# changelog

author: Jan Stancek <jstancek@redhat.com> [6.12.0-32.el10]
changelog:
  - selftests/bpf: Remove ksyms_weak_lskel test (Artem Savkov) [RHEL-48593]
  - redhat/spec: Add libxml2-devel dependency for selftests build (Viktor Malik) [RHEL-48593]
  - redhat/spec: Bypass check-rpaths for kselftests/bpf/urandom_read (Viktor Malik) [RHEL-48593]
  - redhat/spec: Do not use source fortification for selftests (Viktor Malik) [RHEL-48593]
  - redhat/spec: Fix BPF selftests build with PIE (Viktor Malik) [RHEL-48593]
  - redhat/spec: Add EXTRA_CXXFLAGS to bpf samples and selftests make (Artem Savkov) [RHEL-48593]
  - selftests/bpf: Allow building with extra flags (Viktor Malik) [RHEL-48593]
  - selftests/bpf: Disable warnings on unused flags for Clang builds (Viktor Malik) [RHEL-48593]
  - bpftool: Prevent setting duplicate _GNU_SOURCE in Makefile (Viktor Malik) [RHEL-48593]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-33.el10]
changelog:
  - redhat: Re-enable CONFIG_INFINIBAND_VMWARE_PVRDMA for x86 (Vitaly Kuznetsov) [RHEL-41133]
  - HID: hyperv: streamline driver probe to avoid devres issues (Vitaly Kuznetsov) [RHEL-67329]
  - powerpc: security: Lock down the kernel if booted in secure boot mode (Mamatha Inamdar) [RHEL-57024]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-34.el10]
changelog:
  - iommu/tegra241-cmdqv: Fix alignment failure at max_n_shift (Jerry Snitselaar) [RHEL-67995]
  - crypto: qat - Fix missing destroy_workqueue in adf_init_aer() (Vladis Dronov) [RHEL-23197]
  - crypto: qat - Fix typo "accelaration" (Vladis Dronov) [RHEL-23197]
  - crypto: qat - Constify struct pm_status_row (Vladis Dronov) [RHEL-23197]
  - crypto: qat - remove faulty arbiter config reset (Vladis Dronov) [RHEL-23197]
  - crypto: qat - remove unused adf_devmgr_get_first (Vladis Dronov) [RHEL-23197]
  - crypto: qat/qat_4xxx - fix off by one in uof_get_name() (Vladis Dronov) [RHEL-23197]
  - crypto: qat/qat_420xx - fix off by one in uof_get_name() (Vladis Dronov) [RHEL-23197]
  - crypto: qat - remove check after debugfs_create_dir() (Vladis Dronov) [RHEL-23197]
  - redhat/kernel.spec.template: Link rtla against in-tree libcpupower (Tomas Glozar) [RHEL-40744]
  - rtla: Documentation: Mention --deepest-idle-state (Tomas Glozar) [RHEL-40744]
  - rtla/timerlat: Add --deepest-idle-state for hist (Tomas Glozar) [RHEL-40744]
  - rtla/timerlat: Add --deepest-idle-state for top (Tomas Glozar) [RHEL-40744]
  - rtla/utils: Add idle state disabling via libcpupower (Tomas Glozar) [RHEL-40744]
  - rtla: Add optional dependency on libcpupower (Tomas Glozar) [RHEL-40744]
  - tools/build: Add libcpupower dependency detection (Tomas Glozar) [RHEL-40744]
  - mm/memcg: Free percpu stats memory of dying memcg's (Waiman Long) [RHEL-67445]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-35.el10]
changelog:
  - redhat: gating.yaml: drop unstable test (Jan Stancek)
  - CI: provide pipelines for automotive variant (Julio Faracco)
  - fadump: reserve param area if below boot_mem_top (Mamatha Inamdar) [RHEL-67986]
  - powerpc/fadump: allocate memory for additional parameters early (Mamatha Inamdar) [RHEL-67986]
  - cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids (Steve Best) [RHEL-70009]
  - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-60525]
  - RHEL: disable the btt driver (Jeff Moyer) [RHEL-68504]
  - vfio/pci: Properly hide first-in-list PCIe extended capability (Alex Williamson) [RHEL-69745]
  - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-68542]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-36.el10]
changelog:
  - configs: synchronize CONFIG_HP_ILO between flavors & enable on x86/arm (Charles Mirabile) [RHEL-65590]
  - crypto: rng - Fix extrng EFAULT handling (Herbert Xu) [RHEL-70652]
  - s390/virtio_ccw: Fix dma_parm pointer not set up (Thomas Huth) [RHEL-69815]
  - fsnotify: fix sending inotify event with unexpected filename (Ian Kent) [RHEL-68847]
  - Revert "nvme: Return BLK_STS_TARGET if the DNR bit is set" (Benjamin Marzinski) [RHEL-68140]
  - Revert "nvme: allow local retry and proper failover for REQ_FAILFAST_TRANSPORT" (Benjamin Marzinski) [RHEL-68140]
  - Revert "nvme: decouple basic ANA log page re-read support from native multipathing" (Benjamin Marzinski) [RHEL-68140]
  - Revert "nvme: nvme_mpath_init remove multipath check" (Benjamin Marzinski) [RHEL-68140]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-37.el10]
changelog:
  - vfio/mlx5: Fix unwind flows in mlx5vf_pci_save/resume_device_data() (Alex Williamson) [RHEL-69747]
  - vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (Alex Williamson) [RHEL-69747]
  - i40e: Fix handling changed priv flags (Kamal Heib) [RHEL-69737]
  - RHEL-only: mark ublk as tech preview (Ming Lei) [RHEL-50740]
  - Revert "block, bfq: merge bfq_release_process_ref() into bfq_put_cooperator()" (Ming Lei) [RHEL-67720]
  - block: sed-opal: add ioctl IOC_OPAL_SET_SID_PW (Ming Lei) [RHEL-70861]
  - loop: fix type of block size (Ming Lei) [RHEL-65631]
  - x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC (Phil Auld) [RHEL-70901]
  - sched/deadline: Fix warning in migrate_enable for boosted tasks (Phil Auld) [RHEL-70901]
  - sched/core: Prevent wakeup of ksoftirqd during idle load balance (Phil Auld) [RHEL-70901]
  - sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning busy (Phil Auld) [RHEL-70901]
  - sched/core: Remove the unnecessary need_resched() check in nohz_csd_func() (Phil Auld) [RHEL-70901]
  - sched: fix warning in sched_setaffinity (Phil Auld) [RHEL-70901]
  - softirq: Allow raising SCHED_SOFTIRQ from SMP-call-function on RT kernel (Phil Auld) [RHEL-70901]
  - sched/deadline: Fix replenish_dl_new_period dl_server condition (Phil Auld) [RHEL-70901]
  - vfio/mlx5: Align the page tracking max message size with the device capability (CKI Backport Bot) [RHEL-69932]
  - tools/rtla: Improve exception handling in timerlat_load.py (Luis Claudio R. Goncalves) [RHEL-69739]
  - tools/rtla: Enhance argument parsing in timerlat_load.py (Luis Claudio R. Goncalves) [RHEL-69739]
  - tools/rtla: Improve code readability in timerlat_load.py (Luis Claudio R. Goncalves) [RHEL-69739]
  - rtla/timerlat: Do not set params->user_workload with -U (Luis Claudio R. Goncalves) [RHEL-69739]
  - rtla/timerlat: Make timerlat_hist_cpu->*_count unsigned long long (Luis Claudio R. Goncalves) [RHEL-69739]
  - rtla/timerlat: Make timerlat_top_cpu->*_count unsigned long long (Luis Claudio R. Goncalves) [RHEL-69739]
  - tools/rtla: fix collision with glibc sched_attr/sched_set_attr (Luis Claudio R. Goncalves) [RHEL-69739]
  - tools/rtla: drop __NR_sched_getattr (Luis Claudio R. Goncalves) [RHEL-69739]
  - rtla: Fix consistency in getopt_long for timerlat_hist (Luis Claudio R. Goncalves) [RHEL-69739]
  - rtla: use the definition for stdout fd when calling isatty() (Luis Claudio R. Goncalves) [RHEL-69739]
  - x86/cacheinfo: Delete global num_cache_leaves (David Arcari) [RHEL-22703]
  - cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU (David Arcari) [RHEL-22703]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-38.el10]
changelog:
  - virtio_ring: add a func argument 'recycle_done' to virtqueue_reset() (Cindy Lu) [RHEL-56981]
  - virtio_net: ensure netdev_tx_reset_queue is called on tx ring resize (Cindy Lu) [RHEL-56981]
  - virtio_ring: add a func argument 'recycle_done' to virtqueue_resize() (Cindy Lu) [RHEL-56981]
  - virtio_net: correct netdev_tx_reset_queue() invocation point (Cindy Lu) [RHEL-56981]
  - intel_idle: add Granite Rapids Xeon D support (David Arcari) [RHEL-68122]
  - sched/dlserver: Fix dlserver time accounting (Phil Auld) [RHEL-68342]
  - sched/dlserver: Fix dlserver double enqueue (Phil Auld) [RHEL-68342]
  - sched/fair: Fix NEXT_BUDDY (Phil Auld) [RHEL-68342]
  - sched/fair: Fix sched_can_stop_tick() for fair tasks (Phil Auld) [RHEL-68342]
  - sched/eevdf: More PELT vs DELAYED_DEQUEUE (Phil Auld) [RHEL-68342]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-39.el10]
changelog:
  - platform/x86/intel/pmc: Disable C1 auto-demotion during suspend (Steve Best) [RHEL-66570]
  - platform/x86/intel/pmc: Refactor platform resume functions to use cnl_resume() (Steve Best) [RHEL-66570]
  - redhat/configs: Enable CONFIG_NETKIT for RHEL (Toke Høiland-Jørgensen) [RHEL-51429]
  - bnxt_en: Unregister PTP during PCI shutdown and suspend (Michal Schmidt) [RHEL-54644 RHEL-69499]
  - bnxt_en: Refactor bnxt_ptp_init() (Michal Schmidt) [RHEL-54644 RHEL-69499]
  - bnxt_en: Fix receive ring space parameters when XDP is active (Michal Schmidt) [RHEL-54644]
  - bnxt_en: Fix queue start to update vnic RSS table (Michal Schmidt) [RHEL-54644]
  - bnxt_en: Set backplane link modes correctly for ethtool (Michal Schmidt) [RHEL-54644]
  - bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down (Michal Schmidt) [RHEL-54644]
  - bnxt_en: use irq_update_affinity_hint() (Michal Schmidt) [RHEL-54644]
  - bnxt_en: ethtool: Support unset l4proto on ip4/ip6 ntuple rules (Michal Schmidt) [RHEL-54644]
  - bnxt_en: ethtool: Remove ip4/ip6 ntuple support for IPPROTO_RAW (Michal Schmidt) [RHEL-54644]
  - s390/cio: Externalize full CMG characteristics (Mete Durlu) [RHEL-24140]
  - s390/pci: Expose FIDPARM attribute in sysfs (Mete Durlu) [RHEL-71374]
  - perf machine: Initialize machine->env to address a segfault (Michael Petlan) [RHEL-70278]
  - redhat/kernel.spec.template: Require kernel-tools-libs in rtla (Tomas Glozar) [RHEL-70863]
  - rtla/timerlat: Fix histogram ALL for zero samples (Tomas Glozar) [RHEL-72691]
  - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-24143]
  - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-24143]
  - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-24143]
  - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-24143]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-40.el10]
changelog:
  - selftests: netfilter: Stabilize rpath.sh (Phil Sutter) [RHEL-71139]
  - redhat/configs: automotive: disable CONFIG_AIO (Davide Caratti) [RHEL-71905]
  - redhat/configs: enable CONFIG_USB_XHCI_PCI_RENESAS on RHEL (Desnes Nunes) [RHEL-73371]
  - RHEL: Set correct config option for CRYPTO_HMAC_S390 (Mete Durlu) [RHEL-24137]
  - redhat/configs: automotive: disable CONFIG_NET_DROP_MONITOR (Davide Caratti) [RHEL-70868]
  - qed: put cond_resched() in qed_dmae_operation_wait() (CKI Backport Bot) [RHEL-71560]
  - qed: allow the callee of qed_mcp_nvm_read() to sleep (CKI Backport Bot) [RHEL-71560]
  - qed: put cond_resched() in qed_grc_dump_ctx_data() (CKI Backport Bot) [RHEL-71560]
  - qed: make 'ethtool -d' 10 times faster (CKI Backport Bot) [RHEL-71560]
  - x86/sev: Convert shared memory back to private on kexec (Vitaly Kuznetsov) [RHEL-68482]
  - x86/mm: Refactor __set_clr_pte_enc() (Vitaly Kuznetsov) [RHEL-68482]
  - x86/boot: Skip video memory access in the decompressor for SEV-ES/SNP (Vitaly Kuznetsov) [RHEL-68482]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-41.el10]
changelog:
  - netfilter: IDLETIMER: Fix for possible ABBA deadlock (Phil Sutter) [RHEL-70301]
  - tcp: Fix use-after-free of nreq in reqsk_timer_handler(). (Guillaume Nault) [RHEL-73194]
  - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-68691]
  - sched/numa: fix memory leak due to the overwritten vma->numab_state (Phil Auld) [RHEL-67478]
  - netfilter: ipset: Fix for recursive locking warning (Phil Sutter) [RHEL-71827]
  - NFSD: Mark exports of NFS as unsupported (Benjamin Coddington) [RHEL-50656]
  - netdev-genl: Hold rcu_read_lock in napi_get (Paolo Abeni) [RHEL-73205]
  - net: avoid potential UAF in default_operstate() (Paolo Abeni) [RHEL-73205] {CVE-2024-56635}
  - net: defer final 'struct net' free in netns dismantle (Paolo Abeni) [RHEL-73205] {CVE-2024-56658}
  - net: restrict SO_REUSEPORT to inet sockets (Paolo Abeni) [RHEL-73205]
  - Revert "rtnetlink: add guard for RTNL" (Paolo Abeni) [RHEL-73205]
  - netlink: fix false positive warning in extack during dumps (Paolo Abeni) [RHEL-73205] {CVE-2024-53212}
  - tcp: check space before adding MPTCP SYN options (Paolo Abeni) [RHEL-73143]
  - net: fix memory leak in tcp_conn_request() (Paolo Abeni) [RHEL-73143]
  - Revert "udp: avoid calling sock_def_readable() if possible" (Paolo Abeni) [RHEL-73132]
  - netfilter: ipset: Hold module reference while requesting a module (Phil Sutter) [RHEL-69538]
  - redhat: make kernel-debug-uki-virt installable without kernel-debug-core (Vitaly Kuznetsov) [RHEL-72983]
  - KVM: arm64: Fix S1/S2 combination when FWB==1 and S2 has Device memory type (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Do not allow ID_AA64MMFR0_EL1.ASIDbits to be overridden (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic-its: Add error handling in vgic_its_cache_translation (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: selftests: Add tests for MMIO external abort injection (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: selftests: Convert to kernel's ESR terminology (Shaoqin Huang) [RHEL-68039]
  - tools: arm64: Grab a copy of esr.h from kernel (Shaoqin Huang) [RHEL-68039]
  - KVM: selftests: Don't bother deleting memslots in KVM when freeing VMs (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic-its: Add stronger type-checking to the ITS entry sizes (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic: Kill VGIC_MAX_PRIVATE definition (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic: Make vgic_get_irq() more robust (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic-v3: Sanitise guest writes to GICR_INVLPIR (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Pass on SVE mapping failures (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Don't map 'kvm_vgic_global_state' at EL2 with pKVM (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Just advertise SEIS as 0 when emulating ICC_CTLR_EL1 (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Don't retire aborted MMIO instruction (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Get rid of userspace_irqchip_in_use (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Initialize trap register values in hyp in pKVM (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Initialize the hypervisor's VM state at EL2 (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Refactor kvm_vcpu_enable_ptrauth() for hyp use (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Move pkvm_vcpu_init_traps() to init_pkvm_hyp_vcpu() (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Correctly access TCR2_EL1, PIR_EL1, PIRE0_EL1 with VHE (Shaoqin Huang) [RHEL-68039]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-42.el10]
changelog:
  - net: sched: fix erspan_opt settings in cls_flower (Xin Long) [RHEL-73195]
  - KVM: SVM: Allow guest writes to set MSR_AMD64_DE_CFG bits (Vitaly Kuznetsov) [RHEL-71416]
  - redhat/configs: enable ARCH_TEGRA_241_SOC (Mark Salter) [RHEL-67684]
  - x86/cpu: Add Lunar Lake to list of CPUs with a broken MONITOR implementation (Steve Best) [RHEL-68393]
  - net: sysctl: allow dump_cpumask to handle higher numbers of CPUs (Antoine Tenart) [RHEL-73199]
  - net: sysctl: do not reserve an extra char in dump_cpumask temporary buffer (Antoine Tenart) [RHEL-73199]
  - net: sysctl: remove always-true condition (Antoine Tenart) [RHEL-73199]
  - net: tcp: Add noinline_for_tracing annotation for tcp_drop_reason() (Antoine Tenart) [RHEL-73172]
  - compiler_types: Add noinline_for_tracing annotation (Antoine Tenart) [RHEL-73172]
  - net: vxlan: replace VXLAN_INVALID_HDR with VNI_NOT_FOUND (Antoine Tenart) [RHEL-73172]
  - net: vxlan: use kfree_skb_reason() in encap_bypass_if_local() (Antoine Tenart) [RHEL-73172]
  - net: vxlan: use kfree_skb_reason() in vxlan_encap_bypass() (Antoine Tenart) [RHEL-73172]
  - net: vxlan: use kfree_skb_reason() in vxlan_mdb_xmit() (Antoine Tenart) [RHEL-73172]
  - net: vxlan: add drop reasons support to vxlan_xmit_one() (Antoine Tenart) [RHEL-73172]
  - net: vxlan: use kfree_skb_reason() in vxlan_xmit() (Antoine Tenart) [RHEL-73172]
  - net: vxlan: make vxlan_set_mac() return drop reasons (Antoine Tenart) [RHEL-73172]
  - net: vxlan: make vxlan_snoop() return drop reasons (Antoine Tenart) [RHEL-73172]
  - net: vxlan: make vxlan_remcsum() return drop reasons (Antoine Tenart) [RHEL-73172]
  - net: vxlan: add skb drop reasons to vxlan_rcv() (Antoine Tenart) [RHEL-73172]
  - net: tunnel: make skb_vlan_inet_prepare() return drop reasons (Antoine Tenart) [RHEL-73172]
  - net: tunnel: add pskb_inet_may_pull_reason() helper (Antoine Tenart) [RHEL-73172]
  - net: skb: add pskb_network_may_pull_reason() helper (Antoine Tenart) [RHEL-73172]
  - redhat: Install bpftool into BPF selftests dir (Viktor Malik) [RHEL-73480]
  - redhat: Drop bpftool from kernel spec (Viktor Malik) [RHEL-73480]
  - tools/power turbostat: Add initial support for GraniteRapids-D (Eddie Kovsky) [RHEL-29354]
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (Steve Best) [RHEL-73490] {CVE-2024-56739}
  - powerpc/mm/fault: Fix kfence page fault reporting (Mamatha Inamdar) [RHEL-73630]
  - bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (CKI Backport Bot) [RHEL-73198]
  - bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features (CKI Backport Bot) [RHEL-73198]
  - net, team, bonding: Add netdev_base_features helper (CKI Backport Bot) [RHEL-73198]
  - bonding: add ESP offload features when slaves support (CKI Backport Bot) [RHEL-73198]
  - Documentation: bonding: add XDP support explanation (CKI Backport Bot) [RHEL-73198]
  - bonding: return detailed error when loading native XDP fails (CKI Backport Bot) [RHEL-73198]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-43.el10]
changelog:
  - net/ipv6: delete temporary address if mngtmpaddr is removed or unmanaged (CKI Backport Bot) [RHEL-39340]
  - vfio/pci: Fallback huge faults for unaligned pfn (Alex Williamson) [RHEL-72822]
  - iommu/tegra241-cmdqv: do not use smp_processor_id in preemptible context (Luis Claudio R. Goncalves) [RHEL-74342]
  - net: sched: fix ordering of qlen adjustment (CKI Backport Bot) [RHEL-73395] {CVE-2024-53164}
  - net_sched: sch_fq: don't follow the fast path if Tx is behind now (CKI Backport Bot) [RHEL-73395]
  - s390/uvdevice: Support longer secret lists (Mete Durlu) [RHEL-25204]
  - s390/uv: Retrieve UV secrets sysfs support (Mete Durlu) [RHEL-25204]
  - s390/uvdevice: Increase indent in IOCTL definitions (Mete Durlu) [RHEL-25204]
  - s390/uvdevice: Add Retrieve Secret IOCTL (Mete Durlu) [RHEL-25204]
  - s390/uv: Retrieve UV secrets support (Mete Durlu) [RHEL-25204]
  - s390/uv: Use a constant for more-data rc (Mete Durlu) [RHEL-25204]
  - s390/uv: Provide host-key hashes in sysfs (Mete Durlu) [RHEL-47110]
  - s390/uv: Refactor uv-sysfs creation (Mete Durlu) [RHEL-47110]
  - net/l2tp: fix warning in l2tp_exit_net found by syzbot (Guillaume Nault) [RHEL-73846]
  - geneve: do not assume mac header is set in geneve_xmit_skb() (Guillaume Nault) [RHEL-73846]
  - net: Fix netns for ip_tunnel_init_flow() (Guillaume Nault) [RHEL-73846]
  - futex: fix user access on powerpc (Waiman Long) [RHEL-70187]
  - x86: fix off-by-one in access_ok() (Waiman Long) [RHEL-70187]
  - futex: improve user space accesses (Waiman Long) [RHEL-70187]
  - s390/pci: Add pci_msg debug view to PCI report (Mete Durlu) [RHEL-24144]
  - s390/debug: Add a reverse mode for debug_dump() (Mete Durlu) [RHEL-24144]
  - s390/debug: Add debug_dump() to write debug view to a string buffer (Mete Durlu) [RHEL-24144]
  - s390/debug: Split private data alloc/free out of file operations (Mete Durlu) [RHEL-24144]
  - s390/debug: Simplify and document debug_next_entry() logic (Mete Durlu) [RHEL-24144]
  - s390/pci: Report PCI error recovery results via SCLP (Mete Durlu) [RHEL-24144]
  - s390/debug: Pass in and enforce output buffer size for format handlers (Mete Durlu) [RHEL-24144]
  - s390/sclp: Allow user-space to provide PCI reports for optical modules (Mete Durlu) [RHEL-71264]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-44.el10]
changelog:
  - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74386]
  - redhat/configs: Disable deprecated CONFIG_LCS option on s390 (Mete Durlu) [RHEL-68296]
  - powerpc/pseries/iommu: Don't unset window if it was never set (Mamatha Inamdar) [RHEL-74222]
  - selftests: net: local_termination: require mausezahn (CKI Backport Bot) [RHEL-74034]
  - selftests: openvswitch: fix tcpdump execution (CKI Backport Bot) [RHEL-74034]
  - selftests: rds: move test.py to TEST_FILES (CKI Backport Bot) [RHEL-74034]
  - selftests: netfilter: Fix missing return values in conntrack_dump_flush (CKI Backport Bot) [RHEL-74034]
  - selftests: net: include lib/sh/*.sh with lib.sh (CKI Backport Bot) [RHEL-74034]
  - selftests: tls: add a selftest for wrapping rec_seq (CKI Backport Bot) [RHEL-74034]
  - selftests: ETS: Use defer for test cleanup (CKI Backport Bot) [RHEL-74034]
  - selftests: TBF: Use defer for test cleanup (CKI Backport Bot) [RHEL-74034]
  - selftests: RED: Use defer for test cleanup (CKI Backport Bot) [RHEL-74034]
  - selftests: forwarding: lib: Allow passing PID to stop_traffic() (CKI Backport Bot) [RHEL-74034]
  - selftests: forwarding: Add a fallback cleanup() (CKI Backport Bot) [RHEL-74034]
  - selftests: net: lib: Introduce deferred commands (CKI Backport Bot) [RHEL-74034]
  - selftests: net: move EXTRA_CLEAN of libynl.a into ynl.mk (CKI Backport Bot) [RHEL-74034]
  - selftests: net: rebuild YNL if dependencies changed (CKI Backport Bot) [RHEL-74034]
  - ipmr: tune the ipmr_can_free_table() checks. (CKI Backport Bot) [RHEL-74037]
  - ipmr: fix build with clang and DEBUG_NET disabled. (CKI Backport Bot) [RHEL-74037]
  - net/ipv6: release expired exception dst cached in socket (CKI Backport Bot) [RHEL-74037]
  - ipv6: avoid possible NULL deref in modify_prefix_route() (CKI Backport Bot) [RHEL-74037]
  - ipmr: fix tables suspicious RCU usage (CKI Backport Bot) [RHEL-74037]
  - ip6mr: fix tables suspicious RCU usage (CKI Backport Bot) [RHEL-74037]
  - ipmr: add debug check for mr table cleanup (CKI Backport Bot) [RHEL-74037]
  - selftests/rtnetlink.sh: add mngtempaddr test (CKI Backport Bot) [RHEL-74037]
  - ipv6: Fix soft lockups in fib6_select_path under high next hop churn (CKI Backport Bot) [RHEL-74037]
  - selftests: net: really check for bg process completion (CKI Backport Bot) [RHEL-74037]
  - ipv6: release nexthop on device removal (CKI Backport Bot) [RHEL-74037]
  - ipv6: switch inet6_acaddr_hash() to less predictable hash (CKI Backport Bot) [RHEL-74037]
  - ipv6: switch inet6_addr_hash() to less predictable hash (CKI Backport Bot) [RHEL-74037]
  - ptp: Add error handling for adjfine callback in ptp_clock_adjtime (CKI Backport Bot) [RHEL-74024]
  - ptp_pch: Replace deprecated PCI functions (CKI Backport Bot) [RHEL-74024]
  - wireguard: mark as Tech Preview (Hangbin Liu) [RHEL-74327]
  - nbd: fix partial sending (Ming Lei) [RHEL-74229]
  - scsi: lpfc: Fix spelling errors 'asynchronously' (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Copyright updates for 14.4.0.6 patches (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Update lpfc version to 14.4.0.6 (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Change lpfc_nodelist nlp_flag member into a bitmask (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Remove NLP_RELEASE_RPI flag from nodelist structure (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Add cleanup of nvmels_wq after HBA reset (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting follow up FDMI (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Update lpfc_els_flush_cmd() to check for SLI_ACTIVE before BSG flag (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Dick Kennedy) [RHEL-61740]
  - scsi: lpfc: Modify CGN warning signal calculation based on EDC response (Dick Kennedy) [RHEL-61740]
  - md: reintroduce md-linear (Nigel Croxon) [RHEL-74142]
  - Revert "readahead: properly shorten readahead when falling back to do_page_cache_ra()" (Maxim Levitsky) [RHEL-55724 RHEL-56929] {CVE-2024-57839}
  - i40e: add ability to reset VF for Tx and Rx MDD events (Michal Schmidt) [RHEL-73034]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-45.el10]
changelog:
  - netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CKI Backport Bot) [RHEL-73620]
  - netfilter: nf_tables: imbalance in flowtable binding (CKI Backport Bot) [RHEL-73620]
  - netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext (CKI Backport Bot) [RHEL-73620]
  - netfilter: nft_set_hash: skip duplicated elements pending gc run (CKI Backport Bot) [RHEL-73620]
  - netfilter: nft_inner: incorrect percpu area handling under softirq (CKI Backport Bot) [RHEL-73620]
  - netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level (CKI Backport Bot) [RHEL-73620]
  - netfilter: x_tables: fix LED ID check in led_tg_check() (CKI Backport Bot) [RHEL-73620]
  - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CKI Backport Bot) [RHEL-73620]
  - netfilter: ipset: add missing range check in bitmap_ip_uadt (CKI Backport Bot) [RHEL-73620]
  - netfilter: bpf: Pass string literal as format argument of request_module() (CKI Backport Bot) [RHEL-73620]
  - netfilter: nf_tables: must hold rcu read lock while iterating object type list (CKI Backport Bot) [RHEL-73620]
  - netfilter: nf_tables: must hold rcu read lock while iterating expression type list (CKI Backport Bot) [RHEL-73620]
  - mptcp: fix TCP options overflow. (CKI Backport Bot) [RHEL-73495]
  - mptcp: sysctl: sched: avoid using current->nsproxy (CKI Backport Bot) [RHEL-73495]
  - mptcp: sysctl: blackhole timeout: avoid using current->nsproxy (CKI Backport Bot) [RHEL-73495]
  - KVM: s390: add gen17 facilities to CPU model (Mete Durlu) [RHEL-24195]
  - KVM: s390: add msa11 to cpu model (Mete Durlu) [RHEL-24195]
  - KVM: s390: add concurrent-function facility to cpu model (Mete Durlu) [RHEL-24195]
  - redhat/configs: Re-enable full ZRAM configuration and all backends (Neal Gompa) [RHEL-72036]
  - wireguard: device: support big tcp GSO (CKI Backport Bot) [RHEL-74019]
  - wireguard: selftests: load nf_conntrack if not present (CKI Backport Bot) [RHEL-74019]
  - wireguard: allowedips: remove redundant selftest call (CKI Backport Bot) [RHEL-74019]
  - wireguard: device: omit unnecessary memset of netdev private data (CKI Backport Bot) [RHEL-74019]
  - bpf: Do not alloc arena on unsupported arches (Viktor Malik) [RHEL-68958]
  - powerpc/pseries/eeh: Fix get PE state translation (Mamatha Inamdar) [RHEL-74254]
  - MAINTAINERS: Make Kristen Accardi the IAA crypto driver maintainer (Vladis Dronov) [RHEL-58597]
  - crypto: iaa - Remove potential infinite loop in check_completion() (Vladis Dronov) [RHEL-58597]
  - s390/entry: Mark IRQ entries to fix stack depot warnings (Mete Durlu) [RHEL-74467]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-46.el10]
changelog:
  - redhat: hsr: Mark as tech preview (Felix Maurer) [RHEL-74748]
  - xfs: Mark all experimental code as tech preview (Bill O'Donnell) [RHEL-64936]
  - redhat: create 'debug' addon for UKI (Li Tian) [RHEL-70836]
  - mptcp: disable by default (Davide Caratti) [RHEL-74247]
  - initramfs: avoid filename buffer overrun (Rafael Aquini) [RHEL-73366] {CVE-2024-53142}
  - redhat/configs: set new PKEY_UV option on s390 (Mete Durlu) [RHEL-24135]
  - s390/crypto: Add hardware acceleration for full AES-XTS mode (Mete Durlu) [RHEL-24136]
  - s390/crypto: Postpone the key split to key conversion (Mete Durlu) [RHEL-24136]
  - s390/crypto: Introduce function for tokenize clearkeys (Mete Durlu) [RHEL-24136]
  - s390/crypto: Generalize parameters for key conversion (Mete Durlu) [RHEL-24136]
  - s390/crypto: Use module-local structures for protected keys (Mete Durlu) [RHEL-24136]
  - s390/crypto: Convert to reverse x-mas tree, rename ret to rc (Mete Durlu) [RHEL-24136]
  - s390/pkey: Tolerate larger key blobs (Mete Durlu) [RHEL-24136]
  - s390/pkey: Add new pkey handler module pkey-uv (Mete Durlu) [RHEL-24135]
  - s390/pkey: Build module name array selectively based on kernel config options (Mete Durlu) [RHEL-24135]
  - s390/pkey: Fix checkpatch findings in pkey header file (Mete Durlu) [RHEL-24135]
  - s390/pkey: Rework pkey verify for protected keys (Mete Durlu) [RHEL-24135]
  - s390/pkey: Simplify protected key length calculation code (Mete Durlu) [RHEL-24135]
  - s390/zcrypt: Cleanup include zcrypt_api.h (Mete Durlu) [RHEL-24135]
  - ipvs: speed up reads from ip_vs_conn proc file (Florian Westphal) [RHEL-68933]
  - PCI: Batch BAR sizing operations (Myron Stowe) [RHEL-76026]
  - xfrm: mark packet offload as tech preview (Sabrina Dubroca) [RHEL-75472]
  - mm/kmemleak: fix sleeping function called from invalid context at print message (CKI Backport Bot) [RHEL-74104] {CVE-2024-57885}
  - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (CKI Backport Bot) [RHEL-74099] {CVE-2024-57884}
  - bnxt_en: Fix DIM shutdown (Michal Schmidt) [RHEL-73718]
  - bnxt_en: Fix possible memory leak when hwrm_req_replace fails (Michal Schmidt) [RHEL-73718]
  - bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (Michal Schmidt) [RHEL-73718]
  - bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (Michal Schmidt) [RHEL-73718]
  - selftests: drv-net: rss_ctx: Add test for ntuple rule (Michal Schmidt) [RHEL-73718]
  - bnxt_en: ethtool: Supply ntuple rss context action (Michal Schmidt) [RHEL-73718]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-47.el10]
changelog:
  - ipvlan: Support bonding events (Hangbin Liu) [RHEL-73828]
  - dm array: fix releasing a faulty array block twice in dm_array_cursor_end (CKI Backport Bot) [RHEL-74443] {CVE-2024-57929}
  - redhat/kernel.spec: work around find-debuginfo aborting cross builds (Jan Stancek) [RHEL-76454]
  - crypto: aes-gcm-p10 - Use the correct bit to test for P10 (Mamatha Inamdar) [RHEL-62818]
  - crypto: powerpc/p10-aes-gcm - Add dependency on CRYPTO_SIMDand re-enable CRYPTO_AES_GCM_P10 (Mamatha Inamdar) [RHEL-62818]
  - crypto: powerpc/p10-aes-gcm - Register modules as SIMD (Mamatha Inamdar) [RHEL-62818]
  - crypto: powerpc/p10-aes-gcm - Re-write AES/GCM stitched implementation (Mamatha Inamdar) [RHEL-62818]
  - ASoC: Intel: soc-acpi: arl: Add match entries for new cs42l43 laptops (Jaroslav Kysela) [RHEL-73890]
  - ASoC: Intel: soc-acpi: arl: Correct naming of a cs35l56 address struct (Jaroslav Kysela) [RHEL-73890]
  - ALSA: seq: oss: Fix races at processing SysEx messages (Jaroslav Kysela) [RHEL-73890] {CVE-2024-57893}
  - ALSA hda/realtek: Add quirk for Framework F111:000C (Jaroslav Kysela) [RHEL-73890]
  - ALSA: seq: Check UMP support for midi_version change (Jaroslav Kysela) [RHEL-73890]
  - Revert "ALSA: ump: Don't enumeration invalid groups for legacy rawmidi" (Jaroslav Kysela) [RHEL-73890]
  - ASoC: audio-graph-card: Call of_node_put() on correct node (Jaroslav Kysela) [RHEL-73890]
  - sound: usb: format: don't warn that raw DSD is unsupported (Jaroslav Kysela) [RHEL-73890]
  - sound: usb: enable DSD output for ddHiFi TC44C (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/ca0132: Use standard HD-audio quirk matching helpers (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda: cs35l56: Remove calls to cs35l56_force_sync_asp1_registers_from_cache() (Jaroslav Kysela) [RHEL-73890]
  - ALSA: usb-audio: US16x08: Initialize array before use (Jaroslav Kysela) [RHEL-73890]
  - ALSA: sh: Fix wrong argument order for copy_from_iter() (Jaroslav Kysela) [RHEL-73890]
  - ALSA: ump: Shut up truncated string warning (Jaroslav Kysela) [RHEL-73890]
  - ALSA: sh: Use standard helper for buffer accesses (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/conexant: fix Z60MR100 startup pop issue (Jaroslav Kysela) [RHEL-73890]
  - ALSA: ump: Update legacy substream names upon FB info update (Jaroslav Kysela) [RHEL-73890]
  - ALSA: ump: Indicate the inactive group in legacy substream names (Jaroslav Kysela) [RHEL-73890]
  - ALSA: ump: Don't open legacy substream for an inactive group (Jaroslav Kysela) [RHEL-73890]
  - ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 21Q6 and 21Q7 (Jaroslav Kysela) [RHEL-73890]
  - ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 21QA and 21QB (Jaroslav Kysela) [RHEL-73890]
  - ASoC: amd: ps: Fix for enabling DMIC on acp63 platform via _DSD entry (Jaroslav Kysela) [RHEL-73890]
  - ASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP (Jaroslav Kysela) [RHEL-73890] {CVE-2024-57805}
  - ALSA: memalloc: prefer dma_mapping_error() over explicit address checking (Jaroslav Kysela) [RHEL-73890] {CVE-2024-57800}
  - firmware: arm_scmi: Fix i.MX build dependency (Jaroslav Kysela) [RHEL-73890]
  - ASoC: Intel: sof_sdw: Add space for a terminator into DAIs array (Jaroslav Kysela) [RHEL-73890] {CVE-2024-57880}
  - ASoC: fsl_spdif: change IFACE_PCM to IFACE_MIXER (Jaroslav Kysela) [RHEL-73890]
  - ASoC: fsl_xcvr: change IFACE_PCM to IFACE_MIXER (Jaroslav Kysela) [RHEL-73890]
  - ASoC: tas2781: Fix calibration issue in stress test (Jaroslav Kysela) [RHEL-73890]
  - ASoC: amd: yc: Fix the wrong return value (Jaroslav Kysela) [RHEL-73890]
  - ALSA: control: Avoid WARN() for symlink errors (Jaroslav Kysela) [RHEL-73890] {CVE-2024-56657}
  - ALSA: hda/realtek: Fix headset mic on Acer Nitro 5 (Jaroslav Kysela) [RHEL-73890]
  - ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5 (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Fix spelling mistake "Firelfy" -> "Firefly" (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda: Fix build error without CONFIG_SND_DEBUG (Jaroslav Kysela) [RHEL-73890]
  - ASoC: Intel: avs: Fix return status of avs_pcm_hw_constraints_init() (Jaroslav Kysela) [RHEL-73890]
  - ASoC: amd: yc: Add quirk for microphone on Lenovo Thinkpad T14s Gen 6 21M1CTO1WW (Jaroslav Kysela) [RHEL-73890]
  - ASoC: amd: yc: fix internal mic on Redmi G 2022 (Jaroslav Kysela) [RHEL-73890]
  - ASoC: hdmi-codec: reorder channel allocation list (Jaroslav Kysela) [RHEL-73890]
  - ALSA: usb-audio: Make mic volume workarounds globally applicable (Jaroslav Kysela) [RHEL-73890]
  - ASoC: Intel: soc-acpi-intel-arl-match: Add rt722 and rt1320 support (Jaroslav Kysela) [RHEL-73890]
  - ASoC: sdw_utils: Add quirk to exclude amplifier function (Jaroslav Kysela) [RHEL-73890]
  - ASoC: Intel: sof_sdw: Add quirks for some new Lenovo laptops (Jaroslav Kysela) [RHEL-73890]
  - ASoC: Intel: sof_sdw: Add quirk for cs42l43 system using host DMICs (Jaroslav Kysela) [RHEL-73890]
  - ASoC: sdw_utils: Add a quirk to allow the cs42l43 mic DAI to be ignored (Jaroslav Kysela) [RHEL-73890]
  - ASoC: sdw_utils: Add support for exclusion DAI quirks (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Use codec SSID matching for Lenovo devices (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/conexant: Use the new codec SSID matching (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda: Use own quirk lookup helper (Jaroslav Kysela) [RHEL-73890]
  - ASoC: Intel: sof_rt5682: Add HDMI-In capture with rt5682 support for MTL. (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG) (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8 (Jaroslav Kysela) [RHEL-73890]
  - ALSA: usb-audio: add mixer mapping for Corsair HS80 (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: fix micmute LEDs don't work on HP Laptops (Jaroslav Kysela) [RHEL-73890]
  - ALSA: usb-audio: Add extra PID for RME Digiface USB (Jaroslav Kysela) [RHEL-73890]
  - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-73890]
  - ASoC: mediatek: mt8188-mt6359: Remove hardcoded dmic codec (Jaroslav Kysela) [RHEL-73890]
  - ASoC: SOF: ipc3-topology: fix resource leaks in sof_ipc3_widget_setup_comp_dai() (Jaroslav Kysela) [RHEL-73890]
  - ASoC: SOF: ipc3-topology: Convert the topology pin index to ALH dai index (Jaroslav Kysela) [RHEL-73890]
  - ALSA: usb-audio: Notify xrun for low-latency mode (Jaroslav Kysela) [RHEL-73890]
  - ALSA: seq: ump: Fix seq port updates per FB info notify (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Apply quirk for Medion E15433 (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: fix mute/micmute LEDs don't work for EliteBook X G1i (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Set PCBeep to default value for ALC274 (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Enable speaker pins for Medion E15443 platform (Jaroslav Kysela) [RHEL-73890]
  - ALSA: hda/realtek: Update ALC225 depop procedure (Jaroslav Kysela) [RHEL-73890]
  - ALSA: pcm: Add sanity NULL check for the default mmap fault handler (Jaroslav Kysela) [RHEL-73890] {CVE-2024-53180}
  - ALSA: ump: Fix evaluation of MIDI 1.0 FB info (Jaroslav Kysela) [RHEL-73890]
  - ALSA: rawmidi: Fix kvfree() call in spinlock (Jaroslav Kysela) [RHEL-73890]
  - ASoC: da7213: Populate max_register to regmap_config (Jaroslav Kysela) [RHEL-73890]
  - ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() (Jaroslav Kysela) [RHEL-73890]
  - ASoC: amd: yc: Add a quirk for microfone on Lenovo ThinkPad P14s Gen 5 21MES00B00 (Jaroslav Kysela) [RHEL-73890]
  - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jaroslav Kysela) [RHEL-73890] {CVE-2024-53150}
  - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-73890] {CVE-2024-53197}
  - ASoC: mediatek: Check num_codecs is not zero to avoid panic during probe (Jaroslav Kysela) [RHEL-73890] {CVE-2024-56685}
  - ASoC: amd: yc: Fix for enabling DMIC on acp6x via _DSD entry (Jaroslav Kysela) [RHEL-73890]
  - ALSA: core: Fix possible NULL dereference caused by kunit_kzalloc() (Jaroslav Kysela) [RHEL-73890] {CVE-2024-56696}
  - ASoC: imx-audmix: Add NULL check in imx_audmix_probe (Jaroslav Kysela) [RHEL-73890] {CVE-2024-53199}
  - ALSA: hda/realtek: Update ALC256 depop procedure (Jaroslav Kysela) [RHEL-73890]
  - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-73890] {CVE-2024-53239}
  - ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (Jaroslav Kysela) [RHEL-73890] {CVE-2024-56531}
  - ALSA: us122l: Use snd_card_free_when_closed() at disconnection (Jaroslav Kysela) [RHEL-73890] {CVE-2024-56532}
  - ALSA: usx2y: Use snd_card_free_when_closed() at disconnection (Jaroslav Kysela) [RHEL-73890] {CVE-2024-56533}
  - ASoC: rt722-sdca: Remove logically deadcode in rt722-sdca.c (Jaroslav Kysela) [RHEL-73890]
  - ASoC: amd: acp: fix for cpu dai index logic (Jaroslav Kysela) [RHEL-73890]
  - ASoC: amd: acp: fix for inconsistent indenting (Jaroslav Kysela) [RHEL-73890]
  - ASoC: fsl-asoc-card: Add missing handling of {hp,mic}-dt-gpios (Jaroslav Kysela) [RHEL-73890]
  - ASoC: fsl_micfil: fix regmap_write_bits usage (Jaroslav Kysela) [RHEL-73890]
  - RDMA/bnxt_re: Fix error recovery sequence (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Fix the locking while accessing the QP table (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Disable use of reserved wqes (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Fix max_qp_wrs reported (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Fix reporting hw_ver in query_device (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Add check for path mtu in modify_qp (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Fix the check for 9060 condition (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Avoid initializing the software queue for user queues (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Fix max SGEs for the Work Request (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Remove always true dattr validity check (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Correct the sequence of device suspend (Mohammad Heib) [RHEL-22876]
  - RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (Mohammad Heib) [RHEL-22876]
  - CI: Enable pipelines for rt-64k variant (Juri Lelli) [RHEL-70288]
  - redhat: Add kernel-rt-64k variant (Juri Lelli) [RHEL-70288]


author: Julien Rische <jrische@redhat.com> - 1.21.2-1
changelog:
  - New upstream version (1.21.2)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
    Resolves: rhbz#2229113
  - Make tests compatible with Python 3.12
    Resolves: rhbz#2224013


author: Julien Rische <jrische@redhat.com> - 1.21.2-3
changelog:
  - Fix double free in klist's show_ccache()
    Resolves: rhbz#2257301
  - Store krb5-tests files in architecture-specific directories
    Resolves: rhbz#2244601


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45387 RHEL-45378
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-47284
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-47287
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-47285
  - Make TCP waiting time configurable
    Resolves: RHEL-47278


author: Julien Rische <jrische@redhat.com> - 1.21.3-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55427
  - Fix various issues detected by static analysis
    Resolves: RHEL-45165
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-56070


author: Jens Petersen <petersen@redhat.com> - 4.1-1
changelog:
  - make IME installation condition on service(graphical-login)
    instead of xorg-x11-server-Xorg (RHEL-36747)
  - drop sil-mingzat-fonts recommends from fonts-en
  - use Hebrew fonts for Yiddish (#2284093)


author: Akira TAGOH <tagoh@redhat.com> - 4.1-2
changelog:
  - Update package names for renaming
    google-noto-sans-symbols2-fonts -> google-noto-sans-symbols-2-fonts
    google-noto-sans-meeteimayek-vf-fonts -> google-noto-sans-meetei-mayek-vf-fonts


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.7.7-1
changelog:
  - Rebase to version 3.7.7
  - Fixing SAST issues, accepted by upstream
  - Resolves: RHEL-39391 RHEL-67895


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.69-4
changelog:
  - Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>)
  - Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.7.0-8
changelog:
  - Update license to SPDX format
  - spec file tidy/modernization
    - use modern cmake build and install
    - properly own include directories in the devel package
    - de-glob some files to follow packaging guidelines


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.10.2-1
changelog:
  - Update to version 0.10.2 ( resolves: rhbz#1880885 )
  - Revise specs per packaging guidelines for globs of soname


author: Jan Kolarik <jkolarik@redhat.com> - 0.1.20-1
changelog:
  - Update to 0.1.20
  - Fixes of xml parsing
  - Fix non-optimized builds by removing inline keyword
  - Use Py_hash_t instead of long


author: Pavol Žáčik <pzacik@redhat.com> - 0.6.5-3
changelog:
  - Patch bugs found by static analysis tools
  - Add %{name}-fix-handle-leaks-in-rdmsr-c.patch
  - Add %{name}-fix-cpuid_get_hypervisor.patch
  - Add %{name}-prevent-intel_fn11-array-overruns.patch


author: Pavol Žáčik <pzacik@redhat.com> - 0.7.0-1
changelog:
  - Rebase to 0.7.0
  - Begin building the package for aarch64
  - Add Python bindings as a subpackage (python3-libcpuid)


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.73.0-1
changelog:
  - Update to 0.73.0
  - filelists metadata loading on demand
  - deltarpm disabled on Fedora
  - conf: Introduce new optional_metadata_types option to load filelists on demand
  - goal: Method for detecting file dependency problems


author: Evan Goode <egoode@redhat.com> - 0.73.1-1
changelog:
  - Update to 0.73.1 (RHEL-38831)
  - Fix https://issues.redhat.com/browse/RHEL-27657 (RHEL-32935)
  - subject-py: Fix memory leak (RHEL-32924)
  - MergedTransaction: Calculate RPM difference between two same versions as
    no-op (RHEL-33541)
  - Onboard packit tests
  - Add virtual destructor to TransactionItem (RHEL-32943)


author: Petr Pisar <ppisar@redhat.com> - 0.73.1-2
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-32919)
  - Fix an invalid memory access when dropping an item in MergedTransaction
    class (RHEL-33541)


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: José Expósito <jexposit@redhat.com> - 0.16-13
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29742


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Jan Kolarik <jkolarik@redhat.com> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - Fixes and optimizations in header files
  - Fix lr_gpg_list_keys function when keys are empty
  - Update PGP test vectors
  - Fix CMake warnings
  - Bump glib version


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - lr_gpg_check_signature: Forward PGP error messages from RPM
  - PGP: fix: Support importing binary public keys in librpm backend
  - PGP: Enable creating a UID directory for GnuGP agent socket in /run/gnupg/user
  - PGP: Set a default creation SELinux labels on GnuPG directories


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1 (RHEL-38831)
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (RHEL-35699)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Petr Pisar <ppisar@redhat.com> - 1.18.0-2
changelog:
  - Use librpmio instead of gpgme for handling PGP keys (RHEL-47106)
  - Fix a memory leak in select_next_target() (RHEL-35699)


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-14
changelog:
  - Improve a documentation (RHEL-38831)
  - Refactor parse_entitlement_data() (RHEL-32365)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-37866)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - libselinux-3.7-3
  - restorecon: Include <selinux/label.h>
  - Fix integer comparison issues when compiling for 32-bit


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-3
changelog:
  - restorecon: Include <selinux/label.h> (RHEL-53852)
  - Fix integer comparison issues when compiling for 32-bit


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20231030-1
changelog:
  - Update to upstream 20231030 release
  - Update firmware file for Intel Bluetooth AX203/AX210/AX211/
  - Update firmware file for Intel Bluetooth Magnetor AX101/AX201/AX211
  - rtl_nic: update firmware of RTL8156B
  - Update AMD cpu microcode
  - amdgpu: update SMU 13.0.0 firmware
  - add Amlogic bluetooth firmware
  - i915: Add GuC v70.13.1 for DG2, TGL, ADL-P and MTL
  - iwlwifi: add a missing FW from core80-39 release
  - WHENCE: add symlink for BananaPi M64
  - i915: Update MTL DMC to v2.17
  - amdgpu: update various firmware from 5.7 branch
  - iwlwifi: add FWs for new GL and MA device types with multiple RF modules
  - amd_pmf: Add initial PMF TA for Smart PC Solution Builder
  - Update FW files for MRVL PCIE 8997 chipsets
  - rtl_bt: Update RTL8851B BT USB firmware to 0x048A_D230
  - iwlwifi: add new FWs from core81-65 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core81-65 release


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20231111-1
changelog:
  - Update to upstream 20231111 release
  - Move AMD SEV and TEE firmware to amd-ucode package
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - nvidia: add GSP-RM version 535.113.01 firmware images
  - Update firmware file for Intel Bluetooth AX101/AX203/AX210/AX211/BE200
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qca: add bluetooth firmware for WCN3988
  - ixp4xx: Add the IXP4xx firmware
  - rtw89: 8852b: update fw to v0.29.29.5
  - rtw89: 8851b: update fw to v0.29.41.3


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20231211-1
changelog:
  - Update to upstream 20231211 release
  - wfx: update to firmware 3.17
  - wfx: fix broken firmware
  - Update AMD cpu microcode
  - cxgb4: Update firmware to revision 1.27.5.0
  - add firmware for en8811h 2.5G ethernet phy
  - s5p-mfc: Add MFC v12 Firmware
  - Add a COPYOPTS variable
  - rtl_bt: Update RTL8852A BT USB firmware to 0xDFC8_145F
  - ice: update ice DDP wireless_edge package to 1.3.13.0
  - Update firmware for MT7921/MT7922 Bluetooth device
  - Update firmware for MT7921/MT7922 WiFi device
  - amdgpu: update DMCUB firmware to 0.0.194.0 for DCN321 and DCN32
  - qcom: update qcm2290/qrb4210 firmware
  - qcom: update qcm2290/qrb4210 WiFi firmware file
  - qcom: update Venus firmware file for v6.0
  - powervr: add firmware for Imagination Technologies AXE-1-16M GPU
  - ice: update ice DDP comms package to 1.3.45.0
  - ice: update ice DDP package to 1.3.35.0
  - mediatek: Remove an unused packed library
  - mediatek: Sync shared memory structure changes
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - amdgpu: update DMCUB firmware to 0.0.193.0 for DCN31 and DCN314
  - i915: Update MTL DMC to v2.19
  - iwlwifi: fix for the new FWs from core83-55 release
  - iwlwifi: add new FWs from core83-55 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core83-55 release
  - Add firmware for Cirrus CS35L41 for HP G11 Laptops/2024 ASUS Zenbook Laptops
  - add firmware for mt7988 internal 2.5G ethernet phy
  - Update firmware for Magnetor Intel Bluetooth AX101/AX203/AX211
  - Update firmware for SolarF Intel Bluetooth AX101/AX203/AX211
  - Update firmware for Solar Intel Bluetooth AX101/AX203/AX210/AX211


author: Peter Robinson <pbrobinson@fedoraproject.org>
changelog:
  - Update to upstream 20240115
  - Split out Intel/Cirrus audio firmware, ISP firmware, NXP/TI WiFi Firmware
  - Intel Bluetooth: Update firmware file for AX101/AX203/AX210/AX211
  - Cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops
  - Cirrus: Add firmware for CS35L41 for various Dell laptops
  - update firmware for qat_4xxx devices
  - update firmware for w1u_uart
  - Cirrus: Add firmware file for cs42l43
  - amdgpu: DMCUB updates for DCN312/DCN314
  - amlogic/bluetooth: add firmware bin of W1 serial soc(w1u_uart)
  - Add firmware for Mediatek WiFi/bluetooth chip (MT7925)
  - ASoC: tas2781/tas2563: Add dsp firmware for laptops or other mobile devices
  - rtl_bt: Add firmware and config files for RTL8852BT/RTL8852BE-VT
  - ath11k: Updates for WCN6855/WCN6750/IPQ8074
  - ath10k: Updates to WCN3990/QCA9888/QCA4019/QCA6174
  - ath12k: add new driver and firmware for WCN7850
  - iwlwifi: update gl FW for core80-165 release
  - intel: vsc: Add firmware for Visual Sensing Controller
  - Cirrus: Add CS35L41 firmware and tunings for ASUS Zenbook 2022/2023 Models
  - QCA: Add bluetooth firmware nvm files for QCA2066
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00629
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: Add Audio firmware for SM8550/SM8650 QRD


author: Denys Vlasenko <dvlasenk@redhat.com> - 20240624-4
changelog:
  - linux-firmware ships encrypted zip files (named *.ncf) [rhel-10.0.beta] (RHEL-32183)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0
  - qcom: Add AIC100 firmware files
  - amlogic: Update bluetooth firmware binary
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core
  - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB
  - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB
  - amdgpu: update DMCUB to v0.0.222.0 for DCN314
  - iwlwifi: add ty/So/Ma firmwares for core88-87 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release
  - linux-firmware: add new cc33xx firmware for cc33xx chips
  - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop
  - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops
  - Merge https://github.com/zijun-hu/qca_btfw into qca
  - linux-firmware: Add firmware for Lenovo Thinkbooks
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update raven2 firmware
  - amdgpu: update raven firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update SMU 13.0.6 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update aldebaran firmware
  - amdgpu: add support for PSP 14.0.1
  - amdgpu: add support for VPE 6.1.1
  - amdgpu: add support for VCN 4.0.6
  - amdgpu: add support for SDMA 6.1.1
  - amdgpu: add support for GC 11.5.1
  - amdgpu: Add support for DCN 3.5.1
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00639
  - cnm: update chips&media wave521c firmware.
  - linux-firmware: Add ordinary firmware for RTL8821AU device
  - amdgpu: add new ISP 4.1.1 firmware
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: Amphion: Update vpu firmware
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - i915: Add BMG DMC v2.06
  - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306
  - linux-firmware: Update firmware tuning for HP Consumer Laptop
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B
  - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops
  - linux-firmware: Add firmware and tuning for Lenovo Y770S
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops
  - i915: Update Xe2LPD DMC to v2.20
  - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41
  - linux-firmware: Add firmware for Lenovo Thinkbook 13X
  - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop
  - amdgpu: add DMCUB 3.5 firmware
  - amdgpu: add VPE 6.1.0 firmware
  - amdgpu: add VCN 4.0.5 firmware
  - amdgpu: add UMSCH 4.0.0 firmware
  - amdgpu: add SDMA 6.1.0 firmware
  - amdgpu: add PSP 14.0.0  firmware
  - amdgpu: add GC 11.5.0 firmware
  - amdgpu: update license date
  - Montage: update firmware for Mont-TSSE
  Resolves: RHEL-32183


author: Denys Vlasenko <dvlasenk@redhat.com> - 20240910-6
changelog:
  - linux-firmware broken links (RHEL-45213)
  - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54251)
  - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54236)
  - SMM Lock Bypass (RHEL-55299)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - realtek: rt1320: Add patch firmware of MCU
  - i915: Update MTL DMC v2.23
  - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops
  - amdgpu: Revert sienna cichlid dmcub firmware update
  - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903
  - iwlwifi: add Bz FW for core89-58 release
  - rtl_nic: add firmware rtl8126a-3
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351
  - qcom: vpu: restore compatibility with kernels before 6.6
  - amdgpu: DMCUB updates forvarious AMDGPU ASICs
  - rtw89: 8922a: add fw format-1 v0.35.41.0
  - linux-firmware: update firmware for MT7925 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7925)
  - rtl_bt: Add firmware and config files for RTL8922A
  - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part
  - rtl_bt: de-dupe identical config.bin files
  - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin
  - linux-firmware: Update AMD SEV firmware
  - linux-firmware: update firmware for MT7996
  - Revert "i915: Update MTL DMC v2.22"
  - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3
  - ath11k: QCA2066 hw2.1: add board-2.bin
  - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1
  - qcom: vpu: add video firmware for sa8775p
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: update path for video firmware for vpu-1/2/3.0
  - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw
  - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642
  - rtw89: 8852c: add fw format-1 v0.27.97.0
  - rtw89: 8852bt: add firmware 0.29.91.0
  - amdgpu: Update ISP FW for isp v4.1.1
  - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805
  - Merge https://github.com/zijun-hu/qca_btfw into list-20240802
  - mediatek: Update mt8195 SOF firmware
  - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802
  - amdgpu: DMCUB updates for DCN314
  - xe: First GuC release v70.29.2 for BMG
  - xe: Add GuC v70.29.2 for LNL
  - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL
  - i915: Update MTL DMC v2.22
  - i915: update MTL GSC to v102.0.10.1878
  - xe: Add BMG HuC 8.2.10
  - xe: Add GSC 104.0.0.1161 for LNL
  - xe: Add LNL HuC 9.4.13
  - i915: update DG2 HuC to v7.10.16
  - amdgpu: Update ISP FW for isp v4.1.1
  - amdgpu: Update ISP FW for isp v4.1.1
  - amdgpu: add new ISP 4.1.1 firmware
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641
  - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351
  - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07
  - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release"
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - iwlwifi: add gl FW for core89-58 release
  - iwlwifi: update ty/So/Ma firmwares for core89-58 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release
  - mediatek: Update mt8195 SOF firmware and sof-tplg
  - ASoC: tas2781: fix the license issue for tas781 firmware
  - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008
  - .gitignore: Ignore intermediate files
  - i915: Update Xe2LPD DMC to v2.21
  - qcom: move signed x1e80100 signed firmware to the SoC subdir
  - qcom: add video firmware file for vpu-3.0
  - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics
  - qcom: add gpu firmwares for x1e80100 chipset
  - linux-firmware: add firmware for qat_402xx devices
  - amdgpu: update raven firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update VPE 6.1.1 firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update SDMA 6.1.1 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update SDMA 6.1.0 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SMU 13.0.7 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update raven2 firmware
  - amdgpu: update aldebaran firmware
  - linux-firmware: Update AMD cpu microcode
  - intel: avs: Add topology file for I2S Analog Devices 4567
  - intel: avs: Add topology file for I2S Nuvoton 8825
  - intel: avs: Add topology file for I2S Maxim 98927
  - intel: avs: Add topology file for I2S Maxim 98373
  - intel: avs: Add topology file for I2S Maxim 98357a
  - intel: avs: Add topology file for I2S Dialog 7219
  - intel: avs: Add topology file for I2S Realtek 5663
  - intel: avs: Add topology file for I2S Realtek 5640
  - intel: avs: Add topology file for I2S Realtek 5514
  - intel: avs: Add topology file for I2S Realtek 298
  - intel: avs: Add topology file for I2S Realtek 286
  - intel: avs: Add topology file for I2S Realtek 274
  - intel: avs: Add topology file for Digital Microphone Array
  - intel: avs: Add topology file for HDMI codecs
  - intel: avs: Add topology file for HDAudio codecs
  - Add a copy of Apache-2.0
  - intel: avs: Update AudioDSP base firmware for APL-based platforms
  - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform
  - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics
  - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41
  - amdgpu: Update ISP FW for isp v4.1.1
  Resolves: RHEL-45213, RHEL-54251, RHEL-54236, RHEL-55299


author: Denys Vlasenko <dvlasenk@redhat.com> - 20241029-8
changelog:
  - Update linux-firmware to latest upstream (RHEL-65206)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - xe: Update LNL GSC to v104.0.0.1263
  - i915: Update MTL/ARL GSC to v102.1.15.1926
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - i915: Add Xe3LPD DMC
  - cnm: update chips&media wave521c firmware.
  - linux-firmware: Add firmware for Cirrus CS35L41
  - linux-firmware: Update firmware file for Intel BlazarU core
  - Makefile: error out of 'install' if COPYOPTS is set
  - check_whence.py: skip some validation if git ls-files fails
  - qcom: Add Audio firmware for X1E80100 CRD/QCPs
  - amdgpu: DMCUB updates forvarious AMDGPU ASICs
  - brcm: replace NVRAM for Jetson TX1
  - rtlwifi: Update firmware for RTL8192FU to v7.3
  - make: separate installation and de-duplication targets
  - check_whence.py: check the permissions
  - Remove execute bit from firmware files
  - configure: remove unused file
  - rtl_nic: add firmware rtl8125d-1
  - iwlwifi: add gl/Bz FW for core91-69 release
  - iwlwifi: update ty/So/Ma firmwares for core91-69 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release
  - Merge https://github.com/zijun-hu/qca_btfw into wcn785x
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1
  - ath12k: QCN9274 hw2.0: add board-2.bin
  - copy-firmware.sh: rename variables in symlink hanlding
  - copy-firmware.sh: remove no longer reachable test -L
  - copy-firmware.sh: remove no longer reachable test -f
  - copy-firmware.sh: call ./check_whence.py before parsing the file
  - copy-firmware.sh: warn if the destination folder is not empty
  - copy-firmware.sh: add err() helper
  - copy-firmware.sh: fix indentation
  - copy-firmware.sh: reset and consistently handle destdir
  - Revert "copy-firmware: Support additional compressor options"
  - copy-firmware.sh: flesh out and fix dedup-firmware.sh
  - Style update yaml files
  - editorconfig: add initial config file
  - check_whence.py: annotate replacement strings as raw
  - check_whence.py: LC_ALL=C sort -u the filelist
  - check_whence.py: ban link-to-a-link
  - check_whence.py: use consistent naming
  - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin
  - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31
  - rtlwifi: Add firmware v39.0 for RTL8192DU
  - Revert "ath12k: WCN7850 hw2.0: update board-2.bin"
  - QCA: Add Bluetooth firmwares for WCN785x with UART transport
  - amdgpu: DMCUB DCN35 update
  - brcm: Add BCM4354 NVRAM for Jetson TX1
  - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram
  - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920)
  - linux-firmware: add firmware for MT7920
  - amdgpu: update raven firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update PSP 14.0.4 firmware
  - amdgpu: update GC 11.5.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update SMU 13.0.6 firmware
  - amdgpu: update SDMA 4.4.2 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - qcom: update gpu firmwares for qcm6490 chipset
  - mt76: mt7996: add firmware files for mt7992 chipset
  - mt76: mt7996: add firmware files for mt7996 chipset variants
  - qcom: add gpu firmwares for sa8775p chipset
  - amdgpu: update DMCUB to v0.0.233.0 DCN351
  - rtw89: 8922a: add fw format-2 v0.35.42.1
  - copy-firmware: Handle links to uncompressed files
  - WHENCE: Fix battmgr.jsn entry type
  - amdgpu: Add VPE 6.1.3 microcode
  - amdgpu: add SDMA 6.1.2 microcode
  - amdgpu: Add support for PSP 14.0.4
  - amdgpu: add GC 11.5.2 microcode
  - qcom: qcm6490: add ADSP and CDSP firmware
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301
  Resolves: RHEL-65206


author: Denys Vlasenko <dvlasenk@redhat.com> - 20241111-10
changelog:
  - Update linux-firmware to latest upstream (RHEL-65206)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7
  - cnm: update chips&media wave521c firmware.
  - mediatek MT7920: update bluetooth firmware to 20241104091246
  - linux-firmware: update firmware for MT7920 WiFi device
  - copy-firmware.sh: Run check_whence.py only if in a git repo
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
  - amdgpu: update DMCUB to v9.0.10.0 for DCN351
  - rtw89: 8852a: update fw to v0.13.36.2
  - rtw88: Add firmware v52.14.0 for RTL8812AU
  - i915: Update Xe2LPD DMC to v2.23
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7925)
  - linux-firmware: update firmware for MT7925 WiFi device
  - WHENCE: Add sof-tolg for mt8195
  - linux-firmware: Update firmware file for Intel BlazarI core
  - qcom: Add link for QCS6490 GPU firmware
  - qcom: update gpu firmwares for qcs615 chipset
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops
  - ath11k: move WCN6750 firmware to the device-specific subdir
  Resolves: RHEL-65206


author: Denys Vlasenko <dvlasenk@redhat.com> - 20241210-11
changelog:
  - [AMDCLIENT 10.0 Feature] amdgpu linux-firmware for the 2025 H mobile platform (RHEL-61604)
  - [AMDCLIENT 10.0 Feature] linux-firmware for a 2025 mobile platform (RHEL-61477)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - linux-firmware: Update firmware file for Intel BlazarU core
  - amdgpu: update dmcub 0.0.246.0 firmware
  - Add top level license file.
  - amdgpu: update raven firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update vpe 6.1.3 firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: add vcn 5.0.0 firmware
  - amdgpu: add smu 14.0.3 firmware
  - amdgpu: add sdma 7.0.1 firmware
  - amdgpu: add psp 14.0.3 firmware
  - amdgpu: add gc 12.0.1 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update renoir firmware
  - amdgpu: add smu 14.0.2 firmware
  - amdgpu: add sdma 7.0.0 firmware
  - amdgpu: add psp 14.0.2 firmware
  - amdgpu: add gc 12.0.0 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - upstream amdnpu firmware
  - i915: Update Xe2LPD DMC to v2.24
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
  - iwlwifi: add Bz-gf FW for core89-91 release
  - amdgpu: update smu 13.0.10 firmware
  - amdgpu: update sdma 6.0.3 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: add smu 13.0.14 firmware
  - amdgpu: add sdma 4.4.5 firmware
  - amdgpu: add psp 13.0.14 firmware
  - amdgpu: add gc 9.4.4 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vpe 6.1.1 firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update sdma 4.4.2 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - ice: update ice DDP wireless_edge package to 1.3.20.0
  - ice: update ice DDP comms package to 1.3.52.0
  - ice: update ice DDP package to ice-1.3.41.0
  - amdgpu: update DMCUB to v9.0.10.0 for DCN314
  - amdgpu: update DMCUB to v9.0.10.0 for DCN351
  - linux-firmware: Update AMD cpu microcode
  - xe: Update GUC to v70.36.0 for BMG, LNL
  - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL
  - iwlwifi: add Bz-gf FW for core91-69 release
  - Merge https://github.com/zijun-hu/qca_btfw into qca
  - qcom: venus-5.4: add venus firmware file for qcs615
  - qcom: update venus firmware file for SC7280
  - QCA: Add 22 bluetooth firmware nvm files for QCA2066
  - mediatek MT7922: update bluetooth firmware to 20241106163512
  - mediatek MT7921: update bluetooth firmware to 20241106151414
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - qcom: Add QDU100 firmware image files.
  - qcom: Update aic100 firmware files
  - dedup-firmware.sh: fix infinite loop for --verbose
  Resolves: RHEL-61604, RHEL-61477


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250121-12
changelog:
  - Update linux-firmware to latest upstream (RHEL-75551)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - mediatek MT7925: update bluetooth firmware to 20250113153307
  - linux-firmware: update firmware for MT7925 WiFi device
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update yellow carp firmware
  - qcom: correct licence information for SA8775P binaries
  - qcom: update SLPI firmware for RB5 board
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: add DSP firmware for SA8775p platform
  - qcom: correct venus firmware versions
  - qcom: add missing version information
  - linux-firmware: Update firmware (v10) for mt7988 internal
  - iwlwifi: add Bz FW for core90-93 release
  - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device
  - rtw89: 8852b: update fw to v0.29.29.8
  - rtw89: 8852c: update fw to v0.27.122.0
  - rtw89: 8922a: update fw to v0.35.54.0
  - rtw89: 8922a: update fw to v0.35.52.1 and stuffs
  - rtw89: 8852bt: update fw to v0.29.110.0
  - rtw89: 8852b: update fw to v0.29.29.7
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - amdgpu: update sdma 6.0.3 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update sdma 4.4.5 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update gc 9.4.4 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update vcn 5.0.0 firmware
  - amdgpu: update smu 14.0.3 firmware
  - amdgpu: update psp 14.0.3 firmware
  - amdgpu: update gc 12.0.1 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update renoir firmware
  - amdgpu: update smu 14.0.2 firmware
  - amdgpu: update psp 14.0.2 firmware
  - amdgpu: update gc 12.0.0 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update vcn 4.0.3 firmware
  - amdgpu: update sdma 4.4.2 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - cirrus: cs35l56: Correct some links to address the correct amp instance
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105
  - Fix has_gnu_parallel function
  - rtl_bt: Add separate config for RLT8723CS Bluetooth part
  - amdgpu: revert VCN 3.1.2 firmware
  - amdgpu: revert yellow carp VCN firmware
  - amdgpu: revert sienna cichlid VCN firmware
  - amdgpu: revert navy flounder VCN firmware
  - amdgpu: revert dimgrey cavefish VCN firmware
  - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B
  - copy-firmware.sh: Fix typo in error message.
  - Add support to install files/symlinks in parallel.
  - Makefile: Remove obsolete/broken reference.
  - check_whence.py: Use a more portable shebang.
  - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E
  - cnm: update chips&media wave521c firmware.
  - WHENCE: Add "Info:" tag to text that's clearly not part of the license
  - rtl_nic: add firmware rtl8125bp-2
  - qcom: venus-5.4: update firmware binary for sc7180 and qcs615
  - cirrus: cs35l56: Correct filenames of SSID 17aa3832
  - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops
  - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43
  - rtl_nic: add firmware rtl8125d-2
  - Merge https://github.com/zijun-hu/qca_btfw into qca-bt
  Resolves: RHEL-75551


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 18.1.8-1
changelog:
  - Update to LLVM 18.1.2 (RHEL-28056)
  - Remove llvm17 compat package (RHEL-30890)
  - Workaround for GFX11.5 export priority (RHEL-49746)


author: Nikita Popov <npopov@redhat.com> - 19.1.7-1
changelog:
  - Update to LLVM 19.1.7 (RHEL-57456)
  - Remove llvm18 compat package (RHEL-57457)
  - Remove generated html content from llvm-doc subpackage (RHEL-58900)
  - Enable LLVM_ENABLE_ZSTD=ON (RHEL-70325)


author: Martin Osvald <mosvald@redhat.com> - 2.1.1-1
changelog:
  - New version 2.1.1 (rhbz#2250290)
  - Fix incorrect upstream URL and SourceX (rhbz#2249526)
  - SPDX migration


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-4
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).
  - Workaround for NVMe WWID changing after kernel update.


author: DJ Delorie <dj@redhat.com> - 1:4.4.1-3
changelog:
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Lianbo Jiang <lijiang@redhat.com> - 1.7.5-11
changelog:
  - Fix failure of hugetlb pages exclusion on Linux 6.9 and later
  - Fix wrong exclusion of Slab pages on Linux 6.10-rc1 and later


author: Jakub Čajka <jcajka@redhat.com> - 3:200-1
changelog:
  - Update to latest upstream version
  - Resolves: RHEL-20091, RHEL-20085, RHEL-20556, RHEL-47461 and RHEL-37248


author: Eugene Syromiatnikov <esyr@redhat.com> 2:2.1-55
changelog:
  - Update to upstream 2.1-40. 20230516
    - Addition of 06-6c-01/0x10 (ICL-D B0) microcode at revision 0x1000230;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
      0x2b000461;
    - Addition of 06-8f-04/0x10 microcode at revision 0x2c0001d1;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000461;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c0001d1;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000461;
    - Addition of 06-8f-06/0x10 (SPR-HBM B2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c0001d1;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000461;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000461;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c0001d1;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000461;
    - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at
      revision 0x2c0001d1;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode at revision
      0x2b000461;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision
      0x2c0001d1;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000461;
    - Addition of 06-8f-06/0x10 (SPR-HBM B2) microcode (in
      intel-ucode/06-8f-05) at revision 0x2c0001d1;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000461;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000461;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2c0001d1;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000461;
    - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at
      revision 0x2c0001d1;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000461;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) at revision 0x2c0001d1;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode at revision
      0x2b000461;
    - Addition of 06-8f-06/0x10 (SPR-HBM B2) microcode at revision
      0x2c0001d1;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000461;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000461;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) at revision 0x2c0001d1;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000461;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000461;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000461;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode at revision
      0x2b000461;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000461;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000461;
    - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) at
      revision 0x2c0001d1;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000461;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) at revision 0x2c0001d1;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000461;
    - Addition of 06-8f-06/0x10 (SPR-HBM B2) microcode (in
      intel-ucode/06-8f-08) at revision 0x2c0001d1;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000461;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode at revision
      0x2b000461;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode at revision
      0x2c0001d1;
    - Addition of 06-b7-01/0x32 (RPL-S S0) microcode at revision 0x113;
    - Addition of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode at revision
      0x4112;
    - Addition of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) at revision 0x4112;
    - Addition of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) at revision 0x4112;
    - Addition of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode at revision 0x4112;
    - Addition of 06-be-00/0x01 (ADL-N A0) microcode at revision 0x10;
    - Addition of 06-9a-04/0x40 (AZB A0/R0) microcode at revision 0x4;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015e
      up to 0x1000171;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode from
      revision 0x2006e05 up to 0x2006f05;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003302
      up to 0x4003501;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003302 up to 0x5003501;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002501
      up to 0x7002601;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000375
      up to 0xd000390;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3c up
      to 0x3e;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x20 up
      to 0x22;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb2
      up to 0xba;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x31 up
      to 0x33;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode from revision
      0xa4 up to 0xaa;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x28 up
      to 0x2a;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x40 up
      to 0x44;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf0
      up to 0xf2;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
      revision 0xf0 up to 0xf2;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode from revision 0xf0 up to 0xf6;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x16 up
      to 0x17;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x421 up to 0x42a;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x421 up to 0x42a;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x421 up to 0x42a;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x421
      up to 0x42a;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000023
      up to 0x24000024;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
      revision 0xf0 up to 0xf2;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
      0xf0 up to 0xf2;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf0
      up to 0xf2;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
      0xf0 up to 0xf2;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
      0xf0 up to 0xf8;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf0 up
      to 0xf6;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf0
      up to 0xf6;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf0
      up to 0xf6;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf0
      up to 0xf6;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf0 up to 0xf6;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x54 up
      to 0x58;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x22
      up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x22 up to
      0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x22 up to
      0x2c (old pf 0x3).
  - Addresses CVE-2022-21216, CVE-2022-33196, CVE-2022-33972, CVE-2022-38090


author: Eugene Syromiatnikov <esyr@redhat.com> 2:2.1-57
changelog:
  - Update to upstream 2.1-41. 20230808
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000171
      up to 0x1000181;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode from
      revision 0x2006f05 up to 0x2007006;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003501
      up to 0x4003604;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003501 up to 0x5003604;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002601
      up to 0x7002703;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000390
      up to 0xd0003a5;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xba
      up to 0xbc;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode from revision
      0xaa up to 0xac;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2a up
      to 0x2c;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x44 up
      to 0x46;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
      0xf2 up to 0xf4;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf2
      up to 0xf4;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
      revision 0xf2 up to 0xf4;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode from revision 0xf6 up to 0xf8;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c0001d1 up to
      0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000461
      up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c0001d1 up to
      0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000461
      up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2c
      up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x42a up to 0x42c;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x42a up to 0x42c;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x42a up to 0x42c;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42a
      up to 0x42c;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
      revision 0xf2 up to 0xf4;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
      0xf2 up to 0xf4;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf2
      up to 0xf4;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
      0xf2 up to 0xf4;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
      0xf8 up to 0xfa;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf6 up
      to 0xf8;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf6 up to 0xf8;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x58 up
      to 0x59;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x113 up
      to 0x119;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2c up
      to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2c up
      to 0x2e;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4112
      up to 0x4119 (old pf 0xc0);
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x10 up
      to 0x11 (old pf 0x1).
  - Addresses CVE-2022-21216, CVE-2022-40982, CVE-2022-41804, CVE-2023-23908


author: Eugene Syromiatnikov <esyr@redhat.com> 2:2.1-58
changelog:
  - Update to upstream 2.1-42. 20231114
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003a5
      up to 0xd0003b9;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000230
      up to 0x1000268;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xbc
      up to 0xc2;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode from revision
      0xac up to 0xb4;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2c up
      to 0x34;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x46 up
      to 0x4e;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (RPL-S 8+8 C0) microcode (in
      intel-ucode/06-97-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (RPL-S 6+0 C0) microcode (in
      intel-ucode/06-97-02) from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2e
      up to 0x32;
    - Update of 06-bf-02/0x07 (RPL-S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (RPL-S 6+0 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2e up to 0x32;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x42c up to 0x430;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x42c up to 0x430;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x42c up to 0x430;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x4 up
      to 0x5;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42c
      up to 0x430;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x59 up
      to 0x5d;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x119 up
      to 0x11d;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4119
      up to 0x411c;
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x11 up
      to 0x12;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (RPL-S 8+8 C0) microcode from revision 0x2e
      up to 0x32;
    - Update of 06-bf-05/0x07 (RPL-S 6+0 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (RPL-S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (RPL-S 6+0 C0) microcode from revision 0x2e
      up to 0x32.
  - Addresses CVE-2023-23583


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20240910-1
changelog:
  - Update Intel CPU microcode to microcode-20240910 release, addresses
  - Addresses CVE-2024-23984, CVE-2024-24853, CVE-2024-24968, CVE-2024-24980,
    CVE-2024-25939 (RHEL-58058):
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003605 up to 0x5003707;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002802
      up to 0x7002904;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003d1
      up to 0xd0003e7;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000290
      up to 0x10002b0;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc4
      up to 0xc6;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode from revision
      0xb6 up to 0xb8;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x50 up
      to 0x52;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
      0xf4 up to 0xf6;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
      revision 0xf4 up to 0xf6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode from revision 0xfa up to 0xfc;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x19 up
      to 0x1a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x35
      up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x433 up to 0x434;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x433
      up to 0x434;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
      0xf6 up to 0xf8;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
      0xf6 up to 0xf8;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
      0xfc up to 0x100;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfa up
      to 0xfc;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfa
      up to 0xfe;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xfa up to 0xfc;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5e up
      to 0x62;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1c
      up to 0x1f;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x123 up
      to 0x129;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4121
      up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4121 up to 0x4122;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x17 up
      to 0x1a (old pf 0x11).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20240910-1
changelog:
  - Update Intel CPU microcode to microcode-20240910 release, addresses
    CVE-2024-23984, CVE-2024-24853, CVE-2024-24968, CVE-2024-24980,
    CVE-2024-25939 (RHEL-58058):
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003605 up to 0x5003707;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002802
      up to 0x7002904;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003d1
      up to 0xd0003e7;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000290
      up to 0x10002b0;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc4
      up to 0xc6;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode from revision
      0xb6 up to 0xb8;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x50 up
      to 0x52;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
      0xf4 up to 0xf6;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
      revision 0xf4 up to 0xf6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode from revision 0xfa up to 0xfc;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x19 up
      to 0x1a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x35
      up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x433 up to 0x434;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x433
      up to 0x434;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
      0xf6 up to 0xf8;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
      0xf6 up to 0xf8;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
      0xfc up to 0x100;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfa up
      to 0xfc;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfa
      up to 0xfe;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xfa up to 0xfc;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5e up
      to 0x62;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1c
      up to 0x1f;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x123 up
      to 0x129;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4121
      up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4121 up to 0x4122;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x17 up
      to 0x1a (old pf 0x11).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20241112-1
changelog:
  - Update Intel CPU microcode to microcode-20241112 release, addresses
    CVE-2024-21820, CVE-2024-21853, CVE-2024-23918, CVE-2024-23984 (RHEL-67335):
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0005c0
      up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0005c0
      up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0005c0 up to 0x2b000603;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x36 up to 0x37;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x36
      up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x36 up to 0x37;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x434 up to 0x435;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x434 up to 0x435;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x434 up to 0x435;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x434
      up to 0x435;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1f
      up to 0x20;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x129 up
      to 0x12b;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4122 up to 0x4123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4122
      up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4122 up to 0x4123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4122 up to 0x4123;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x36 up
      to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x36 up to 0x37;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x36 up
      to 0x37;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000230
      up to 0x21000283;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000230 up to 0x21000283;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000230 up to 0x21000283;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000230
      up to 0x21000283.


author: Jaroslav Rohel <jrohel@redhat.com> - 3.9.0-1
changelog:
  - Update to 3.9.0
  - Add leaves command - List installed packages not required by other installed packages


author: Evan Goode <egoode@redhat.com> - 3.10.1-1
changelog:
  - Update to 3.10.1
  - Correct spelling of summary
  - Print more helpful error message when reinstalling non-installed pkg
    Resolves: RHEL-53430


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Lukáš Zaoral <lzaoral@redhat.com> - 7.2-1
changelog:
  - Update to 7.2 (rhbz#2161916)
  - Do not use %{_bindir}/* and %{_mandir}/* as suggested by the packaging
    guidelines.


author: Lukáš Zaoral <lzaoral@redhat.com> - 8.0-1
changelog:
  - rebase to latest upstream version (RHEL-35944)
  - remove `nano-default-editor` from the specfile (RHEL-30790)


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.63.20160912git
changelog:
  - Resolves: #2114821 - The output of `route -A inet6` does not display properly when the 'Use' column output is over 6 digits


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.64.20160912git
changelog:
  - Resolves: #2077846 - net-tools utilities display incorrect statistics for interfaces with 15-character names


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Pavel Reichl <preichl@redhat.com> - 0.4.2-3
changelog:
  - Actually change License from BSD to LGPL, based on content of COPYING file
  - Convert License tag to SPDX format


author: Kevin Fenzi <kevin@scrye.com> - 1.0.7-1
changelog:
  - Update to 1.0.7. Fixes rhbz#2155658
  - Build the package with setuptools instead of distutils. Fixes: rhbz#2154872


author: Phil Sutter <psutter@redhat.com> - 1:1.0.9-1
changelog:
  - Fix devel sub-package description
  - Utilize pyproject-rpm-macros for the python sub-package
  - new version 1.0.9


author: Phil Sutter <psutter@redhat.com> [1.1.1-1.el10]
changelog:
  - monitor: Recognize flowtable add/del events (Phil Sutter) [RHEL-65346]
  - tests: py: Fix for storing payload into missing file (Phil Sutter) [RHEL-65346]
  - json: Support typeof in set and map types (Phil Sutter) [RHEL-65346]
  - json: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - doc: extend description of fib expression (Phil Sutter) [RHEL-65346]
  - tests: monitor: fix up test case breakage (Phil Sutter) [RHEL-65346]
  - src: fix extended netlink error reporting with large set elements (Phil Sutter) [RHEL-65346]
  - rule: netlink attribute offset is uint32_t for struct nlerr_loc (Phil Sutter) [RHEL-65346]
  - mnl: update cmd_add_loc() to take struct nlmsghdr (Phil Sutter) [RHEL-65346]
  - mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc() (Phil Sutter) [RHEL-65346]
  - src: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - libnftables-json: fix raw payload expression documentation (Phil Sutter) [RHEL-65346]
  - tests: shell: fix spurious dump failure in vmap timeout test (Phil Sutter) [RHEL-65346]
  - Rebase onto version 1.1.1 (Phil Sutter) [RHEL-65346]


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.5-42.20150602git
changelog:
  - recognize the -m option
  - modernize the specfile
      - use recommended systemd macros
      - fix manual pages installation
      - sort file list and BuildRequires
      - use modern make macros
      - simplify %install section


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-4
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.8-2.D20220919gitb041f6d
changelog:
  - Update to the latest git, expecially:
    - Update to Unicode 15.0 (upstream #272)
    - [[:punct:]] behavoir change (upsteam #268)


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - 3.23.0
     * EP11: Add support for FIPS-session mode
     * Updates to harden against RSA timing attacks
     * Bug fixes


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-58996, update to 3.24.0
  - Resolves: RHEL-39004, provide opencryptoki CCA Token also on x86_64 and ppc64le
  - Resolves: RHEL-43675, openCryptoki cca token RSA OAEP v2.1 support
  - Resolves: RHEL-43674, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-43676, openCryptoki cca token SHA3 support
  - Resolves: RHEL-24036, support protected keys for extractable keys


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-1
changelog:
  - Rebase to version 2.6.7 (rhbz#2261163)
  - Use systemd-sysusers for ldap user and group (rhbz#2173965)
  - Fix compiler errors (rhbz#2261427)
  - Replace License with SPDX identifier


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-2
changelog:
  - Remove libslapi from the main package (RHEL-35581)
  - Add "servers" conditional which includes libslapi


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71052)
  - Avoid SSL context cleanup during library destruction (RHEL-68424)


author: Veronika Hanulikova <vhanulik@redhat.com> - 0.26.1-1
changelog:
  - Rebase to new upstream release (RHEL-71523)
  - Separate OpenSC into libraries and binaries (RHEL-73314)


author: Zoltan Fridrich <zfridric@redhat.com> - 9.6p1-1.3
changelog:
  - Correctly audit hostname and IP address (RHEL-22316)
  - Make default key sizes configurable in sshd-keygen (RHEL-26454)


author: Zoltan Fridrich <zfridric@redhat.com> - 9.6p1-1.5
changelog:
  - Build OpenSSH without ENGINE API
    Resolves: RHEL-45507
  - Remove pam_ssh_agent_auth subpackage
    Resolves: RHEL-45002


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.8p1-2.0
changelog:
  - Temporary disabling self-test
    Related: RHEL-42635
  - Change ssh-keygen defaults in FIPS mode
    Resolves: RHEL-37324
  - Use FIPS-compatible API for key derivation RHEL-10
    Resolves: RHEL-43592


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.8p1-3
changelog:
  - sshd doesn't propose to enter password again when a non-existing user is specified
    Resolves: RHEL-11981
  - Reenabling self-test on rpm build
    Related: RHEL-42635


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.8p1-5
changelog:
  - Restore GSS connectivity when no hostkeys are present
    Related: RHEL-42635
  - Add missing gsskeyex authentication method
    Related: RHEL-42635
  - "publickey-hostbound@openssh.com" extension makes no sense with GSS
    Related: RHEL-42635


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-1
changelog:
  - Update to OpenSSH 9.9p1
    Resolves: RHEL-60564
  - Separate ssh-keysign to a dedicated package
    Resolves: RHEL-62112
  - Use FIPS KEX defaults in FIPS mode
    Resolves: RHEL-58986


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-2
changelog:
  - Resolve memory management issues after rebase
    Related: RHEL-60564
  - Add extra help information on ssh early failure
    Resolves: RHEL-62718


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-3
changelog:
  - Extra help information should not be printed if stderr is not a TTY
    Resolves: RHEL-63061
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-63190


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-5
changelog:
  - Fix regression of Match directive processing
    Resolves: RHEL-76317
  - Avoid linking issues for openssl logging
    Related: RHEL-63190


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-7
changelog:
  - Disallow SHA1 at SECLEVEL2 in OpenSSL
    Resolves: RHEL-39962
  - SHA-1 signature shouldn't work in normal mode
    Resolves: RHEL-36677


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-10
changelog:
  - Use PBMAC1 by default when creating PKCS#12 files in FIPS mode
    Related: RHEL-36659
  - Support key encapsulation/decapsulation in openssl pkeyutl command
    Resolves: RHEL-54156
  - Fix typo in the patch numeration
    Related: RHEL-41261
  - Enable KTLS, temporary disable KTLS tests
    Related: RHEL-47335
  - Speedup SSL_add_{file,dir}_cert_subjects_to_stack
    Resolves: RHEL-54232
  - Resolve SAST package scan results
    Resolves: RHEL-37561


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-15
changelog:
  - Fix providers no_cache behavior
    Resolves: RHEL-71903
  - Fix pkcs12 command line segfault
    Resolves: RHEL-70878
  - Print key exchange group for hybrid PQC
    Resolves: RHEL-66163
  - Ensure correct fips.so checksum calculation
    Resolves: RHEL-73170
  - Locally configured providers should not interfere with openssl build-time tests
    Resolves: RHEL-76182
  - Load system default cipher string from crypto-policies configuration file
    include /etc/crypto-policies/back-ends/opensslcnf.config and remove
    /etc/crypto-policies/back-ends/openssl.config.
    Resolves: RHEL-71132


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-2
changelog:
  - Fix static analyzer detected issues. Resolves: RHEL-36475
  - pam_env: fixes for NULL environment variables


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-6
changelog:
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-65223


author: Brian C. Lane <bcl@redhat.com> - 3.5-11
changelog:
  - parted: Fix ending sector location when using kibi IEC suffix (bcl)
  - tests: Fix formatting and snprintf warnings in tests. (bcl)
  - ui: Add checks for prompt being NULL (bcl)
  - strlist: Handle realloc error in wchar_to_str (bcl)
  - libparted: Fix potential NULL dereference in ped_disk_next_partition (bcl)
  - filesys: Check for null from close_fn (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.5.28-1
changelog:
  - Upstream 3.5.28 Alpha release
  - Dropped all patches included in new upstream release
  - Bumped minor version on libparted.so and libparted-fs-resize.so


author: Brian C. Lane <bcl@redhat.com> - 3.6-7
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73220
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73220
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73220
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73220


author: Michal Hlavinka <mhlavink@redhat.com> - 3.9.0-4
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Michal Hlavinka <mhlavink@redhat.com> - 3.13.0-1
changelog:
  - updated to 3.13, adds support for cxl1.1 device link status information (#RHEL-29153)
  - add riscv64 build support (#RHEL-40383)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-512
changelog:
  - Resolves: RHEL-75798
  - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>)
  - Add config.over to make build od perl reproducible
  - Removed unnecessary conversion
  - Add new systemtap-sdt-dtrace to build deps


author: Paul Howarth <paul@city-fan.org> - 2.081-1
changelog:
  - Update to 2.081
    - New function set_msg_callback for user defined callback on each SSL message
    - Showcase function in example/ssl_client.pl and example/ssl_server.pl for
      computing JA3S/JA3 fingerprints
    - Fix tracing added in 2.076 to no longer include SSL3_RT_HEADER (noise)


author: Paul Howarth <paul@city-fan.org> - 2.082-1
changelog:
  - Update to 2.082
    - SSL_version default now TLS 1.2+ since TLS 1.1 and lower are deprecated
      (GH#122)
    - Fix output of alert string when debugging (GH#132)
    - Improve regex for hostname validation (GH#130, GH#126)
    - Add can_ciphersuites subroutine for feature checking (GH#127)
    - Utils::CERT_create - die if unexpected arguments are given instead of
      ignoring these
  - Avoid use of deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 2.083-1
changelog:
  - Update to 2.083
    - Fix t/protocol_version.t for OpenSSL versions that don't support SECLEVEL
      (regression from GH#122)


author: Paul Howarth <paul@city-fan.org> - 2.084-1
changelog:
  - Update to 2.084
    - Various fixes for edge cases and build: GH#136, GH#141, GH#142, GH#143,
      GH#145
    - Update documentation to reflect default SSL_version


author: Paul Howarth <paul@city-fan.org> - 2.085-1
changelog:
  - Update to 2.085
    - Fix test that failed due to behavior changes in OpenSSL 3.2 (GH#147)
    - Update PublicSuffix
    - Add examples for TLS JA3/JA4 fingerprinting to tls_fingerprint/


author: Paul Howarth <paul@city-fan.org> - 1.92-7
changelog:
  - Update test suite to handle potential unavailability of sha1 algorithm
    https://github.com/radiator-software/p5-net-ssleay/pull/433
  - Avoid deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Paul Howarth <paul@city-fan.org> - 1:0.240-1
changelog:
  - Update to 0.240
    - Use Test::More::isnt() instead of Test::More::isn't in tests, which is
      deprecated, as ' isn't allowed as package separator in an upcoming version
      of Perl (GH#13)


author: Christian Glombek <cglombek@redhat.com> - 123-2
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Jan Rybar <jrybar@redhat.com> - 0.1-26
changelog:
  - use build macros, on behalf of original author Tom Stellard (tstellar)
  - Pagure doesn't allow one-click rebase, AFAIK


author: Than Ngo <than@redhat.com> - 1.3.11-4
changelog:
  - Fix negative values seen while running lpar
  - Fix lparstat error with mixed SMT state
  - Fix negative values seen while running lparstat with -E option


author: Than Ngo <than@redhat.com> - 1.3.12-7
changelog:
  - Add, multipath - drmgr support
  - Fix, SMT state is not honored when new CPUs are added dynamically
  Resolves: RHEL-62938


author: Than Ngo <than@redhat.com> - 2.7.10-1
changelog:
  - Update to 2.7.10
    * Aadd support for multiple platform dumps
    * Add support for light path diagnostics for rtas events
    * Enable correct display of model and system-id for IPS Power systems
    * Fix call home feature for nvmf devices
    * Fix crash in rtas_errd due to invalid -f option values
    * Fix build warnings with GCC-15
  Resolves: RHEL-65188


author: Jan Rybar <jrybar@redhat.com> - 6.6.4-17
changelog:
  - migrate to autosetup; convert specfile script to a patch
  - FORTIFY_SOURCE_3 detected a buffer overflow
  - Resolves: bz#2190057


author: Miro Hrončok <mhroncok@redhat.com> - 23.3.1-5
changelog:
  - Switched to autogenerated BuildRequires for test dependencies,
    which removed some that were no longer necessary


author: Charalampos Stratakis <cstratak@redhat.com> - 23.3.2-2
changelog:
  - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)
  - Require Python with tarfile filters
  - Resolves: RHEL-25820


author: Miro Hrončok <mhroncok@redhat.com> - 2.28.2-7
changelog:
  - Do not package requests[security] and requests[socks] on RHEL
  - Make the package build even when urllib3 won't pull in pysocks


author: Lumír Balhar <lbalhar@redhat.com> - 2.32.3-1
changelog:
  - Update to 2.32.3
  - Fix for CVE-2024-35195
  Resolves: RHEL-37604
  - Add support for IPv6 CIDR in no_proxy setting
  Resolves: RHEL-32523


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64877, RHEL-70450


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-5
changelog:
  - Split packages for variable fonts.
  - Drop unnecessary/duplicate fonts from packages.
  - Worked around broken family name in variable fonts.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-8
changelog:
  - Use no VF in family name version of ttf for -vf packages.
  - Adjust properties in VF to avoid confusion.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-11
changelog:
  - Add a provide line of font(redhatdisplayvf), font(redhattextvf),
    and font(redhatmonovf) to each sub-packages for backward compatibility.
  - Fix invalid License field.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-14
changelog:
  - Remove Italic variable fonts to workaround a crash issue
    and unexpected italic rendering.
    Resolves: RHEL-69430


author: Stephen Gallagher <sgallagh@redhat.com> - 1:0.4-0.54.b47
changelog:
  - Fixes for -WError=implicit-function-declaration on RHEL
  - Reinstates the dump headers without compiling the implementations


author: Vladis Dronov <vdronov@redhat.com> - 6.17-2
changelog:
  - Add Intel CET IBT instrumentation to assembly code
  - Update to the upstream v6.17 @ ac43f912 (RHEL-36771)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-3
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-54012)
  - Fix potential use of uninitialized pgp struct (RHEL-54013)
  - Fix memory leak in rpmsign(8) (RHEL-37564)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-4
changelog:
  - Remove hardcoded GPG references from signing error messages
  - Support switching between GnuPG and Sequoia for package signing (RHEL-56363)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Jonathan Wright <jonathan@almalinux.org> - 3.3.0-6.alma.1
changelog:
  - Fix for CVE-2024-12084
  - Fix for CVE-2024-12085
  - Fix for CVE-2024-12086
  - Fix for CVE-2024-12087
  - Fix for CVE-2024-12088
  - Fix for CVE-2024-12747


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-59086)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-23873)
  - Resolves: RHEL-59086 RHEL-23873


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-59086)
  - cpacfinfo: new tool to provide CPACF information (RHEL-23869)
  - chpstat: Additional Channel Measurements (RHEL-23875)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-24153)
  - KVM: Support extended attestation for Secure Execution (RHEL-27472)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-47108)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64704)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70851)
  - KVM: Rewrite genprotimg in Rust (RHEL-72022)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71821)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-46894)
  - zkey key support for dm-crypt with XTS keys (RHEL-23870)
  - Resolves: RHEL-59086 RHEL-23869 RHEL-23875 RHEL-24153 RHEL-27472 RHEL-47108 RHEL-64704 RHEL-70851 RHEL-72022 RHEL-71821 RHEL-46894 RHEL-23870


author: Paolo Bonzini <pbonzini@redhat.com> - 4.9-1
changelog:
  - Rebase to 4.9
  - Update downstream patches
  - Resolves: rhbz#2140486
  - Remove change to gnulib tests, they pass anyway
  - Install valgrind and langpacks to increase test coverage


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.2-1
changelog:
  - Allow all domains read and write z90crypt device
  Resolves: RHEL-28539
  - Allow dhcpc read /run/netns files
  Resolves: RHEL-39510
  - Allow bootupd search efivarfs dirs
  Resolves: RHEL-39514


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.3-1
changelog:
  - Allow virtqemud manage nfs files when virt_use_nfs boolean is on
  Resolves: RHEL-40205
  - Allow virt_driver_domain read files labeled unconfined_t
  Resolves: RHEL-40262
  - Allow virt_driver_domain dbus chat with policykit
  Resolves: RHEL-40346
  - Escape "interface" as a file name in a virt filetrans pattern
  Resolves: RHEL-34769
  - Allow setroubleshootd get attributes of all sysctls
  Resolves: RHEL-40923
  - Allow qemu-ga read vm sysctls
  Resolves: RHEL-40829
  - Allow sbd to trace processes in user namespace
  Resolves: RHEL-39989
  - Allow request-key execute scripts
  Resolves: RHEL-38920
  - Update policy for haproxyd
  Resolves: RHEL-40877


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.4-1
changelog:
  - Confine libvirt-dbus
  Resolves: RHEL-37822
  - Allow sssd create and use io_uring
  Resolves: RHEL-43448
  - Allow virtqemud the kill capability in user namespace
  Resolves: RHEL-44996
  - Allow login_userdomain execute systemd-tmpfiles in the caller domain
  Resolves: RHEL-44191
  - Allow virtqemud read vm sysctls
  Resolves: RHEL-40938
  - Allow svirt_t read vm sysctls
  Resolves: RHEL-40938
  - Allow rshim get options of the netlink class for KOBJECT_UEVENT family
  Resolves: RHEL-40859
  - Allow systemd-hostnamed read the vsock device
  Resolves: RHEL-45309
  - Allow systemd (PID 1) manage systemd conf files
  Resolves: RHEL-45304
  - Allow journald read systemd config files and directories
  Resolves: RHEL-45304
  - Allow systemd_domain read systemd_conf_t dirs
  Resolves: RHEL-45304
  - Label systemd configuration files with systemd_conf_t
  Resolves: RHEL-45304
  - Allow dhcpcd the kill capability
  Resolves: RHEL-43417
  - Add support for libvirt hooks
  Resolves: RHEL-41168


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.5-1
changelog:
  - Allow to create and delete socket files created by rhsm.service
  Resolves: RHEL-40857
  - Allow svirt read virtqemud fifo files
  Resolves: RHEL-40350
  - Allow virt_dbus_t connect to virtqemud_t over a unix stream socket
  Resolves: RHEL-37822
  - Allow virtqemud read virt-dbus process state
  Resolves: RHEL-37822
  - Allow virtqemud run ssh client with a transition
  Resolves: RHEL-43215
  - Allow virtnetworkd exec shell when virt_hooks_unconfined is on
  Resolves: RHEL-41168
  - Allow NetworkManager the sys_ptrace capability in user namespace
  Resolves: RHEL-46717
  - Update keyutils policy
  Resolves: RHEL-38920
  - Allow ip the setexec permission
  Resolves: RHEL-41182


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.6-1
changelog:
  - Allow virtnodedevd run udev with a domain transition
  Resolves: RHEL-39890
  - Allow virtnodedev_t create and use virtnodedev_lock_t
  Resolves: RHEL-39890
  - Allow svirt attach_queue to a virtqemud tun_socket
  Resolves: RHEL-44312
  - Label /run/systemd/machine with systemd_machined_var_run_t
  Resolves: RHEL-49567
  - Allow to create and delete socket files created by rhsm.service


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.7-1
changelog:
  - Add the swtpm.if interface file for interactions with other domains
  Resolves: RHEL-47274
  - Allow virtproxyd create and use its private tmp files
  Resolves: RHEL-40499
  - Allow virtproxyd read network state
  Resolves: RHEL-40499
  - Allow virtqemud domain transition on swtpm execution
  Resolves: RHEL-47274
  Resolves: RHEL-49763
  - Allow virtqemud relabel virt_var_run_t directories
  Resolves: RHEL-47274
  Resolves: RHEL-45464
  Resolves: RHEL-49763
  - Allow virtqemud domain transition on passt execution
  Resolves: RHEL-45464
  - Allow virt_driver_domain create and use log files in /var/log
  Resolves: RHEL-40239
  - Allow virt_driver_domain connect to systemd-userdbd over a unix socket
  Resolves: RHEL-44932
  Resolves: RHEL-44898
  - Update stalld policy for bpf usage
  Resolves: RHEL-50356
  - Allow boothd connect to systemd-userdbd over a unix socket
  Resolves: RHEL-45907
  - Allow linuxptp configure phc2sys and chronyd over a unix domain socket
  Resolves: RHEL-46011
  - Allow systemd-machined manage runtime sockets
  Resolves: RHEL-49567
  - Allow ip command write to ipsec's logs
  Resolves: RHEL-41222
  - Allow init_t nnp domain transition to firewalld_t
  Resolves: RHEL-52481
  - Update qatlib policy for v24.02 with new features
  Resolves: RHEL-50377
  - Allow postfix_domain map postfix_etc_t files
  Resolves: RHEL-46327


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.8-1
changelog:
  - Add virt_create_log() and virt_write_log() interfaces
  Resolves: RHEL-47274
  - Update libvirt policy
  Resolves: RHEL-45464
  Resolves: RHEL-49763
  - Allow svirt_tcg_t map svirt_image_t files
  Resolves: RHEL-47274
  - Allow svirt_tcg_t read vm sysctls
  Resolves: RHEL-47274
  - Additional updates stalld policy for bpf usage
  Resolves: RHEL-50356


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.9-1
changelog:
  - Allow virtqemud relabelfrom also for file and sock_file
  Resolves: RHEL-49763
  - Allow virtqemud relabel user tmp files and socket files
  Resolves: RHEL-49763
  - Update virtqemud policy for libguestfs usage
  Resolves: RHEL-49763
  - Label /run/libvirt/qemu/channel with virtqemud_var_run_t
  Resolves: RHEL-47274


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.10-1
changelog:
  - Confine gnome-remote-desktop
  Resolves: RHEL-35877
  - Allow virtqemud get attributes of a tmpfs filesystem
  Resolves: RHEL-40855
  - Allow virtqemud get attributes of cifs files
  Resolves: RHEL-40855
  - Allow virtqemud get attributes of filesystems with extended attributes
  Resolves: RHEL-39668
  - Allow virtqemud get attributes of NFS filesystems
  Resolves: RHEL-40855
  - Add support for secretmem anon inode
  Resolves: RHEL-40953
  - Allow systemd-sleep read raw disk data
  Resolves: RHEL-49600
  - Allow systemd-hwdb send messages to kernel unix datagram sockets
  Resolves: RHEL-50810
  - Label /run/modprobe.d with modules_conf_t
  Resolves: RHEL-54591
  - Allow setsebool_t relabel selinux data files
  Resolves: RHEL-55412
  - Don't audit crontab_domain write attempts to user home
  Resolves: RHEL-56349
  - Differentiate between staff and sysadm when executing crontab with sudo
  Resolves: RHEL-56349
  - Add crontab_admin_domtrans interface
  Resolves: RHEL-56349
  - Add crontab_domtrans interface
  Resolves: RHEL-56349
  - Allow boothd connect to kernel over a unix socket
  Resolves: RHEL-58060
  - Fix label of pseudoterminals created from sudodomain
  Resolves: RHEL-58068
  - systemd: allow systemd_notify_t to send data to kernel_t datagram sockets
  Resolves: RHEL-58072
  - Allow rsyslog read systemd-logind session files
  Resolves: RHEL-40961
  - Label /dev/mmcblk0rpmb character device with removable_device_t
  Resolves: RHEL-55265
  - Label /dev/hfi1_[0-9]+ devices
  Resolves: RHEL-62836
  - Label /dev/papr-sysparm and /dev/papr-vpd
  Resolves: RHEL-56908
  - Support SGX devices
  Resolves: RHEL-62354
  - Suppress semodule's stderr
  Resolves: RHEL-59192


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.11-1
changelog:
  - Allow ping_t read network sysctls
  Resolves: RHEL-54299
  - Label /usr/lib/node_modules/npm/bin with bin_t
  Resolves: RHEL-56350
  - Label /run/sssd with sssd_var_run_t
  Resolves: RHEL-57065
  - Allow virtqemud read virtd_t files
  Resolves: RHEL-57713
  - Allow wdmd read hardware state information
  Resolves: RHEL-57982
  - Allow wdmd list the contents of the sysfs directories
  Resolves: RHEL-57982
  - Label /etc/sysctl.d and /run/sysctl.d with system_conf_t
  Resolves: RHEL-58380
  - Allow dirsrv read network sysctls
  Resolves: RHEL-58381
  - Allow lldpad create and use netlink_generic_socket
  Resolves: RHEL-61634
  - Allow unconfined_t execute kmod in the kmod domain
  Resolves: RHEL-61755
  - Confine the pcm service
  Resolves: RHEL-52838
  - Allow iio-sensor-proxy the bpf capability
  Resolves: RHEL-62355
  - Confine iio-sensor-proxy
  Resolves: RHEL-62355


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.12-1
changelog:
  - Dontaudit subscription manager setfscreate and read file contexts
  Resolves: RHEL-58009
  - Allow the sysadm user use the secretmem API
  Resolves: RHEL-40953
  - Allow sudodomain list files in /var
  Resolves: RHEL-58068
  - Allow gnome-remote-desktop watch /etc directory
  Resolves: RHEL-35877
  - Allow journalctl connect to systemd-userdbd over a unix socket
  Resolves: RHEL-58072
  - systemd: allow sys_admin capability for systemd_notify_t
  Resolves: RHEL-58072
  - Allow some confined users send to lldpad over a unix dgram socket
  Resolves: RHEL-61634
  - Allow lldpad send to sysadm_t over a unix dgram socket
  Resolves: RHEL-61634
  - Allow lldpd connect to systemd-machined over a unix socket
  Resolves: RHEL-61634


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.13-1
changelog:
  - Revert "Allow unconfined_t execute kmod in the kmod domain"
  Resolves: RHEL-65190
  - Add policy for /usr/libexec/samba/samba-bgqd
  Resolves: RHEL-64908
  - Label samba certificates with samba_cert_t
  Resolves: RHEL-64908
  - Label /usr/bin/samba-gpupdate with samba_gpupdate_exec_t
  Resolves: RHEL-64908
  - Allow rpcd read network sysctls
  Resolves: RHEL-64737
  - Label all semanage store files in /etc as semanage_store_t
  Resolves: RHEL-65864


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.14-1
changelog:
  - mls/modules.conf - fix typo
  - Use dist/targeted/modules.conf in build workflow
  - Fix default and dist config files
  - CI: update to actions/checkout@v4
  - Clean up and sync securetty_types
  - Bring config files from dist-git into the source repo
  - Sync users with Fedora targeted users


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.15-1
changelog:
  - Allow qatlib search the content of the kernel debugging filesystem
  Resolves: RHEL-66334
  - Allow qatlib connect to systemd-machined over a unix socket
  Resolves: RHEL-66334
  - Update policy for samba-bgqd
  Resolves: RHEL-64908
  - Allow httpd get attributes of dirsrv unit files
  Resolves: RHEL-62706
  - Allow virtstoraged read vm sysctls
  Resolves: RHEL-61742
  - Allow virtstoraged execute mount programs in the mount domain
  Resolves: RHEL-61742
  - Update policy for rpc-virtstorage
  Resolves: RHEL-61742
  - Allow virtstoraged get attributes of configfs dirs
  Resolves: RHEL-61742
  - Allow virt_driver_domain read virtd-lxc files in /proc
  Resolves: RHEL-61742
  - Allow virtstoraged manage files with virt_content_t type
  Resolves: RHEL-61742
  - Allow virtstoraged use the io_uring API
  Resolves: RHEL-61742
  - Allow virtstoraged execute lvm programs in the lvm domain
  Resolves: RHEL-61742
  - Allow svirt_t connect to unconfined_t over a unix domain socket
  Resolves: RHEL-61246
  - Label /usr/lib/node_modules_22/npm/bin with bin_t
  Resolves: RHEL-56350
  - Allow bacula execute container in the container domain
  Resolves: RHEL-39529
  - Label /run/systemd/generator with systemd_unit_file_t
  Resolves: RHEL-68313


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.17-1
changelog:
  - Update samba-bgqd policy
  Resolves: RHEL-69512
  - Allow samba-bgqd read cups config files
  Resolves: RHEL-69512
  - Allow virtqemud additional permissions for tmpfs_t blk devices
  Resolves: RHEL-61235
  - Allow virtqemud rw access to svirt_image_t chr files
  Resolves: RHEL-61235
  - Allow virtqemud rw and setattr access to fixed block devices
  Resolves: RHEL-61235
  - Label /etc/mdevctl.d/scripts.d with bin_t
  Resolves: RHEL-39893
  - Fix the /etc/mdevctl\.d(/.*)? regexp
  Resolves: RHEL-39893
  - Allow virtnodedev watch mdevctl config dirs
  Resolves: RHEL-39893
  - Make mdevctl_conf_t member of the file_type attribute
  Resolves: RHEL-39893
  - Label /etc/mdevctl.d with mdevctl_conf_t
  Resolves: RHEL-39893
  - Allow virtqemud relabelfrom virt_log_t files
  Resolves: RHEL-48236
  - Allow virtqemud_t relabel virtqemud_var_run_t sock_files
  Resolves: RHEL-48236
  - Allow virtqemud relabelfrom virtqemud_var_run_t dirs
  Resolves: RHEL-48236
  - Allow svirt_tcg_t read virtqemud_t fifo_files
  Resolves: RHEL-48236
  - Allow virtqemud rw and setattr access to sev devices
  Resolves: RHEL-69128
  - Allow virtqemud directly read and write to a fixed disk
  Resolves: RHEL-61235
  - Allow svirt_t the sys_rawio capability
  Resolves: RHEL-61235
  - Allow svirt_t the sys_rawio capability
  Resolves: RHEL-61235
  - Allow virtqemud connect to sanlock over a unix stream socket
  Resolves: RHEL-44352
  - allow gdm and iiosensorproxy talk to each other via D-bus
  Resolves: RHEL-70850
  - Allow sendmail to map mail server configuration files
  Related: RHEL-54014
  - Allow procmail to read mail aliases
  Resolves: RHEL-54014
  - Grant rhsmcertd chown capability & userdb access
  Resolves: RHEL-68481


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.18-1
changelog:
  - Sync dist/targeted/modules.conf with Fedora 42
  Resolves: RHEL-70850
  - Add support for sap
  Resolves: RHEL-70850
  - Allow sssd_selinux_manager_t the setcap process permission
  Resolves: RHEL-70822
  - Allow virtqemud open svirt_devpts_t char files
  Resolves: RHEL-43446
  - Fix the cups_read_pid_files() interface to use read_files_pattern
  Resolves: RHEL-69512


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.19-1
changelog:
  - Allow systemd-journald getattr nsfs files
  Resolves: RHEL-71803
  - Allow systemd-related domains getattr nsfs files
  Resolves: RHEL-71803


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.20-1
changelog:
  - Allow virtqemud domain transition on numad execution
  Resolves: RHEL-65789
  - Support virt live migration using ssh
  Resolves: RHEL-53972
  - Allow ssh_t read systemd config files
  Resolves: RHEL-53972
  - Allow virtqemud permissions needed for live migration
  Resolves: RHEL-43217
  - Allow virtqemud the getpgid process permission
  Resolves: RHEL-46357
  - Allow virtqemud manage nfs dirs when virt_use_nfs boolean is on
  Resolves: RHEL-71068
  - Allow virtqemud relabelfrom virt_log_t files
  Resolves: RHEL-48236
  - Allow virtqemud relabel tun_socket
  Resolves: RHEL-71394
  - Allow gnome-remote-desktop dbus chat with policykit
  Resolves: RHEL-35877
  - Update ktlsh policy
  Resolves: RHEL-42672
  - Confine the ktls service
  Resolves: RHEL-42672
  - Allow request-key to read /etc/passwd
  Resolves: RHEL-71490
  - Allow request-key to manage all domains' keys
  Resolves: RHEL-71490


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.21-1
changelog:
  - Allow init create vsock socket for sshd
  Resolves: RHEL-72549
  - Support ssh connections via systemd-ssh-generator
  Resolves: RHEL-72549
  - Allow ssh generator work with systemd unit files
  Resolves: RHEL-72549
  - Confine systemd system-ssh-generator
  Resolves: RHEL-72549
  - Allow login_userdomain getattr nsfs files
  Resolves: RHEL-72549
  - Allow virtqemud send a generic signal to the ssh client domain
  Resolves: RHEL-53972
  - Add the auth_dontaudit_read_passwd_file() interface
  Resolves: RHEL-71490
  - Dontaudit request-key read /etc/passwd
  Resolves: RHEL-71490


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.22-1
changelog:
  - Allow staff user dbus chat with virt-dbus
  Resolves: RHEL-73914
  - Allow virtqemud domain transition to nbdkit
  Resolves: RHEL-69118
  - Add nbdkit interfaces defined conditionally
  Resolves: RHEL-69118
  - Allow svirt_t read sysfs files
  Resolves: RHEL-71270
  - Label /dev/pmem[0-9]+ with fixed_disk_device_t
  Resolves: RHEL-71656
  - Add support for the KVM guest memfd anon inodes
  Resolves: RHEL-69128
  - Allow sysadm user dbus chat with virt-dbus
  Resolves: RHEL-73914
  - Allow initrc_t transition to passwd_t
  Resolves: RHEL-71665
  - Allow unconfined_service_t transition to passwd_t
  Resolves: RHEL-71665


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.23-1
changelog:
  - Remove the lockdown class from the policy
  Resolves: RHEL-36741
  - Remove socket from unconfined_domain_type allow rule
  Resolves: RHEL-36741
  - Include key_socket in socket_class_set
  Resolves: RHEL-36741


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.24-1
changelog:
  - Allow systemd-generator connect to syslog over a unix datagram socket
  Resolves: RHEL-75879
  - Allow ssh_t to change role to system_r
  Resolves: RHEL-53972
  - Allow virtnodedev create /etc/mdevctl.d/scripts.d with bin_t type
  Resolves: RHEL-39893
  - Allow virtqemud manage fixed disk device nodes
  Resolves: RHEL-71656
  - Allow samba-bgqd connect to cupsd over an unix domain stream socket
  Resolves: RHEL-72861
  - Allow systemd-machined read the vsock device
  Resolves: RHEL-74280
  - Allow pcmsensor write nmi_watchdog state information
  Resolves: RHEL-52838
  - Label /proc/sys/kernel/nmi_watchdog with sysctl_nmi_watchdog_t
  Resolves: RHEL-52838


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.1-1
changelog:
  - Allow logwatch read logind sessions files
  Resolves: RHEL-30441
  - Allow sulogin relabel tty1
  Resolves: RHEL-30440
  - Dontaudit sulogin the checkpoint_restore capability
  Resolves: RHEL-30440
  - Allow postfix smtpd map aliases file
  Resolves: RHEL-35544
  - Ensure dbus communication is allowed bidirectionally
  Resolves: RHEL-35783
  - Allow various services read and write z90crypt device
  Resolves: RHEL-28539
  - Allow dhcpcd use unix_stream_socket
  Resolves: RHEL-33081
  - Allow xdm_t to watch and watch_reads mount_var_run_t
  Resolves: RHEL-36073
  - Allow plymouthd log during shutdown
  Resolves: RHEL-30455
  - Update rpm configuration for the /var/run equivalency change
  Resolves: RHEL-36094


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.2-4
changelog:
  - Disable/remove neverallow options in sediff.
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Martin Osvald <mosvald@redhat.com> - 2.14.2-1
changelog:
  - sysusers.d: add script and configuration fragments for groups
  - passwd: align 'nologin' shell path with systemd defaults
  - uidgid: assign GID 101 for 'ssh_keys' group
  - uidgid: assign UID/GID 114 for 'polkitd'
  - passwd: update GECOS field for 'root' user
  - services: remove commas from aliases for ircu-3
  - setup.spec: throw away newaliases output again


author: Martin Osvald <mosvald@redhat.com> - 2.14.3-1
changelog:
  - sysusers.d: add script and generate configuration fragment for users
  - Add fallback to hostname determination for csh.login (rhbz#2079768)
  - Remove ancient Conflicts
  - files: mark /run/motd as an ephemeral ghost entry


author: Martin Osvald <mosvald@redhat.com> - 2.14.4-1
changelog:
  - protocols: add mptcp (262)
  - setup.spec: make setup protected package (rhbz#2155547)
  - setup.spec: don't report rpm -Va error on /run/motd (rhbz#2160954)
  - services: replace hostmon with llmnr for port 5355 (rhbz#2216914)


author: Martin Osvald <mosvald@redhat.com> - 2.14.5-1
changelog:
  - bashrc: switch PROMPT_COMMAND to be an array (rhbz#2097525)
  - profile: don't overwrite the HISTSIZE environment variable
  - hosts: use "example.org" as example domain (rhbz#2246220)
  - csh.login: source csh.local (RHEL-17226)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-7
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices (RHEL-40861,RHEL-54607)
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.14.0-5
changelog:
  - passwd: Provide binary from this package. Enable libpam and
    disable account-tools-setuid. Provide passwd PAM service file.
    Resolves: #2233275
  - passwd: provide --stdin option


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-1
changelog:
  - Rebase to version 4.15.0
  - getdef: avoid spurious error messages about unknown configuration options


author: Milan Crha <mcrha@redhat.com> - 2.3-6
changelog:
  - Co-own /usr/share/gettext and /usr/share/gettext/its
  - Related to rhbz#2280150
  - Resolves: RHEL-38682 (Backport Fedora 40 changes)


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.45.0-1
changelog:
  - Updated to version 3.45.0 (https://sqlite.org/releaselog/3_45_0.html)
  - List versioned soname in files, preventing unnoticed soname bumps
  - Disable func4 tests for i686 arch due to failing float<->int conversions


author: Bruno Wolff III <bruno@wolff.to> - 4.6-1
changelog:
  - 4.6 release
  - PR #231 was merged
  - See https://github.com/plougher/squashfs-tools/blob/master/CHANGES


author: Bruno Wolff III <bruno@wolff.to> - 4.6.1-1
changelog:
  - Phillip is now doing two tags per release and we can
  - use the one that works better with forgemeta
  - There are a few fixes after the 4.6 release. I think only
  - one applies to Fedora because of the build options we use.
  - It was not something that affects image builds.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta1-1
changelog:
  - Resolves: RHEL-40253 - Rebase SSSD for RHEL 10-beta
  - Resolves: RHEL-29303 - Issue discovered by static analyzer.
  - Resolves: RHEL-11181 - sssd[4022110]: gencache_init: Failed to create directory: //.cache/samba - Permission denied
  - Resolves: RHEL-4986 - [RFE] sssd use systemd-sysusers
  - Resolves: RHEL-4974 - sssd status shows error "krb5_kt_start_seq_get failed: Permission denied" when running as unprivileged user 'sssd'


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta2-1
changelog:
  - Resolves: RHEL-40253 - Rebase SSSD for RHEL 10-beta
  - Resolves: RHEL-43259 - sudo does not work any more with krb ticket


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta2-2
changelog:
  - Resolves: RHEL-51891 - [RHEL-10]logrotate.service fails to start because /var/log/sssd has insecure permission
  - Resolves: RHEL-52400 - SYSDB: remove index on dataExpireTimestamp [rhel-10]
  - Resolves: RHEL-50243 - Please install sssd-polkit-rules by default


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0-1
changelog:
  - Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
  - Resolves: RHEL-56701 - sss_ssh_knownhosts is breaking ansible-pull
  - Resolves: RHEL-55993 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-3
changelog:
  - Disable enumeration support for IPA and AD providers.
    Deprecation was announced in F39 release notes:
    https://docs.fedoraproject.org/en-US/fedora/latest/release-notes/sysadmin/Security/#_support_for_the_enumeration_feature_has_been_deprecated_for_ad_and_ipa_backends
    This is a backport of upstream patch:
    https://github.com/SSSD/sssd/commit/9240bca7dcc28371ae5dce31c01e85d28409cd04


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.1-1
changelog:
  - Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
  - Resolves: RHEL-4984 - Mismatch between input and parsed domain name when default_domain_suffix is set.
  - Resolves: RHEL-65848 - sssd password authentication broken in sssd-2.10.0~beta2-2 and later
  - Resolves: RHEL-67669 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option
  - Resolves: RHEL-68421 - sssd ldap_child process segfaults when krb5.conf is invalid [rhel-10]
  - Resolves: RHEL-66935 - Avoid log flooding in case an app keeps making invalid `getservbyport(0, ...)` request
  - Resolves: RHEL-65736 - ipa: sudo commands doesn't check threshold correctly
  - Resolves: RHEL-68319 - Please deprecate/remove ad_allow_remote_domain_local_groups


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-5
changelog:
  - Fix incorrect syscall name reporting in restart_syscall() on attach when
    PTRACE_GET_SYSCALL_INFO is in use (RHEL-65108).
  - Update net-yy-inet* and linkat--secontext_mismatch tests.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-6
changelog:
  - Avoid failures of creat.gen test on kernels that include commit
    v6.11-rc1~242^2~19 ("fs: don't block i_writecount during exec").


author: Pino Toscano <ptoscano@redhat.com> 1.29.35-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Clean up tests using Cloud What detectors properly (mhorky@redhat.com)
  - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Typo fixes (ptoscano@redhat.com)
  - Avoid string puzzle (ptoscano@redhat.com)
  - Properly use ungettext for plural forms (ptoscano@redhat.com)
  - 2189664: cache: fix SyspurposeComplianceStatusCache on failed load
    (ptoscano@redhat.com)
  - dbus: don't catch exceptions in DomainSocketServer.run()
    (ptoscano@redhat.com)
  - cli: directly exit on InvalidCLIOptionError (ptoscano@redhat.com)
  - Revert "ENT-5549: Fix return code handling of CLI" (ptoscano@redhat.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - Update .git-blame-ignore-revs (mhorky@redhat.com)
  - Format code with black==23.3.0 (mhorky@redhat.com)
  - ENT-5535: Update black to version 23.3.0 (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.36-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-5581: Update messaging around the "container mode" (mhorky@redhat.com)
  - Remove 'dbus' marker for pytest (mhorky@redhat.com)
  - Rewrite D-Bus tests to be testable without pytest-forked (mhorky@redhat.com)
  - Drop further ethtool dependency mentions (mhorky@redhat.com)
  - tests: fix test_file_monitor without pyinotify (ptoscano@redhat.com)
  - tests: switch from imp to importlib (ptoscano@redhat.com)
  - Fix the order of user env var checking for translations.
    (tkuratom@redhat.com)
  - 2215974: Collect network facts using 'ip' (mhorky@redhat.com)
  - ENT-5582: Remove container detection envvar overwrite (mhorky@redhat.com)
  - ENT-5603: Explicitly check for provided entitlement certificates
    (mhorky@redhat.com)
  - fix test case (chambrid@redhat.com)
  - Collect GCP Project information as cloud facts (chambrid@redhat.com)
  - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
  - ENT-5580: Disable the proper container detection (mhorky@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - 2093291: Make reading of cache file more reliable (jhnidek@redhat.com)
  - 2093291: Make code of DNF plugins testable (jhnidek@redhat.com)
  - spec: change subscription-manager dnf dep (ptoscano@redhat.com)
  - spec: update libdnf-plugin-subscription-manager deps (ptoscano@redhat.com)
  - tests: repair attach cases in SCA mode (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.37-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - 2225446: Hotfix of D-Bus policy (jhnidek@redhat.com)
  - TESTING: Update testing requirements (mhorky@redhat.com)
  - Use Fedora registry to pull container images (mhorky@redhat.com)
  - 2232316: dbus: check "force" again from the registration option
    (ptoscano@redhat.com)
  - dbus: run EntCertActionInvoker on PoolAttach (ptoscano@redhat.com)
  - ENT-5624: Properly translate error strings (mhorky@redhat.com)
  - Mock IOError for Insights fact collection tests (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.38-1
changelog:
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ENT-5603: Fix a typo in a comment (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.40-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
    (mariocanfly@hotmail.com)
  - spec: Add missing GLib dependency when building without DNF
    (debarshir@gnome.org)
  - Remove deprecated `locale.*()` functions (mhorky@redhat.com)
  - Remove version constraint of pytest (mhorky@redhat.com)
  - RHEL-15110: RegisterServer is stopped, when not needed (jhnidek@redhat.com)
  - RHEL-15110: Fix issue with registration using gsd-subman (jhnidek@redhat.com)
  - Fix an error in debug logging of cloud-what (mhorky@redhat.com)
  - ci: bump actions/upload-artifact from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Improve debug logging to make it faster to understand (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.0-1
changelog:
  - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - chore: Format register.py (mhorky@redhat.com)
  - feat: Require SCA for registration (mhorky@redhat.com)
  - doc: Update install and testing guide (stomsa@redhat.com)
  - Fixed spec file to list packages twice (suttner@atix.de)
  - code review comments fixes - update metadata and test. (chambrid@redhat.com)
  - feat: Disable anonymous cloud registration temporarily (mhorky@redhat.com)
  - Collect Azure VM Name and Resource Group Name as a cloud fact.
    (chambrid@redhat.com)
  - fix: Improve wording in redhat.repo template (glutexo@icloud.com)
  - Remove commands moved to syspurpose (glutexo@icloud.com)
  - doc: drop references to "activate" (ptoscano@redhat.com)
  - feat: Remove import command (zpetrace@redhat.com)
  - fix: make SyspurposeComplianceStatusCache.get_overall_status() always usable
    (ptoscano@redhat.com)
  - fix: Change order of checks (jhnidek@redhat.com)
  - fix: Cache shouldn't try to get data from server without UUID
    (jhnidek@redhat.com)
  - feat: Add option to run smoke tests with fake IMDS servers.
    (jhnidek@redhat.com)
  - fix: Hide subscription management "errors" in container mode
    (mhorky@redhat.com)
  - feat(ci): Update testing matrix (mhorky@redhat.com)
  - fix(test): Properly stop method mock (mhorky@redhat.com)
  - feat: Azure: added extended location and type of location fact
    (jhnidek@redhat.com)
  - fix: Update version of Azure metadata (jhnidek@redhat.com)
  - feat: Added Azure location to facts (jhnidek@redhat.com)
  - feat: Added zone GCP fact (jhnidek@redhat.com)
  - feat: Added more AWS cloud facts (jhnidek@redhat.com)
  - fix: Change type hint according returned value. (jhnidek@redhat.com)
  - feat: Add warning message about release version to dnf plugin
    (jhnidek@redhat.com)
  - Bump black from 23.3.0 to 24.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Format code with black==24.3.0 (ptoscano@redhat.com)
  - Fix memory leaks in test-productdb.c (jhnidek@redhat.com)
  - Fix memory leaks in productdb.c (jhnidek@redhat.com)
  - fix: Function prototype without declaration is deprecated
    (jhnidek@redhat.com)
  - Removed unused includes of .h files (jhnidek@redhat.com)
  - libdnf: switch from g_error_free() to g_clear_error() in tests
    (ptoscano@redhat.com)
  - libdnf: do not build test code in plugin (ptoscano@redhat.com)
  - Change handling of deprecated `datetime.datetime.utcnow()`
    (mhorky@redhat.com)
  - CCT-66: Update identity reporting in DNF plugin during autoregistration
    (mhorky@redhat.com)
  - Remove automatic registration delay for rhsmcertd (mhorky@redhat.com)
  - Remove API endpoint for automatic cloud registration v1 (mhorky@redhat.com)
  - CCT-67: Use automatic registration v2 (mhorky@redhat.com)
  - IdentityUpdateAction: Improve logging for updating identity certificates
    (mhorky@redhat.com)
  - Identity: Add method to extract current owner (mhorky@redhat.com)
  - rhsmcertd: Define exit codes (mhorky@redhat.com)
  - rhsmcertd: Use module-level logger (mhorky@redhat.com)
  - Add AnonymousCertificateManager (mhorky@redhat.com)
  - Add CloudTokenCache for Candlepin JWT (mhorky@redhat.com)
  - Implement API endpoints for Automatic registration v2 (mhorky@redhat.com)
  - Update documentation for one API call in connection.py (mhorky@redhat.com)
  - Fix type hint of RegisterService.register() (mhorky@redhat.com)
  - rhsmcertd: Drop D-Bus loop code (mhorky@redhat.com)
  - rhsmcertd: Add type hints (mhorky@redhat.com)
  - rhsmcertd: Remove forgotten old comment (mhorky@redhat.com)
  - Stop logging full lscpu output (mhorky@redhat.com)
  - Prevent double-logging of syspurpose cache log statement (mhorky@redhat.com)
  - Update the log message containing response time statistics
    (mhorky@redhat.com)
  - CCT-266: Update TLS flags (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.2-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - feat: Create consumer cert & key owner by rhsm group (jhnidek@redhat.com)
  - feat: Add rhsm group during installation of subman RPM (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - docs: remove references to removed commands (jajerome@redhat.com)
  - feat: Remove auto-attach command (jhnidek@redhat.com)
  - feat: Eliminate command 'remove' from subscription-manager
    (jvlcek@redhat.com)
  - feat: Remove attach from bash completion script (jhnidek@redhat.com)
  - feat: Remove references on auto-attach in man page (jhnidek@redhat.com)
  - feat: Removed attach service (jhnidek@redhat.com)
  - feat: Removed D-Bus methods related to attach (jhnidek@redhat.com)
  - feat: Removed attach command and CLI option related to attach
    (jhnidek@redhat.com)
  - feat: Remove 'addons' subcommand(s) (mhorky@redhat.com)
  - feat: Removed command "redeem" from subscription-manager (jhnidek@redhat.com)
  - Update the correct man page file. (jvlcek@redhat.com)
  - docs: Change reverse proxy to proxy in man page (jvlcek@redhat.com)
  - test(ci): Improve container pre-test script (mhorky@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.3-1
changelog:
  - Card ID: CCT-731 - integration tests for DBus Register method
    (jstavel@redhat.com)
  - chore: Remove the --token authentication (pkoprda@redhat.com)
  - chore: Remove artifacts of import (stomsa@redhat.com)
  - chore: Remove artifacts of redeem (stomsa@redhat.com)
  - chore: Remove artifacts of remove (stomsa@redhat.com)
  - chore: Remove artifacts of autoheal (glutexo@icloud.com)
  - chore: Remove artifacts of --auto-attach (glutexo@icloud.com)
  - chore: Remove artifacts of attach (stomsa@redhat.com)
  - fix: Added missing python packages (jhnidek@redhat.com)
  - fix: Fixed integration tests (jhnidek@redhat.com)
  - chore: Remove auto-assign CI job (mhorky@redhat.com)
  - feat: Add initial support for tmt (jhnidek@redhat.com)
  - fix: Renamed integration-tests to cockpit-tests (jhnidek@redhat.com)
  - Feat CCT-965: Include timezone in the logs In `subscription-
    manager/src/rhsm/logutil.py`i: (mgrunwal@redhat.com)
  - feat: remove content access mode cache (jajerome@redhat.com)
  - feat: add GetEnvironments method to DBus register (ryanverdile@gmail.com)
  - feat: Added basic configuration for Packit (jhnidek@redhat.com)
  - fix: drop "autoattachinterval" from the rhsmcertd defaults
    (ptoscano@redhat.com)
  - feat/cct-875: Options -i and --cert-interval were removed from rhsmcertd
    command autocompletion Options -i and --cert-interval were removed from
    rhsmcertd command autocompletion. (mgrunwal@mgrunwal-
    thinkpadp1gen3.rmtcz.csb)
  - feat/cct-874: Autocompletion for option --servicelevel removed Autocompletion
    for option --servicelevel (sub-man register --servicelevel) was removed.
    (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
  - feat: Better automatic registration logging (mhorky@redhat.com)
  - refactor: Moved some definition of lists from list.py (jhnidek@redhat.com)
  - fix: Removed show_autosubscribe_output() method (jhnidek@redhat.com)
  - feat: Remove useless CLI options from list command (jhnidek@redhat.com)
  - fix: perform autoreg waiting when performing standard autoreg
    (ptoscano@redhat.com)
  - chore: move autoreg waiting code in own function (ptoscano@redhat.com)
  - feat: support registering specifying environments with activation keys
    (ryanverdile@gmail.com)
  - feat: Remove autoheal functionality from rhsmcertd (jvlcek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.4-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Update translation files (noreply@weblate.org)
  - spec: respect the %{_sbindir} of the distro (ptoscano@redhat.com)
  - build: make it possible to customize the 'sbin' install dir
    (ptoscano@redhat.com)
  - fix: Restart rhsm service after installation (pkoprda@redhat.com)
  - Drop pam_console leftovers (ptoscano@redhat.com)
  - Stop using usermode (ptoscano@redhat.com)
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - rhsmcertd: use ISO 8601 timestamps for the log file (ptoscano@redhat.com)
  - rhsmcertd: refactor timestamp function (ptoscano@redhat.com)
  - ci: temporarily install 'which' on CentOS Stream 10 (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - ci: use official c10s container image (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.9.14-1.p3
changelog:
  - Rebase to 1.9.14p3
  - sudo-1_9_14p2 is available Resolves: rhbz#2175672
  - sudo fails to build with Python 3.12: FAILED: testcase
    check_example_group_plugin_is_able_to_debug() Resolves: rhbz#2186412


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: systemd maintenance team <systemd-maint@redhat.com> - 256-6
changelog:
  - doc: add downstream CONTRIBUTING document (RHEL-40924)
  - ci: allow `policy` as rhel-only keyword (RHEL-40924)
  -  ci: run mkosi test only for Fedora and CentOS Stream (RHEL-40924)
  - taint: remove unused variable `usr_sbin` (RHEL-40924)
  - packit: drop the libarchive workaround (RHEL-40924)
  - packit: drop the dependency on python3-zstd (RHEL-40924)
  - coredump: by default process and store core files up to 1GiB (RHEL-46778)
  - don't ship systemd-ssh-generator harder (RHEL-40924)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-8
changelog:
  - Avoid /tmp being mounted as tmpfs without the user's will (RHEL-40924)
  - unit: don't add Requires for tmp.mount (RHEL-40924)
  - units: add [Install] section to tmp.mount (RHEL-40924)
  - units: don't enable tmp.mount statically in local-fs.target (RHEL-40924)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-12
changelog:
  - netif-naming-scheme: add rhel-9.5 scheme (RHEL-44416)
  - udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT (RHEL-44416)
  - man/net-naming-scheme: add missing period (RHEL-44416)
  - Revert "packit: drop the dependency on python3-zstd" (RHEL-36636)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-13
changelog:
  - systemctl: do not try to acquire triggering units for template units (RHEL-55132)
  - core/unit: add one assertion for u->manager (RHEL-55734)
  - core/service: destroy runtime data when Type=oneshot services exit (RHEL-55734)
  - cgroup-util: Ignore kernel threads in cg_kill_items() (RHEL-55746)
  - cgroup-util: Don't try to open pidfd for kernel threads (RHEL-55746)
  - cgroup-util: fix typo (RHEL-55746)
  - netif-naming-scheme: rename rhel-10.0 to rhel-10.0.beta (RHEL-55728)
  - net-naming-scheme: disable NAMING_FIRMWARE_NODE_SUN (RHEL-55728)
  - net-naming-scheme: remove NAMING_FIRMWARE_NODE_SUN from 9.5 (RHEL-55728)
  - make systemd-ukify subpackage arch dependent (RHEL-52634)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-14
changelog:
  - Revert "cgroup-util: Don't try to open pidfd for kernel threads" (RHEL-52634)
  - ukify: Skip test on architectures without UEFI (RHEL-52634)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-15
changelog:
  - ci: rename beta branch to match dist-git name (RHEL-57603)
  - udev: Handle PTP device symlink properly on udev action 'change' (RHEL-59871)
  - Fix detection of TDX confidential VM on Azure platform (RHEL-56144)
  - confidential-virt: split caching of CVM detection into separate method (RHEL-56144)
  - confidential-virt: add detection for s390x target (RHEL-56144)
  - man/systemd-detect-virt: fix row spanning for VM header (RHEL-56144)
  - man/systemd-detect-virt: list known CVM technologies (RHEL-56144)


author: Jan Macku <jamacku@redhat.com> - 257-1
changelog:
  - Rebase to new upstream release v257 (RHEL-71409)
  - netif-naming-scheme: introduce rhel-10.0 scheme (RHEL-44417)


author: Jan Macku <jamacku@redhat.com> - 257-3
changelog:
  - udev/net_id: introduce naming scheme for RHEL-9.6 (RHEL-44417)
  - Rebase to new upstream stable release v257.2 (RHEL-71409)


author: David Cantrell <dcantrell@redhat.com> - 1:1.11.1-3
changelog:
  - Use %license for the COPYING file in the %files section
  - Convert the License tag to an SPDX expression


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.0.2-2
changelog:
  - Fix possible use of an undefined value as an ARRAY reference in ParserNonXS.pm
    (causes FTBFS of a2ps)
    Resolves: #2171433


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.1-4
changelog:
  - Fix memory/resource leaks, insufficient memory allocations and
    variable declarations without initializer
    Resolves: RHEL-43595


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1:1.6.0-8
changelog:
  - migrated to SPDX license
  - resolves: rhbz#2219549* Sat Jul 23 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.6.0-5

  - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild


author: John Kacur <jkacur@redhat.com> - 0.19-7
changelog:
  - Add missing patch to prevents tuna gui from starting if display not available
  - remove oscilloscope which is unsupported in rhel
  - Add rpmsinpect.yaml and gating.yaml
  - Add tests dir
  - update the current version of python-linux-procfs as a requires
  Resolves: RHEL-30171


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.21.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2182117
    - plugin_scheduler: fix perf fd leaks
      resolves: rhbz#2173938
    - allow skipping rollback when restarting TuneD or switching profile
      resolves: rhbz#2203142
    - function_calc_isolated_cores: no errors for offline CPUs
      resolves: rhbz#2217015


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-17121
    - print all arguments of failing commands in error messages
      resolves: RHEL-3689
    - plugin_sysctl: added support for sysctl names with slash
      resolves: RHEL-3707
    - tuned-adm: added support for moving devices between plugin instances
      resolves: RHEL-15141
    - api: added methods for retrieval of plugin instances and devices
      resolves: RHEL-15137
    - plugin_cpu: amd-pstate mentioned instead of just intel_pstate
      resolves: RHEL-16469
    - hotplug: do not report ENOENT errors on device remove
      resolves: RHEL-11342
    - plugin_sysctl: expand variables when reporting overrides
      resolves: RHEL-18972
    - plugin_acpi: new plugin which handles ACPI platform_profile
      resolves: RHEL-16966
    - plugin_bootloader: skip calling rpm-ostree kargs in no-op case
      resolves: RHEL-20767
    - plugin_cpu: support cstate settings of pm_qos_resume_latency_us
      resolves: RHEL-21129
    - scheduler: add option for ignoring IRQs affinity
      resolves: RHEL-21923
    - plugin_intel_uncore: new plugin for uncore setting


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-17121
    - renamed intel_uncore plugin to uncore
    - network-throughput: increased net.ipv4.tcp_rmem default value
      resolves: RHEL-25847


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-50567
    - spec: create /etc/tuned/profiles directory
      resolves: RHEL-46721
    - hotplug: wait for device initialization
    - sap-netweaver: increased vm.max_map_count
    - daemon: buffer sighup signal
    - added an option to configure profile directories
    - api: added commands to dynamically create/destroy instances
    - functions: added 'intel_recommended_pstate'
    - functions: added 'log' which helps with debugging
    - functions: added 'package2cpus' and 'packages2uncores' matchers
    - functions: added 'lscpu' to list CPU details
    - plugins: added plugin_irq
    - plugin_video: added support for amdgpu `panel_power_savings` attribute
    - plugin_cpu: check that writes are necessary if they may cause redundant IPIs
    - plugin_uncore: allow to configure frequency limits using percent
    - amd-pstate: added support for controlling core performance boost
    - plugin_scheduler: adjusted error logging in _set_affinity
    - plugin_audio: enabled controller reset to fix suspend with NVIDIA
    - plugin_irq: fixed expansion of variables
    - plugin_irqbalance: switched to IRQBALANCE_BANNED_CPULIST


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-50567
    - clear plugin repository when stopping tuning
    - man: add description of the balanced-battery profile


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-3
changelog:
  - Fixed privileged execution of arbitrary scripts by active local user,
    (CVE-2024-52336)
    Resolves: RHEL-66636
  - Added sanity checks for API methods parameters, (CVE-2024-52337)
    Resolves: RHEL-66613


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-70454
    - tuned-ppd: removed the use of StrEnum
    - tuned-ppd: fixed traceback
      resolves: RHEL-74384
    - tuned-ppd: multiple fixes and updates
    - docs: plugins docs are now automatically generated from the docstrings
    - plugin_cpu: fixed no_turbo boolean option parsing
    - plugin_cpu: allowed raw energy_performance_preference values
    - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    - plugin_bootloader: added variables to BLS entries only if grub is used
    - plugin_scheduler: do not assume that perf events have type attribute
    - plugin_scheduler: updated sched knobs for kernels 6.6+
    - plugin_scheduler: log process info when its affinity cannot be changed
      resolves: RHEL-69933
    - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    - plugin_scheduler: made perf support optional
    - plugin_net: added support for hotplug and rename
    - makefile: added support for installation to custom $BINDIR/$SBINDIR
    - functions: dropped cpuspeed support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-0.1.rc1
changelog:
  - new release
    - tuned-ppd: removed the use of StrEnum
    - tuned-ppd: fixed traceback
      resolves: RHEL-74384
    - tuned-ppd: multiple fixes and updates
    - docs: plugins docs are now automatically generated from the docstrings
    - plugin_cpu: fixed no_turbo boolean option parsing
    - plugin_cpu: allowed raw energy_performance_preference values
    - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    - plugin_bootloader: added variables to BLS entries only if grub is used
    - plugin_scheduler: do not assume that perf events have type attribute
    - plugin_scheduler: updated sched knobs for kernels 6.6+
    - plugin_scheduler: log process info when its affinity cannot be changed
      resolves: RHEL-69933
    - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    - plugin_scheduler: made perf support optional
    - plugin_net: added support for hotplug and rename
    - makefile: added support for installation to custom $BINDIR/$SBINDIR
    - functions: dropped cpuspeed support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70454
    - sap-hana: Set transparent_hugepages to madvise
      resolves: RHEL-68454
    - plugin_bootloader: export Grub variables to make them available in submenus
    - utils.commands: fixed CPU online detection when not present
    - plugin_net: handled cqe-mode-rx ethtool option
    - profiles: correct CPU governor settings


author: Patsy Griffin <patsy@redhat.com> - 2023d-1
changelog:
  - Rebase to tzdata-2023d
    - Include time zone changes for Ittoqqortoormiit, Greenland
      and Vostok, Antarctica.
    - Update the expiration date for the leap-seconds.list file.
      No new leap seconds were added.


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Patsy Griffin <patsy@redhat.com> - 2024a-3
changelog:
  - Add java patch to fix incorrect calculations for
    Africa/Casablanca starting in 2027. (RHEL-32178)
  - Remove hardcoded versioned path to javac.


author: Patsy Griffin <patsy@redhat.com> - 2024b-1
changelog:
  - Update to tzdata-2024b
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
    - Include two upstream patches for month names as in April vs Apr.
  - Harden against links to removed zones


author: Patsy Griffin <pats@redhat.com> - 2025a-1
changelog:
  Update to tzdata-2025a (RHEL-74296)
    - Paraguay is now permanently at -03. This impacts timestamps
      starting on 2025-03-22.
    - Includes improvements to pre-1991 data for the Philippines.
    - Etc/Unknown is now reserved.


author: Jakub Martisko <jamartis@redhat.com> - 6.0-65
changelog:
  - Fix: Unzip Fails on Large Zip Files
  - Use the patch from Debian dealing with this
  Resolves: RHEL-45993


author: Karel Zak <kzak@redhat.com> - 2.40.2-3
changelog:
  - revert recent uuidd mode changes
  - rebase rhel specific patches
  - fix uuidd-tmpfiles.conf (upstream patch)
  - remove unused patches


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.076-2
changelog:
  - enable building without GPM support - build with GPM in Fedora
  - 2262371 - gvim: symbol lookup error: gvim: undefined symbol: g_once_init_enter_pointer


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1:2.10-8
changelog:
  - Backport WPA3 support for Broadcom devices. Fixes: rhbz#2226569
  - Enable parsing of IPv6 addresses in RADIUS configuration (#2095296)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.10-10
changelog:
  - Fix package configuration/add missing patches to avoid regressions when
    upgrading from rhel-9 (RHEL-43250)
  - Backport P2P fixc causing nmci failures (RHEL-17701)
  - Disable OpenSSL ENGINE API (RHEL-33750)


author: Jakub Martisko <jamartis@redhat.com> - 3.0-42
changelog:
  - Use C implementation of some functions instead of asm
  - Fix the missing compiler/linker flags
  - Minor spec clean up
  Resolves: RHEL-33526


