvad@redhat.com> Jeff Law <law@redhat.com> Lukas Zachar <lzachar@redhat.com> Miro Hrončok <miro@hroncok.cz> Tom Stellard <tstellar@redhat.com> - Fix license information - Split libmpdec++ into a mpdecimal++ subpackage - This prevents packages only using the libmpdec library from transitively depending on libstdc++ - Import into RHEL - Fedora contributions by: Charalampos Stratakis <cstratak@redhat.com> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Jan Vcelak <jvcelak@fedoraproject.org> Jaroslav Škarvada <jskarvad@redhat.com> Jeff Law <law@redhat.com> Lukas Zachar <lzachar@redhat.com> Miro Hrončok <miro@hroncok.cz> Tom Stellard <tstellar@redhat.com> - Fix license information - Split libmpdec++ into a mpdecimal++ subpackage - This prevents packages only using the libmpdec library from transitively depending on libstdc++ - Add patch for CVE-2024-10573 Resolves: RHEL-65445 - Rebase to 1.32.9, includes patch for CVE-2024-10573 Resolves: RHEL-65445 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add make to BuildRequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2026-25506 - Resolved: RHEL-148533 - Backport fix for flicker-free login Resolves: RHEL-10895 - Fix stuck modifier keys Resolves: RHEL-21286 - Do not disable touchscreen on DPMS off if touch-mode is disabled Resolves: RHEL-31742 - Fix polyinstantiation preventing Xwayland to start Resolves: RHEL-90588 - Backport fixes for cogl OpenGL conformance Resolves: RHEL-4521 - Backport fix for screen not refreshing properly Resolves: RHEL-89352 - Fix input latency regression Resolves: RHEL-117098 - Fix handling of more WM_HINTS window icon types Resolves: RHEL-70872 - Backport linux-dmabuf v4 support to restore hardware acceleration in Xwayland 24.1 with Mesa 25.2 Resolves: RHEL-129832 - Sanity check input on workspace activation API Related: RHEL-68825 - Fix stuck modifier keys Resolves: RHEL-21286 - Do not disable touchscreen on DPMS off if touch-mode is disabled Resolves: RHEL-31742 - Fix polyinstantiation preventing Xwayland to start Resolves: RHEL-90588 - Backport fixes for cogl OpenGL conformance Resolves: RHEL-4521 - Backport fix for screen not refreshing properly Resolves: RHEL-89352 - Fix input latency regression Resolves: RHEL-117098 - Fix handling of more WM_HINTS window icon types Resolves: RHEL-70872 - Backport linux-dmabuf v4 support to restore hardware acceleration in Xwayland 24.1 with Mesa 25.2 Resolves: RHEL-129832 - Sanity check input on workspace activation API Related: RHEL-68825 - Don't unminimize mapped windows Resolves: RHEL-180797 - Update to MySQL 8.0.37 - Remove some legacy cmake options - Use signal to flush logs when rotating - Rebase to version 8.0.39 - Update to MySQL 8.0.40 - Update to MySQL 8.0.41 - Fix patching of logrotate - Rebase to MySQL 8.0.42 - Rebase to MySQL 8.0.43 - Rebase to MySQL 8.0.44 - Rebase to 8.0.45 - Rebase to version 8.0.39 - Update to MySQL 8.0.40 - Update to MySQL 8.0.41 - Fix patching of logrotate - Rebase to MySQL 8.0.42 - Rebase to MySQL 8.0.43 - Rebase to MySQL 8.0.44 - Rebase to 8.0.45 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.0.46 - Update to MySQL 8.0.37 - Remove some legacy cmake options - Use signal to flush logs when rotating - Rebase to version 8.0.39 - Update to MySQL 8.0.40 - Update to MySQL 8.0.41 - Fix patching of logrotate - Rebase to MySQL 8.0.42 - Rebase to MySQL 8.0.43 - Rebase to MySQL 8.0.44 - Rebase to 8.0.45 - Rebase to version 8.0.39 - Update to MySQL 8.0.40 - Update to MySQL 8.0.41 - Fix patching of logrotate - Rebase to MySQL 8.0.42 - Rebase to MySQL 8.0.43 - Rebase to MySQL 8.0.44 - Rebase to 8.0.45 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.0.46 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 2.15.03 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Patch to workaround renamed SourceSans font family - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Default to building without documentation for RHEL. (#1933222) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update Persian translation from upstream (#2003134) - Update translations for encrypted archives support (#2064754) - Add toolbar action to copy current location (#2098578) - Backport "_Copy Location" translations (#2099982) - Export FileManager1 iface from dbus_register vfunc (#2162302) - Try to own the name until after exporting skeleton (#2162302) - Try current location even if it is marked as gone (#2184292) - Generate thumbnails when the preview icon is available (#2120263) - Force reload current location when it reappears (#2184292) - Fix crashes when dragging from another application (RHEL-12820) - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - Rebase to 1.38.5 (along stable branch) - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Improve statistics related: RHEL-94823 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - server: Fix .zero fallback path resolves: RHEL-101635 - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - Rebase to 1.38.5 (along stable branch) - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Improve statistics related: RHEL-94823 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - server: Fix .zero fallback path resolves: RHEL-101635 - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - Rebase to 1.38.5 (along stable branch) - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Improve statistics related: RHEL-94823 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - server: Fix .zero fallback path resolves: RHEL-101635 - Rebase to v78 - Add support for legacy monitor.conf file location - Fix a test failure. - Resolves: RHEL-10382 - Resolves: RHEL-8204 - Resolves: RHEL-29151 - Add explicit package version requirements. (Jeff Moyer) - Related: RHEL-29151 - Rebase to v82 - Resolve: RHEL-97669 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - fix tests with current OpenSSL (#1863681) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - add bcond for PKCS#11 support - use make macros - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - temporarily disable tests (#1964827) - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - drop libproxy support for RHEL (#1989594) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - remove broken patch (RHEL-23298) - remove broken patch (RHEL-23298) - Add support for table's persist flag (Phil Sutter) [RHEL-32122] - cache: Always set NFT_CACHE_TERSE for list cmd with --terse (Phil Sutter) [RHEL-45633] - parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181] - json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181] - tests: py: missing json output in never merge across non-expression statements (Phil Sutter) [RHEL-114095] - tests: py: add missing json.output data (Phil Sutter) [RHEL-114095] - tests: py: remove huge-limit test cases (Phil Sutter) [RHEL-114095] - datatype: rt_symbol_table_init() to search for iproute2 configs (Phil Sutter) [RHEL-114095] - tests: shell: connect chains to hook point (Phil Sutter) [RHEL-114095] - tests: shell: Fix sets/reset_command_0 for current kernels (Phil Sutter) [RHEL-114095] - Revert doc/ part of "exthdr: add boolean DCCP option matching" (Phil Sutter) [RHEL-126817] - Revert doc/ part of "meta: introduce meta broute support" (Phil Sutter) [RHEL-126817] - Revert doc/ part of "src: add tcp option reset support" (Phil Sutter) [RHEL-126817] - spec: Update expected test suite results (Phil Sutter) [RHEL-126817] - Add support for table's persist flag (Phil Sutter) [RHEL-32122] - cache: Always set NFT_CACHE_TERSE for list cmd with --terse (Phil Sutter) [RHEL-45633] - parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181] - json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181] - tests: py: missing json output in never merge across non-expression statements (Phil Sutter) [RHEL-114095] - tests: py: add missing json.output data (Phil Sutter) [RHEL-114095] - tests: py: remove huge-limit test cases (Phil Sutter) [RHEL-114095] - datatype: rt_symbol_table_init() to search for iproute2 configs (Phil Sutter) [RHEL-114095] - tests: shell: connect chains to hook point (Phil Sutter) [RHEL-114095] - tests: shell: Fix sets/reset_command_0 for current kernels (Phil Sutter) [RHEL-114095] - Revert doc/ part of "exthdr: add boolean DCCP option matching" (Phil Sutter) [RHEL-126817] - Revert doc/ part of "meta: introduce meta broute support" (Phil Sutter) [RHEL-126817] - Revert doc/ part of "src: add tcp option reset support" (Phil Sutter) [RHEL-126817] - spec: Update expected test suite results (Phil Sutter) [RHEL-126817] - src: fix reset element support for interval set type (Phil Sutter) [RHEL-153461] - src: netlink: fix crash when ops doesn't support udata (Phil Sutter) [RHEL-153461] - fix CONTINUATION frames DoS (CVE-2024-28182, CVE-2024-27316) - fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135) - fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135) - fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055) - Resolves: RHEL-78236 - nginx: TLS Session Resumption Vulnerability (CVE-2025-23419) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Debrand for AlmaLinux - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Debrand for AlmaLinux - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Debrand for AlmaLinux - Update to 1.10.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.10.1 - Add ninja_syntax.py - Update to 1.10.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Do not BR re2c on RHEL. It is NTH, and one less package dep to maintain. - Resolves: rhbz#1956954 - Do not BR gtest-devel. It appears completely unused. - Resolves: rhbz#1975974 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Upgrade to 1.2.2. Resolves: RHBZ#1996623 - Upgrade to 1.2.3. Resolves: RHBZ#1996623 - Upgarde to 1.2.4. RHBZ#2064299 - Upgrade to 1.2.7. - Upgrade to 1.2.9. RHBZ#2153165 - Upgrade to 1.2.10. RHBZ#2153165 - New release 1.2.12 (Gris Ge) - Use latest rust-netlink crates (Gris Ge) - New release 1.2.14 (Gris Ge) - bond: support changing bond mode (Gris Ge) - Reorganize the code structure (Gris Ge) - CI: Enable VRF and ethool pause test (Gris Ge) - CI: Upgrade the version of github action tasks (Gris Ge) - test: Fix ethtool link mode test on Ubuntu (Gris Ge) - Github CI: Install extra module of running kernel (Gris Ge) - macsec: add base_iface property (Fernando Fernandez Mancera) - macsec: add MACsec interface support (Fernando Fernandez Mancera) - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera) - Upgrade to 2.2.25 - Fix stuck of nmstatectl show on OVS. RHEL-93176 - Upgrade to 2.2.46 - Store DNS to both iface and global DNS. RHEL-91291 - Support nmpolicy against down iface. RHEL-88989 - Support removal VLAN connection with empty ifname. RHEL-93146 - Upgrade to 2.2.48 - Validate OVN bridge mapping. RHEL-85787 - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784 - Support matching by PCI adress. RHEL-88993 - Apply dispatch changes first. RHEL-101742 - Fix SRIOV VF reference. RHEL-93180 - Upgrade to 2.2.49 - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526 - Fix setting DNS only with search or option. RHEL-104797 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. RHEL-110369 - Introduce state: ignore for route. RHEL-107130 - Support PCI address matching in gen_conf. RHEL-110369 - Support MacSec interface in gen_conf. RHEL-110369 - Upgrade to 2.2.52 - Support interface altnative name. RHEL-110781 - Upgrade to 2.2.54. - Automatically set HSR port MAC address. RHEL-122171 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992 - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-123541 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731 - Support rightca ipsec option. RHEL-123542 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-130912) - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-141606 - alt-name: Remove alt-names when interface marked as absent. RHEL-141602 - hsr: Automatically disable IP on hsr port. RHEL-141609 - hsr: add support for configuring "interlink" property. RHEL-141608 - Support referring interface name using its alternative name. RHEL-141601 - Upgrade to 2.2.48 - Validate OVN bridge mapping. RHEL-85787 - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784 - Support matching by PCI adress. RHEL-88993 - Apply dispatch changes first. RHEL-101742 - Fix SRIOV VF reference. RHEL-93180 - Upgrade to 2.2.49 - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526 - Fix setting DNS only with search or option. RHEL-104797 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. RHEL-110369 - Introduce state: ignore for route. RHEL-107130 - Support PCI address matching in gen_conf. RHEL-110369 - Support MacSec interface in gen_conf. RHEL-110369 - Upgrade to 2.2.52 - Support interface altnative name. RHEL-110781 - Upgrade to 2.2.54. - Automatically set HSR port MAC address. RHEL-122171 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992 - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-123541 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731 - Support rightca ipsec option. RHEL-123542 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-130912) - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-141606 - alt-name: Remove alt-names when interface marked as absent. RHEL-141602 - hsr: Automatically disable IP on hsr port. RHEL-141609 - hsr: add support for configuring "interlink" property. RHEL-141608 - Support referring interface name using its alternative name. RHEL-141601 - Upgrade to 2.2.59 - Add support for lock-mtu option. RHEL-151933. - Upgrade to 2.2.60 - ipv4: Add new parameter prefix-route-metric RHEL-170695 - Upgrade to 2.2.25 - Fix stuck of nmstatectl show on OVS. RHEL-93176 - Upgrade to 2.2.46 - Store DNS to both iface and global DNS. RHEL-91291 - Support nmpolicy against down iface. RHEL-88989 - Support removal VLAN connection with empty ifname. RHEL-93146 - Upgrade to 2.2.48 - Validate OVN bridge mapping. RHEL-85787 - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784 - Support matching by PCI adress. RHEL-88993 - Apply dispatch changes first. RHEL-101742 - Fix SRIOV VF reference. RHEL-93180 - Upgrade to 2.2.49 - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526 - Fix setting DNS only with search or option. RHEL-104797 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. RHEL-110369 - Introduce state: ignore for route. RHEL-107130 - Support PCI address matching in gen_conf. RHEL-110369 - Support MacSec interface in gen_conf. RHEL-110369 - Upgrade to 2.2.52 - Support interface altnative name. RHEL-110781 - Upgrade to 2.2.54. - Automatically set HSR port MAC address. RHEL-122171 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992 - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-123541 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731 - Support rightca ipsec option. RHEL-123542 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-130912) - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-141606 - alt-name: Remove alt-names when interface marked as absent. RHEL-141602 - hsr: Automatically disable IP on hsr port. RHEL-141609 - hsr: add support for configuring "interlink" property. RHEL-141608 - Support referring interface name using its alternative name. RHEL-141601 - Upgrade to 2.2.48 - Validate OVN bridge mapping. RHEL-85787 - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784 - Support matching by PCI adress. RHEL-88993 - Apply dispatch changes first. RHEL-101742 - Fix SRIOV VF reference. RHEL-93180 - Upgrade to 2.2.49 - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526 - Fix setting DNS only with search or option. RHEL-104797 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. RHEL-110369 - Introduce state: ignore for route. RHEL-107130 - Support PCI address matching in gen_conf. RHEL-110369 - Support MacSec interface in gen_conf. RHEL-110369 - Upgrade to 2.2.52 - Support interface altnative name. RHEL-110781 - Upgrade to 2.2.54. - Automatically set HSR port MAC address. RHEL-122171 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992 - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-123541 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731 - Support rightca ipsec option. RHEL-123542 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-130912) - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-141606 - alt-name: Remove alt-names when interface marked as absent. RHEL-141602 - hsr: Automatically disable IP on hsr port. RHEL-141609 - hsr: add support for configuring "interlink" property. RHEL-141608 - Support referring interface name using its alternative name. RHEL-141601 - Upgrade to 2.2.59 - Add support for lock-mtu option. RHEL-151933. - Upgrade to 2.2.60 - ipv4: Add new parameter prefix-route-metric RHEL-170695 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update locales for Croatia to use EUR as currency symbol (RHEL-140105) - Optimize trylock for high cache contention workloads. (RHEL-141072) - Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018) - Fix race condition in io/tst-stat symlink test (RHEL-142209) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279) - Update locales for Croatia to use EUR as currency symbol (RHEL-140105) - Optimize trylock for high cache contention workloads. (RHEL-141072) - Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018) - Fix race condition in io/tst-stat symlink test (RHEL-142209) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - bumped to 3.1 - disabled javadoc generation. It requires maven pomming beyond my skills - Fix build with Java 11. - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Bump and rebuild to fix DWARF versioning issues. - Enable LTO again. - OCaml 4.11.0 release (RHBZ#1870368). - OCaml 4.11.1 release (RHBZ#1870368#c26). - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Upstream patch for non-constant SIGSTKSZ in glibc 2.34 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - OCaml 4.12.0 build - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - OCaml 4.13.1 build - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - OCaml 4.13.1 rebuild to remove package notes - OCaml 4.14.0 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuild OCaml packages for F38 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - OCaml 4.12.0 build - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - OCaml 4.13.1 build - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - OCaml 4.13.1 rebuild to remove package notes - OCaml 4.14.0 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuild OCaml packages for F38 - Dropped explicit brlapi dependency (brltty) and relaxed brltty dependency (brlapi) Related: rhbz#1765611 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Fixed brlapi.key to pass the RPM verification - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New version Resolves: rhbz#1910328 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fixed brlapi multilib Resolves: rhbz#1915335 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - OCaml 4.11.0 pre-release attempt 2 - OCaml 4.11.0+dev2-2020-04-22 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975298 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - OCaml 4.11.0 pre-release attempt 2 - OCaml 4.11.0+dev2-2020-04-22 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975298 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - OCaml 4.11.0+dev2-2020-04-22 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix a licensing issue in EO Unicode files - Bump and rebuild resolves: rhbz#1975300 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - OCaml 4.11.0+dev2-2020-04-22 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix a licensing issue in EO Unicode files - Bump and rebuild resolves: rhbz#1975300 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - OCaml 4.11.0+dev2-2020-04-22 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix a licensing issue in EO Unicode files - Bump and rebuild resolves: rhbz#1975300 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Bump and rebuild to fix DWARF versioning issues. - Enable LTO again. - OCaml 4.11.0 release (RHBZ#1870368). - OCaml 4.11.1 release (RHBZ#1870368#c26). - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Upstream patch for non-constant SIGSTKSZ in glibc 2.34 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - OCaml 4.11.0+dev2-2020-04-22 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975301 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Initial RPM - Version 1.3.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975302 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Initial RPM - Version 1.3.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975302 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Rebuild for updated ocaml-extlib (RHBZ#1837823). - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975303 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Rebuild for updated ocaml-extlib (RHBZ#1837823). - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975303 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - OCaml 4.11.0 pre-release attempt 2 - OCaml 4.11.0+dev2-2020-04-22 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975304 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - OCaml 4.11.0 pre-release attempt 2 - OCaml 4.11.0+dev2-2020-04-22 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975304 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Bump and rebuild to fix DWARF versioning issues. - Enable LTO again. - OCaml 4.11.0 release (RHBZ#1870368). - OCaml 4.11.1 release (RHBZ#1870368#c26). - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Upstream patch for non-constant SIGSTKSZ in glibc 2.34 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bump and rebuild for updated ocaml Dynlink dependency. - Version 2.8.3 - Version 2.8.4 - Version 2.8.5 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975305 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bump and rebuild for updated ocaml Dynlink dependency. - Version 2.8.3 - Version 2.8.4 - Version 2.8.5 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975305 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bump and rebuild for updated ocaml Dynlink dependency. - Version 2.8.3 - Version 2.8.4 - Version 2.8.5 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975305 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bump and rebuild for updated ocaml Dynlink dependency. - Version 2.8.3 - Version 2.8.4 - Version 2.8.5 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975305 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Build only minimal version (RHBZ#1837823). - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - New upstream version 1.7.8. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975306 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Build only minimal version (RHBZ#1837823). - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - New upstream version 1.7.8. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975306 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Bump and rebuild for s390x. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975307 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Bump and rebuild for s390x. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975307 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Bump and rebuild to fix Dynlink dependency. - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bump and rebuild for updated ocaml Dynlink dependency. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975308 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Bump and rebuild to fix Dynlink dependency. - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bump and rebuild for updated ocaml Dynlink dependency. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975308 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bump and rebuild for updated ocaml-camomile. - Remove ocaml-camomile dep on RHEL 9. - OCaml 4.12.0 build - New upstream version 4.2 - Remove patch now upstream. - BR ocaml-cppo - Better handling of optional camomile subpackage. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975309 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bump and rebuild for updated ocaml-camomile. - Remove ocaml-camomile dep on RHEL 9. - OCaml 4.12.0 build - New upstream version 4.2 - Remove patch now upstream. - BR ocaml-cppo - Better handling of optional camomile subpackage. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975309 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Rebase to Fedora Rawhide resolves: RHEL-56803 - Rebase to Fedora Rawhide resolves: RHEL-56803 - OCaml 4.11.0 pre-release attempt 2 - OCaml 4.11.0+dev2-2020-04-22 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975310 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - OCaml 4.11.0 pre-release attempt 2 - OCaml 4.11.0+dev2-2020-04-22 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975310 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Run the fstrim command twice resolves: RHEL-88508 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Run the fstrim command twice resolves: RHEL-88508 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le - Rebase to 1.16.0 resolves: rhbz#2168628 - Rebase to 1.18.1 resolves: RHEL-14476 - Fix assertion in ext-mode BLOCK_STATUS (CVE-2023-5871) resolves: RHEL-15143 - Backport unit test of recent libnbd API addition resolves: RHEL-16292 - Rebase to 1.20.0 resolves: RHEL-31883 - Rebase to libnbd 1.20.2 resolves: RHEL-31883 - Fix multiple flaws in TLS server certificate checking resolves: RHEL-49801 - Print full NBD error from server resolves: RHEL-50665 - Rebase to libnbd 1.20.3 - Add nbdcopy --blkhash option resolves: RHEL-85509 - Rebase to 1.16.0 resolves: rhbz#2168628 - Rebase to 1.18.1 resolves: RHEL-14476 - Fix assertion in ext-mode BLOCK_STATUS (CVE-2023-5871) resolves: RHEL-15143 - Backport unit test of recent libnbd API addition resolves: RHEL-16292 - Rebase to 1.20.0 resolves: RHEL-31883 - Rebase to libnbd 1.20.2 resolves: RHEL-31883 - Fix multiple flaws in TLS server certificate checking resolves: RHEL-49801 - Print full NBD error from server resolves: RHEL-50665 - Rebase to libnbd 1.20.3 - Add nbdcopy --blkhash option resolves: RHEL-85509 - OCaml 4.11.0 pre-release attempt 2 - OCaml 4.11.0+dev2-2020-04-22 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975311 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - OCaml 4.11.0 pre-release attempt 2 - OCaml 4.11.0+dev2-2020-04-22 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975311 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Fix license field (RHBZ#1911667). - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975312 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Fix license field (RHBZ#1911667). - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975312 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Fix license field (RHBZ#1911667). - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975312 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Bump and rebuild to fix DWARF versioning issues. - Enable LTO again. - OCaml 4.11.0 release (RHBZ#1870368). - OCaml 4.11.1 release (RHBZ#1870368#c26). - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Upstream patch for non-constant SIGSTKSZ in glibc 2.34 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Bump and rebuild to fix DWARF versioning issues. - Enable LTO again. - OCaml 4.11.0 release (RHBZ#1870368). - OCaml 4.11.1 release (RHBZ#1870368#c26). - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Upstream patch for non-constant SIGSTKSZ in glibc 2.34 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Bump and rebuild to fix DWARF versioning issues. - Enable LTO again. - OCaml 4.11.0 release (RHBZ#1870368). - OCaml 4.11.1 release (RHBZ#1870368#c26). - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Upstream patch for non-constant SIGSTKSZ in glibc 2.34 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - OCaml 4.11.0+dev2-2020-04-22 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - Bump release and rebuild. - OCaml 4.11.1 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975313 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - OCaml 4.11.0+dev2-2020-04-22 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - Bump release and rebuild. - OCaml 4.11.1 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump and rebuild resolves: rhbz#1975313 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for EPEL resolves: rhbz#2060850 - Drop Recommends for OCL implementations - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix build with gcc10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 2.2.13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 6.9.6 rc2 - Apply upstream patch to keep binary compatibility with 6.9.5 - 6.9.6 rc3 - Apply upstream patch for upstream bug 221 - Revert change for false CVE-2020-26159 issue https://github.com/kkos/oniguruma/issues/221 - 6.9.6 rc4 - 6.9.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Enable LTO Resolves: #1990100 - Fix memory leaks, initialize memory Resolves: RHEL-31794 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix FTBFS (rhbz#1865148) - Set __cmake_in_source_build - BR qt5-qtbase-devel to keep the GUI frontend - Only build portaudio-backend on Fedora - Only build fluidsynth support on Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Only build SDL_sound support on Fedora and rhel < 9 - Resolves: rhbz#1989141 - Don't package some examples when SDL_sound is disabled - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.3.26 - Resolves: RHEL-20160 - Re-include openblas.pc - Resolves: RHEL-20160 - Update to 0.3.29 - Resolves: RHEL-77185 - Update to 0.3.26 - Resolves: RHEL-20160 - Re-include openblas.pc - Resolves: RHEL-20160 - Update to 0.3.29 - Resolves: RHEL-77185 - Update to 0.3.26 - Resolves: RHEL-20160 - Re-include openblas.pc - Resolves: RHEL-20160 - Update to 0.3.29 - Resolves: RHEL-77185 - Update to 0.3.26 - Resolves: RHEL-20160 - Re-include openblas.pc - Resolves: RHEL-20160 - Update to 0.3.29 - Resolves: RHEL-77185 - Update to 0.3.26 - Resolves: RHEL-20160 - Re-include openblas.pc - Resolves: RHEL-20160 - Update to 0.3.29 - Resolves: RHEL-77185 - Update to 0.3.26 - Resolves: RHEL-20160 - Re-include openblas.pc - Resolves: RHEL-20160 - Update to 0.3.29 - Resolves: RHEL-77185 - Update to 0.3.26 - Resolves: RHEL-20160 - Re-include openblas.pc - Resolves: RHEL-20160 - Update to 0.3.29 - Resolves: RHEL-77185 - Update to 0.3.26 - Resolves: RHEL-20160 - Re-include openblas.pc - Resolves: RHEL-20160 - Update to 0.3.29 - Resolves: RHEL-77185 - Fix resource leak Related: RHEL-50064 - Disable ccatok on aarch64 Related: RHEL-50064 - Resolves: RHEL-77147, opencryptoki doesn't work in image mode - Related: RHEL-77147, opencryptoki doesn't work in image mode - Resolves: RHEL-73344, upgrade openCryptoki - Resolves: RHEL-90590, basic support of AES-GCM - Resolves: RHEL-72965, cca token support cipher keys - Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens - Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server - Resolves: RHEL-75762, ep11 token: import and export of secure key objects - Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys - Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3 - Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x - Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock - Fix incorrect effective group id of pkcsslotd daemon - Fix covscan findings Resolves: RHEL-104602 - Fix pkcsslotd fails to start in FIPS - Drop tier1 test as it mostly provides duplicate results - Enable ci test for FIPS mode Resolves: RHEL-109050 - Resolves: RHEL-75139, ep11 token BLS support - Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support - Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support - Resolves: RHEL-100059, openCryptoki 3.26.0 - Resolves: RHEL-144821, CVE-2026-23893 - Resolves: RHEL-77147, opencryptoki doesn't work in image mode - Related: RHEL-77147, opencryptoki doesn't work in image mode - Resolves: RHEL-73344, upgrade openCryptoki - Resolves: RHEL-90590, basic support of AES-GCM - Resolves: RHEL-72965, cca token support cipher keys - Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens - Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server - Resolves: RHEL-75762, ep11 token: import and export of secure key objects - Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys - Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3 - Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x - Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock - Fix incorrect effective group id of pkcsslotd daemon - Fix covscan findings Resolves: RHEL-104602 - Fix pkcsslotd fails to start in FIPS - Drop tier1 test as it mostly provides duplicate results - Enable ci test for FIPS mode Resolves: RHEL-109050 - Resolves: RHEL-75139, ep11 token BLS support - Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support - Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support - Resolves: RHEL-100059, openCryptoki 3.26.0 - Resolves: RHEL-144821, CVE-2026-23893 - Resolves: RHEL-169586, Fix syslog message printing about different CPs - Resolves: RHEL-171562, Fix CVE-2026-40253, possible out-of-bounds access in BER decode functions - Update to upstream 1.2.1 Related: RHEL-29803 - fix CVE-2023-5481 (RHEL-23879) - fix CVE-2026-27622 - fix CVE-2026-34588 - fix CVE-2023-5481 (RHEL-23879) - fix CVE-2026-27622 - fix CVE-2026-34588 - fix CVE-2026-41142 - fix CVE-2026-42216 - Fix installation on OSTree by removing %ghost Resolves: rhbz#2193429 - Rebuild with gating.yaml to allow automatic tests Related: rhbz#2193429 - Add %verify to ignore modified socket file after install - Remove unused OpenSP-1.5 from sources Related: rhbz#2193429 - Add an environment variable to prevent gating from complaining about rpaths (rhbz#2193429) Related: RHEL-11772 - fix two heap buffer overflows CVE-2024-56826 and CVE-2024-52827 (RHEL-72519,RHEL-72521) - fix two heap buffer overflows CVE-2024-56826 and CVE-2024-52827 (RHEL-72519,RHEL-72521) - Rebase to the latest upstream version (RHEL-29172) - Fix OVAL results file name (RHEL-7050) - Add ability to define a limit of collected items (RHEL-4141) - Add ability to refine rules in autotailor (RHEL-1477) - Improve the formatting of Blueprint remediations (RHEL-1476) - Explicitely disable dpkginfo probe - Switch gating to tmt plan (RHEL-43241) - Upgrade to the latest upstream release (RHEL-76355) - Introduce "oscap-im", a tool for building hardened bootable container images - Fix RPM probes in bootable container images build environment (RHEL-55251) - Upgrade to the latest upstream release (RHEL-88413) - Fix OSCAP_PROBE_IGNORE_PATHS handling - Upgrade to the latest upstream release (RHEL-133976) - Fix Filepath and Pattern Fields inversion (RHEL-104073) - Fix verbose flag (RHEL-53859) - Add AlmaLinux definitions - Switch gating to tmt plan (RHEL-43241) - Upgrade to the latest upstream release (RHEL-76355) - Introduce "oscap-im", a tool for building hardened bootable container images - Fix RPM probes in bootable container images build environment (RHEL-55251) - Upgrade to the latest upstream release (RHEL-88413) - Fix OSCAP_PROBE_IGNORE_PATHS handling - Upgrade to the latest upstream release (RHEL-133976) - Fix Filepath and Pattern Fields inversion (RHEL-104073) - Fix verbose flag (RHEL-53859) - Upgrade to the latest upstream release (RHEL-167949) - Add AlmaLinux definitions - Fix heap overwrite vulnerability, CVE-2019-5544 Resolves: #1780754 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Explicitly disable use of deprecated SHA-1 algorithm Resolves: #1936621 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebase opensm to latest upstream release 3.3.23 - Resolves: bz1813779 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update systemd service file - opensm service should after rdma-hw.target - Use make macros https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebase opensm to latest upstream release 3.3.24 - Resolves: bz1961963 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update OpenSSL certificates set up Resolves: RHEL-118292 - Update to openwsman-2.8.1 Resolves: RHEL-97643 - Add libwsman-client.so.4 for backward compatibility Related: RHEL-97643 - Support added for post-quantum cryptography Resolves: RHEL-127516 - Fix bogus 'sscg' arguments Related: RHEL-118292 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Disable LTO for now - Re-enable LTO as upstream GCC target/96939 has been fixed - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Mass rebuild for javapackages-tools 201902 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to upstream version 8.0.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Mass rebuild for javapackages-tools 201902 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuild to regenerate OSGi metadata - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Mass rebuild for javapackages-tools 201902 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to upstream version 8.0.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2024.8 Resolves: #RHEL-62769 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2024.9 Resolves: #RHEL-62769 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2025.1 Resolves: #RHEL-73827 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2025.2 Resolves: #RHEL-84765 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2025.4 Resolves: #RHEL-104888 - Backport https://github.com/ostreedev/ostree/pull/3493 Resolves: #RHEL-107855 - Update to 2025.5 - Update to 2025.6 Resolves: #RHEL-113644 - Backport https://github.com/ostreedev/ostree/pull/3555 Resolves: #RHEL-131656 - Rebase to 2025.7 Backport https://github.com/ostreedev/ostree/pull/3555 Resolves: #RHEL-129049 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Build using new cmake macros - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - related: rhbz#2028819 - Update to version 1.1.4 - related: rhbz#2048653 - Add package to CRB - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 2.42.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.42.2 - Update source URLs - Switch to meson build system - Tighten soname globs - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use cairomm1.0, which may be a virtual Provides, in the manual lib Requires - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 2.46.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 2.42.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.42.2 - Update source URLs - Switch to meson build system - Tighten soname globs - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use cairomm1.0, which may be a virtual Provides, in the manual lib Requires - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 2.46.1 - Update papi event presets (RHEL-9333, RHEL-9334, RHEL-9335) - Rebase to papi 7.2.0 - Update license tag to BSD-3-Clause - Remove old patches and add new patches for 7.2.0 compatibility - Update configure options and package files - Resolves: RHEL-121673 - Rebase to papi 7.2.0 - Update license tag to BSD-3-Clause - Remove old patches and add new patches for 7.2.0 compatibility - Update configure options and package files - Resolves: RHEL-121673 - genpapifdef: Resolve install conflict between i686 and x86_64 papi-devel RPMs Backport of upstream icl-utk-edu/papi commit fb6d3924b807: sort the defs and presets hash keys so the generated Fortran headers are byte-identical across architectures. - tests: Add test for dvh with a bad checksum (bcl) Related: RHEL-73217 - libparted: Fix dvh disklabel unhandled exception (bcl) Related: RHEL-73217 - tests: Add test for SUN disklabel handling (bcl) Related: RHEL-73217 - libparted: Fix sun disklabel unhandled exception (bcl) Resolves: RHEL-73217 - Fix the SAST reports described in RHEL-32492 and RHEL-32488 - Fix issue in the backtracking optimization of character in JIT - Fix an issue with restoring originally unset entries in recursion - Resolves: BZ#2248133 - Rebuilt for added pcre2-tools into CRB - Fix SEGFAULT caused by dereferencing subject when length==0 on aarch64 - Resolves: RHEL-51866 - Backport --disable-polkit option (RHEL-34856) - Update to 7.17 - Work around antique openssl version in RHEL-7 by formatting dh parameters differently - Add t/13_weaken.t - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Conditionalize POE support - Conditionalize Tk support - Conditionalize Glib support - Conditionalize Event support - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Modernize a spec file - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 2.13 - Bypass prototypes when testing for lvalue attribute - Fixed a class name in tests to avoid conflicting with a core module - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.6 - Fixed confusing Changes entry about Perl's licensing terms (CPAN RT#132843) - Added optional Changes testing (skipped unless AUTHOR_TESTING) - Reformatted Changes file as per CPAN::Changes::Spec - Added optional POD coverage testing (skipped unless AUTHOR_TESTING) - Added optional Perl::Critic testing (skipped unless AUTHOR_TESTING) - Made code Perl::Critic clean - Added optional POD testing (skipped unless AUTHOR_TESTING) - Included GitHub repository URLs in metadata now that source code has been uploaded to GitHub (as of version 1.5) - Included META.json file in addition to META.yml - Set minimum required ExtUtils::MakeMaker version to 6.64 to ensure that all parameters used are supported, to save jumping through hoops to support earlier versions (this should not be a problem since ExtUtils::MakeMaker 6.64 is easily installed into Perl 5.8.1 and above, that being the whole point of the new choice of minimum supported Perl version) - Set minimum required Perl version to 5.8.1; this is in line with the minimum requirement of the "Perl Toolchain" - Corrected typo in a comment (CPAN RT#86336) - Use author-independent source URL - Specify all build dependencies - Drop redundant buildroot cleaning in %install section - Simplify find command using -delete - Fix permissions verbosely - Package Artistic, Copying and LICENCE licence files - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 1.008 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.318 - Add perl(File::Slurper) as a dependency - Use /usr/bin/perl instead of perl - Use %{make_install} instead of make pure_install - Use %{make_build} instead of make - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.319 - Suggest File::Slurper for reading file content - Suggest Scalar::Util for detecting numbers - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.226 - Set umask before fopen in destructor (GH#35) - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.52 - Added a $dt->is_between($dt1, $dt2) method (based on GH#97) - Simplify the calculation of leap seconds in XS (GH#91); this is a little more efficient for most use cases (anything with future or recent past datetimes) - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.53 - Added a $dt->rfc3339 method, based on discussion in GH#109 - Update to 1.54 - Documentation updates - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix License: tag to reflect content of actual shipped files, not just what the LICENSE file says (#1600504, CPAN RT#125832) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.83 - Switched to GitHub issues - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Disable optional tests on ELN - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 0.14 bump - 0.15 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 0.16 bump - Package tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.77 - When the parsed string contained an invalid time zone offset (parsed with "%z") like "-9999", the error handling set in the parser's constructor was ignored and an exception was always thrown (GH#25) - Use %{make_build} and %{make_install} - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.78 - Fix tests for new failure caused by locale data changes in DateTime::Locale 1.29 (GH#28) - Added a warning about using locale-specific patterns; some of these patterns can change quite a bit as the locale data is updated, so using them for parsing does not produce stable results across time - this is what caused the test failures that this release fixes - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.79 - Fix too-strict type checking for time zones: this module now uses the same check as DateTime itself, which allows for things that don't subclass DateTime::TimeZone as long as they provide the same API (GH#30) (rhbz#1964546) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Perl 5.32 rebuild - 1.26 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 1.28 bump - 1.29 bump - 1.30 bump - 1.31 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 2.60 bump (2023c Olson database) - 2.62 bump (2024a Olson database) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add test BR gcc and perl(blib) to not skip the tests - Package tests - Resolves: rhbz#2216280 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Spec tidy-up - Use author-independent source URL - Drop support for building with Test::More < 0.88 - Specify all build dependencies - Drop redundant buildroot cleaning in %install section - Simplify find command using -delete - Fix permissions verbosely - Use %license where possible - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.3.4 - Now at https://github.com/shlomif/perl-file-find-object - tidyall - Add *~ files to MANIFEST.SKIP (GH#1) - Update to 0.3.5 - Rebuild for order of 'NAME' and 'VERSION' sections in the generated POD documentation (VERSION used to appear before NAME) - Use %{make_build} and %{make_install} - BR: perl(blib) for t/00-compile.t - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Use 3 arg open in grep() (CVE-2011-10007) - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Specify all dependencies - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 0.30 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Modernize spec - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Build-require blib module for tests - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 1.60 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 6.06 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 6.10 bump - 6.12 bump - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2026-8450: send_file() shell-magic injection via 2-arg open() - Resolves: RHEL-184829 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Modernize spec - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.14 - Remove MAP_TARGET from Makefile.PL (CPAN RT#91590) - Fix for Solaris setuid when root running as other user (CPAN RT#88271) - Add strict/warnings to Tty.pm - Fix pod errors - Typo: s/dependend/dependent/ - Prevent spurious warning from get_winsize() - Fix usage of setsid - Github actions testing; Windows is off of course - Make README.md - Use author-independent source URL - Fix permissions verbosely - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix FTBFS due to false detection of strlcpy() and _getpty() https://github.com/toddr/IO-Tty/pull/24 - Modernize spec using %{make_build} and %{make_install} - Update to 1.15 - Skip winsize test on Solaris and QNX NTO (GH#22) - Make function tests more robust (GH#24) - Work around a header name collision on util.h; this is breaking on recent OSX (GH#26) - Update to 1.16 - Switch to GitHub for issue tracker - Switch to testsuite CI workflow - Tidy - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 2.112 - Added the change log from any prior source that could be found, and formatted the log to fit metacpan.org loose standards - Change use vars qw() to our $whatever instead - Hide IO::WrapTie subclasses from PAUSE - Rebuild Makefile.PL to contain all of the prerequisites - Convert README to README.md - Fix the documentation in the main module, IO::Stringy to better indicate where to get info and how to use the module - Fix the dist's META information to indicate the original author and license - Add a LICENSE file - Add AppVeyor CI testing - Add Travis CI testing - Update t/IO_InnerFile.t to use Test::More and a proper TEMP file (CPAN RT#103895) - Use author-independent source URL - Simplify find command using -delete - Add Provides: for perl-IO-Stringy - Fix permissions verbosely - Update to 2.113 - Get rid of use of Common and TBone in all tests - Convert to Dist::Zilla for authoring - Cleaned up some of the docs (needs more) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 20200505.0 - Fix syntax errors in POD examples (GH#125) - Switch Readonly testing requirement to a recommends (GH#127) - Fix full_result to always return $? (GH#129) - kill_kill: Immediately KILL the child process as documented for Win32 (GH#136) - Switch to GitHub actions for CI testing - Re-structure shipped files into eg/ - Move author tests into xt/ and test them separately - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use %{make_build} and %{make_install} - Fix permissions verbosely - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 4.04 - Fix CVE-2025-40928 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.18 - Update with newest data - Mojo 6.0 changed types() into mapping() - Mojo 7.94 adds experimental file_type() - Mojo 7.94 adds experimental content_type() - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - BR: perl(blib) for t/00-compile.t - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Disable support output to PDF on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: RHEL-68282 - Fix CVE-2024-10224 - Package tests - Drop erroneous UTF-8 encoding conversion of Changes file (#1869049) - 1.28 bump - 1.29 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: rhbz#2126689 - Resolves: rhbz#2126689 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - BR: perl(blib) for t/00-compile.t - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.39 - Updated distribution metadata and packaging - Configuration phase now uses ExtUtils::HasCompiler - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - BR: perl(blib) for t/00-compile.t - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.5 - Names of utf8 lexical vars were not reported correctly (CPAN RT#133424) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Upgrade to 1.30. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.110 - Fixes tests on Windows, particularly with newer File::Spec - Update to 0.112 - Another test fix on Windows, possibly due to a behavior change in Cwd::getdcwd - Update to 0.114 - Use \z instead of $ in regular expressions - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.116 - Fix tests on MSYS without symlinks enabled - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.118 - Skip symlink tests on Windows by actually testing symlinks, as Perl 5.33.5 adds notional support but it's not possible without elevated privileges - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.008 - Make unread by :crlf on top of :utf8_strict reliable - Use author-independent source URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 3.200 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add missing BR perl(blib) - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 3.300 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Modernize a spec file - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 2.001003 - Drop redundant use of %{?_smp_mflags} with %{make_build} - Update to 2.001004 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.002003 - Update to 2.002004 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Correct a perl-Specio license to "Artistic 2.0 and (GPL+ or Artistic)" - Update to 0.46 - Correct license of Specio::PartialDump (GH#17) - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.47 - Change Specio constraint object's stringification overloading to return the type name rather than the default Perl object stringification, which gives you something like "Specio::Constraint::Parameterized=HASH(0x564d258efb48)"; anonymous are special cased to return something you can print - All types now overload the 'eq' comparison operator: Moose expects types to be comparable in this manner when doing role summation (GH#18) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.26 - %DB::sub is now populated correctly for sub names with wide characters or nulls (GH#9) - Better Perl 5.6 compatibility by lowering prereqs of core modules - Test for renaming lexical subs, which should work on Perl 5.22+ (GH#10) - Small internal changes to bring implementation in line with changes to Sub::Util - Fix "Undefined symbol "DPPP_my_croak_xs_usage"" error on some perls (CPAN RT#125158) - Use author-independent source URL - Fix permissions verbosely - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Remove condition for perl(deprecate), it did not work - Updated dependencies - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.128 - Allow 'use Test::Deep' while other modules use Test::Deep::NoTest (GH#76) - Added true/false optional imports (GH#41, GH#44) - Documentation fixes (GH#79) - Use author-independent source URL - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.016 - Add default descriptions to tests - Work on ancient Test::Builder code - Use author-independent source URL - Simplify find command using -delete - Fix permissions verbosely - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Modernize a spec file - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.11 - Re-packaging - Drop running of extra tests at package build time to avoid need for bootstrapping - Use %{make_build} and %{make_install} - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Build-require blib module for the tests - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.027 - New :fail_on_warning feature, for more easily seeing where the surprising warning appeared during testing - Use author-independent source URL - Simplify find command using -delete - Update to 0.028 - Allow for warnings->import being called after importing the "warnings" sub - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.029 - New :report_warnings feature, for printing all of the (unexpected) warning content when had_no_warnings() is called (GH#10) - Update to 0.030 - Fix tests that can fail when there is already an installed module named Foo::Bar::Baz (CPAN RT#132140) - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 0.000132 bump - 0.000135 bump - 0.000136 bump - 0.000138 bump - 0.000139 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Remove the optional tests if they are disabled - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Enable building with FreeType support - Package tests - Resolves: RHEL-25202 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.01 - Implement Types::Serialiser::as_bool - Slight documentation tweaks - Drop redundant buildroot cleaning in %install section - Simplify find command using -delete - Fix permissions verbosely - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - update to 12.0 (because why not) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Do not run optional test on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Initial RPM version - Incorporate feedback from package review (#1776513) - BR: findutils - BR: perl(CPAN::Meta::Prereqs) - Need perl(ExtUtils::MakeMaker) >= 6.76 - Add reference to upstream ticket about unnecessary build requirements https://github.com/atoomic/XString/issues/2 - Add run-time dependency on perl(XSLoader) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.005 - Fix cstring for Perl 5.32 (GH#6, GH#7) - Remove unneeded module dependencies (GH#2) - Add compatibility with Perl 5.8 (GH#9) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Use 3-arg form of open in LoadFile (CVE-2025-40908) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 3.75 - Make build (more) reproducible - Removed "portable" from the warnings list, as 32-bit perls (as opposed to 32-bit platforms) are practically extinct and it warns about a weird subset of operations, e.g. 64-bit hex() is not ok, 64-bit addition is fine, makes no sense; additionally, other than hex/oct etc. harassment, there is nothing in this category that otherwise could be useful - Specify all build dependencies - Drop ancient obsoletes/provides for removed tests sub-package - Drop redundant buildroot cleaning in %install section - Simplify find command using -delete - Fix permissions verbosely - Perl 5.32 rebuild - Perl 5.32 re-rebuild updated packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix digest calculation of sha256 (RHEL-20391) - Fix digest calculation of sha256 (RHEL-20391) - Fix CVE-2026-10846: DNS response spoofing via missing address/port/TXID and question section validation (RHEL-210701) - Resolves: RHEL-43290 - Package tests - Update to 0.29 - Switch from Test::Requires to Test::Needs - Report on the installed versions of more optional modules - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 20200822 (see CHANGES.md for details) - Update to 20200907 (see CHANGES.md for details) - Update to 20201001 (see CHANGES.md for details) - Update to 20201202 (see CHANGES.md for details) - Update to 20201207 (see CHANGES.md for details) - Update to 20210111 (see CHANGES.md for details) - Use %license unconditionally - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Run the fstrim command twice resolves: RHEL-88508 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le - Update to upstream version 4.2.2 - Update to version 4.2.3. - Update to upstream version 4.2.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to version 4.2.4. - Update to upstream version 4.2.4 - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Remove unnecessary dependency on parent POM. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Unecessary restriction on plexus-util, with the patch it's actually still source compatible with older versions - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to version 2.8.7. - Update to version 2.8.8. - Update to upstream version 2.8.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Non-bootstrap build - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Update to upstream version 3.2.0 - Mass rebuild for javapackages-tools 201902 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to upstream version 1.0.5 - Bootstrap restoration of essential JPMS classes - Rebuild correctly as a proper JPMS module - Update to upstream version 1.0.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to version 1.0.6. - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to version 1.1.0. - Mass rebuild for javapackages-tools 201902 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2023-41915 - Resolves: RHEL-3693 - Add pmix_test - Resolves: RHEL-3693 - Perl 5.32 rebuild - Update po4a to 0.60 (#1857579) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.61 (#1866407) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update po4a to 0.62 (#1905315) - Update po4a to 0.63 (#1905315) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Synchronize package with Fedora Rawhide - Add gating tests for RHEL 9 resolves: rhbz#1990062 - Fix a crash during signing - Resolves: RHEL-31934 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Bump release for build inheritance - Resolves: RHEL-131792 - Fix pdfsig's man page - Resolves: RHEL-126070 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Bump release for build inheritance - Resolves: RHEL-131792 - Fix pdfsig's man page - Resolves: RHEL-126070 - Fix integer overflow in tilingPatternFill (CVE-2026-10118) - Resolves: RHEL-180580 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix a crash during signing - Resolves: RHEL-31934 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Bump release for build inheritance - Resolves: RHEL-131792 - Fix pdfsig's man page - Resolves: RHEL-126070 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Bump release for build inheritance - Resolves: RHEL-131792 - Fix pdfsig's man page - Resolves: RHEL-126070 - Fix integer overflow in tilingPatternFill (CVE-2026-10118) - Resolves: RHEL-180580 - Fix a crash during signing - Resolves: RHEL-31934 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Bump release for build inheritance - Resolves: RHEL-131792 - Fix pdfsig's man page - Resolves: RHEL-126070 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Bump release for build inheritance - Resolves: RHEL-131792 - Fix pdfsig's man page - Resolves: RHEL-126070 - Fix integer overflow in tilingPatternFill (CVE-2026-10118) - Resolves: RHEL-180580 - Fix a crash during signing - Resolves: RHEL-31934 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Bump release for build inheritance - Resolves: RHEL-131792 - Fix pdfsig's man page - Resolves: RHEL-126070 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Bump release for build inheritance - Resolves: RHEL-131792 - Fix pdfsig's man page - Resolves: RHEL-126070 - Fix integer overflow in tilingPatternFill (CVE-2026-10118) - Resolves: RHEL-180580 - Fix a crash during signing - Resolves: RHEL-31934 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Bump release for build inheritance - Resolves: RHEL-131792 - Fix pdfsig's man page - Resolves: RHEL-126070 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Bump release for build inheritance - Resolves: RHEL-131792 - Fix pdfsig's man page - Resolves: RHEL-126070 - Fix integer overflow in tilingPatternFill (CVE-2026-10118) - Resolves: RHEL-180580 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Updated EAP-TLS patch to v1.201 - Updated EAP-TLS patch to v1.300 - Added missing options to man pages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Added workaround for Windows Server 2019 Resolves: rhbz#1867047 - New version Resolves: rhbz#1912617 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - uptime: human readable data not shown if 364 days up - Resolves: rhbz#2067166 - free: backport new 'used' calculation - sysctl: backport support of systemd glob patterns - Resolves: rhbz#2003033 - Resolves: rhbz#2052536 - sysctl: backport - keys with dots instead of slashes again - Resolves: rhbz#2116977 - Related: rhbz#2052536 - pgrep: uid/gid overflow fix backport - Resolves: rhbz#2119083 - display.c: backport: async-signal-unsafe handler deadlocks on SIGHUP - Resolves: rhbz#2141697 - ps: out-of-bonds read in quick mode - Resolves: rhbz#2161648 - version bump requested to create -devel subpkg for CRB inclusion - Resolves: rhbz#2158253 - sysctl: '-N' option shows values instead of names if '-p' - Resolves: rhbz#2222056 - ps: mitigation of possible buffer overflow - Resolves: rhbz#2228504 - top: processes for specific user not displayed if sorted by mem - Resolves: RHEL-16278 - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for errata - Added gating tests - Adapt tests to protobuf-c 1.3.3 - Applied patch for for CVE-2022-48468 (#2186677) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for errata - Added gating tests - Adapt tests to protobuf-c 1.3.3 - Applied patch for for CVE-2022-48468 (#2186677) - Applied patch for CVE-2022-1941 (#RHEL-40872) - Applied patch to make emacs dependency optional (#RHEL-40572) - Rebuild - Rebuild - Fix CVE-2026-0994: nested Any messages bypassing recursion depth limits - Applied patch for CVE-2022-1941 (#RHEL-40872) - Applied patch to make emacs dependency optional (#RHEL-40572) - Rebuild - Rebuild - Fix CVE-2026-0994: nested Any messages bypassing recursion depth limits - Applied patch for CVE-2022-1941 (#RHEL-40872) - Applied patch to make emacs dependency optional (#RHEL-40572) - Rebuild - Rebuild - Fix CVE-2026-0994: nested Any messages bypassing recursion depth limits - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebase to 3.75 - Disable ImageMagick support in ELN/RHEL 8+ as ImageMagick isn't part of it - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.1 to fix Python 3.8 compatibility in tests https://bugzilla.redhat.com/show_bug.cgi?id=1758446 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Drop tests and Suggests for Python 2; require python3-devel - Update to 1.2 to fix tests under Python 3.9 - BuildRequire python3-setuptools explicitly - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.3 - No longer unbundle fonts - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.1 to fix Python 3.8 compatibility in tests https://bugzilla.redhat.com/show_bug.cgi?id=1758446 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Drop tests and Suggests for Python 2; require python3-devel - Update to 1.2 to fix tests under Python 3.9 - BuildRequire python3-setuptools explicitly - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.3 - No longer unbundle fonts - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Introduce epoch to pybind11-devel to sort newer than python3.11-pybind11-devel - Resolves: RHEL-38108 - Update to 2.10.4 - Resolves: RHEL-62014 - rebuilt - Resolves: RHEL-62014 - Update to 2.4.7 (#1821085) - Bootstrap for Python 3.9 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix licence for examples shipped in pyparsing-doc - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add automatically generated Obsoletes tag with the python39- prefix for smoother upgrade from RHEL8 - Related: rhbz#1990421 - Add gating configuration and a simple smoke test - Related: rhbz#1950291 - Deprecate the provisional -w flag for %pyproject_buildrequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Add the -M flag to %pyproject_save_files - The flag can be used to indicate no Python modules should be saved - Make %pyproject_buildrequires -t/-e and %tox fail when no suitable tox configuration exists - The %pyproject_buildrequires -t/-e case is temporarily allowed on Fedora 40-42 - Requires tox-current-env >= 0.0.16 - Fix reverted conditional in %pyproject_buildrequires -t/-e Fedora version comparison - Fix handling of config_settings in %pyproject_buildrequires - %pyproject_buildrequires: Do not generate BuildRequires from Requires core metadata fields - That field is deprecated and should include importable module names, not distribution packages - Related: rhbz#2378463 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Don't exit from pyproject-srpm-macros implementation of %pyproject_buildrequires - Fixes: rhbz#2391290 - On RPM 4.20+ don't put pyproject-macros-specific files in %buildsubdir - Works around https://github.com/rpm-software-management/rpm/issues/3890 - Speed %pyproject_save_files up significantly - %pyproject_extras_subpkg: Only %ghost the dist-info directory, not the content - That way, accidentally unpackaged files within are reported as errors - %pyproject_save_files: Also save top level typing stub files (.pyi) - Update to 2.9.0.post0 and revise patches Resolves: RHEL-113228 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Drop the dependency on six to make the package lighter - Update to 20.7 (#1902369) - Update to 20.8 (#1906985) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 20.9 Resolves: rhbz#1922545 - Disable tests on RHEL9 to remove the test dependencies - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add automatically generated Obsoletes tag with the python39- prefix for smoother upgrade from RHEL8 - Related: rhbz#1990421 - Fix autodoc build with the compiled extension modules Resolves: RHEL-5664 - BR readthedocs-sphinx-ext so the tests can be run - Fix symlinks to the Roboto fonts - Bootstrap for Python 3.9 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Version 0.5.0 - Drop upstreamed -script patch - Do not even link to fonts; modify the CSS to point to system fonts - Remove all traces of html5shiv - Version 0.5.1 - Do not list language files twice - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.29.37 - Resolves: RHEL-61659 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Workaround __openat_missing_mode compiler error. (Keith Seitz, RH BZ 1890813) - Remove workaround for 1890813 now that binutils is fixed. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Bumped NVR to release subpackage Related: rhbz#2058409 - Use getaddrinfo instead of gethostbyname. (Keith Seitz) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.20.0 (bgz#1493325) - Move python2-cairo to a separate component - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.20.1 - Resolves: rhbz#2016905 - Ship python3-cairo-devel in CRB - Resolves: rhbz#2053665 - Fix CVE-2025-68114 (memory corruption) and CVE-2025-67873 (heap buffer overflow) Resolves: RHEL-137760 - Rebuild for rhel-9.8 Resolves: RHEL-137760 - Fix CVE-2025-68114 (memory corruption) and CVE-2025-67873 (heap buffer overflow) Resolves: RHEL-137760 - Rebuild for rhel-9.8 Resolves: RHEL-137760 - Rebuild for rhel-9.8.z - Update to Python 3.9.24 - Update to Python 3.9.25 - Move _sysconfigdata_d_linux*.py to the debug subpackage - Security fix for CVE-2025-12084 Resolves: RHEL-135897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+ Resolves: RHEL-194207 - Security fix for CVE-2026-15308 Resolves: RHEL-193786 - Update to Python 3.9.25 - Move _sysconfigdata_d_linux*.py to the debug subpackage - Security fix for CVE-2025-12084 Resolves: RHEL-135897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+ Resolves: RHEL-194207 - Security fix for CVE-2026-15308 Resolves: RHEL-193786 - Security fix for CVE-2026-11940 Resolves: RHEL-227228 - Update to 3.9.23 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218 - Security fix for CVE-2025-8194 Resolves: RHEL-106374 - Update to Python 3.9.24 - Update to Python 3.9.25 - Move _sysconfigdata_d_linux*.py to the debug subpackage - Security fix for CVE-2025-12084 Resolves: RHEL-135897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Initial package for RHEL 9 - Resolves: RHEL-12338 - Fedora+EPEL contributions by: Charalampos Stratakis <cstratak@redhat.com> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Karolina Surma <ksurma@redhat.com> Lumir Balhar <lbalhar@redhat.com> Maxwell G <gotmax@e.email> Michel Alexandre Salim <salimma@fedoraproject.org> Miro Hrončok <miro@hroncok.cz> Mukundan Ragavan <nonamedotc@fedoraproject.org> Tomáš Hrnčiar <thrnciar@redhat.com> Yaakov Selkowitz <yselkowi@redhat.com> - Update to 3.38.0 - Explicity BuildRequire python3-setuptools - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.40.0 - Update to 3.40.1 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add concurrency fix Related: #1957130 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914 - Fix the multilib problems by backporting fixes done by mhroncok from Fedora: - Move pure Python modules to a noarch subpackage - Ensure Python bytecode installed in multilib packages is bit-to-bit identical Resolves: rhbz#1915764 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add python-greenlet to RHEL-9 Resolves: rhbz#2084555 - Bump release for move of -devel subpackage to CRB Resolves: rhbz#2149497 - Rebase to Fedora Rawhide resolves: RHEL-56803 - Update to Python 3.9.24 - Update to Python 3.9.25 - Move _sysconfigdata_d_linux*.py to the debug subpackage - Security fix for CVE-2025-12084 Resolves: RHEL-135897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+ Resolves: RHEL-194207 - Security fix for CVE-2026-15308 Resolves: RHEL-193786 - Update to Python 3.9.25 - Move _sysconfigdata_d_linux*.py to the debug subpackage - Security fix for CVE-2025-12084 Resolves: RHEL-135897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+ Resolves: RHEL-194207 - Security fix for CVE-2026-15308 Resolves: RHEL-193786 - Security fix for CVE-2026-11940 Resolves: RHEL-227228 - Update to 3.9.23 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218 - Security fix for CVE-2025-8194 Resolves: RHEL-106374 - Update to Python 3.9.24 - Update to Python 3.9.25 - Move _sysconfigdata_d_linux*.py to the debug subpackage - Security fix for CVE-2025-12084 Resolves: RHEL-135897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Rebuilt for Python 3.8.0rc1 (#1748018) - Updated to 1.1.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Updated to 1.2.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use Python macros - Add test conditional - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Add generated Requires on multiple versions of java-headless - Related: rhbz#2164437 - Make OpenJDK 17 the default JRE/JDK - Related: RHEL-62403 - Include java-21-headless in generated auto-requires - Related: RHEL-62409 - Drop generated Requires on various Java versions - Related: RHEL-62409 - Use Java 11 build tool bindings for package builds - Rebuild - Rebuild - Update to upstream version 6.4.0 - Fix digest calculation of sha256 (RHEL-20391) - Fix digest calculation of sha256 (RHEL-20391) - Fix CVE-2026-10846: DNS response spoofing via missing address/port/TXID and question section validation (RHEL-210701) - Rebuilt for Python 3.8 - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Bump version 0.14.0 (Fix #1792982) - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Check with pytest instead of nose - Remove build dependency on coverage - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Use __cc macro instead of hard-coding gcc - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Upstream patch to fix gcc-10 build - Update to 1.6.0 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Gating rebuild [bz#1974188] - Resolves: bz#1974188 (Define tests, including gating tests, for dtc) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add libpfm-ibm-counters.patch - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to latest version 3.4.2 - Related: rhbz#2015398 - Update to upstream release 4.1.1 - Resolves: rhbz#2212010 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Revert v4.1.2 - Add Epoch tag - Resolves: rhbz#2055184 - Revert v4.1.5 - Bump version - Resolves: rhbz#2159637, rhbz#2218121, rhbz#2216042 - Increase Epoch tag - Resolves: rhbz#2159637, rhbz#2218121, rhbz#2216042 - Disable test_leak_mem test. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Remove unnecessary test dependency on python3-mock - Remove unnecessary macro __provides_exclude_from - Drop python2-psutil Resolves: rhbz#1913682 - Add tolerance to a flaky test Resolves: rhbz#1913682 - Skip 2 tests that fail in brew due to broken IPv6 Resolves: rhbz#1913682 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Separate the tests to their own subpackage Resolves: rhbz#1990466 - Add automatically generated Obsoletes tag with the python39- prefix for smoother upgrade from RHEL8 - Related: rhbz#1990421 - Introduce epoch to pybind11-devel to sort newer than python3.11-pybind11-devel - Resolves: RHEL-38108 - Update to 2.10.4 - Resolves: RHEL-62014 - rebuilt - Resolves: RHEL-62014 - Bootstrap for Python 3.9 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.7.1 - Update to 2.7.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 2.7.4 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Remove test files with a no-nuclear license from the sources - Related: rhbz#1950291 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Initial package for Fedora - Rebuilt for Python 3.9 - Update to latest upstream release 0.3.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.4 (#1925972) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for Python 3.9 - Update to new upstream release 1.4.1 (#1846923) - Modernize packaging - Add missing BR for setuptools - Update to new upstream release 1.4.2 (#1857421) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Don't BuildRequire python3-pytest-cov Resolves: rhbz#1945252 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Remove test-dependency on python-pexpect - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.7.1 - Drop python2 subpackage - Add gpg signature check - Backport RPM specification improvements from sister project pylibacl - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - BuildRequire python3-setuptools besides python3-devel (see https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/GCPGM34ZGEOVUHSBGZTRYR5XKHTIJ3T7/) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - New upstream release 0.7.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild (Qt 5.15.3) Resolves: bz#2061728 - 5.15.6 + sync with Fedora Resolves: bz#2061728 - 5.15.9 Resolves: bz#2175758 - Version 2.0.0 - Version 2.1.0 - Version 2.1.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Version 2.1.2 - Version 2.1.3 - Revert to the py3_* macros (avoids dependency on external mock) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Version 2.1.4 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Used macros for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - F-34: rebuild against ruby 3.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Removed rpath from python bindings Resolves: rhbz#1960385 - Removed rpath from python bindings better way Related: rhbz#1960385 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixed stack buffer overflow in rrdcached and added more security checks Resolves: RHEL-173257 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Bump build number - Update to version 4.23.4 - resolves: RHEL-114548 - Update to version 4.23.4 - resolves: RHEL-132995 - Fix Time Machine backup - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba - Remove libldb dependency to samba-common-libs - resolves: RHEL-133003 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Rebuilt needed for moving buildroot package to CRB - Resolves: RHEL-70463 python3-setuptools-rust is not signed - Resolves: RHEL-67341 move python3-setuptools-rust to CRB [rhel-9] - Rebuilt needed to trigger signing of the package - Resolves: RHEL-70463 python3-setuptools-rust is not signed - Update to 4.1.2 (#1839497) - Add setuptools_scm[toml] subpackage - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - BuildRequire six explicitly, for tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 5.0.1 - Fixes: rhbz#1907070 - Disable tests on RHEL9 to avoid pulling in the test dependencies - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 6.0.1 - Update to 4.1.2 (#1839497) - Add setuptools_scm[toml] subpackage - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - BuildRequire six explicitly, for tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 5.0.1 - Fixes: rhbz#1907070 - Disable tests on RHEL9 to avoid pulling in the test dependencies - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 6.0.1 - Add py_ssize_t_clean module support for compatibility with python-qt5 Resolves: RHEL-27554 - Rebuilt for Python 3.8 - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix autodoc build with the compiled extension modules Resolves: RHEL-5664 - Fix autodoc build with the compiled extension modules Resolves: RHEL-5664 - Rebuilt for Python 3.8 - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - BR readthedocs-sphinx-ext so the tests can be run - Fix symlinks to the Roboto fonts - Bootstrap for Python 3.9 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Version 0.5.0 - Drop upstreamed -script patch - Do not even link to fonts; modify the CSS to point to system fonts - Remove all traces of html5shiv - Version 0.5.1 - Do not list language files twice - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for Python 3.8 - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Bootstrap for Python 3.9 - Rebuilt for Python 3.9 - Update to 1.0.2 (#1808632) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for Python 3.8 - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Bootstrap for Python 3.9 - Rebuilt for Python 3.9 - Update to 1.0.2 (#1808639) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Bootstrap for Python 3.9 - Rebuilt for Python 3.9 - Update to 1.0.3 (#1699073) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Build without check - No longer BuildRequires python3-html5lib - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for Python 3.8 - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Bootstrap for Python 3.8 - Rebuilt for Python 3.8 - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Bootstrap for Python 3.9 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for Python 3.8 - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Bootstrap for Python 3.9 - Rebuilt for Python 3.9 - Update to 1.0.3 (#1808636) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for Python 3.8 - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Bootstrap for Python 3.9 - Rebuilt for Python 3.9 - Update to 1.1.4 (#1808637) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to upstream 1.2.1 (bz#1823520) - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.2.4 - Fixes rhbz#1800626 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update runtime and buildtime dependencies - Remove sqlalchemy, whoosh and xapian dependencies from RHEL9 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to Python 3.9.24 - Update to Python 3.9.25 - Move _sysconfigdata_d_linux*.py to the debug subpackage - Security fix for CVE-2025-12084 Resolves: RHEL-135897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+ Resolves: RHEL-194207 - Security fix for CVE-2026-15308 Resolves: RHEL-193786 - Update to Python 3.9.25 - Move _sysconfigdata_d_linux*.py to the debug subpackage - Security fix for CVE-2025-12084 Resolves: RHEL-135897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+ Resolves: RHEL-194207 - Security fix for CVE-2026-15308 Resolves: RHEL-193786 - Security fix for CVE-2026-11940 Resolves: RHEL-227228 - Update to 3.9.23 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218 - Security fix for CVE-2025-8194 Resolves: RHEL-106374 - Update to Python 3.9.24 - Update to Python 3.9.25 - Move _sysconfigdata_d_linux*.py to the debug subpackage - Security fix for CVE-2025-12084 Resolves: RHEL-135897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Make the python-wheel-wheel subpackage versioned (python3-wheel-wheel), and move its contents to a versioned directory /usr/share/python3-wheels - Resolves: rhbz#1982668 - Conflict with old Python versions that use the old unversioned wheel location - Resolves: rhbz#1982668 - Add automatically generated Obsoletes tag with the python39- prefix for smoother upgrade from RHEL8 - Related: rhbz#1990421 - Security fix for CVE-2022-40898 - Resolves: rhbz#2178881 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Make the python-wheel-wheel subpackage versioned (python3-wheel-wheel), and move its contents to a versioned directory /usr/share/python3-wheels - Resolves: rhbz#1982668 - Conflict with old Python versions that use the old unversioned wheel location - Resolves: rhbz#1982668 - Add automatically generated Obsoletes tag with the python39- prefix for smoother upgrade from RHEL8 - Related: rhbz#1990421 - Security fix for CVE-2022-40898 - Resolves: rhbz#2178881 - Initial package - Fedora contributions by: Alex Cobb <alex.cobb@smart.mit.edu> Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Gwyn Ciesla <gwync@protonmail.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Jesse Keating <jkeating@fedoraproject.org> Kevin Fenzi <kevin@fedoraproject.org> Marcel Plch <mplch@redhat.com> Miro Hrončok <miro@hroncok.cz> nbecker <ndbecker2@gmail.com> Neal D. Becker <ndbecker2@gmail.com> Orion Poplawski <orion@cora.nwra.com> Peter Robinson <pbrobinson@fedoraproject.org> Petr Viktorin <pviktori@redhat.com> Robert Kuska <rkuska@redhat.com> Scott Talbert <swt@techie.net> serge-sans-paille <sguelton@redhat.com> Thomas Spura <thomas.spura@gmail.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio くらとみ <toshio@fedoraproject.org> - Bump release for gating - Initial package - Fedora contributions by: Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Tomas Hrnciar <thrnciar@redhat.com> - Update to 3.11.13 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205 - Fix PySSL_SetError handling SSL_ERROR_SYSCALL - This fixes random flakiness of test_ssl on stressed machines Resolves: RHEL-101551 - Security fix for CVE-2025-8194 Resolves: RHEL-106365 - Security fix for CVE-2025-12084 Resolves: RHEL-135395 - Security fix for CVE-2025-13836 Resolves: RHEL-141025 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143110 Resolves: RHEL-143170 Resolves: RHEL-144894 - Rebuilding previous fixes for different build target Related: RHEL-143110, RHEL-143170, RHEL-144894 - Security fix for CVE-2026-4519 Resolves: RHEL-158053 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-168158, RHEL-167916 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-178519 - Security fix for CVE-2025-0938 Resolves: RHEL-77262 - Update to 3.11.13 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205 - Fix PySSL_SetError handling SSL_ERROR_SYSCALL - This fixes random flakiness of test_ssl on stressed machines Resolves: RHEL-101551 - Security fix for CVE-2025-8194 Resolves: RHEL-106365 - Security fix for CVE-2025-12084 Resolves: RHEL-135395 - Security fix for CVE-2025-13836 Resolves: RHEL-141025 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143110 Resolves: RHEL-143170 Resolves: RHEL-144894 - Rebuilding previous fixes for different build target Related: RHEL-143110, RHEL-143170, RHEL-144894 - Security fix for CVE-2026-4519 Resolves: RHEL-158053 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-168158, RHEL-167916 - Update to 3.11.13 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205 - Fix PySSL_SetError handling SSL_ERROR_SYSCALL - This fixes random flakiness of test_ssl on stressed machines Resolves: RHEL-101551 - Security fix for CVE-2025-8194 Resolves: RHEL-106365 - Security fix for CVE-2025-12084 Resolves: RHEL-135395 - Security fix for CVE-2025-13836 Resolves: RHEL-141025 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143110 Resolves: RHEL-143170 Resolves: RHEL-144894 - Rebuilding previous fixes for different build target Related: RHEL-143110, RHEL-143170, RHEL-144894 - Security fix for CVE-2026-4519 Resolves: RHEL-158053 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-168158, RHEL-167916 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-178519 - Security fix for CVE-2025-0938 Resolves: RHEL-77262 - Update to 3.11.13 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205 - Fix PySSL_SetError handling SSL_ERROR_SYSCALL - This fixes random flakiness of test_ssl on stressed machines Resolves: RHEL-101551 - Security fix for CVE-2025-8194 Resolves: RHEL-106365 - Security fix for CVE-2025-12084 Resolves: RHEL-135395 - Security fix for CVE-2025-13836 Resolves: RHEL-141025 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143110 Resolves: RHEL-143170 Resolves: RHEL-144894 - Rebuilding previous fixes for different build target Related: RHEL-143110, RHEL-143170, RHEL-144894 - Security fix for CVE-2026-4519 Resolves: RHEL-158053 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-168158, RHEL-167916 - Initial package - Fedora contributions by: Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Tomas Hrnciar <thrnciar@redhat.com> - Enable tests - Initial package - Fedora contributions by: - Initial package - Fedora contributions by: Alfredo Moralejo <amoralej@redhat.com> Karsten Hopp <karsten@redhat.com> Matthias Runge <mrunge@redhat.com> Miro Hrončok <miro@hroncok.cz> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Thomas Moschny <thm@fedoraproject.org> Tomáš Hrnčiar <thrnciar@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Enable tests - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Devrim GÜNDÜZ <devrim@fedoraproject.org> Filip Januš <fjanus@redhat.com> Honza Horak <hhorak@redhat.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Jason Tibbitts <tibbs@math.uh.edu> Jesse Keating <jkeating@fedoraproject.org> Jozef Mlich <jmlich@redhat.com> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Ondřej Sloup <ondrej.sloup@protonmail.com> Patrik Novotný <panovotn@redhat.com> Pavel Raiskup <praiskup@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Petr Kubat <pkubat@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Todd Zullinger <tmz@fedoraproject.org> Tomas Hrnciar <thrnciar@redhat.com> Tom Lane <tgl@fedoraproject.org> - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Devrim GÜNDÜZ <devrim@fedoraproject.org> Filip Januš <fjanus@redhat.com> Honza Horak <hhorak@redhat.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Jason Tibbitts <tibbs@math.uh.edu> Jesse Keating <jkeating@fedoraproject.org> Jozef Mlich <jmlich@redhat.com> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Ondřej Sloup <ondrej.sloup@protonmail.com> Patrik Novotný <panovotn@redhat.com> Pavel Raiskup <praiskup@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Petr Kubat <pkubat@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Todd Zullinger <tmz@fedoraproject.org> Tomas Hrnciar <thrnciar@redhat.com> Tom Lane <tgl@fedoraproject.org> - Initial package - Fedora contributions by: Elliott Sales de Andrade <quantum.analyst@gmail.com> Jonathan <jonathan@knownhost.com> jonathanspw <jonathan@almalinux.org> Merlin Mathesius <mmathesi@redhat.com> Miro Hrončok <miro@hroncok.cz> Susi Lehtola <jussilehtola@fedoraproject.org> Tom Stellard <tstellar@redhat.com> - Enable tests - Remove provides without python3.11 in the name Resolves: RHEL-5571 - Initial package - Fedora contributions by: Elliott Sales de Andrade <quantum.analyst@gmail.com> Jonathan <jonathan@knownhost.com> jonathanspw <jonathan@almalinux.org> Merlin Mathesius <mmathesi@redhat.com> Miro Hrončok <miro@hroncok.cz> Susi Lehtola <jussilehtola@fedoraproject.org> Tom Stellard <tstellar@redhat.com> - Enable tests - Remove provides without python3.11 in the name Resolves: RHEL-5571 - Initial package - Fedora contributions by: Alan Pevec <alan.pevec@redhat.com> Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David King <amigadave@amigadave.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jesse Keating <jkeating@fedoraproject.org> José Abílio Oliveira Matos <jamatos@fedoraproject.org> José Matos <jamatos@fedoraproject.org> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Petr Viktorin <pviktori@redhat.com> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Terje Røsten <terje.rosten@ntnu.no> Thomas Spura <thomas.spura@gmail.com> Tomáš Hrnčiar <thrnciar@redhat.com> Ville Skyttä <scop@fedoraproject.org> yatin <ykarel@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Enable tests - Explicitly require the python3.11-rpm-macros - Initial package - Fedora contributions by: Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Gwyn Ciesla <limburgher@gmail.com> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Nils Philippsen <nils@redhat.com> Orion Poplawski <orion@cora.nwra.com> Peter Robinson <pbrobinson@gmail.com> Petr Viktorin <pviktori@redhat.com> Richard Shaw <hobbes1069@gmail.com> Robert Kuska <rkuska@redhat.com> Thomas Moschny <thm@fedoraproject.org> - Initial package - Fedora contributions by: Davide Cavalca <dcavalca@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> Haikel Guemar <hguemar@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Javier Pena <jpena@redhat.com> Miro Hrončok <miro@hroncok.cz> Petr Viktorin <pviktori@redhat.com> - Initial import - Fedora contributions by: Christian Heimes <cheimes@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Tomáš Hrnčiar <thrnciar@redhat.com> - Update to 3.11.13 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205 - Fix PySSL_SetError handling SSL_ERROR_SYSCALL - This fixes random flakiness of test_ssl on stressed machines Resolves: RHEL-101551 - Security fix for CVE-2025-8194 Resolves: RHEL-106365 - Security fix for CVE-2025-12084 Resolves: RHEL-135395 - Security fix for CVE-2025-13836 Resolves: RHEL-141025 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143110 Resolves: RHEL-143170 Resolves: RHEL-144894 - Rebuilding previous fixes for different build target Related: RHEL-143110, RHEL-143170, RHEL-144894 - Security fix for CVE-2026-4519 Resolves: RHEL-158053 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-168158, RHEL-167916 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-178519 - Security fix for CVE-2025-0938 Resolves: RHEL-77262 - Update to 3.11.13 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205 - Fix PySSL_SetError handling SSL_ERROR_SYSCALL - This fixes random flakiness of test_ssl on stressed machines Resolves: RHEL-101551 - Security fix for CVE-2025-8194 Resolves: RHEL-106365 - Security fix for CVE-2025-12084 Resolves: RHEL-135395 - Security fix for CVE-2025-13836 Resolves: RHEL-141025 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143110 Resolves: RHEL-143170 Resolves: RHEL-144894 - Rebuilding previous fixes for different build target Related: RHEL-143110, RHEL-143170, RHEL-144894 - Security fix for CVE-2026-4519 Resolves: RHEL-158053 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-168158, RHEL-167916 - Initial package - Fedora contributions by: Charalampos Stratakis <cstratak@redhat.com> Dennis Gilmore <dennis@ausil.us> Haikel Guemar <hguemar@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Karolina Surma <ksurma@redhat.com> Lumir Balhar <lbalhar@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Miro Hrončok <miro@hroncok.cz> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Tomas Hrnciar <thrnciar@redhat.com> Tomas Orsava <torsava@redhat.com> - Disable bootstrap - Explicitly require the python3.11-rpm-macros - Initial package - Fedora contributions by: Alex Cobb <alex.cobb@smart.mit.edu> Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Gwyn Ciesla <gwync@protonmail.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <i.gnatenko.brain@gmail.com> Jesse Keating <jkeating@fedoraproject.org> Kevin Fenzi <kevin@fedoraproject.org> Marcel Plch <mplch@redhat.com> Miro Hrončok <miro@hroncok.cz> Neal D. Becker <ndbecker2@gmail.com> Orion Poplawski <orion@cora.nwra.com> Peter Robinson <pbrobinson@fedoraproject.org> Petr Viktorin <pviktori@redhat.com> Robert Kuska <rkuska@redhat.com> Scott Talbert <swt@techie.net> serge-sans-paille <sguelton@redhat.com> Thomas Spura <thomas.spura@gmail.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio くらとみ <toshio@fedoraproject.org> Yaakov Selkowitz <yselkowi@redhat.com> - Rebuilt for timestamp .pyc invalidation mode - Security fix for CVE-2025-8194 Resolves: RHEL-106369 - Update to 3.12.12 Resolves: RHEL-125856 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fix for CVE-2026-15308 Resolves: RHEL-RHEL-193793 - Update to 3.12.12 Resolves: RHEL-125856 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fix for CVE-2026-15308 Resolves: RHEL-193793 - Update to Python 3.12.14 Resolves: RHEL-227215 - Initial package - Fedora contributions by: Charalampos Stratakis <cstratak@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Karolina Surma <ksurma@redhat.com> Lumir Balhar <lbalhar@redhat.com> Maxwell G <maxwell@gtmx.me> Miro Hrončok <miro@hroncok.cz> Mukundan Ragavan <nonamedotc@gmail.com> Tomas Hrcka <thrcka@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Yaakov Selkowitz <yselkowi@redhat.com> - Disable bootstrap - Rebuilt for timestamp .pyc invalidation mode - Security fix for CVE-2025-8194 Resolves: RHEL-106369 - Update to 3.12.12 Resolves: RHEL-125856 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fix for CVE-2026-15308 Resolves: RHEL-RHEL-193793 - Update to 3.12.12 Resolves: RHEL-125856 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fix for CVE-2026-15308 Resolves: RHEL-193793 - Update to Python 3.12.14 Resolves: RHEL-227215 - Initial package - Fedora contributions by: Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Tomas Hrnciar <thrnciar@redhat.com> - Enable tests - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Charalampos Stratakis <cstratak@redhat.com> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jeroen van Meeuwen (Kolab Systems) <vanmeeuwen@kolabsys.com> Karolina Surma <ksurma@redhat.com> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Tomáš Hrnčiar <thrnciar@redhat.com> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Alfredo Moralejo <amoralej@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Matthias Runge <mrunge@redhat.com> Miro Hrončok <miro@hroncok.cz> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Thomas Moschny <thm@fedoraproject.org> Tomáš Hrnčiar <thrnciar@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Enable tests - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Devrim Gündüz <devrim@gunduz.org> Filip Januš <fjanus@redhat.com> Honza Horak <hhorak@redhat.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Jason Tibbitts <tibbs@math.uh.edu> Jesse Keating <jkeating@fedoraproject.org> Jozef Mlich <jmlich@redhat.com> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Ondřej Sloup <ondrej.sloup@protonmail.com> Patrik Novotný <panovotn@redhat.com> Pavel Raiskup <praiskup@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Petr Kubat <pkubat@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Todd Zullinger <tmz@fedoraproject.org> Tomas Hrnciar <thrnciar@redhat.com> Tom Lane <tgl@fedoraproject.org> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Devrim Gündüz <devrim@gunduz.org> Filip Januš <fjanus@redhat.com> Honza Horak <hhorak@redhat.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Jason Tibbitts <tibbs@math.uh.edu> Jesse Keating <jkeating@fedoraproject.org> Jozef Mlich <jmlich@redhat.com> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Ondřej Sloup <ondrej.sloup@protonmail.com> Patrik Novotný <panovotn@redhat.com> Pavel Raiskup <praiskup@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Petr Kubat <pkubat@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Todd Zullinger <tmz@fedoraproject.org> Tomas Hrnciar <thrnciar@redhat.com> Tom Lane <tgl@fedoraproject.org> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Elliott Sales de Andrade <quantum.analyst@gmail.com> Jonathan <jonathan@knownhost.com> Merlin Mathesius <mmathesi@redhat.com> Miro Hrončok <miro@hroncok.cz> Pavel Šimovec <psimovec@redhat.com> Susi Lehtola <jussilehtola@fedoraproject.org> Tom Stellard <tstellar@redhat.com> - Enable tests - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Elliott Sales de Andrade <quantum.analyst@gmail.com> Jonathan <jonathan@knownhost.com> Merlin Mathesius <mmathesi@redhat.com> Miro Hrončok <miro@hroncok.cz> Pavel Šimovec <psimovec@redhat.com> Susi Lehtola <jussilehtola@fedoraproject.org> Tom Stellard <tstellar@redhat.com> - Enable tests - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Gwyn Ciesla <limburgher@gmail.com> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Lumir Balhar <lbalhar@redhat.com> Maxwell G <maxwell@gtmx.me> Miro Hrončok <miro@hroncok.cz> Nils Philippsen <nils@redhat.com> Orion Poplawski <orion@cora.nwra.com> Peter Robinson <pbrobinson@gmail.com> Petr Viktorin <pviktori@redhat.com> Richard Shaw <hobbes1069@gmail.com> Robert Kuska <rkuska@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Thomas Moschny <thm@fedoraproject.org> Tomáš Hrnčiar <thrnciar@redhat.com> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Antonio Trande <anto.trande@gmail.com> Bill Nottingham <notting@fedoraproject.org> Björn Esser <me@besser82.io> Charalampos Stratakis <cstratak@redhat.com> Christian Dersch <lupinix@mailbox.org> David Malcolm <dmalcolm@redhat.com> Deji Akingunola <deji@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> Elliott Sales de Andrade <quantum.analyst@gmail.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iñaki Úcar <iucar@fedoraproject.org> Jef Spaleta <jspaleta@fedoraproject.org> Jerry James <loganjerry@gmail.com> Jesse Keating <jkeating@fedoraproject.org> Jitka Plesnikova <jplesnik@redhat.com> Jonathan Wakely <jwakely@redhat.com> Jon Ciesla <limb@fedoraproject.org> Kalev Lember <klember@redhat.com> Kevin Fenzi <kevin@scrye.com> Lumir Balhar <lbalhar@redhat.com> Mamoru TASAKA <mtasaka@fedoraproject.org> Marcel Plch <mplch@redhat.com> Miro Hrončok <miro@hroncok.cz> Nikola Forró <nforro@redhat.com> Nils Philippsen <nils@redhat.com> Orion Poplawski <orion@cora.nwra.com> Pavel Šimovec <psimovec@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Petr Viktorin <pviktori@redhat.com> Robert Kuska <rkuska@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Tomas Tomecek <ttomecek@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> Troy Dawson <tdawson@fedoraproject.org> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Davide Cavalca <dcavalca@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> Haikel Guemar <hguemar@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Javier Pena <jpena@redhat.com> Miro Hrončok <miro@hroncok.cz> Petr Viktorin <pviktori@redhat.com> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Christian Heimes <cheimes@redhat.com> Fabio Valentini <decathorpe@gmail.com> Gwyn Ciesla <limb@fedoraproject.org> Maxwell G <maxwell@gtmx.me> Miro Hrončok <miro@hroncok.cz> Tomáš Hrnčiar <thrnciar@redhat.com> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Haikel Guemar <hguemar@fedoraproject.org> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Jesse Keating <jkeating@fedoraproject.org> Karolina Surma <ksurma@redhat.com> Kevin Fenzi <kevin@scrye.com> Konstantin Ryabitsev <icon@fedoraproject.org> Lumir Balhar <lbalhar@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Miro Hrončok <miro@hroncok.cz> Nils Philippsen <nils@redhat.com> Orion Poplawski <orion@cora.nwra.com> Petr Viktorin <pviktori@redhat.com> Pierre-Yves Chibon <pingou@pingoured.fr> Ralph Bean <rbean@redhat.com> Randy Barlow <randy@electronsweatshop.com> Robert Kuska <rkuska@redhat.com> Thomas Spura <thomas.spura@gmail.com> Tomáš Hrnčiar <thrnciar@redhat.com> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> Troy Dawson <tdawson@redhat.com> Ville Skyttä <scop@fedoraproject.org> - Disable bootstrap - Rebuilt for timestamp .pyc invalidation mode - Security fix for CVE-2024-6345 Resolves: RHEL-49985 - Security fix for CVE-2025-47273 Resolves: RHEL-101118 - Security fix for CVE-2025-8194 Resolves: RHEL-106369 - Update to 3.12.12 Resolves: RHEL-125856 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fix for CVE-2026-15308 Resolves: RHEL-RHEL-193793 - Update to 3.12.12 Resolves: RHEL-125856 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fix for CVE-2026-15308 Resolves: RHEL-193793 - Update to Python 3.12.14 Resolves: RHEL-227215 - Security fix for CVE-2026-24049 Resolves: RHEL-143652 - RHEL: Rename SPEC to python3.14-Cython.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Add gating.yaml - Update to 3.1.4 - taken from Fedora d26d9ef - Update to 3.1.6 - Fixes: rhbz#2405056 - Update to 3.2.1 - Fixes: rhbz#2414622 - Update to 3.2.4 - Fixes: rhbz#2427014 - CI: call pip3.14 instead of pip - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.6 Related: RHEL-227218 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227218 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227218 - RHEL: Rename SPEC to python3.14-flit-core.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Add gating.yaml - forgotten variable - Disable bootstrap - Remove redundant BuildRequires on python3.14-rpm-macros - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.6 Related: RHEL-227218 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227218 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227218 - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.6 Related: RHEL-227218 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227218 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227218 - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.6 Related: RHEL-227218 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227218 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227218 - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.6 Related: RHEL-227218 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227218 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227218 - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.6 Related: RHEL-227218 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227218 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227218 - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.6 Related: RHEL-227218 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227218 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227218 - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.6 Related: RHEL-227218 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227218 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227218 - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.6 Related: RHEL-227218 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227218 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227218 - RHEL: Rename SPEC to python3.14-iniconfig.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Add gating.yaml - RHEL: Rename SPEC to python3.14-meson-python.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Add gating - RHEL: Rename SPEC to python3.14-packaging.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Add gating - Enable bootstrap - Revert "Enable bootstrap" - Initial package - Fedora contributions by: Alfredo Moralejo <amoralej@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Matthias Runge <mrunge@redhat.com> Miro Hrončok <mhroncok@redhat.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Priscila Gutierres <pgutier@redhat.com> Thomas Moschny <thomas.moschny@gmx.de> Tomas Orsava <torsava@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Initial package Fedora contributions by: Ales Nezbeda <anezbeda@redhat.com> Bill Nottingham <notting@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Devrim Gündüz <devrim@gunduz.org> Filip Januš <fjanus@redhat.com> Honza Horak <hhorak@redhat.com> Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Jason L Tibbitts III <tibbs@math.uh.edu> Jesse Keating <jkeating@fedoraproject.org> Jozef Mlich <jmlich@redhat.com> Lumír Balhar <lbalhar@redhat.com> Miro Hrončok <mhroncok@redhat.com> Ondřej Sloup <ondrej.sloup@protonmail.com> Patrik Novotný <panovotn@redhat.com> Pavel Raiskup <praiskup@redhat.com> Petr Kubat <pkubat@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Todd Zullinger <tmz@pobox.com> Tomas Hrnciar <thrnciar@redhat.com> Tom Lane <tgl@redhat.com> - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Bootstrap for Python 3.14 - Rebuilt for Python 3.14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Rebuilt for Python 3.14.0rc2 bytecode - Refactor the build script - Drop the python3-python2 distinction - Use standard cmake and pyproject macros (rhbz#2377381) - Allow to build with arbitrary generator (rhbz#2381106) - RHEL: Rename SPEC to python3.14-pybind11.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Add gating - Enable tests / disable bootsrap - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Bootstrap for Python 3.14 - Rebuilt for Python 3.14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Rebuilt for Python 3.14.0rc2 bytecode - Refactor the build script - Drop the python3-python2 distinction - Use standard cmake and pyproject macros (rhbz#2377381) - Allow to build with arbitrary generator (rhbz#2381106) - RHEL: Rename SPEC to python3.14-pybind11.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Add gating - Enable tests / disable bootsrap - RHEL: Rename SPEC to python3.14-pyproject-metadata.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Add gating - RHEL: Rename SPEC to python3.14-pytest.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Add gating - RHEL: Rename SPEC to python3.14-semantic_version.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Add gating.yaml - Fix pytest in gating plan - RHEL: Rename SPEC to python3.14-setuptools.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Adjust gating - Generic gating.yaml for all rhel - Use CS repos instead of Fedora - Remove python versions not available on c9s - use python-isort to test - Disable bootstrap - RHEL: Rename SPEC to python3.14-semantic-rust.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Add gating - RHEL: Rename SPEC to python3.14-setuptools.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Adjust gating - Generic gating.yaml for all rhel - Use CS repos instead of Fedora - Remove python versions not available on c9s - use python-isort to test - Disable bootstrap - RHEL: Rename SPEC to python3.14-setuptools_scm.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Adjust gating - RHEL: Rename SPEC to python3.14-setuptools_scm.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Adjust gating - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.6 Related: RHEL-227218 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227218 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227218 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to version 2.0.0. - Update to upstream version 2.0.0 - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix license and covscan issues Resolves: #1938732 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild Resolves: #2035319 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix license and covscan issues Resolves: #1938732 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild Resolves: #2035319 - Compile libqhullcpp with -fPIC - Resolves: RHEL-5625 - Release bump to enable added gating.yaml - Resolves: RHEL-5625 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1932052 - qpdf-10.2.0 is available - 1935799 - qpdf-10.3.0 is available - 1937988 - qpdf-10.3.1 is available - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 1950033 - Possible changes in zlib output causes FTBFS for qpdf - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 2095993 - Move qpdf to CRB repository - 2106940 - FIPS breaks pdftopdf and bannertopdf - 2157765 - Ship qpdf-devel in CRB - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1932052 - qpdf-10.2.0 is available - 1935799 - qpdf-10.3.0 is available - 1937988 - qpdf-10.3.1 is available - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 1950033 - Possible changes in zlib output causes FTBFS for qpdf - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 2095993 - Move qpdf to CRB repository - 2106940 - FIPS breaks pdftopdf and bannertopdf - 2157765 - Ship qpdf-devel in CRB - Add support for building upstream tests for gating Resolves: bz#1969433 - Let qt5_install_tests macro to handle mangling python shebangs Resolves: bz#1969433 - Handle additional spaces python shebangs Resolves: bz#1969433 - Use more precise regular expression for python shebangs Resolves: bz#1969433 - Use more robust regular expressions Resolves: bz#1969433 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061352 - 5.15.9 Resolves: bz#2175724 - Fix infinite loops in QXmlStreamReader (CVE-2023-38197) Resolves: bz#2222771 - Fix incorrect integer overflow check in HTTP2 implementation Resolves: RHEL-20239 - Fix CVE-2024-25580: potential buffer overflow when reading KTX images Resolves: RHEL-25726 - HTTP2: Delay any communication until encrypted() can be responded to Resolves: RHEL-46351 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - Add gating tests Resolves: bz#1968462 - Let qt5_install_tests macro handle mangling python shebangs Resolves: bz#1968462 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Sync with Fedora: - sync kde/5.15 branch fixes - pull in candidate fix QTBUG-83890 Resolves: bz#1988934 - Sync with Fedora Resolves: bz#2025420 - 5.15.3 + sync with Fedora Resolves: bz#2061355 - 5.15.9 + sync with Fedora Resolves: bz#2178624 Resolves: bz#2175728 - Disable tests failing in gating Resolves: bz#2175728 - Rebuild (elfutils#2188064) Resolves: bz#2175728 - Rebuild (LLVM-18) Resolves: RHEL-28681 - Rebuild (LLVM-19) Resolves: RHEL-66115 - Rebuild (LLVM-20) Resolves: RHEL-81777 - Rebuild (LLVM-21) Resolves: RHEL-108348 - Update to new upstream version - Add tmpfs quota support - Remove rhel-only patches that were merged upstream - Fix regression - Related: RHEL-50644 - Fix memory leak - Related: RHEL-50914 - Fix patch application - Related: RHEL-50914 - Resolves: CVE-2024-57823 integer underflow when normalizing a URI with the turtle parser - Bump NVR - Rebuild for mpfr 4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - BR: libgcrypt-devel, enforce use of non-bundled crypto digest implementations (RHBZ #1099251) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix FTBFS in ELN - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - rebuild for libpq ABI fix rhbz#1908268 - reduce rhel dependencies to what's needed - rhbz#1936659 rhel redland uses deprecated SHA-1 algorithm by default - rhbz#1936659 disable rhel redland digests and stub deprecated librdf_uri_get_digest - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - rhbz#1952816 rdfproc: Failed to open hashes storage - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Ship rest-devel in CRB Resolves: RHEL-122661 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Initial commit on c9s - RHEL-9 CI and gating setup - Pull PQC crypto to rpm-sequoia - Used macros for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - F-34: rebuild against ruby 3.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Removed rpath from python bindings Resolves: rhbz#1960385 - Removed rpath from python bindings better way Related: rhbz#1960385 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixed stack buffer overflow in rrdcached and added more security checks Resolves: RHEL-173257 - Used macros for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - F-34: rebuild against ruby 3.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Removed rpath from python bindings Resolves: rhbz#1960385 - Removed rpath from python bindings better way Related: rhbz#1960385 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixed stack buffer overflow in rrdcached and added more security checks Resolves: RHEL-173257 - Used macros for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - F-34: rebuild against ruby 3.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Removed rpath from python bindings Resolves: rhbz#1960385 - Removed rpath from python bindings better way Related: rhbz#1960385 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixed stack buffer overflow in rrdcached and added more security checks Resolves: RHEL-173257 - Used macros for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - F-34: rebuild against ruby 3.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Removed rpath from python bindings Resolves: rhbz#1960385 - Removed rpath from python bindings better way Related: rhbz#1960385 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixed stack buffer overflow in rrdcached and added more security checks Resolves: RHEL-173257 - Used macros for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - F-34: rebuild against ruby 3.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Removed rpath from python bindings Resolves: rhbz#1960385 - Removed rpath from python bindings better way Related: rhbz#1960385 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixed stack buffer overflow in rrdcached and added more security checks Resolves: RHEL-173257 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Rebase to Fedora Rawhide resolves: RHEL-56803 - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Run the fstrim command twice resolves: RHEL-88508 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix the broken SSL tests with MariaDB 10.5.18. Resolves: RHEL-80220 - Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to pg 1.2.2. - Update to pg 1.2.3. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_3.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - rebuild for libpq ABI fix rhbz#1908268 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 3.9.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 3.10.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Enable tests again - 3.10.1 - Ruby 3.0: Disable failing cucumber suite for now - rr 1.2.1: Disable failing cucumber suite for now - Add conditional for eln - Make test suite green. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Disable integration test suite to cut down the dependency tree. Resolves: rhbz#1952842 - Re-add Requires: rubygem(rake), as it's needed for runtime. Resolves: rhbz#1982410 Resolves: rhbz#1982419 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 3.9.1 - 3.9.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 3.10.0 - Once disable test for bootstrap - Enable tests again - 3.10.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 3.9.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 3.10.0 - Once disable test for bootstrap - Enable tests again - 3.10.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 3.10.2 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 3.9.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 3.10.0 - Once disable test for bootstrap - Enable tests again - 3.10.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 3.10.2 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Bump build number - Update to version 4.23.4 - resolves: RHEL-114548 - Update to version 4.23.4 - resolves: RHEL-132995 - Fix Time Machine backup - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba - Remove libldb dependency to samba-common-libs - resolves: RHEL-133003 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Bump build number - Update to version 4.23.4 - resolves: RHEL-114548 - Update to version 4.23.4 - resolves: RHEL-132995 - Fix Time Machine backup - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba - Remove libldb dependency to samba-common-libs - resolves: RHEL-133003 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Bump build number - Update to version 4.23.4 - resolves: RHEL-114548 - Update to version 4.23.4 - resolves: RHEL-132995 - Fix Time Machine backup - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba - Remove libldb dependency to samba-common-libs - resolves: RHEL-133003 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Bump build number - Update to version 4.23.4 - resolves: RHEL-114548 - Update to version 4.23.4 - resolves: RHEL-132995 - Fix Time Machine backup - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba - Remove libldb dependency to samba-common-libs - resolves: RHEL-133003 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - fix rpm issues - upstream release, fix rpm issues - upstream release - fix invalid strcpy in direct dump - upstream release 3.9.5, and udevadm settle patch - spec file fixes - new nodelay flag for add_lockspace - new upstream release - Bump release. - new upstream release - Bump release to address sbc-devel inclusion to CRB Resolves: RHEL-105435 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to new snapshot release - Update to new snapshot release - Update to new snapshot release - Ensure SDL2 dependency is arched - Update to new snapshot release - Update to new snapshot release - Obsolete the SDL package properly - Bump for rebuild after resync - Conflict with all old SDL subpackages properly - Rebase to 1.2.52 Resolves: rhbz#2060907 - Rebase to 1.2.60 Resolves: rhbz#2127565 - seabios-pciinit-don-t-misalign-large-BARs.patch [RHEL-67846] - Resolves: RHEL-67846 (amdgpu failed to initialize when multiple AMD MI210 GPUs assigned and firmware is seabios [rhel-9]) - seabios-Remove-iasl-from-BuildRequires.patch [RHEL-39020] - Resolves: RHEL-39020 (remove iasl build dependency) - seabios-update-release-date.patch [RHEL-131918 RHEL-131921] - seabios-turn-off-SMM-support.patch [RHEL-131918 RHEL-131921] - Resolves: RHEL-131918 ([rhel-9] SeaBIOS date is "stuck" at 2014 even for recent releases) - Resolves: RHEL-131921 ([RHEL-9] Grub graphics modules crash VM when there's no graphics) - Allow the build to start on ppc64le - seabios-pciinit-don-t-misalign-large-BARs.patch [RHEL-67846] - Resolves: RHEL-67846 (amdgpu failed to initialize when multiple AMD MI210 GPUs assigned and firmware is seabios [rhel-9]) - seabios-Remove-iasl-from-BuildRequires.patch [RHEL-39020] - Resolves: RHEL-39020 (remove iasl build dependency) - seabios-update-release-date.patch [RHEL-131918 RHEL-131921] - seabios-turn-off-SMM-support.patch [RHEL-131918 RHEL-131921] - Resolves: RHEL-131918 ([rhel-9] SeaBIOS date is "stuck" at 2014 even for recent releases) - Resolves: RHEL-131921 ([RHEL-9] Grub graphics modules crash VM when there's no graphics) - Allow the build to start on ppc64le - Fixed verification of the ghost files Resolves: rhbz#2052091 - Fixed verification of the ghost files Resolves: rhbz#2052091 - Skip symlink generation for multipath (RHEL-29139) - Skip symlink generation for multipath (RHEL-29139) - sg_inq output conformance for SCSI name string and ATA fields (RHEL-188130) - login.defs: Update SHA_CRYPT_MAX_ROUNDS from 5000 to 100000. Resolves: RHEL-40195 - Disable sssd integration by default. Resolves: RHEL-56352 - salt: remove rounds from salt string. Resolves: RHEL-58978 - nss.c: shadow_logfd to stderr. Resolves: RHEL-83431 - vipw: restore the original terminal pgrp after editing. Resolves: RHEL-70844 and RHEL-72940 - groupmod.c: --help wfix. Resolves: RHEL-130879 - Fix building with GCC 10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add py_ssize_t_clean module support for compatibility with python-qt5 Resolves: RHEL-27554 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to version 1.2.4 * https://gitlab.com/cwrap/socket_wrapper/-/blob/master/CHANGELOG - Use __cmake_in_source_build - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to version 1.2.4 * https://gitlab.com/cwrap/socket_wrapper/-/blob/master/CHANGELOG - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Make sombok-devel package multilib safe (bug #1853260) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for shipping devel subpackage in CRB - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixed FTBFS - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.10.1 - Fix crash with python 3.9 (#1878276) - Update to 0.10.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - CVE-2020-23903 speex: divide by zero in read_samples() via crafted WAV file - Resolves: CVE-2020-23903 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.2.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Backport clipboard-race patches for #1755038 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.14.1 release - Update to 0.14.2 release (now using meson only) - Add gpg check to release's signature - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.14.3 release - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - https://fedoraproject.org/wiki/Changes/FlexiBLAS_as_BLAS/LAPACK_manager - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - drop metis Resolves: #1977815 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Disable lazy binding (#2044892) - Remove RPATH (#2056604) - Rebase to Fedora Rawhide resolves: RHEL-56805 - Enable building for ppc64le - Add fix for newer NodeJS version - Remove BR for Python 2 (bug#1807547) - Update to 4.0.2 - Use make macros https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Disable Go tests - Enable tests for Python 3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Backport support of PHP8 from upstream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Disable PHP test, it fails with PHP 8.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Fix tests against GCC12, enable Guile tests - Disable Java tests - Rebuild for octave 7.1 - Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191, CVE-2022-29526, CVE-2022-30629 - Rebuild for CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang - Exclude golang extension from i686 - Update to 4.1.0 - Update to 4.1.1 - Fix gcc's -Wformat-security warning in R Raise function (rhbz#2277767) - OCaml 5.2.0 for Fedora 41 - OCaml 5.2.0 ppc64le fix - Rebuild for Python 3.13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - 4.3.0 bump (rhbz#2320047) - Fix precedence of casts - Rebuild for octave 9.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Disable R tests, because they need tcl < 9 - Add fix for newer NodeJS version - Remove BR for Python 2 (bug#1807547) - Update to 4.0.2 - Use make macros https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Disable Go tests - Enable tests for Python 3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Backport support of PHP8 from upstream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Disable PHP test, it fails with PHP 8.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Fix tests against GCC12, enable Guile tests - Disable Java tests - Rebuild for octave 7.1 - Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191, CVE-2022-29526, CVE-2022-30629 - Rebuild for CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang - Exclude golang extension from i686 - Update to 4.1.0 - Update to 4.1.1 - Fix gcc's -Wformat-security warning in R Raise function (rhbz#2277767) - OCaml 5.2.0 for Fedora 41 - OCaml 5.2.0 ppc64le fix - Rebuild for Python 3.13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - 4.3.0 bump (rhbz#2320047) - Fix precedence of casts - Rebuild for octave 9.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Disable R tests, because they need tcl < 9 - Add fix for newer NodeJS version - Remove BR for Python 2 (bug#1807547) - Update to 4.0.2 - Use make macros https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Disable Go tests - Enable tests for Python 3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Backport support of PHP8 from upstream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Disable PHP test, it fails with PHP 8.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Fix tests against GCC12, enable Guile tests - Disable Java tests - Rebuild for octave 7.1 - Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191, CVE-2022-29526, CVE-2022-30629 - Rebuild for CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang - Exclude golang extension from i686 - Update to 4.1.0 - Update to 4.1.1 - Fix gcc's -Wformat-security warning in R Raise function (rhbz#2277767) - OCaml 5.2.0 for Fedora 41 - OCaml 5.2.0 ppc64le fix - Rebuild for Python 3.13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - 4.3.0 bump (rhbz#2320047) - Fix precedence of casts - Rebuild for octave 9.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Disable R tests, because they need tcl < 9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.12 (#1584870) - use versioned obsoletes - -devel: fix/drop -lz references in taglib-config, taglib.pc - fix multilib.patch (#1943870) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for ICU 65 - Update to 4.1.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuild for ICU 67 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - add additional Provides: tex-texinfo ("it's an older code sir, but it checks out") - Add BR: perl(Unicode::Normalize) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix problem in shell code found by ShellCheck in test script - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix issues found by static analysis Resolves: #1938884 - Rebuild Related: #1938884 - Rebuild Related: #1938884 - add additional Provides: tex-texinfo ("it's an older code sir, but it checks out") - Add BR: perl(Unicode::Normalize) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix problem in shell code found by ShellCheck in test script - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix issues found by static analysis Resolves: #1938884 - Rebuild Related: #1938884 - Rebuild Related: #1938884 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Honoured distribution LDFLAGS Resolves: rhbz#2044894 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros, patch by Tom Stellard <tstellar@redhat.com> - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros, patch by Tom Stellard <tstellar@redhat.com> - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update OpenSSL certificates set up Resolves: RHEL-81721 - Remove deprecated path from systemd service file Resolves: RHEL-81716 - Use systemd-sysusers for the 'pegasus' user and group creation - Fix Requires of subpackages Related: RHEL-90737 - Add support for Image Mode Resolves: RHEL-90737 - Add support for post-quantum cryptography Resolves: RHEL-127514 - Fix multilib issue with systemd-sysusers config Related: RHEL-90737 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Remove user-creation code that is already handled by a requirement. Resolves: RHEL-8814 - Fix memory leaks, potential crashes, upgrade to OpenSSL 3 Resolves: rhbz#2041919 - Rebase to 3.2.2 - Use systemd-sysusers to create user Resolves: CVE-2023-22745 Resolves: rhbz#2095479 Resolves: rhbz#2160307 Resolves: rhbz#2162613 - Remove misapplied license Resolves: rhbz#2160307 - Rebase to 3.2.3 Resolves: RHEL-23206 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.1.0.rc, based on earlier tracker3 packaging - Obsolete separate tracker3 packages - Obsolete libtracker-control and libtracker-miner - Add conflicts with tracker3 packages to help with the upgrade path - Update to 3.1.0 - Update to 3.1.1 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.1.2 - Ship tracker-devel in CRB - Backport module-based libsoup support Resolves: rhbz#2137366 - Detect nan in spline control values - CVE-2025-46397 - Fix CVE-2021-46822 - Resolves: CVE-2021-46822 - Fix CVE-2021-29390 - Resolves: RHEL-5413 - Fix CVE-2021-46822 - Resolves: CVE-2021-46822 - Fix CVE-2021-29390 - Resolves: RHEL-5413 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Correct License field. See COPYING file for more details. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add CI test. Resolves: rhbz#2011170 - Bump a release to make sure shipping uchardet-devel to CRB. Resolves: rhbz#2086260 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Correct License field. See COPYING file for more details. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add CI test. Resolves: rhbz#2011170 - Bump a release to make sure shipping uchardet-devel to CRB. Resolves: rhbz#2086260 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - related: rhbz#2013578 - Rebase to version 1.2.9 - related: rhbz#2028819 - Rebuild for RHEL 9.1 - Add possibility to disable unbound-anchor by file presence - Resolves: RHEL-78694 - Add as112 networks config file - Resolves: RHEL-78696 - Prevent unbounded name compression (CVE-2024-8508) - Fix regression on update introduced by local-root symlink - Resolves: RHEL-92255 - Fix verification of unbound-control key files - Resolves: RHEL-65396 - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104129 - Create root key if missing automatically (RHEL-127540) - Do not verify root.key in libs (RHEL-64339) - Add new root key 38696 (RHEL-77716) - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time - Prevent unbounded name compression (CVE-2024-8508) - Fix regression on update introduced by local-root symlink - Resolves: RHEL-92255 - Fix verification of unbound-control key files - Resolves: RHEL-65396 - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104129 - Create root key if missing automatically (RHEL-127540) - Do not verify root.key in libs (RHEL-64339) - Add new root key 38696 (RHEL-77716) - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time - Install correct trust anchor source in Image Mode (RHEL-127540) - Fix CVE-2026-33278 (RHEL‑177822) Fix CVE-2026-42944 (RHEL-177936) Fix CVE-2026-42959 (RHEL-177797) - Fix regression on update introduced by local-root symlink - Resolves: RHEL-92255 - Fix verification of unbound-control key files - Resolves: RHEL-65396 - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104129 - Create root key if missing automatically (RHEL-127540) - Do not verify root.key in libs (RHEL-64339) - Add new root key 38696 (RHEL-77716) - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time - Install correct trust anchor source in Image Mode (RHEL-127540) - Fix CVE-2026-33278 (RHEL-177822) Fix CVE-2026-42944 (RHEL-177936) Fix CVE-2026-42959 (RHEL-177797) - Fix CVE-2026-40622 (RHEL-184840) Fix CVE-2026-44390 (RHEL-186688) Fix CVE-2026-41292 (RHEL-187352) Fix CVE-2026-42534 (RHEL-187095) - Fix CVE-2026-55973 (RHEL-212809) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - update to Unicode 13 - https://www.unicode.org/versions/Unicode13.0.0/ - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Import from Fedora. Sorry, cannot keep the changelog history. - Rebuild for CRB Related: #2180559 - Rebase to version 2.3.12 - Add unixODBC-c89.patch for GCC 14 compatibility - Update so-version-bump.patch for new version - Fix multilib_fix_c_header path to match actual header location - Resolves: RHEL-94798 - Fix imobiledevice support with new libplist, rebuild for soname bumps + upower-0.99.11-5 - Use upstreamed libplist patch - Add support for iPhone XS,XR - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + upower-0.99.11-7 - Disable libimobiledevice integration on RHEL + upower-0.99.11-8 - Remove USB dependency - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.99.13 Resolves: #1994639 - Rebuild with updated test dependencies Related: #1994639 - Fix imobiledevice support with new libplist, rebuild for soname bumps + upower-0.99.11-5 - Use upstreamed libplist patch - Add support for iPhone XS,XR - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + upower-0.99.11-7 - Disable libimobiledevice integration on RHEL + upower-0.99.11-8 - Remove USB dependency - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.99.13 Resolves: #1994639 - Rebuild with updated test dependencies Related: #1994639 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - do not mention specific OS in description - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebase to 20200910 version (#1877974) - Fix some X11-related packaging bugs (#1918947) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Require mkfontscale and mkfontdir directly (#1937125) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Avoid use-after-free in serialization Related: rhbz#1992873 - Rebase to latest upstream: 0.12.0 Related: rhbz#2020215 - Fix gating process Related: rhbz#2020215 - Fix unserialization (migration regression) Related: rhbz#2111368 - Rebase to latest upstream: 0.13.0 - Keeps usbredirserver binary (removed upstream) Related: rhbz#2135760 - Fixes 100% CPU usage when usbredirect used as TCP server Related: rhbz#2157520 - Fixes USB redirection of identical devices Resolves: rhbz#2157520 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - New upstream release - New upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Replace arch-dependent /usr/include/urcu/config.h with arch-independent stub when needed. (bz# 1951223) - Added CI gating tests - Resolves: bz #1951223 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - New upstream release. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Specify all perl dependencies - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - fix build flags (#2044896) - Rebuilt for CRB inclusion Resolves: RHEL-135108 - Update to 0.48.12 - Fix multilib conflicts in vala-gen-introspect - Update to 0.48.13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.48.14 - Update to 0.48.15 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 0.48.17 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.48.19 - Resolves: RHEL-30337 - varnish: HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156) - Resolves: RHEL-89702 - varnish: request smuggling attacks (CVE-2025-47905) - Resolves: RHEL-121819 - Image mode: fix creation of /var files - Ignore test case that fails on Java 11 - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Port to commons-lang3. - Default to JDK logging and drop commons-logging and log4j12 implementations. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - make volume_key FIPS compliant (RHEL-78044) - ake getting password from backed up secret FIPS compatible (RHEL-113757) - Fix bogus volatile caught by gcc-11 - Accommodate 'sudo toolbox' when tracking the active container - Update to 0.62.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.62.3 - Use https URLs for upstream - Revert a change that limited select all, as decided by Workstation WG - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 0.64.1 Resolves: #1957970 - Update to 0.64.2 - Add missing _VTE_CXX_NOEXCEPT to downstream patches (#1973174) - Fix the License fields and ship the correct license texts (#1973299) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update wavpack to 5.4.0 (#1915740) - Security fix for CVE-2020-35738 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - CVE-2021-44269 wavpack: heap Out-of-bounds Read - Resolves: CVE-2021-44269 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: RHEL-14596 - Wireshark hangs if dumpcap returned unexpected messages in sync pipe. - Resolves: RHEL-55554 - NFS packets decrypted via TLS are displayed as RPC - Resolves: RHEL-130438 - Access of Uninitialized Pointer in Wireshark - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Get rid of all things RPATH - Add Coverity Scan fixes patch - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix 9.1.0 FTBFS - Update to 1.8.0 - Move libWPEBackend-fdo-1.0.so back to -devel package - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.9.1 - Update to 1.9.90 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.9.91 - Resolves: #1947186 - Update to 1.9.92 - Add GPG verification of source tarball - Resolves: #1961049 - Update to 1.10.0 - Resolves: #1968640 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt to add -devel subpackage to CRB Resolves: #2059249 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.4.14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.4.17 - Fix missing #include for gcc-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.4.18 - Spec file cleanups - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump NVR for el8->el9 upgrade path - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Remove springframework conditionals, the deps are a long time removed from Fedora and this simplifies the spec a bit - Disable unused modules that can't build on JDK 11 - Update to upsteam version 4.17 - Switch from log4j 1.2 compat package to log4j 1.2 API shim. - Update to upstream version 4.18 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Add patch to fix python module for use with Python 3.9 - Modernize spec file - Update patch to fix python module for use with Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - xcb-proto 1.14.1 - Enable testsuite - Explicit BR: make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop bundled expat and build against libxml2 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25236 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop bundled expat and build against libxml2 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25236 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop bundled expat and build against libxml2 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25236 - Fix memory leaks found by SAST Resolves: RHEL-35381 - Add xmlsec1-gnutls dependency on xmlsec1-gcrypt Related: RHEL-35381 - Fix double free in xmlSecGCryptAsymKeyDataGenerate Related: RHEL-35381 - Fix adopt function the same way as in upstream Related: RHEL-35381 - Fix memory leaks found by SAST Resolves: RHEL-35381 - Add xmlsec1-gnutls dependency on xmlsec1-gcrypt Related: RHEL-35381 - Fix double free in xmlSecGCryptAsymKeyDataGenerate Related: RHEL-35381 - Fix adopt function the same way as in upstream Related: RHEL-35381 - Fix memory leaks found by SAST Resolves: RHEL-35381 - Add xmlsec1-gnutls dependency on xmlsec1-gcrypt Related: RHEL-35381 - Fix double free in xmlSecGCryptAsymKeyDataGenerate Related: RHEL-35381 - Fix adopt function the same way as in upstream Related: RHEL-35381 - Fix memory leaks found by SAST Resolves: RHEL-35381 - Add xmlsec1-gnutls dependency on xmlsec1-gcrypt Related: RHEL-35381 - Fix double free in xmlSecGCryptAsymKeyDataGenerate Related: RHEL-35381 - Fix adopt function the same way as in upstream Related: RHEL-35381 - Fix memory leaks found by SAST Resolves: RHEL-35381 - Add xmlsec1-gnutls dependency on xmlsec1-gcrypt Related: RHEL-35381 - Fix double free in xmlSecGCryptAsymKeyDataGenerate Related: RHEL-35381 - Fix adopt function the same way as in upstream Related: RHEL-35381 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to upstream version 2.7.0 - Update to upstream version 2.8.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix FTBFS by patching ValueAssertTest to adjust for changed format of mismatched string exception - Update previous patch to use improved version that was merged upstream - Bootstrap build - Non-bootstrap build - Bootstrap Maven for CentOS Stream 9 - Rebuild to workaround DistroBaker issue - Clean tarball from content with questionable licensing - Resolves: rhbz#1973743 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add bindings for XMvn toolchains - Resolves: RHEL-70855, RHEL-70860 - Related: RHEL-71057 - Add bindings for XMvn toolchains - Resolves: RHEL-70855, RHEL-70860 - Related: RHEL-71057 - Add bindings for XMvn toolchains - Resolves: RHEL-70855, RHEL-70860 - Related: RHEL-71057 - Add bindings for XMvn toolchains - Resolves: RHEL-70855, RHEL-70860 - Related: RHEL-71057 - Add bindings for XMvn toolchains - Resolves: RHEL-70855, RHEL-70860 - Related: RHEL-71057 - Add bindings for XMvn toolchains - Resolves: RHEL-70855, RHEL-70860 - Related: RHEL-71057 - Add bindings for XMvn toolchains - Resolves: RHEL-70855, RHEL-70860 - Related: RHEL-71057 - Add bindings for XMvn toolchains - Resolves: RHEL-70855, RHEL-70860 - Related: RHEL-71057 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Ship xorg-x11-drv-evdev-devel in CRB (#2050369) - Map some high keycodes into the FK20-FK23 range (RHEL-84833) - Add support for Wacom Intuos Pro 3rd Gen (RHEL-106467) - Map ABS_THROTTLE to ring2 on all dualring devices (RHEL-106467) - Fix axis inversion on the first relative dial (RHEL-106467) - Add support for Wacom Intuos Pro 3rd Gen (RHEL-106467) - Map ABS_THROTTLE to ring2 on all dualring devices (RHEL-106467) - Fix axis inversion on the first relative dial (RHEL-106467) - Emulate a zero axis events after REL_WHEEL (RHEL-153540) - Fix ToolSerials assignment for serials greater than INT_MAX (RHEL-153532) - Fix for CVE-2024-9632 - (RHEL-61997) - CVE fix for: CVE-2025-26594 (RHEL-80204), CVE-2025-26595 (RHEL-80187), CVE-2025-26596 (RHEL-80190), CVE-2025-26597 (RHEL-80193), CVE-2025-26598 (RHEL-80195), CVE-2025-26599 (RHEL-80202), CVE-2025-26600 (RHEL-80203), CVE-2025-26601 (RHEL-80207) - CVE fix for: CVE-2025-49175 (RHEL-97288), CVE-2025-49176 (RHEL-97334), CVE-2025-49177 (RHEL-97357), CVE-2025-49178 (RHEL-97393), CVE-2025-49179 (RHEL-97404), CVE-2025-49180 (RHEL-97244) - CVE fix for: CVE-2025-62229 (RHEL-119977), CVE-2025-62230 (RHEL-120023), CVE-2025-62231 (RHEL-125018) - Rebase to Xwayland 24.1.9 (RHEL-129828) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117510 - Fix a regression in Xwayland 24.1.9 with XTS test Xlib10 Resolves: https://redhat.atlassian.net/browse/RHEL-170368 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163199 Resolves: https://redhat.atlassian.net/browse/RHEL-163295 Resolves: https://redhat.atlassian.net/browse/RHEL-163253 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263 Resolves: https://redhat.atlassian.net/browse/RHEL-182426 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184292 - CVE fix for: CVE-2025-26594 (RHEL-80204), CVE-2025-26595 (RHEL-80187), CVE-2025-26596 (RHEL-80190), CVE-2025-26597 (RHEL-80193), CVE-2025-26598 (RHEL-80195), CVE-2025-26599 (RHEL-80202), CVE-2025-26600 (RHEL-80203), CVE-2025-26601 (RHEL-80207) - CVE fix for: CVE-2025-49175 (RHEL-97288), CVE-2025-49176 (RHEL-97334), CVE-2025-49177 (RHEL-97357), CVE-2025-49178 (RHEL-97393), CVE-2025-49179 (RHEL-97404), CVE-2025-49180 (RHEL-97244) - CVE fix for: CVE-2025-62229 (RHEL-119977), CVE-2025-62230 (RHEL-120023), CVE-2025-62231 (RHEL-125018) - Rebase to Xwayland 24.1.9 (RHEL-129828) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117510 - Fix a regression in Xwayland 24.1.9 with XTS test Xlib10 Resolves: https://redhat.atlassian.net/browse/RHEL-170368 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163199 Resolves: https://redhat.atlassian.net/browse/RHEL-163295 Resolves: https://redhat.atlassian.net/browse/RHEL-163253 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263 Resolves: https://redhat.atlassian.net/browse/RHEL-182426 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184292 - CVE fix for: CVE-2026-55999, CVE-2026-56000 Resolves: https://redhat.atlassian.net/browse/RHEL-191530 Resolves: https://redhat.atlassian.net/browse/RHEL-191519 - xwayland 23.2.7 - (RHEL-29912) - Fix for CVE-2024-9632 - (RHEL-61997) - CVE fix for: CVE-2025-26594 (RHEL-80204), CVE-2025-26595 (RHEL-80187), CVE-2025-26596 (RHEL-80190), CVE-2025-26597 (RHEL-80193), CVE-2025-26598 (RHEL-80195), CVE-2025-26599 (RHEL-80202), CVE-2025-26600 (RHEL-80203), CVE-2025-26601 (RHEL-80207) - CVE fix for: CVE-2025-49175 (RHEL-97288), CVE-2025-49176 (RHEL-97334), CVE-2025-49177 (RHEL-97357), CVE-2025-49178 (RHEL-97393), CVE-2025-49179 (RHEL-97404), CVE-2025-49180 (RHEL-97244) - CVE fix for: CVE-2025-62229 (RHEL-119977), CVE-2025-62230 (RHEL-120023), CVE-2025-62231 (RHEL-125018) - Rebase to Xwayland 24.1.9 (RHEL-129828) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117510 - Fix a regression in Xwayland 24.1.9 with XTS test Xlib10 Resolves: https://redhat.atlassian.net/browse/RHEL-169765 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163200 Resolves: https://redhat.atlassian.net/browse/RHEL-163296 Resolves: https://redhat.atlassian.net/browse/RHEL-163254 - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493 - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163227 Resolves: https://redhat.atlassian.net/browse/RHEL-163309 Resolves: https://redhat.atlassian.net/browse/RHEL-163240 - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493 - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163227 Resolves: https://redhat.atlassian.net/browse/RHEL-163309 Resolves: https://redhat.atlassian.net/browse/RHEL-163240 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Add BuildRequires for make - Update to util-macros 1.19.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Support ipv6.disable=1, corresponding to c8s Resolves: RHEL-116593 - Packaging of xxhash v0.8.1 for CS and RHEL copied from Fedora 36 - Fix broken manpages (upstream commit 836f4e735cf3) - Add OSCI testing harness - Update to version 0.8.2 - Drop patch 1-fix-man-page-installation.patch - Use SPDX license identifiers - Packaging of xxhash v0.8.1 for CS and RHEL copied from Fedora 36 - Fix broken manpages (upstream commit 836f4e735cf3) - Add OSCI testing harness - Update to version 0.8.2 - Drop patch 1-fix-man-page-installation.patch - Use SPDX license identifiers - fix CVE-2023-33460 - Resolves: #2221253 - fix CVE-2022-24795 - Related: Jira:RHEL-2112 - spec file fixes - Related: RHEL-60277 - Add missing BuildRequires - Related: RHEL-60277 - bump to 4.5.2 - remove pcre build dependency - Fix CVE-2025-3155 (RHEL-85927) - Fix CVE-2025-3155 (RHEL-85927) - Fix CVE-2026-13601 (RHEL-190224) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix for IBM compressBound() rhbz#2056899 - Fix CVE-2018-25032 Resolves: CVE-2018-25032 - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c - Resolves: CVE-2022-37434 - Fix for IBM strm.adler rhbz#2134074 - Inflate small window optimization for IBM z15 rhbz#2154775 - Rebased Power 8 optimization patches - Fix for Unnecessary IFUNC resolver for crc32_z - Fix for python3.11 broken libxml2 and lxml on s390x - Resolve fuzzing issue for unknown memory access - Fix covscan issue CWE-681 - Fix the Crash in zlib deflateBound() function on s390x - Resolves: BZ#2193044 - Fix CVE-2020-18770 Resolves: RHEL-14967 - Fix CVE-2020-18770 Previous patch was causing segfault Resolves: RHEL-14967 - Fix a directory traversal issue in unzip-mem Resolves: RHEL-6266