<?xml version="1.0" ?>
<rss version="2.0">
  <channel>
    <title>Most recent updated packages for CentOS 10-stream x86_64 AppStream</title>
    <link>http://www.centos.org</link>
    <description>Most recent updated packages for CentOS 10-stream x86_64 AppStream</description>
    <pubDate>Sat, 11 Apr 2026 05:21:33 AM GMT</pubDate>
    <generator>DNF</generator>
    <item>
      <title>capstone-5.0.1-8.el10.x86_64</title>
      <pubDate>Thu, 02 Apr 2026 01:07:46 PM GMT</pubDate>
      <guid isPermaLink="false">279bbf70ea7cf2d4d65ce34c926d569feaaa903c268179397830e9bbd7698d87</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/capstone-5.0.1-8.el10.x86_64.rpm</link>
      <description><p><strong>capstone</strong> - A lightweight multi-platform, multi-architecture disassembly framework&lt;br /&gt;</p>

<p>&lt;br /&gt;
Capstone is a disassembly framework with the target of becoming the ultimate&lt;br /&gt;
disasm engine for binary analysis and reversing in the security community.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - Jon Maloy &amp;lt;jmaloy@redhat.com&amp;gt; - 5.0.1-8
- Rebuild for rhel-10.2

Fri, 13 Mar 2026 GMT - Jon Maloy &amp;lt;jmaloy@redhat.com&amp;gt; - 5.0.1-7
- Fix CVE-2025-67873 (heap buffer overflow)
  Resolves: RHEL-141553
- Fix CVE-2025-68114 (memory corruption)
  Resolves: RHEL-137749

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 5.0.1-6
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>go-fdo-client-1.0.0-2.el10.x86_64</title>
      <pubDate>Thu, 02 Apr 2026 07:21:40 AM GMT</pubDate>
      <guid isPermaLink="false">12e3aa891cc37b79f85919b3c83fcb502136f4c4df7fb13aefb8c2126b0ea005</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/go-fdo-client-1.0.0-2.el10.x86_64.rpm</link>
      <description><p><strong>go-fdo-client</strong> - FIDO FDO compliant device on-boarding tool&lt;br /&gt;</p>

<p>go-fdo-client is the device-side implementation of FIDO Device Onboard&lt;br /&gt;
specification in Go. It provides an FDO client that interacts with&lt;br /&gt;
FDO manufacturer and owner servers to perform device on-boarding.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 02 Apr 2026 GMT - Antonio Murdaca &amp;lt;antoniomurdaca@gmail.com&amp;gt; - 1.0.0-2
- Rebuild to fix CVE-2026-25679 and CVE-2026-27137

Thu, 19 Feb 2026 GMT - Sarita Mahajan &amp;lt;sarmahaj@redhat.com&amp;gt; - 1.0.0-1
- Update to 1.0.0 upstream release

Mon, 02 Feb 2026 GMT - Paul Whalen &amp;lt;pwhalen@fedoraproject.org&amp;gt; - 0.0.3-2
- Add gating test for cs10

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>go-fdo-server-1.0.0-2.el10.x86_64</title>
      <pubDate>Thu, 02 Apr 2026 07:21:39 AM GMT</pubDate>
      <guid isPermaLink="false">3736d09160711074b1e5f763689b1e620243eedcf112b8752330eaf17b4ab4a8</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/go-fdo-server-1.0.0-2.el10.x86_64.rpm</link>
      <description><p><strong>go-fdo-server</strong> - A Go implementation of the FIDO Device Onboard Specification&lt;br /&gt;</p>

<p>This package provides a server-side implementation of the FIDO Device Onboard&lt;br /&gt;
(FDO) specification, written in Go. FDO is an open standard for the late&lt;br /&gt;
binding of device credentials, allowing for automated and secure on-boarding of&lt;br /&gt;
devices when they are first powered on in their final location.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 02 Apr 2026 GMT - Antonio Murdaca &amp;lt;antoniomurdaca@gmail.com&amp;gt; - 1.0.0-2
- Rebuild to fix CVE-2026-25679 and CVE-2026-27137

Tue, 17 Feb 2026 GMT - Antonio Murdaca &amp;lt;antoniomurdaca@gmail.com&amp;gt; - 1.0.0-1
- Update to 1.0.0 upstream release

Tue, 27 Jan 2026 GMT - Paul Whalen &amp;lt;pwhalen@fedoraproject.org&amp;gt; - 0.0.4-2
- Add gating test for cs10

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>go-fdo-server-rendezvous-1.0.0-2.el10.noarch</title>
      <pubDate>Thu, 02 Apr 2026 07:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">c39088773df1a86426ebcb7782a39cdd21ff2299916fbc3cc9e759740a4d6845</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/go-fdo-server-rendezvous-1.0.0-2.el10.noarch.rpm</link>
      <description><p><strong>go-fdo-server-rendezvous</strong> - A Go implementation of the FDO rendezvous server&lt;br /&gt;</p>

<p>This package provides the rendezvous server component of the FDO stack.&lt;br /&gt;
The rendezvous server acts as a trusted intermediary, redirecting devices&lt;br /&gt;
to their designated owner's on-boarding service based on their ownership&lt;br /&gt;
voucher.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 02 Apr 2026 GMT - Antonio Murdaca &amp;lt;antoniomurdaca@gmail.com&amp;gt; - 1.0.0-2
- Rebuild to fix CVE-2026-25679 and CVE-2026-27137

Tue, 17 Feb 2026 GMT - Antonio Murdaca &amp;lt;antoniomurdaca@gmail.com&amp;gt; - 1.0.0-1
- Update to 1.0.0 upstream release

Tue, 27 Jan 2026 GMT - Paul Whalen &amp;lt;pwhalen@fedoraproject.org&amp;gt; - 0.0.4-2
- Add gating test for cs10

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>go-fdo-server-owner-1.0.0-2.el10.noarch</title>
      <pubDate>Thu, 02 Apr 2026 07:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">b3e79ee7e7d17b2611d0c7a879104065995b8bd9cdeea7ba7e3a9a08f8e55bb4</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/go-fdo-server-owner-1.0.0-2.el10.noarch.rpm</link>
      <description><p><strong>go-fdo-server-owner</strong> - A Go implementation of the FDO owner server&lt;br /&gt;</p>

<p>This package provides the owner server component of the FDO stack. The owner&lt;br /&gt;
server is the final destination for a device during on-boarding. It verifies&lt;br /&gt;
the device's authenticity, establishes ownership, and provisions it with the&lt;br /&gt;
necessary credentials and configuration for operation.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 02 Apr 2026 GMT - Antonio Murdaca &amp;lt;antoniomurdaca@gmail.com&amp;gt; - 1.0.0-2
- Rebuild to fix CVE-2026-25679 and CVE-2026-27137

Tue, 17 Feb 2026 GMT - Antonio Murdaca &amp;lt;antoniomurdaca@gmail.com&amp;gt; - 1.0.0-1
- Update to 1.0.0 upstream release

Tue, 27 Jan 2026 GMT - Paul Whalen &amp;lt;pwhalen@fedoraproject.org&amp;gt; - 0.0.4-2
- Add gating test for cs10

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>go-fdo-server-manufacturer-1.0.0-2.el10.noarch</title>
      <pubDate>Thu, 02 Apr 2026 07:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">e56490c50514712a670b17b90fd6169c756c67bc7d271cf69234d146b6d33e20</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/go-fdo-server-manufacturer-1.0.0-2.el10.noarch.rpm</link>
      <description><p><strong>go-fdo-server-manufacturer</strong> - A Go implementation of the FDO manufacturer server&lt;br /&gt;</p>

<p>This package provides the manufacturer server component of the FDO stack.&lt;br /&gt;
The manufacturer server is responsible for creating ownership vouchers and&lt;br /&gt;
preparing devices for the on-boarding process during the manufacturing phase.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 02 Apr 2026 GMT - Antonio Murdaca &amp;lt;antoniomurdaca@gmail.com&amp;gt; - 1.0.0-2
- Rebuild to fix CVE-2026-25679 and CVE-2026-27137

Tue, 17 Feb 2026 GMT - Antonio Murdaca &amp;lt;antoniomurdaca@gmail.com&amp;gt; - 1.0.0-1
- Update to 1.0.0 upstream release

Tue, 27 Jan 2026 GMT - Paul Whalen &amp;lt;pwhalen@fedoraproject.org&amp;gt; - 0.0.4-2
- Add gating test for cs10

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>fips-provider-next-1.5.0-7.el10.x86_64</title>
      <pubDate>Wed, 01 Apr 2026 10:20:58 PM GMT</pubDate>
      <guid isPermaLink="false">98f054a5f65c3e729905e7b62290ee31af04e848b5414b67f7c50a50f4707055</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/fips-provider-next-1.5.0-7.el10.x86_64.rpm</link>
      <description><p><strong>fips-provider-next</strong> - A FIPS provider built from the Kryoptic project&lt;br /&gt;</p>

<p>This package provides a cryptographic module that is both an OpenSSL provider&lt;br /&gt;
as well as a PKCS#11 software token. This is a preview of the next FIPS&lt;br /&gt;
validation.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - Simo Sorce &amp;lt;simo@redhat.com&amp;gt; - 1.5.0-7
- Fix a bug in one of the FIPS patches

Wed, 25 Mar 2026 GMT - Simo Sorce &amp;lt;simo@redhat.com&amp;gt; - 1.5.0-6
- Add fix for getrandom flag in fips mode

Wed, 11 Mar 2026 GMT - Simo Sorce &amp;lt;simo@redhat.com&amp;gt; - 1.5.0-5
- Add missing indicator for SLH-DSA signature test facility

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>grafana-pcp-5.3.0-4.el10.x86_64</title>
      <pubDate>Wed, 01 Apr 2026 04:46:49 PM GMT</pubDate>
      <guid isPermaLink="false">33c9e61610ab63a885a9eec4433263fefe1f7f77e3381726853e13fbd3578608</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/grafana-pcp-5.3.0-4.el10.x86_64.rpm</link>
      <description><p><strong>grafana-pcp</strong> - Performance Co-Pilot Grafana Plugin&lt;br /&gt;</p>

<p>This Grafana plugin for Performance Co-Pilot includes data sources for&lt;br /&gt;
scalable time series from pmseries(1) and Valkey, live PCP metrics and&lt;br /&gt;
bpftrace scripts from pmdabpftrace(1), as well as several dashboards.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - Sam Feifer &amp;lt;sfeifer@redhat.com&amp;gt; - 5.3.0-4
- Resolves RHEL-156598: CVE-2026-25679

Tue, 17 Feb 2026 GMT - Sam Feifer &amp;lt;sfeifer@redhat.com&amp;gt; - 5.3.0-3
- Resolves RHEL-146074: CVE-2025-61726
- Resolves RHEL-149247: CVE-2025-68121

Mon, 26 Jan 2026 GMT - Sam Feifer &amp;lt;sfeifer@redhat.com&amp;gt; - 5.3.0-2
- RHEL-140517: CVE-2025-61729

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>grafana-selinux-10.2.6-25.el10.x86_64</title>
      <pubDate>Wed, 01 Apr 2026 04:07:04 PM GMT</pubDate>
      <guid isPermaLink="false">a182d1cc5d3f64eae4264ba7dac8e4f0b3f2ed14ed0ccb2d40c17470cf9fb1cf</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/grafana-selinux-10.2.6-25.el10.x86_64.rpm</link>
      <description><p><strong>grafana-selinux</strong> - SELinux policy module supporting grafana&lt;br /&gt;</p>

<p>SELinux policy module supporting grafana</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - Sam Feifer &amp;lt;sfeifer@redhat.com&amp;gt; 10.2.6-25
- Resolves RHEL-156596: CVE-2026-25679

Mon, 16 Feb 2026 GMT - Sam Feifer &amp;lt;sfeifer@redhat.com&amp;gt; 10.2.6-24
- Resolves RHEL-144949: CVE-2026-21721
- Resolves RHEL-145413: CVE-2025-61728
- Resolves RHEL-146073: CVE-2025-61726
- Resolves RHEL-149246: CVE-2025-68121

Mon, 26 Jan 2026 GMT - Sam Feifer &amp;lt;sfeifer@redhat.com&amp;gt; 10.2.6-23
- Resolves RHEL-140516: CVE-2025-61729

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>grafana-10.2.6-25.el10.x86_64</title>
      <pubDate>Wed, 01 Apr 2026 04:07:04 PM GMT</pubDate>
      <guid isPermaLink="false">f1b077a586c9e6180cc58a6d9161b62100cf5c77da790dfd767b183c2d630be0</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/grafana-10.2.6-25.el10.x86_64.rpm</link>
      <description><p><strong>grafana</strong> - Metrics dashboard and graph editor&lt;br /&gt;</p>

<p>Grafana is an open source, feature rich metrics dashboard and graph editor for&lt;br /&gt;
Graphite, InfluxDB &amp; OpenTSDB.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - Sam Feifer &amp;lt;sfeifer@redhat.com&amp;gt; 10.2.6-25
- Resolves RHEL-156596: CVE-2026-25679

Mon, 16 Feb 2026 GMT - Sam Feifer &amp;lt;sfeifer@redhat.com&amp;gt; 10.2.6-24
- Resolves RHEL-144949: CVE-2026-21721
- Resolves RHEL-145413: CVE-2025-61728
- Resolves RHEL-146073: CVE-2025-61726
- Resolves RHEL-149246: CVE-2025-68121

Mon, 26 Jan 2026 GMT - Sam Feifer &amp;lt;sfeifer@redhat.com&amp;gt; 10.2.6-23
- Resolves RHEL-140516: CVE-2025-61729

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>delve-1.26.1-1.el10.x86_64</title>
      <pubDate>Wed, 01 Apr 2026 12:21:04 PM GMT</pubDate>
      <guid isPermaLink="false">2a532b2f7a8b4d9c9ab93aa8a95002ddf919b18dd664b3d9da9ae77a5ee09447</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/delve-1.26.1-1.el10.x86_64.rpm</link>
      <description><p><strong>delve</strong> - A debugger for the Go programming language&lt;br /&gt;</p>

<p>&lt;br /&gt;
Delve is a debugger for the Go programming language. The goal of the project&lt;br /&gt;
is to provide a simple, full featured debugging tool for Go. Delve should be&lt;br /&gt;
easy to invoke and easy to use. Chances are if you're using a debugger, things&lt;br /&gt;
aren't going your way. With that in mind, Delve should stay out of your way as&lt;br /&gt;
much as possible.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.26.1-1
- Update Delve to version 1.26.1

Wed, 18 Mar 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.2-2
- Rebuild with latest Go

Fri, 05 Sep 2025 GMT - Alejandro Sáez &amp;lt;asm@redhat.com&amp;gt; - 1.25.2-1
- Update Delve to 1.25.2

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>keylime-verifier-7.14.1-3.el10.x86_64</title>
      <pubDate>Wed, 01 Apr 2026 09:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">fe473479ad8acc99d8d53e4d9836db81f5363147e45c7b0736def3cfd27c9730</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/keylime-verifier-7.14.1-3.el10.x86_64.rpm</link>
      <description><p><strong>keylime-verifier</strong> - The Python Keylime Verifier component&lt;br /&gt;</p>

<p>The Keylime Verifier continuously verifies the integrity state&lt;br /&gt;
of the machine that the agent is running on.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-3
- Remove unbounded functools.cache from latest_attestation

Mon, 23 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 7.14.1-2
- Add patches to fix DB connection leaks

Fri, 13 Feb 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-1
- Updating for Keylime release v7.14.1

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>keylime-tools-7.14.1-3.el10.x86_64</title>
      <pubDate>Wed, 01 Apr 2026 09:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">4c67671db835db4fbc6bc04ef8a9b4817260dd16241a295c54394f42d412c6cb</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/keylime-tools-7.14.1-3.el10.x86_64.rpm</link>
      <description><p><strong>keylime-tools</strong> - Keylime tools&lt;br /&gt;</p>

<p>The keylime tools package includes miscelaneous tools.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-3
- Remove unbounded functools.cache from latest_attestation

Mon, 23 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 7.14.1-2
- Add patches to fix DB connection leaks

Fri, 13 Feb 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-1
- Updating for Keylime release v7.14.1

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>keylime-tenant-7.14.1-3.el10.x86_64</title>
      <pubDate>Wed, 01 Apr 2026 09:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">dc5874848a097b7340a880b734ac4cb57b0d845ea2f5c443001adc1a20aa5a8a</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/keylime-tenant-7.14.1-3.el10.x86_64.rpm</link>
      <description><p><strong>keylime-tenant</strong> - The Python Keylime Tenant&lt;br /&gt;</p>

<p>The Keylime Tenant can be used to provision a Keylime Agent.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-3
- Remove unbounded functools.cache from latest_attestation

Mon, 23 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 7.14.1-2
- Add patches to fix DB connection leaks

Fri, 13 Feb 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-1
- Updating for Keylime release v7.14.1

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>keylime-registrar-7.14.1-3.el10.x86_64</title>
      <pubDate>Wed, 01 Apr 2026 09:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">ea81bd637a979b84fd98a17973da98af6738e87034e6719adc9939464e8f3ea3</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/keylime-registrar-7.14.1-3.el10.x86_64.rpm</link>
      <description><p><strong>keylime-registrar</strong> - The Keylime Registrar component&lt;br /&gt;</p>

<p>The Keylime Registrar is a database of all agents registered&lt;br /&gt;
with Keylime and hosts the public keys of the TPM vendors.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-3
- Remove unbounded functools.cache from latest_attestation

Mon, 23 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 7.14.1-2
- Add patches to fix DB connection leaks

Fri, 13 Feb 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-1
- Updating for Keylime release v7.14.1

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>keylime-base-7.14.1-3.el10.x86_64</title>
      <pubDate>Wed, 01 Apr 2026 09:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">835e9c80c90fe5c2bc5408f5bbef76257c2c649a721bf14a21d89e4997a46520</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/keylime-base-7.14.1-3.el10.x86_64.rpm</link>
      <description><p><strong>keylime-base</strong> - The base package contains the default configuration&lt;br /&gt;</p>

<p>The base package contains the Keylime default configuration</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-3
- Remove unbounded functools.cache from latest_attestation

Mon, 23 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 7.14.1-2
- Add patches to fix DB connection leaks

Fri, 13 Feb 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-1
- Updating for Keylime release v7.14.1

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>keylime-7.14.1-3.el10.x86_64</title>
      <pubDate>Wed, 01 Apr 2026 09:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">997cfd88b66f852a35bf9be5ee3f45dfbaba45dba741c0f4fd2fff07225c101e</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/keylime-7.14.1-3.el10.x86_64.rpm</link>
      <description><p><strong>keylime</strong> - Open source TPM software for Bootstrapping and Maintaining Trust&lt;br /&gt;</p>

<p>Keylime is a TPM based highly scalable remote boot attestation&lt;br /&gt;
and runtime integrity measurement solution.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-3
- Remove unbounded functools.cache from latest_attestation

Mon, 23 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 7.14.1-2
- Add patches to fix DB connection leaks

Fri, 13 Feb 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-1
- Updating for Keylime release v7.14.1

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3-keylime-7.14.1-3.el10.x86_64</title>
      <pubDate>Wed, 01 Apr 2026 09:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">905feb50515511dfcf80e8ce5505a5f98dd7be3bdaef34110b9db572351d0ca4</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/python3-keylime-7.14.1-3.el10.x86_64.rpm</link>
      <description><p><strong>python3-keylime</strong> - The Python Keylime module&lt;br /&gt;</p>

<p>The python3-keylime module implements the functionality used&lt;br /&gt;
by Keylime components.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-3
- Remove unbounded functools.cache from latest_attestation

Mon, 23 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 7.14.1-2
- Add patches to fix DB connection leaks

Fri, 13 Feb 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-1
- Updating for Keylime release v7.14.1

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>keylime-selinux-7.14.1-3.el10.noarch</title>
      <pubDate>Wed, 01 Apr 2026 09:21:31 AM GMT</pubDate>
      <guid isPermaLink="false">4aa908169b52afadc9067729d6591942ba3446dba766a7a868156a07c99d010e</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/keylime-selinux-7.14.1-3.el10.noarch.rpm</link>
      <description><p><strong>keylime-selinux</strong> - keylime SELinux policy&lt;br /&gt;</p>

<p>Custom SELinux policy module</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-3
- Remove unbounded functools.cache from latest_attestation

Mon, 23 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 7.14.1-2
- Add patches to fix DB connection leaks

Fri, 13 Feb 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-1
- Updating for Keylime release v7.14.1

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3-perf-6.12.0-218.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:39:21 AM GMT</pubDate>
      <guid isPermaLink="false">44649c828e8092ece485510aed88ba4ff4f4f96f65358845b154f7a0c0b77a81</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/python3-perf-6.12.0-218.el10.x86_64.rpm</link>
      <description><p><strong>python3-perf</strong> - Python bindings for apps which will manipulate perf events&lt;br /&gt;</p>

<p>The python3-perf package contains a module that permits applications&lt;br /&gt;
written in the Python programming language to use the interface&lt;br /&gt;
to manipulate perf events.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-218.el10]
- x86/fpu: Ensure shadow stack is active before "getting" registers (Oleg Nesterov) [RHEL-152371]
- PCI: Validate window resource type in pbus_select_window_for_type() (Myron Stowe) [RHEL-139968]
- PCI: Don't claim disabled bridge windows (Myron Stowe) [RHEL-139968]
- PCI: Remove old_size limit from bridge window sizing (Myron Stowe) [RHEL-139968]
- PCI: Stop over-estimating bridge window size (Myron Stowe) [RHEL-139968]
- PCI: Rewrite bridge window head alignment function (Myron Stowe) [RHEL-139968]
- PCI: Fix bridge window alignment with optional resources (Myron Stowe) [RHEL-139968]
- sparc/PCI: Correct 64-bit non-pref -&amp;gt; pref BAR resources (Myron Stowe) [RHEL-139968]
- PCI: meson: Fix parsing the DBI register region (Myron Stowe) [RHEL-139968]
- PCI: Do not size non-existing prefetchable window (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Use pcibios_align_resource() to block io range (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix PCI southbridge legacy resource reservations (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Myron Stowe) [RHEL-139968]
- PCI: dwc: Use custom pci_ops for root bus DBI vs ECAM config access (Myron Stowe) [RHEL-139968]
- PCI: cadence: Search for MSI Capability with correct ID (Myron Stowe) [RHEL-139968]
- PCI: Fix regression in pci_bus_distribute_available_resources() (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Expose PCI device serial number (Myron Stowe) [RHEL-139968]
- PCI: xilinx-nwl: Fix ECAM programming (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Fix devm_kcalloc() argument order for port-&amp;gt;phys allocation (Myron Stowe) [RHEL-139968]
- PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Drop PMSR spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix inverted break condition in PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Assure reset occurs before DBI access (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support ECAM mechanism by enabling iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Prepare the driver for enabling ECAM mechanism using iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Add support for ELBI resource mapping (Myron Stowe) [RHEL-139968]
- PCI: qcom: Move host bridge 'phy' and 'reset' pointers to struct qcom_pcie_port (Myron Stowe) [RHEL-139968]
- PCI: qcom: Fix macro typo for CURSOR (Myron Stowe) [RHEL-139968]
- PCI: qcom: Add equalization settings for 8.0 GT/s and 32.0 GT/s (Myron Stowe) [RHEL-139968]
- PCI: plda: Remove dev_err_probe() when the errno is -ENOMEM (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Add support for MediaTek MT8196 SoC (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: mediatek-gen3: Add support for MT6991/MT8196 (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Implement sys clock ready time setting (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use kcalloc() instead of kzalloc() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix incorrect error message in probe() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix programming sequence of "strap" settings (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix module autoloading (Myron Stowe) [RHEL-139968]
- PCI: imx6: Enable the Vaux supply if available (Myron Stowe) [RHEL-139968]
- PCI: qcom-ep: Remove redundant edma.nr_irqs initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support 16-lane operation (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Handle errors in BPMP response (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Set pci_epc_features::msi_capable to true (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs (Myron Stowe) [RHEL-139968]
- selftests: pci_endpoint: Skip IRQ test if IRQ is out of range. (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Cleanup extra 0 initialization (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Skip IRQ tests if irq is out of range (Myron Stowe) [RHEL-139968]
- PCI: endpoint: Drop superfluous pci_epc_features initialization (Myron Stowe) [RHEL-139968]
- Documentation: PCI: endpoint: Document BAR assignment (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-x1e80100: Set clocks minItems for the fifth Glymur PCIe Controller (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: ti,am65: Extend for use with PVU (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-sm8550: Add SM8750 compatible (Myron Stowe) [RHEL-139968]
- PCI: cadence: Use cdns_pcie_find_*capability() to avoid hardcoding offsets (Myron Stowe) [RHEL-139968]
- PCI: cadence: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: dwc: ep: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: Refactor extended capability search into PCI_FIND_NEXT_EXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Refactor capability search into PCI_FIND_NEXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Clean up __pci_find_next_cap_ttl() readability (Myron Stowe) [RHEL-139968]
- PCI: switchtec: Replace manual locks with guard (Myron Stowe) [RHEL-139968]
- PCI: Add lockdep assertion in pci_stop_and_remove_bus_device() (Myron Stowe) [RHEL-139968]
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Myron Stowe) [RHEL-139968]
- PCI: Don't print stale information about resource (Myron Stowe) [RHEL-139968]
- PCI: Alter misleading recursion to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Pass bridge window to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add pci_setup_one_bridge_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor remove_dev_resources() to use pbus_select_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor distributing available memory to use loops (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during mem window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() in space available checker (Myron Stowe) [RHEL-139968]
- PCI: Rename resource variable from r to res (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during IO window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() during BAR resize (Myron Stowe) [RHEL-139968]
- PCI: Warn if bridge window cannot be released when resizing BAR (Myron Stowe) [RHEL-139968]
- PCI: Fix finding bridge window in pci_reassign_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add bridge window selection functions (Myron Stowe) [RHEL-139968]
- PCI: Add defines for bridge window indexing (Myron Stowe) [RHEL-139968]
- PCI: Preserve bridge window resource type flags (Myron Stowe) [RHEL-139968]
- PCI: Enable bridge even if bridge window fails to assign (Myron Stowe) [RHEL-139968]
- PCI: Use pci_release_resource() instead of release_resource() (Myron Stowe) [RHEL-139968]
- PCI: Disable non-claimed bridge window (Myron Stowe) [RHEL-139968]
- PCI: Always claim bridge window before its setup (Myron Stowe) [RHEL-139968]
- PCI: Refactor find_bus_resource_of_type() logic checks (Myron Stowe) [RHEL-139968]
- PCI: Move find_bus_resource_of_type() earlier (Myron Stowe) [RHEL-139968]
- MIPS: PCI: Use pci_enable_resources() (Myron Stowe) [RHEL-139968]
- sparc/PCI: Remove pcibios_enable_device() as they do nothing extra (Myron Stowe) [RHEL-139968]
- m68k/PCI: Use pci_enable_resources() in pcibios_enable_device() (Myron Stowe) [RHEL-139968]
- PCI: Fix failure detection during resource resize (Myron Stowe) [RHEL-139968]
- PCI: Fix pdev_resources_assignable() disparity (Myron Stowe) [RHEL-139968]
- PCI: Ensure relaxed tail alignment does not increase min_align (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Ensure devices are powered for config reads (Myron Stowe) [RHEL-139968]
- PCI/PM: Skip resuming to D0 if device is disconnected (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Reduce scope of pci_has_p2pmem() (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Myron Stowe) [RHEL-139968]
- PCI: of: Update parent unit address generation in of_pci_prop_intr_map() (Myron Stowe) [RHEL-139968]
- PCI: Disable MSI on RDC PCI to PCIe bridges (Myron Stowe) [RHEL-139968]
- PCI: hotplug: Clean up spaces in messages (Myron Stowe) [RHEL-139968]
- PCI: Add Extended Tag + MRRS quirk for Xeon 6 (Myron Stowe) [RHEL-139968]
- PCI: Clean up pci_scan_child_bus_extend() loop (Myron Stowe) [RHEL-139968]
- PCI: Clean up early_dump_pci_device() (Myron Stowe) [RHEL-139968]
- PCI: Use header type defines in pci_setup_device() (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Fix typos (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Tidy error recovery doc's PCIe nomenclature (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Amend error recovery doc with DPC/AER specifics (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync error recovery doc with code (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync AER doc with code (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix NULL pointer access by aer_info (Myron Stowe) [RHEL-139968]
- PCI/AER: Print TLP Log for errors introduced since PCIe r1.1 (Myron Stowe) [RHEL-139968]
- PCI/AER: Support errors introduced by PCIe r6.0 (Myron Stowe) [RHEL-139968]
- powerpc/eeh: Use result of error_detected() in uevent (Myron Stowe) [RHEL-139968]
- s390/pci: Use pci_uevent_ers() in PCI recovery (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix missing uevent on recovery when a reset is requested (Myron Stowe) [RHEL-139968]
- PCI/ERR: Update device error_state already after reset (Myron Stowe) [RHEL-139968]
- PCI/ERR: Notify drivers on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/ERR: Fix uevent on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/AER: Allow drivers to opt in to Bus Reset on Non-Fatal Errors (Myron Stowe) [RHEL-139968]
- MIPS: pci-legacy: Override pci_address_to_pio (Myron Stowe) [RHEL-139968]
- PCI: exynos: Switch to devm_clk_bulk_get_all_enabled() (Myron Stowe) [RHEL-139968]

Mon, 30 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-217.el10]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154397]
- smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-154397]
- ACPI: AGDI: Add interrupt signaling mode support (Charles Mirabile) [RHEL-111893]
- add xxd to as BuildRequire for bpf selftests (Ines Qian) [RHEL-157473]
- selftests/net: test ipip packets in gro.sh (Antoine Tenart) [RHEL-123213]
- net: gro: remove unnecessary df checks (Antoine Tenart) [RHEL-123213]
- net: gso: restore ids of outer ip headers correctly (Antoine Tenart) [RHEL-123213]
- net: gro: only merge packets with incrementing or fixed outer ids (Antoine Tenart) [RHEL-123213]
- net: gro: remove is_ipv6 from napi_gro_cb (Antoine Tenart) [RHEL-123213]
- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161531]
- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161531]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-145154]
- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]

Thu, 26 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-216.el10]
- redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
- net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
- mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
- mpls: Protect net-&amp;gt;mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
- mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
- mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
- ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
- mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
- mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
- neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
- sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
- rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
- net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
- ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
- net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
- net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
- neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
- neighbour: Protect tbl-&amp;gt;phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
- neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
- neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
- neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
- net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
- net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
- net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
- net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
- ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
- net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
- net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
- ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
- ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
- inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
- ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
- ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
- ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
- net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Protect nh-&amp;gt;f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
- ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
- ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
- ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate rt-&amp;gt;fib6_nh-&amp;gt;rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
- ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- net: Remove -&amp;gt;exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
- geneve: Convert geneve_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bareudp: Convert bareudp_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bonding: Convert bond_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bridge: Convert br_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- xfrm: Convert xfrmi_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert tunnel devices' -&amp;gt;exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- vxlan: Convert vxlan_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert nexthop_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- net: Add -&amp;gt;exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
- net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
- net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
- inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
- net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
- dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
- net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
- arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
- net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
- net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
- net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
- dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
- dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
- net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
- dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
- rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
- can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move ops-&amp;gt;validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
- net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
- ipmr: use READ_ONCE() to read net-&amp;gt;ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
- ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table-&amp;gt;fib_seq (Antoine Tenart) [RHEL-150155]
- ipv4: use READ_ONCE()/WRITE_ONCE() on net-&amp;gt;ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
- fib: rules: use READ_ONCE()/WRITE_ONCE() on ops-&amp;gt;fib_rules_seq (Antoine Tenart) [RHEL-150155]
- ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
- ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
- ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
- ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
- ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
- cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
- cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
- cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
- cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
- cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
- selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
- selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
- cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
- cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
- cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
- cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
- cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
- cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
- cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
- Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
- cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
- cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
- cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
- cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
- cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
- cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
- cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
- cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
- cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
- cpuset: remove unused assignment to trialcs-&amp;gt;partition_root_state (Waiman Long) [RHEL-113305]
- cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
- cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
- cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
- cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
- cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
- cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
- cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
- cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
- cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
- selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
- cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
- cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
- cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
- cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
- cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
- cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
- cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
- cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
- cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
- docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
- cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
- cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
- selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
- cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
- selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
- cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
- cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
- cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
- selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
- selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
- selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
- Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
- Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
- cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
- llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
- sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
- cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
- cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
- cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
- cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
- cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
- cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
- cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
- cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
- cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
- cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
- cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
- cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
- cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
- cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
- mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
- cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
- cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
- cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
- cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
- mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
- blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
- cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
- cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
- mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
- RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
- cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
- cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
- cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
- cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
- cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
- cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
- firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
- include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
- include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
- arm_scmi: don't mess with -&amp;gt;d_parent-&amp;gt;d_name (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
- firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
- redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
- i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
- i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
- tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
- tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
- tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
- fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
- tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
- function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
- tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
- tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
- x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
- tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
- tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
- tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
- tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
- ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
- selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
- tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
- tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
- tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
- fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
- fgraph: Initialize ftrace_ops-&amp;gt;private for function graph ops (Jerome Marchand) [RHEL-151695]
- ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
- tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
- tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
- selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
- tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
- tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
- ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
- ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
- ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
- Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
- tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
- ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
- powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
- selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
- selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
- tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
- ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
- Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
- arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
- atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
- fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
- tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
- ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
- docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
- tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
- md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
- md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
- block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
- block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&amp;gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&amp;gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>perf-6.12.0-218.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:39:21 AM GMT</pubDate>
      <guid isPermaLink="false">b2eeabbe32973d3808831d3fce8586ba604880044656b5d9212ea61397f3228a</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/perf-6.12.0-218.el10.x86_64.rpm</link>
      <description><p><strong>perf</strong> - Performance monitoring for the Linux kernel&lt;br /&gt;</p>

<p>This package contains the perf tool, which enables performance monitoring&lt;br /&gt;
of the Linux kernel.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-218.el10]
- x86/fpu: Ensure shadow stack is active before "getting" registers (Oleg Nesterov) [RHEL-152371]
- PCI: Validate window resource type in pbus_select_window_for_type() (Myron Stowe) [RHEL-139968]
- PCI: Don't claim disabled bridge windows (Myron Stowe) [RHEL-139968]
- PCI: Remove old_size limit from bridge window sizing (Myron Stowe) [RHEL-139968]
- PCI: Stop over-estimating bridge window size (Myron Stowe) [RHEL-139968]
- PCI: Rewrite bridge window head alignment function (Myron Stowe) [RHEL-139968]
- PCI: Fix bridge window alignment with optional resources (Myron Stowe) [RHEL-139968]
- sparc/PCI: Correct 64-bit non-pref -&amp;gt; pref BAR resources (Myron Stowe) [RHEL-139968]
- PCI: meson: Fix parsing the DBI register region (Myron Stowe) [RHEL-139968]
- PCI: Do not size non-existing prefetchable window (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Use pcibios_align_resource() to block io range (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix PCI southbridge legacy resource reservations (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Myron Stowe) [RHEL-139968]
- PCI: dwc: Use custom pci_ops for root bus DBI vs ECAM config access (Myron Stowe) [RHEL-139968]
- PCI: cadence: Search for MSI Capability with correct ID (Myron Stowe) [RHEL-139968]
- PCI: Fix regression in pci_bus_distribute_available_resources() (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Expose PCI device serial number (Myron Stowe) [RHEL-139968]
- PCI: xilinx-nwl: Fix ECAM programming (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Fix devm_kcalloc() argument order for port-&amp;gt;phys allocation (Myron Stowe) [RHEL-139968]
- PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Drop PMSR spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix inverted break condition in PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Assure reset occurs before DBI access (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support ECAM mechanism by enabling iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Prepare the driver for enabling ECAM mechanism using iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Add support for ELBI resource mapping (Myron Stowe) [RHEL-139968]
- PCI: qcom: Move host bridge 'phy' and 'reset' pointers to struct qcom_pcie_port (Myron Stowe) [RHEL-139968]
- PCI: qcom: Fix macro typo for CURSOR (Myron Stowe) [RHEL-139968]
- PCI: qcom: Add equalization settings for 8.0 GT/s and 32.0 GT/s (Myron Stowe) [RHEL-139968]
- PCI: plda: Remove dev_err_probe() when the errno is -ENOMEM (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Add support for MediaTek MT8196 SoC (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: mediatek-gen3: Add support for MT6991/MT8196 (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Implement sys clock ready time setting (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use kcalloc() instead of kzalloc() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix incorrect error message in probe() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix programming sequence of "strap" settings (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix module autoloading (Myron Stowe) [RHEL-139968]
- PCI: imx6: Enable the Vaux supply if available (Myron Stowe) [RHEL-139968]
- PCI: qcom-ep: Remove redundant edma.nr_irqs initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support 16-lane operation (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Handle errors in BPMP response (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Set pci_epc_features::msi_capable to true (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs (Myron Stowe) [RHEL-139968]
- selftests: pci_endpoint: Skip IRQ test if IRQ is out of range. (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Cleanup extra 0 initialization (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Skip IRQ tests if irq is out of range (Myron Stowe) [RHEL-139968]
- PCI: endpoint: Drop superfluous pci_epc_features initialization (Myron Stowe) [RHEL-139968]
- Documentation: PCI: endpoint: Document BAR assignment (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-x1e80100: Set clocks minItems for the fifth Glymur PCIe Controller (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: ti,am65: Extend for use with PVU (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-sm8550: Add SM8750 compatible (Myron Stowe) [RHEL-139968]
- PCI: cadence: Use cdns_pcie_find_*capability() to avoid hardcoding offsets (Myron Stowe) [RHEL-139968]
- PCI: cadence: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: dwc: ep: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: Refactor extended capability search into PCI_FIND_NEXT_EXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Refactor capability search into PCI_FIND_NEXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Clean up __pci_find_next_cap_ttl() readability (Myron Stowe) [RHEL-139968]
- PCI: switchtec: Replace manual locks with guard (Myron Stowe) [RHEL-139968]
- PCI: Add lockdep assertion in pci_stop_and_remove_bus_device() (Myron Stowe) [RHEL-139968]
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Myron Stowe) [RHEL-139968]
- PCI: Don't print stale information about resource (Myron Stowe) [RHEL-139968]
- PCI: Alter misleading recursion to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Pass bridge window to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add pci_setup_one_bridge_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor remove_dev_resources() to use pbus_select_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor distributing available memory to use loops (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during mem window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() in space available checker (Myron Stowe) [RHEL-139968]
- PCI: Rename resource variable from r to res (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during IO window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() during BAR resize (Myron Stowe) [RHEL-139968]
- PCI: Warn if bridge window cannot be released when resizing BAR (Myron Stowe) [RHEL-139968]
- PCI: Fix finding bridge window in pci_reassign_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add bridge window selection functions (Myron Stowe) [RHEL-139968]
- PCI: Add defines for bridge window indexing (Myron Stowe) [RHEL-139968]
- PCI: Preserve bridge window resource type flags (Myron Stowe) [RHEL-139968]
- PCI: Enable bridge even if bridge window fails to assign (Myron Stowe) [RHEL-139968]
- PCI: Use pci_release_resource() instead of release_resource() (Myron Stowe) [RHEL-139968]
- PCI: Disable non-claimed bridge window (Myron Stowe) [RHEL-139968]
- PCI: Always claim bridge window before its setup (Myron Stowe) [RHEL-139968]
- PCI: Refactor find_bus_resource_of_type() logic checks (Myron Stowe) [RHEL-139968]
- PCI: Move find_bus_resource_of_type() earlier (Myron Stowe) [RHEL-139968]
- MIPS: PCI: Use pci_enable_resources() (Myron Stowe) [RHEL-139968]
- sparc/PCI: Remove pcibios_enable_device() as they do nothing extra (Myron Stowe) [RHEL-139968]
- m68k/PCI: Use pci_enable_resources() in pcibios_enable_device() (Myron Stowe) [RHEL-139968]
- PCI: Fix failure detection during resource resize (Myron Stowe) [RHEL-139968]
- PCI: Fix pdev_resources_assignable() disparity (Myron Stowe) [RHEL-139968]
- PCI: Ensure relaxed tail alignment does not increase min_align (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Ensure devices are powered for config reads (Myron Stowe) [RHEL-139968]
- PCI/PM: Skip resuming to D0 if device is disconnected (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Reduce scope of pci_has_p2pmem() (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Myron Stowe) [RHEL-139968]
- PCI: of: Update parent unit address generation in of_pci_prop_intr_map() (Myron Stowe) [RHEL-139968]
- PCI: Disable MSI on RDC PCI to PCIe bridges (Myron Stowe) [RHEL-139968]
- PCI: hotplug: Clean up spaces in messages (Myron Stowe) [RHEL-139968]
- PCI: Add Extended Tag + MRRS quirk for Xeon 6 (Myron Stowe) [RHEL-139968]
- PCI: Clean up pci_scan_child_bus_extend() loop (Myron Stowe) [RHEL-139968]
- PCI: Clean up early_dump_pci_device() (Myron Stowe) [RHEL-139968]
- PCI: Use header type defines in pci_setup_device() (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Fix typos (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Tidy error recovery doc's PCIe nomenclature (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Amend error recovery doc with DPC/AER specifics (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync error recovery doc with code (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync AER doc with code (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix NULL pointer access by aer_info (Myron Stowe) [RHEL-139968]
- PCI/AER: Print TLP Log for errors introduced since PCIe r1.1 (Myron Stowe) [RHEL-139968]
- PCI/AER: Support errors introduced by PCIe r6.0 (Myron Stowe) [RHEL-139968]
- powerpc/eeh: Use result of error_detected() in uevent (Myron Stowe) [RHEL-139968]
- s390/pci: Use pci_uevent_ers() in PCI recovery (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix missing uevent on recovery when a reset is requested (Myron Stowe) [RHEL-139968]
- PCI/ERR: Update device error_state already after reset (Myron Stowe) [RHEL-139968]
- PCI/ERR: Notify drivers on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/ERR: Fix uevent on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/AER: Allow drivers to opt in to Bus Reset on Non-Fatal Errors (Myron Stowe) [RHEL-139968]
- MIPS: pci-legacy: Override pci_address_to_pio (Myron Stowe) [RHEL-139968]
- PCI: exynos: Switch to devm_clk_bulk_get_all_enabled() (Myron Stowe) [RHEL-139968]

Mon, 30 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-217.el10]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154397]
- smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-154397]
- ACPI: AGDI: Add interrupt signaling mode support (Charles Mirabile) [RHEL-111893]
- add xxd to as BuildRequire for bpf selftests (Ines Qian) [RHEL-157473]
- selftests/net: test ipip packets in gro.sh (Antoine Tenart) [RHEL-123213]
- net: gro: remove unnecessary df checks (Antoine Tenart) [RHEL-123213]
- net: gso: restore ids of outer ip headers correctly (Antoine Tenart) [RHEL-123213]
- net: gro: only merge packets with incrementing or fixed outer ids (Antoine Tenart) [RHEL-123213]
- net: gro: remove is_ipv6 from napi_gro_cb (Antoine Tenart) [RHEL-123213]
- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161531]
- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161531]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-145154]
- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]

Thu, 26 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-216.el10]
- redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
- net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
- mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
- mpls: Protect net-&amp;gt;mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
- mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
- mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
- ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
- mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
- mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
- neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
- sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
- rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
- net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
- ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
- net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
- net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
- neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
- neighbour: Protect tbl-&amp;gt;phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
- neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
- neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
- neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
- net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
- net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
- net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
- net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
- ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
- net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
- net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
- ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
- ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
- inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
- ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
- ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
- ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
- net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Protect nh-&amp;gt;f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
- ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
- ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
- ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate rt-&amp;gt;fib6_nh-&amp;gt;rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
- ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- net: Remove -&amp;gt;exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
- geneve: Convert geneve_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bareudp: Convert bareudp_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bonding: Convert bond_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bridge: Convert br_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- xfrm: Convert xfrmi_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert tunnel devices' -&amp;gt;exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- vxlan: Convert vxlan_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert nexthop_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- net: Add -&amp;gt;exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
- net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
- net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
- inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
- net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
- dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
- net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
- arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
- net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
- net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
- net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
- dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
- dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
- net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
- dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
- rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
- can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move ops-&amp;gt;validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
- net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
- ipmr: use READ_ONCE() to read net-&amp;gt;ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
- ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table-&amp;gt;fib_seq (Antoine Tenart) [RHEL-150155]
- ipv4: use READ_ONCE()/WRITE_ONCE() on net-&amp;gt;ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
- fib: rules: use READ_ONCE()/WRITE_ONCE() on ops-&amp;gt;fib_rules_seq (Antoine Tenart) [RHEL-150155]
- ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
- ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
- ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
- ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
- ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
- cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
- cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
- cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
- cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
- cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
- selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
- selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
- cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
- cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
- cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
- cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
- cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
- cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
- cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
- Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
- cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
- cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
- cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
- cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
- cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
- cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
- cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
- cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
- cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
- cpuset: remove unused assignment to trialcs-&amp;gt;partition_root_state (Waiman Long) [RHEL-113305]
- cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
- cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
- cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
- cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
- cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
- cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
- cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
- cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
- cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
- selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
- cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
- cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
- cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
- cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
- cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
- cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
- cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
- cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
- cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
- docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
- cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
- cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
- selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
- cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
- selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
- cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
- cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
- cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
- selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
- selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
- selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
- Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
- Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
- cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
- llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
- sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
- cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
- cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
- cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
- cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
- cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
- cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
- cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
- cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
- cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
- cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
- cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
- cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
- cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
- cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
- mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
- cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
- cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
- cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
- cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
- mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
- blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
- cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
- cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
- mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
- RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
- cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
- cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
- cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
- cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
- cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
- cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
- firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
- include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
- include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
- arm_scmi: don't mess with -&amp;gt;d_parent-&amp;gt;d_name (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
- firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
- redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
- i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
- i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
- tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
- tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
- tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
- fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
- tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
- function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
- tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
- tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
- x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
- tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
- tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
- tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
- tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
- ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
- selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
- tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
- tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
- tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
- fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
- fgraph: Initialize ftrace_ops-&amp;gt;private for function graph ops (Jerome Marchand) [RHEL-151695]
- ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
- tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
- tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
- selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
- tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
- tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
- ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
- ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
- ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
- Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
- tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
- ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
- powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
- selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
- selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
- tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
- ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
- Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
- arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
- atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
- fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
- tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
- ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
- docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
- tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
- md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
- md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
- block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
- block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&amp;gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&amp;gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-headers-6.12.0-218.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:39:21 AM GMT</pubDate>
      <guid isPermaLink="false">9f62852f54752b0685b3338a79f36d0e94cfa018c6fb2806ecc33c0722d38eea</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/kernel-headers-6.12.0-218.el10.x86_64.rpm</link>
      <description><p><strong>kernel-headers</strong> - Header files for the Linux kernel for use by glibc&lt;br /&gt;</p>

<p>Kernel-headers includes the C header files that specify the interface&lt;br /&gt;
between the Linux kernel and userspace libraries and programs.  The&lt;br /&gt;
header files define structures and constants that are needed for&lt;br /&gt;
building most standard programs and are also needed for rebuilding the&lt;br /&gt;
glibc package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-218.el10]
- x86/fpu: Ensure shadow stack is active before "getting" registers (Oleg Nesterov) [RHEL-152371]
- PCI: Validate window resource type in pbus_select_window_for_type() (Myron Stowe) [RHEL-139968]
- PCI: Don't claim disabled bridge windows (Myron Stowe) [RHEL-139968]
- PCI: Remove old_size limit from bridge window sizing (Myron Stowe) [RHEL-139968]
- PCI: Stop over-estimating bridge window size (Myron Stowe) [RHEL-139968]
- PCI: Rewrite bridge window head alignment function (Myron Stowe) [RHEL-139968]
- PCI: Fix bridge window alignment with optional resources (Myron Stowe) [RHEL-139968]
- sparc/PCI: Correct 64-bit non-pref -&amp;gt; pref BAR resources (Myron Stowe) [RHEL-139968]
- PCI: meson: Fix parsing the DBI register region (Myron Stowe) [RHEL-139968]
- PCI: Do not size non-existing prefetchable window (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Use pcibios_align_resource() to block io range (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix PCI southbridge legacy resource reservations (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Myron Stowe) [RHEL-139968]
- PCI: dwc: Use custom pci_ops for root bus DBI vs ECAM config access (Myron Stowe) [RHEL-139968]
- PCI: cadence: Search for MSI Capability with correct ID (Myron Stowe) [RHEL-139968]
- PCI: Fix regression in pci_bus_distribute_available_resources() (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Expose PCI device serial number (Myron Stowe) [RHEL-139968]
- PCI: xilinx-nwl: Fix ECAM programming (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Fix devm_kcalloc() argument order for port-&amp;gt;phys allocation (Myron Stowe) [RHEL-139968]
- PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Drop PMSR spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix inverted break condition in PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Assure reset occurs before DBI access (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support ECAM mechanism by enabling iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Prepare the driver for enabling ECAM mechanism using iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Add support for ELBI resource mapping (Myron Stowe) [RHEL-139968]
- PCI: qcom: Move host bridge 'phy' and 'reset' pointers to struct qcom_pcie_port (Myron Stowe) [RHEL-139968]
- PCI: qcom: Fix macro typo for CURSOR (Myron Stowe) [RHEL-139968]
- PCI: qcom: Add equalization settings for 8.0 GT/s and 32.0 GT/s (Myron Stowe) [RHEL-139968]
- PCI: plda: Remove dev_err_probe() when the errno is -ENOMEM (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Add support for MediaTek MT8196 SoC (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: mediatek-gen3: Add support for MT6991/MT8196 (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Implement sys clock ready time setting (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use kcalloc() instead of kzalloc() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix incorrect error message in probe() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix programming sequence of "strap" settings (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix module autoloading (Myron Stowe) [RHEL-139968]
- PCI: imx6: Enable the Vaux supply if available (Myron Stowe) [RHEL-139968]
- PCI: qcom-ep: Remove redundant edma.nr_irqs initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support 16-lane operation (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Handle errors in BPMP response (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Set pci_epc_features::msi_capable to true (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs (Myron Stowe) [RHEL-139968]
- selftests: pci_endpoint: Skip IRQ test if IRQ is out of range. (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Cleanup extra 0 initialization (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Skip IRQ tests if irq is out of range (Myron Stowe) [RHEL-139968]
- PCI: endpoint: Drop superfluous pci_epc_features initialization (Myron Stowe) [RHEL-139968]
- Documentation: PCI: endpoint: Document BAR assignment (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-x1e80100: Set clocks minItems for the fifth Glymur PCIe Controller (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: ti,am65: Extend for use with PVU (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-sm8550: Add SM8750 compatible (Myron Stowe) [RHEL-139968]
- PCI: cadence: Use cdns_pcie_find_*capability() to avoid hardcoding offsets (Myron Stowe) [RHEL-139968]
- PCI: cadence: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: dwc: ep: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: Refactor extended capability search into PCI_FIND_NEXT_EXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Refactor capability search into PCI_FIND_NEXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Clean up __pci_find_next_cap_ttl() readability (Myron Stowe) [RHEL-139968]
- PCI: switchtec: Replace manual locks with guard (Myron Stowe) [RHEL-139968]
- PCI: Add lockdep assertion in pci_stop_and_remove_bus_device() (Myron Stowe) [RHEL-139968]
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Myron Stowe) [RHEL-139968]
- PCI: Don't print stale information about resource (Myron Stowe) [RHEL-139968]
- PCI: Alter misleading recursion to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Pass bridge window to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add pci_setup_one_bridge_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor remove_dev_resources() to use pbus_select_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor distributing available memory to use loops (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during mem window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() in space available checker (Myron Stowe) [RHEL-139968]
- PCI: Rename resource variable from r to res (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during IO window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() during BAR resize (Myron Stowe) [RHEL-139968]
- PCI: Warn if bridge window cannot be released when resizing BAR (Myron Stowe) [RHEL-139968]
- PCI: Fix finding bridge window in pci_reassign_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add bridge window selection functions (Myron Stowe) [RHEL-139968]
- PCI: Add defines for bridge window indexing (Myron Stowe) [RHEL-139968]
- PCI: Preserve bridge window resource type flags (Myron Stowe) [RHEL-139968]
- PCI: Enable bridge even if bridge window fails to assign (Myron Stowe) [RHEL-139968]
- PCI: Use pci_release_resource() instead of release_resource() (Myron Stowe) [RHEL-139968]
- PCI: Disable non-claimed bridge window (Myron Stowe) [RHEL-139968]
- PCI: Always claim bridge window before its setup (Myron Stowe) [RHEL-139968]
- PCI: Refactor find_bus_resource_of_type() logic checks (Myron Stowe) [RHEL-139968]
- PCI: Move find_bus_resource_of_type() earlier (Myron Stowe) [RHEL-139968]
- MIPS: PCI: Use pci_enable_resources() (Myron Stowe) [RHEL-139968]
- sparc/PCI: Remove pcibios_enable_device() as they do nothing extra (Myron Stowe) [RHEL-139968]
- m68k/PCI: Use pci_enable_resources() in pcibios_enable_device() (Myron Stowe) [RHEL-139968]
- PCI: Fix failure detection during resource resize (Myron Stowe) [RHEL-139968]
- PCI: Fix pdev_resources_assignable() disparity (Myron Stowe) [RHEL-139968]
- PCI: Ensure relaxed tail alignment does not increase min_align (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Ensure devices are powered for config reads (Myron Stowe) [RHEL-139968]
- PCI/PM: Skip resuming to D0 if device is disconnected (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Reduce scope of pci_has_p2pmem() (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Myron Stowe) [RHEL-139968]
- PCI: of: Update parent unit address generation in of_pci_prop_intr_map() (Myron Stowe) [RHEL-139968]
- PCI: Disable MSI on RDC PCI to PCIe bridges (Myron Stowe) [RHEL-139968]
- PCI: hotplug: Clean up spaces in messages (Myron Stowe) [RHEL-139968]
- PCI: Add Extended Tag + MRRS quirk for Xeon 6 (Myron Stowe) [RHEL-139968]
- PCI: Clean up pci_scan_child_bus_extend() loop (Myron Stowe) [RHEL-139968]
- PCI: Clean up early_dump_pci_device() (Myron Stowe) [RHEL-139968]
- PCI: Use header type defines in pci_setup_device() (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Fix typos (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Tidy error recovery doc's PCIe nomenclature (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Amend error recovery doc with DPC/AER specifics (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync error recovery doc with code (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync AER doc with code (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix NULL pointer access by aer_info (Myron Stowe) [RHEL-139968]
- PCI/AER: Print TLP Log for errors introduced since PCIe r1.1 (Myron Stowe) [RHEL-139968]
- PCI/AER: Support errors introduced by PCIe r6.0 (Myron Stowe) [RHEL-139968]
- powerpc/eeh: Use result of error_detected() in uevent (Myron Stowe) [RHEL-139968]
- s390/pci: Use pci_uevent_ers() in PCI recovery (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix missing uevent on recovery when a reset is requested (Myron Stowe) [RHEL-139968]
- PCI/ERR: Update device error_state already after reset (Myron Stowe) [RHEL-139968]
- PCI/ERR: Notify drivers on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/ERR: Fix uevent on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/AER: Allow drivers to opt in to Bus Reset on Non-Fatal Errors (Myron Stowe) [RHEL-139968]
- MIPS: pci-legacy: Override pci_address_to_pio (Myron Stowe) [RHEL-139968]
- PCI: exynos: Switch to devm_clk_bulk_get_all_enabled() (Myron Stowe) [RHEL-139968]

Mon, 30 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-217.el10]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154397]
- smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-154397]
- ACPI: AGDI: Add interrupt signaling mode support (Charles Mirabile) [RHEL-111893]
- add xxd to as BuildRequire for bpf selftests (Ines Qian) [RHEL-157473]
- selftests/net: test ipip packets in gro.sh (Antoine Tenart) [RHEL-123213]
- net: gro: remove unnecessary df checks (Antoine Tenart) [RHEL-123213]
- net: gso: restore ids of outer ip headers correctly (Antoine Tenart) [RHEL-123213]
- net: gro: only merge packets with incrementing or fixed outer ids (Antoine Tenart) [RHEL-123213]
- net: gro: remove is_ipv6 from napi_gro_cb (Antoine Tenart) [RHEL-123213]
- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161531]
- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161531]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-145154]
- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]

Thu, 26 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-216.el10]
- redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
- net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
- mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
- mpls: Protect net-&amp;gt;mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
- mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
- mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
- ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
- mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
- mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
- neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
- sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
- rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
- net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
- ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
- net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
- net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
- neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
- neighbour: Protect tbl-&amp;gt;phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
- neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
- neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
- neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
- net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
- net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
- net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
- net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
- ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
- net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
- net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
- ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
- ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
- inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
- ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
- ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
- ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
- net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Protect nh-&amp;gt;f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
- ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
- ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
- ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate rt-&amp;gt;fib6_nh-&amp;gt;rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
- ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- net: Remove -&amp;gt;exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
- geneve: Convert geneve_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bareudp: Convert bareudp_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bonding: Convert bond_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bridge: Convert br_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- xfrm: Convert xfrmi_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert tunnel devices' -&amp;gt;exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- vxlan: Convert vxlan_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert nexthop_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- net: Add -&amp;gt;exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
- net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
- net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
- inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
- net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
- dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
- net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
- arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
- net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
- net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
- net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
- dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
- dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
- net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
- dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
- rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
- can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move ops-&amp;gt;validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
- net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
- ipmr: use READ_ONCE() to read net-&amp;gt;ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
- ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table-&amp;gt;fib_seq (Antoine Tenart) [RHEL-150155]
- ipv4: use READ_ONCE()/WRITE_ONCE() on net-&amp;gt;ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
- fib: rules: use READ_ONCE()/WRITE_ONCE() on ops-&amp;gt;fib_rules_seq (Antoine Tenart) [RHEL-150155]
- ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
- ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
- ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
- ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
- ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
- cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
- cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
- cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
- cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
- cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
- selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
- selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
- cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
- cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
- cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
- cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
- cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
- cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
- cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
- Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
- cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
- cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
- cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
- cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
- cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
- cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
- cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
- cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
- cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
- cpuset: remove unused assignment to trialcs-&amp;gt;partition_root_state (Waiman Long) [RHEL-113305]
- cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
- cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
- cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
- cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
- cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
- cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
- cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
- cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
- cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
- selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
- cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
- cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
- cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
- cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
- cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
- cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
- cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
- cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
- cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
- docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
- cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
- cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
- selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
- cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
- selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
- cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
- cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
- cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
- selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
- selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
- selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
- Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
- Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
- cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
- llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
- sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
- cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
- cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
- cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
- cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
- cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
- cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
- cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
- cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
- cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
- cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
- cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
- cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
- cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
- cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
- mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
- cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
- cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
- cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
- cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
- mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
- blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
- cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
- cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
- mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
- RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
- cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
- cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
- cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
- cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
- cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
- cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
- firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
- include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
- include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
- arm_scmi: don't mess with -&amp;gt;d_parent-&amp;gt;d_name (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
- firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
- redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
- i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
- i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
- tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
- tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
- tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
- fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
- tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
- function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
- tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
- tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
- x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
- tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
- tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
- tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
- tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
- ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
- selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
- tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
- tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
- tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
- fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
- fgraph: Initialize ftrace_ops-&amp;gt;private for function graph ops (Jerome Marchand) [RHEL-151695]
- ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
- tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
- tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
- selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
- tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
- tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
- ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
- ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
- ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
- Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
- tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
- ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
- powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
- selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
- selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
- tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
- ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
- Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
- arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
- atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
- fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
- tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
- ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
- docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
- tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
- md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
- md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
- block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
- block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&amp;gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&amp;gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>rtla-6.12.0-218.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:39:21 AM GMT</pubDate>
      <guid isPermaLink="false">43ed9b7991f1c26037d4b2b1ac21d90272343e2ef06df79c6f398e0c89df3b3a</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/rtla-6.12.0-218.el10.x86_64.rpm</link>
      <description><p><strong>rtla</strong> - Real-Time Linux Analysis tools&lt;br /&gt;</p>

<p>The rtla meta-tool includes a set of commands that aims to analyze&lt;br /&gt;
the real-time properties of Linux. Instead of testing Linux as a black box,&lt;br /&gt;
rtla leverages kernel tracing capabilities to provide precise information&lt;br /&gt;
about the properties and root causes of unexpected results.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-218.el10]
- x86/fpu: Ensure shadow stack is active before "getting" registers (Oleg Nesterov) [RHEL-152371]
- PCI: Validate window resource type in pbus_select_window_for_type() (Myron Stowe) [RHEL-139968]
- PCI: Don't claim disabled bridge windows (Myron Stowe) [RHEL-139968]
- PCI: Remove old_size limit from bridge window sizing (Myron Stowe) [RHEL-139968]
- PCI: Stop over-estimating bridge window size (Myron Stowe) [RHEL-139968]
- PCI: Rewrite bridge window head alignment function (Myron Stowe) [RHEL-139968]
- PCI: Fix bridge window alignment with optional resources (Myron Stowe) [RHEL-139968]
- sparc/PCI: Correct 64-bit non-pref -&amp;gt; pref BAR resources (Myron Stowe) [RHEL-139968]
- PCI: meson: Fix parsing the DBI register region (Myron Stowe) [RHEL-139968]
- PCI: Do not size non-existing prefetchable window (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Use pcibios_align_resource() to block io range (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix PCI southbridge legacy resource reservations (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Myron Stowe) [RHEL-139968]
- PCI: dwc: Use custom pci_ops for root bus DBI vs ECAM config access (Myron Stowe) [RHEL-139968]
- PCI: cadence: Search for MSI Capability with correct ID (Myron Stowe) [RHEL-139968]
- PCI: Fix regression in pci_bus_distribute_available_resources() (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Expose PCI device serial number (Myron Stowe) [RHEL-139968]
- PCI: xilinx-nwl: Fix ECAM programming (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Fix devm_kcalloc() argument order for port-&amp;gt;phys allocation (Myron Stowe) [RHEL-139968]
- PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Drop PMSR spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix inverted break condition in PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Assure reset occurs before DBI access (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support ECAM mechanism by enabling iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Prepare the driver for enabling ECAM mechanism using iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Add support for ELBI resource mapping (Myron Stowe) [RHEL-139968]
- PCI: qcom: Move host bridge 'phy' and 'reset' pointers to struct qcom_pcie_port (Myron Stowe) [RHEL-139968]
- PCI: qcom: Fix macro typo for CURSOR (Myron Stowe) [RHEL-139968]
- PCI: qcom: Add equalization settings for 8.0 GT/s and 32.0 GT/s (Myron Stowe) [RHEL-139968]
- PCI: plda: Remove dev_err_probe() when the errno is -ENOMEM (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Add support for MediaTek MT8196 SoC (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: mediatek-gen3: Add support for MT6991/MT8196 (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Implement sys clock ready time setting (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use kcalloc() instead of kzalloc() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix incorrect error message in probe() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix programming sequence of "strap" settings (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix module autoloading (Myron Stowe) [RHEL-139968]
- PCI: imx6: Enable the Vaux supply if available (Myron Stowe) [RHEL-139968]
- PCI: qcom-ep: Remove redundant edma.nr_irqs initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support 16-lane operation (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Handle errors in BPMP response (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Set pci_epc_features::msi_capable to true (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs (Myron Stowe) [RHEL-139968]
- selftests: pci_endpoint: Skip IRQ test if IRQ is out of range. (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Cleanup extra 0 initialization (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Skip IRQ tests if irq is out of range (Myron Stowe) [RHEL-139968]
- PCI: endpoint: Drop superfluous pci_epc_features initialization (Myron Stowe) [RHEL-139968]
- Documentation: PCI: endpoint: Document BAR assignment (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-x1e80100: Set clocks minItems for the fifth Glymur PCIe Controller (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: ti,am65: Extend for use with PVU (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-sm8550: Add SM8750 compatible (Myron Stowe) [RHEL-139968]
- PCI: cadence: Use cdns_pcie_find_*capability() to avoid hardcoding offsets (Myron Stowe) [RHEL-139968]
- PCI: cadence: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: dwc: ep: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: Refactor extended capability search into PCI_FIND_NEXT_EXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Refactor capability search into PCI_FIND_NEXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Clean up __pci_find_next_cap_ttl() readability (Myron Stowe) [RHEL-139968]
- PCI: switchtec: Replace manual locks with guard (Myron Stowe) [RHEL-139968]
- PCI: Add lockdep assertion in pci_stop_and_remove_bus_device() (Myron Stowe) [RHEL-139968]
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Myron Stowe) [RHEL-139968]
- PCI: Don't print stale information about resource (Myron Stowe) [RHEL-139968]
- PCI: Alter misleading recursion to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Pass bridge window to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add pci_setup_one_bridge_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor remove_dev_resources() to use pbus_select_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor distributing available memory to use loops (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during mem window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() in space available checker (Myron Stowe) [RHEL-139968]
- PCI: Rename resource variable from r to res (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during IO window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() during BAR resize (Myron Stowe) [RHEL-139968]
- PCI: Warn if bridge window cannot be released when resizing BAR (Myron Stowe) [RHEL-139968]
- PCI: Fix finding bridge window in pci_reassign_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add bridge window selection functions (Myron Stowe) [RHEL-139968]
- PCI: Add defines for bridge window indexing (Myron Stowe) [RHEL-139968]
- PCI: Preserve bridge window resource type flags (Myron Stowe) [RHEL-139968]
- PCI: Enable bridge even if bridge window fails to assign (Myron Stowe) [RHEL-139968]
- PCI: Use pci_release_resource() instead of release_resource() (Myron Stowe) [RHEL-139968]
- PCI: Disable non-claimed bridge window (Myron Stowe) [RHEL-139968]
- PCI: Always claim bridge window before its setup (Myron Stowe) [RHEL-139968]
- PCI: Refactor find_bus_resource_of_type() logic checks (Myron Stowe) [RHEL-139968]
- PCI: Move find_bus_resource_of_type() earlier (Myron Stowe) [RHEL-139968]
- MIPS: PCI: Use pci_enable_resources() (Myron Stowe) [RHEL-139968]
- sparc/PCI: Remove pcibios_enable_device() as they do nothing extra (Myron Stowe) [RHEL-139968]
- m68k/PCI: Use pci_enable_resources() in pcibios_enable_device() (Myron Stowe) [RHEL-139968]
- PCI: Fix failure detection during resource resize (Myron Stowe) [RHEL-139968]
- PCI: Fix pdev_resources_assignable() disparity (Myron Stowe) [RHEL-139968]
- PCI: Ensure relaxed tail alignment does not increase min_align (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Ensure devices are powered for config reads (Myron Stowe) [RHEL-139968]
- PCI/PM: Skip resuming to D0 if device is disconnected (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Reduce scope of pci_has_p2pmem() (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Myron Stowe) [RHEL-139968]
- PCI: of: Update parent unit address generation in of_pci_prop_intr_map() (Myron Stowe) [RHEL-139968]
- PCI: Disable MSI on RDC PCI to PCIe bridges (Myron Stowe) [RHEL-139968]
- PCI: hotplug: Clean up spaces in messages (Myron Stowe) [RHEL-139968]
- PCI: Add Extended Tag + MRRS quirk for Xeon 6 (Myron Stowe) [RHEL-139968]
- PCI: Clean up pci_scan_child_bus_extend() loop (Myron Stowe) [RHEL-139968]
- PCI: Clean up early_dump_pci_device() (Myron Stowe) [RHEL-139968]
- PCI: Use header type defines in pci_setup_device() (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Fix typos (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Tidy error recovery doc's PCIe nomenclature (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Amend error recovery doc with DPC/AER specifics (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync error recovery doc with code (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync AER doc with code (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix NULL pointer access by aer_info (Myron Stowe) [RHEL-139968]
- PCI/AER: Print TLP Log for errors introduced since PCIe r1.1 (Myron Stowe) [RHEL-139968]
- PCI/AER: Support errors introduced by PCIe r6.0 (Myron Stowe) [RHEL-139968]
- powerpc/eeh: Use result of error_detected() in uevent (Myron Stowe) [RHEL-139968]
- s390/pci: Use pci_uevent_ers() in PCI recovery (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix missing uevent on recovery when a reset is requested (Myron Stowe) [RHEL-139968]
- PCI/ERR: Update device error_state already after reset (Myron Stowe) [RHEL-139968]
- PCI/ERR: Notify drivers on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/ERR: Fix uevent on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/AER: Allow drivers to opt in to Bus Reset on Non-Fatal Errors (Myron Stowe) [RHEL-139968]
- MIPS: pci-legacy: Override pci_address_to_pio (Myron Stowe) [RHEL-139968]
- PCI: exynos: Switch to devm_clk_bulk_get_all_enabled() (Myron Stowe) [RHEL-139968]

Mon, 30 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-217.el10]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154397]
- smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-154397]
- ACPI: AGDI: Add interrupt signaling mode support (Charles Mirabile) [RHEL-111893]
- add xxd to as BuildRequire for bpf selftests (Ines Qian) [RHEL-157473]
- selftests/net: test ipip packets in gro.sh (Antoine Tenart) [RHEL-123213]
- net: gro: remove unnecessary df checks (Antoine Tenart) [RHEL-123213]
- net: gso: restore ids of outer ip headers correctly (Antoine Tenart) [RHEL-123213]
- net: gro: only merge packets with incrementing or fixed outer ids (Antoine Tenart) [RHEL-123213]
- net: gro: remove is_ipv6 from napi_gro_cb (Antoine Tenart) [RHEL-123213]
- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161531]
- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161531]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-145154]
- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]

Thu, 26 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-216.el10]
- redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
- net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
- mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
- mpls: Protect net-&amp;gt;mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
- mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
- mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
- ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
- mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
- mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
- neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
- sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
- rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
- net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
- ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
- net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
- net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
- neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
- neighbour: Protect tbl-&amp;gt;phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
- neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
- neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
- neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
- net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
- net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
- net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
- net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
- ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
- net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
- net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
- ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
- ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
- inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
- ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
- ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
- ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
- net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Protect nh-&amp;gt;f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
- ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
- ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
- ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate rt-&amp;gt;fib6_nh-&amp;gt;rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
- ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- net: Remove -&amp;gt;exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
- geneve: Convert geneve_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bareudp: Convert bareudp_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bonding: Convert bond_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bridge: Convert br_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- xfrm: Convert xfrmi_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert tunnel devices' -&amp;gt;exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- vxlan: Convert vxlan_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert nexthop_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- net: Add -&amp;gt;exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
- net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
- net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
- inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
- net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
- dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
- net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
- arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
- net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
- net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
- net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
- dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
- dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
- net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
- dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
- rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
- can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move ops-&amp;gt;validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
- net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
- ipmr: use READ_ONCE() to read net-&amp;gt;ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
- ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table-&amp;gt;fib_seq (Antoine Tenart) [RHEL-150155]
- ipv4: use READ_ONCE()/WRITE_ONCE() on net-&amp;gt;ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
- fib: rules: use READ_ONCE()/WRITE_ONCE() on ops-&amp;gt;fib_rules_seq (Antoine Tenart) [RHEL-150155]
- ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
- ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
- ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
- ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
- ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
- cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
- cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
- cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
- cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
- cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
- selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
- selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
- cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
- cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
- cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
- cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
- cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
- cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
- cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
- Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
- cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
- cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
- cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
- cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
- cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
- cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
- cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
- cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
- cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
- cpuset: remove unused assignment to trialcs-&amp;gt;partition_root_state (Waiman Long) [RHEL-113305]
- cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
- cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
- cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
- cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
- cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
- cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
- cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
- cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
- cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
- selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
- cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
- cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
- cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
- cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
- cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
- cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
- cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
- cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
- cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
- docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
- cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
- cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
- selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
- cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
- selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
- cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
- cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
- cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
- selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
- selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
- selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
- Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
- Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
- cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
- llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
- sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
- cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
- cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
- cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
- cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
- cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
- cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
- cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
- cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
- cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
- cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
- cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
- cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
- cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
- cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
- mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
- cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
- cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
- cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
- cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
- mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
- blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
- cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
- cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
- mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
- RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
- cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
- cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
- cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
- cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
- cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
- cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
- firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
- include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
- include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
- arm_scmi: don't mess with -&amp;gt;d_parent-&amp;gt;d_name (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
- firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
- redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
- i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
- i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
- tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
- tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
- tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
- fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
- tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
- function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
- tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
- tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
- x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
- tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
- tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
- tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
- tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
- ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
- selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
- tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
- tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
- tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
- fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
- fgraph: Initialize ftrace_ops-&amp;gt;private for function graph ops (Jerome Marchand) [RHEL-151695]
- ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
- tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
- tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
- selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
- tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
- tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
- ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
- ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
- ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
- Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
- tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
- ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
- powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
- selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
- selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
- tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
- ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
- Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
- arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
- atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
- fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
- tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
- ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
- docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
- tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
- md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
- md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
- block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
- block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&amp;gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&amp;gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-devel-matched-6.12.0-218.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:39:21 AM GMT</pubDate>
      <guid isPermaLink="false">be63f8985fe6da5b52746107993128d96d6ff1cc734f1efbc1b4ae077761adaa</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/kernel-devel-matched-6.12.0-218.el10.x86_64.rpm</link>
      <description><p><strong>kernel-devel-matched</strong> - Meta package to install matching core and devel packages for a given kernel&lt;br /&gt;</p>

<p>This meta package is used to install matching core and devel packages for a given kernel.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-218.el10]
- x86/fpu: Ensure shadow stack is active before "getting" registers (Oleg Nesterov) [RHEL-152371]
- PCI: Validate window resource type in pbus_select_window_for_type() (Myron Stowe) [RHEL-139968]
- PCI: Don't claim disabled bridge windows (Myron Stowe) [RHEL-139968]
- PCI: Remove old_size limit from bridge window sizing (Myron Stowe) [RHEL-139968]
- PCI: Stop over-estimating bridge window size (Myron Stowe) [RHEL-139968]
- PCI: Rewrite bridge window head alignment function (Myron Stowe) [RHEL-139968]
- PCI: Fix bridge window alignment with optional resources (Myron Stowe) [RHEL-139968]
- sparc/PCI: Correct 64-bit non-pref -&amp;gt; pref BAR resources (Myron Stowe) [RHEL-139968]
- PCI: meson: Fix parsing the DBI register region (Myron Stowe) [RHEL-139968]
- PCI: Do not size non-existing prefetchable window (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Use pcibios_align_resource() to block io range (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix PCI southbridge legacy resource reservations (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Myron Stowe) [RHEL-139968]
- PCI: dwc: Use custom pci_ops for root bus DBI vs ECAM config access (Myron Stowe) [RHEL-139968]
- PCI: cadence: Search for MSI Capability with correct ID (Myron Stowe) [RHEL-139968]
- PCI: Fix regression in pci_bus_distribute_available_resources() (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Expose PCI device serial number (Myron Stowe) [RHEL-139968]
- PCI: xilinx-nwl: Fix ECAM programming (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Fix devm_kcalloc() argument order for port-&amp;gt;phys allocation (Myron Stowe) [RHEL-139968]
- PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Drop PMSR spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix inverted break condition in PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Assure reset occurs before DBI access (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support ECAM mechanism by enabling iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Prepare the driver for enabling ECAM mechanism using iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Add support for ELBI resource mapping (Myron Stowe) [RHEL-139968]
- PCI: qcom: Move host bridge 'phy' and 'reset' pointers to struct qcom_pcie_port (Myron Stowe) [RHEL-139968]
- PCI: qcom: Fix macro typo for CURSOR (Myron Stowe) [RHEL-139968]
- PCI: qcom: Add equalization settings for 8.0 GT/s and 32.0 GT/s (Myron Stowe) [RHEL-139968]
- PCI: plda: Remove dev_err_probe() when the errno is -ENOMEM (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Add support for MediaTek MT8196 SoC (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: mediatek-gen3: Add support for MT6991/MT8196 (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Implement sys clock ready time setting (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use kcalloc() instead of kzalloc() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix incorrect error message in probe() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix programming sequence of "strap" settings (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix module autoloading (Myron Stowe) [RHEL-139968]
- PCI: imx6: Enable the Vaux supply if available (Myron Stowe) [RHEL-139968]
- PCI: qcom-ep: Remove redundant edma.nr_irqs initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support 16-lane operation (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Handle errors in BPMP response (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Set pci_epc_features::msi_capable to true (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs (Myron Stowe) [RHEL-139968]
- selftests: pci_endpoint: Skip IRQ test if IRQ is out of range. (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Cleanup extra 0 initialization (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Skip IRQ tests if irq is out of range (Myron Stowe) [RHEL-139968]
- PCI: endpoint: Drop superfluous pci_epc_features initialization (Myron Stowe) [RHEL-139968]
- Documentation: PCI: endpoint: Document BAR assignment (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-x1e80100: Set clocks minItems for the fifth Glymur PCIe Controller (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: ti,am65: Extend for use with PVU (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-sm8550: Add SM8750 compatible (Myron Stowe) [RHEL-139968]
- PCI: cadence: Use cdns_pcie_find_*capability() to avoid hardcoding offsets (Myron Stowe) [RHEL-139968]
- PCI: cadence: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: dwc: ep: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: Refactor extended capability search into PCI_FIND_NEXT_EXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Refactor capability search into PCI_FIND_NEXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Clean up __pci_find_next_cap_ttl() readability (Myron Stowe) [RHEL-139968]
- PCI: switchtec: Replace manual locks with guard (Myron Stowe) [RHEL-139968]
- PCI: Add lockdep assertion in pci_stop_and_remove_bus_device() (Myron Stowe) [RHEL-139968]
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Myron Stowe) [RHEL-139968]
- PCI: Don't print stale information about resource (Myron Stowe) [RHEL-139968]
- PCI: Alter misleading recursion to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Pass bridge window to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add pci_setup_one_bridge_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor remove_dev_resources() to use pbus_select_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor distributing available memory to use loops (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during mem window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() in space available checker (Myron Stowe) [RHEL-139968]
- PCI: Rename resource variable from r to res (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during IO window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() during BAR resize (Myron Stowe) [RHEL-139968]
- PCI: Warn if bridge window cannot be released when resizing BAR (Myron Stowe) [RHEL-139968]
- PCI: Fix finding bridge window in pci_reassign_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add bridge window selection functions (Myron Stowe) [RHEL-139968]
- PCI: Add defines for bridge window indexing (Myron Stowe) [RHEL-139968]
- PCI: Preserve bridge window resource type flags (Myron Stowe) [RHEL-139968]
- PCI: Enable bridge even if bridge window fails to assign (Myron Stowe) [RHEL-139968]
- PCI: Use pci_release_resource() instead of release_resource() (Myron Stowe) [RHEL-139968]
- PCI: Disable non-claimed bridge window (Myron Stowe) [RHEL-139968]
- PCI: Always claim bridge window before its setup (Myron Stowe) [RHEL-139968]
- PCI: Refactor find_bus_resource_of_type() logic checks (Myron Stowe) [RHEL-139968]
- PCI: Move find_bus_resource_of_type() earlier (Myron Stowe) [RHEL-139968]
- MIPS: PCI: Use pci_enable_resources() (Myron Stowe) [RHEL-139968]
- sparc/PCI: Remove pcibios_enable_device() as they do nothing extra (Myron Stowe) [RHEL-139968]
- m68k/PCI: Use pci_enable_resources() in pcibios_enable_device() (Myron Stowe) [RHEL-139968]
- PCI: Fix failure detection during resource resize (Myron Stowe) [RHEL-139968]
- PCI: Fix pdev_resources_assignable() disparity (Myron Stowe) [RHEL-139968]
- PCI: Ensure relaxed tail alignment does not increase min_align (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Ensure devices are powered for config reads (Myron Stowe) [RHEL-139968]
- PCI/PM: Skip resuming to D0 if device is disconnected (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Reduce scope of pci_has_p2pmem() (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Myron Stowe) [RHEL-139968]
- PCI: of: Update parent unit address generation in of_pci_prop_intr_map() (Myron Stowe) [RHEL-139968]
- PCI: Disable MSI on RDC PCI to PCIe bridges (Myron Stowe) [RHEL-139968]
- PCI: hotplug: Clean up spaces in messages (Myron Stowe) [RHEL-139968]
- PCI: Add Extended Tag + MRRS quirk for Xeon 6 (Myron Stowe) [RHEL-139968]
- PCI: Clean up pci_scan_child_bus_extend() loop (Myron Stowe) [RHEL-139968]
- PCI: Clean up early_dump_pci_device() (Myron Stowe) [RHEL-139968]
- PCI: Use header type defines in pci_setup_device() (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Fix typos (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Tidy error recovery doc's PCIe nomenclature (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Amend error recovery doc with DPC/AER specifics (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync error recovery doc with code (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync AER doc with code (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix NULL pointer access by aer_info (Myron Stowe) [RHEL-139968]
- PCI/AER: Print TLP Log for errors introduced since PCIe r1.1 (Myron Stowe) [RHEL-139968]
- PCI/AER: Support errors introduced by PCIe r6.0 (Myron Stowe) [RHEL-139968]
- powerpc/eeh: Use result of error_detected() in uevent (Myron Stowe) [RHEL-139968]
- s390/pci: Use pci_uevent_ers() in PCI recovery (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix missing uevent on recovery when a reset is requested (Myron Stowe) [RHEL-139968]
- PCI/ERR: Update device error_state already after reset (Myron Stowe) [RHEL-139968]
- PCI/ERR: Notify drivers on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/ERR: Fix uevent on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/AER: Allow drivers to opt in to Bus Reset on Non-Fatal Errors (Myron Stowe) [RHEL-139968]
- MIPS: pci-legacy: Override pci_address_to_pio (Myron Stowe) [RHEL-139968]
- PCI: exynos: Switch to devm_clk_bulk_get_all_enabled() (Myron Stowe) [RHEL-139968]

Mon, 30 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-217.el10]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154397]
- smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-154397]
- ACPI: AGDI: Add interrupt signaling mode support (Charles Mirabile) [RHEL-111893]
- add xxd to as BuildRequire for bpf selftests (Ines Qian) [RHEL-157473]
- selftests/net: test ipip packets in gro.sh (Antoine Tenart) [RHEL-123213]
- net: gro: remove unnecessary df checks (Antoine Tenart) [RHEL-123213]
- net: gso: restore ids of outer ip headers correctly (Antoine Tenart) [RHEL-123213]
- net: gro: only merge packets with incrementing or fixed outer ids (Antoine Tenart) [RHEL-123213]
- net: gro: remove is_ipv6 from napi_gro_cb (Antoine Tenart) [RHEL-123213]
- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161531]
- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161531]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-145154]
- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]

Thu, 26 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-216.el10]
- redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
- net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
- mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
- mpls: Protect net-&amp;gt;mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
- mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
- mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
- ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
- mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
- mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
- neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
- sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
- rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
- net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
- ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
- net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
- net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
- neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
- neighbour: Protect tbl-&amp;gt;phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
- neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
- neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
- neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
- net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
- net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
- net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
- net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
- ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
- net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
- net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
- ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
- ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
- inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
- ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
- ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
- ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
- net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Protect nh-&amp;gt;f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
- ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
- ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
- ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate rt-&amp;gt;fib6_nh-&amp;gt;rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
- ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- net: Remove -&amp;gt;exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
- geneve: Convert geneve_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bareudp: Convert bareudp_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bonding: Convert bond_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bridge: Convert br_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- xfrm: Convert xfrmi_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert tunnel devices' -&amp;gt;exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- vxlan: Convert vxlan_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert nexthop_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- net: Add -&amp;gt;exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
- net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
- net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
- inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
- net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
- dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
- net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
- arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
- net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
- net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
- net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
- dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
- dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
- net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
- dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
- rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
- can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move ops-&amp;gt;validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
- net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
- ipmr: use READ_ONCE() to read net-&amp;gt;ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
- ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table-&amp;gt;fib_seq (Antoine Tenart) [RHEL-150155]
- ipv4: use READ_ONCE()/WRITE_ONCE() on net-&amp;gt;ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
- fib: rules: use READ_ONCE()/WRITE_ONCE() on ops-&amp;gt;fib_rules_seq (Antoine Tenart) [RHEL-150155]
- ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
- ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
- ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
- ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
- ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
- cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
- cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
- cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
- cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
- cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
- selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
- selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
- cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
- cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
- cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
- cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
- cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
- cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
- cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
- Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
- cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
- cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
- cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
- cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
- cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
- cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
- cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
- cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
- cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
- cpuset: remove unused assignment to trialcs-&amp;gt;partition_root_state (Waiman Long) [RHEL-113305]
- cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
- cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
- cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
- cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
- cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
- cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
- cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
- cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
- cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
- selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
- cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
- cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
- cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
- cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
- cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
- cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
- cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
- cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
- cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
- docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
- cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
- cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
- selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
- cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
- selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
- cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
- cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
- cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
- selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
- selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
- selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
- Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
- Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
- cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
- llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
- sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
- cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
- cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
- cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
- cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
- cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
- cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
- cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
- cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
- cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
- cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
- cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
- cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
- cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
- cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
- mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
- cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
- cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
- cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
- cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
- mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
- blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
- cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
- cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
- mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
- RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
- cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
- cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
- cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
- cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
- cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
- cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
- firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
- include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
- include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
- arm_scmi: don't mess with -&amp;gt;d_parent-&amp;gt;d_name (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
- firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
- redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
- i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
- i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
- tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
- tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
- tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
- fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
- tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
- function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
- tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
- tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
- x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
- tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
- tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
- tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
- tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
- ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
- selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
- tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
- tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
- tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
- fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
- fgraph: Initialize ftrace_ops-&amp;gt;private for function graph ops (Jerome Marchand) [RHEL-151695]
- ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
- tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
- tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
- selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
- tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
- tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
- ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
- ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
- ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
- Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
- tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
- ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
- powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
- selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
- selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
- tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
- ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
- Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
- arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
- atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
- fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
- tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
- ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
- docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
- tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
- md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
- md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
- block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
- block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&amp;gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&amp;gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-devel-6.12.0-218.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:39:21 AM GMT</pubDate>
      <guid isPermaLink="false">c5299d9adf00cbec1249ba68aabfec12bbe5e26461154cc7075ef2fdb504201a</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/kernel-devel-6.12.0-218.el10.x86_64.rpm</link>
      <description><p><strong>kernel-devel</strong> - Development package for building kernel modules to match the kernel&lt;br /&gt;</p>

<p>This package provides kernel headers and makefiles sufficient to build modules&lt;br /&gt;
against the kernel package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-218.el10]
- x86/fpu: Ensure shadow stack is active before "getting" registers (Oleg Nesterov) [RHEL-152371]
- PCI: Validate window resource type in pbus_select_window_for_type() (Myron Stowe) [RHEL-139968]
- PCI: Don't claim disabled bridge windows (Myron Stowe) [RHEL-139968]
- PCI: Remove old_size limit from bridge window sizing (Myron Stowe) [RHEL-139968]
- PCI: Stop over-estimating bridge window size (Myron Stowe) [RHEL-139968]
- PCI: Rewrite bridge window head alignment function (Myron Stowe) [RHEL-139968]
- PCI: Fix bridge window alignment with optional resources (Myron Stowe) [RHEL-139968]
- sparc/PCI: Correct 64-bit non-pref -&amp;gt; pref BAR resources (Myron Stowe) [RHEL-139968]
- PCI: meson: Fix parsing the DBI register region (Myron Stowe) [RHEL-139968]
- PCI: Do not size non-existing prefetchable window (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Use pcibios_align_resource() to block io range (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix PCI southbridge legacy resource reservations (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Myron Stowe) [RHEL-139968]
- PCI: dwc: Use custom pci_ops for root bus DBI vs ECAM config access (Myron Stowe) [RHEL-139968]
- PCI: cadence: Search for MSI Capability with correct ID (Myron Stowe) [RHEL-139968]
- PCI: Fix regression in pci_bus_distribute_available_resources() (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Expose PCI device serial number (Myron Stowe) [RHEL-139968]
- PCI: xilinx-nwl: Fix ECAM programming (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Fix devm_kcalloc() argument order for port-&amp;gt;phys allocation (Myron Stowe) [RHEL-139968]
- PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Drop PMSR spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix inverted break condition in PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Assure reset occurs before DBI access (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support ECAM mechanism by enabling iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Prepare the driver for enabling ECAM mechanism using iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Add support for ELBI resource mapping (Myron Stowe) [RHEL-139968]
- PCI: qcom: Move host bridge 'phy' and 'reset' pointers to struct qcom_pcie_port (Myron Stowe) [RHEL-139968]
- PCI: qcom: Fix macro typo for CURSOR (Myron Stowe) [RHEL-139968]
- PCI: qcom: Add equalization settings for 8.0 GT/s and 32.0 GT/s (Myron Stowe) [RHEL-139968]
- PCI: plda: Remove dev_err_probe() when the errno is -ENOMEM (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Add support for MediaTek MT8196 SoC (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: mediatek-gen3: Add support for MT6991/MT8196 (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Implement sys clock ready time setting (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use kcalloc() instead of kzalloc() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix incorrect error message in probe() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix programming sequence of "strap" settings (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix module autoloading (Myron Stowe) [RHEL-139968]
- PCI: imx6: Enable the Vaux supply if available (Myron Stowe) [RHEL-139968]
- PCI: qcom-ep: Remove redundant edma.nr_irqs initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support 16-lane operation (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Handle errors in BPMP response (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Set pci_epc_features::msi_capable to true (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs (Myron Stowe) [RHEL-139968]
- selftests: pci_endpoint: Skip IRQ test if IRQ is out of range. (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Cleanup extra 0 initialization (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Skip IRQ tests if irq is out of range (Myron Stowe) [RHEL-139968]
- PCI: endpoint: Drop superfluous pci_epc_features initialization (Myron Stowe) [RHEL-139968]
- Documentation: PCI: endpoint: Document BAR assignment (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-x1e80100: Set clocks minItems for the fifth Glymur PCIe Controller (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: ti,am65: Extend for use with PVU (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-sm8550: Add SM8750 compatible (Myron Stowe) [RHEL-139968]
- PCI: cadence: Use cdns_pcie_find_*capability() to avoid hardcoding offsets (Myron Stowe) [RHEL-139968]
- PCI: cadence: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: dwc: ep: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: Refactor extended capability search into PCI_FIND_NEXT_EXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Refactor capability search into PCI_FIND_NEXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Clean up __pci_find_next_cap_ttl() readability (Myron Stowe) [RHEL-139968]
- PCI: switchtec: Replace manual locks with guard (Myron Stowe) [RHEL-139968]
- PCI: Add lockdep assertion in pci_stop_and_remove_bus_device() (Myron Stowe) [RHEL-139968]
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Myron Stowe) [RHEL-139968]
- PCI: Don't print stale information about resource (Myron Stowe) [RHEL-139968]
- PCI: Alter misleading recursion to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Pass bridge window to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add pci_setup_one_bridge_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor remove_dev_resources() to use pbus_select_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor distributing available memory to use loops (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during mem window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() in space available checker (Myron Stowe) [RHEL-139968]
- PCI: Rename resource variable from r to res (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during IO window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() during BAR resize (Myron Stowe) [RHEL-139968]
- PCI: Warn if bridge window cannot be released when resizing BAR (Myron Stowe) [RHEL-139968]
- PCI: Fix finding bridge window in pci_reassign_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add bridge window selection functions (Myron Stowe) [RHEL-139968]
- PCI: Add defines for bridge window indexing (Myron Stowe) [RHEL-139968]
- PCI: Preserve bridge window resource type flags (Myron Stowe) [RHEL-139968]
- PCI: Enable bridge even if bridge window fails to assign (Myron Stowe) [RHEL-139968]
- PCI: Use pci_release_resource() instead of release_resource() (Myron Stowe) [RHEL-139968]
- PCI: Disable non-claimed bridge window (Myron Stowe) [RHEL-139968]
- PCI: Always claim bridge window before its setup (Myron Stowe) [RHEL-139968]
- PCI: Refactor find_bus_resource_of_type() logic checks (Myron Stowe) [RHEL-139968]
- PCI: Move find_bus_resource_of_type() earlier (Myron Stowe) [RHEL-139968]
- MIPS: PCI: Use pci_enable_resources() (Myron Stowe) [RHEL-139968]
- sparc/PCI: Remove pcibios_enable_device() as they do nothing extra (Myron Stowe) [RHEL-139968]
- m68k/PCI: Use pci_enable_resources() in pcibios_enable_device() (Myron Stowe) [RHEL-139968]
- PCI: Fix failure detection during resource resize (Myron Stowe) [RHEL-139968]
- PCI: Fix pdev_resources_assignable() disparity (Myron Stowe) [RHEL-139968]
- PCI: Ensure relaxed tail alignment does not increase min_align (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Ensure devices are powered for config reads (Myron Stowe) [RHEL-139968]
- PCI/PM: Skip resuming to D0 if device is disconnected (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Reduce scope of pci_has_p2pmem() (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Myron Stowe) [RHEL-139968]
- PCI: of: Update parent unit address generation in of_pci_prop_intr_map() (Myron Stowe) [RHEL-139968]
- PCI: Disable MSI on RDC PCI to PCIe bridges (Myron Stowe) [RHEL-139968]
- PCI: hotplug: Clean up spaces in messages (Myron Stowe) [RHEL-139968]
- PCI: Add Extended Tag + MRRS quirk for Xeon 6 (Myron Stowe) [RHEL-139968]
- PCI: Clean up pci_scan_child_bus_extend() loop (Myron Stowe) [RHEL-139968]
- PCI: Clean up early_dump_pci_device() (Myron Stowe) [RHEL-139968]
- PCI: Use header type defines in pci_setup_device() (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Fix typos (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Tidy error recovery doc's PCIe nomenclature (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Amend error recovery doc with DPC/AER specifics (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync error recovery doc with code (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync AER doc with code (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix NULL pointer access by aer_info (Myron Stowe) [RHEL-139968]
- PCI/AER: Print TLP Log for errors introduced since PCIe r1.1 (Myron Stowe) [RHEL-139968]
- PCI/AER: Support errors introduced by PCIe r6.0 (Myron Stowe) [RHEL-139968]
- powerpc/eeh: Use result of error_detected() in uevent (Myron Stowe) [RHEL-139968]
- s390/pci: Use pci_uevent_ers() in PCI recovery (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix missing uevent on recovery when a reset is requested (Myron Stowe) [RHEL-139968]
- PCI/ERR: Update device error_state already after reset (Myron Stowe) [RHEL-139968]
- PCI/ERR: Notify drivers on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/ERR: Fix uevent on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/AER: Allow drivers to opt in to Bus Reset on Non-Fatal Errors (Myron Stowe) [RHEL-139968]
- MIPS: pci-legacy: Override pci_address_to_pio (Myron Stowe) [RHEL-139968]
- PCI: exynos: Switch to devm_clk_bulk_get_all_enabled() (Myron Stowe) [RHEL-139968]

Mon, 30 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-217.el10]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154397]
- smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-154397]
- ACPI: AGDI: Add interrupt signaling mode support (Charles Mirabile) [RHEL-111893]
- add xxd to as BuildRequire for bpf selftests (Ines Qian) [RHEL-157473]
- selftests/net: test ipip packets in gro.sh (Antoine Tenart) [RHEL-123213]
- net: gro: remove unnecessary df checks (Antoine Tenart) [RHEL-123213]
- net: gso: restore ids of outer ip headers correctly (Antoine Tenart) [RHEL-123213]
- net: gro: only merge packets with incrementing or fixed outer ids (Antoine Tenart) [RHEL-123213]
- net: gro: remove is_ipv6 from napi_gro_cb (Antoine Tenart) [RHEL-123213]
- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161531]
- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161531]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-145154]
- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]

Thu, 26 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-216.el10]
- redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
- net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
- mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
- mpls: Protect net-&amp;gt;mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
- mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
- mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
- ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
- mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
- mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
- neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
- sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
- rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
- net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
- ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
- net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
- net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
- neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
- neighbour: Protect tbl-&amp;gt;phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
- neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
- neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
- neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
- net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
- net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
- net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
- net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
- ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
- net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
- net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
- ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
- ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
- inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
- ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
- ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
- ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
- net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Protect nh-&amp;gt;f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
- ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
- ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
- ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate rt-&amp;gt;fib6_nh-&amp;gt;rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
- ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- net: Remove -&amp;gt;exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
- geneve: Convert geneve_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bareudp: Convert bareudp_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bonding: Convert bond_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bridge: Convert br_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- xfrm: Convert xfrmi_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert tunnel devices' -&amp;gt;exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- vxlan: Convert vxlan_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert nexthop_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- net: Add -&amp;gt;exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
- net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
- net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
- inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
- net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
- dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
- net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
- arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
- net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
- net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
- net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
- dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
- dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
- net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
- dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
- rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
- can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move ops-&amp;gt;validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
- net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
- ipmr: use READ_ONCE() to read net-&amp;gt;ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
- ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table-&amp;gt;fib_seq (Antoine Tenart) [RHEL-150155]
- ipv4: use READ_ONCE()/WRITE_ONCE() on net-&amp;gt;ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
- fib: rules: use READ_ONCE()/WRITE_ONCE() on ops-&amp;gt;fib_rules_seq (Antoine Tenart) [RHEL-150155]
- ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
- ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
- ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
- ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
- ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
- cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
- cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
- cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
- cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
- cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
- selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
- selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
- cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
- cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
- cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
- cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
- cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
- cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
- cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
- Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
- cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
- cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
- cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
- cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
- cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
- cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
- cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
- cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
- cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
- cpuset: remove unused assignment to trialcs-&amp;gt;partition_root_state (Waiman Long) [RHEL-113305]
- cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
- cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
- cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
- cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
- cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
- cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
- cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
- cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
- cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
- selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
- cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
- cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
- cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
- cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
- cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
- cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
- cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
- cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
- cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
- docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
- cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
- cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
- selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
- cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
- selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
- cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
- cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
- cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
- selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
- selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
- selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
- Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
- Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
- cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
- llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
- sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
- cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
- cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
- cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
- cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
- cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
- cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
- cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
- cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
- cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
- cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
- cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
- cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
- cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
- cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
- mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
- cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
- cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
- cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
- cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
- mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
- blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
- cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
- cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
- mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
- RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
- cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
- cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
- cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
- cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
- cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
- cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
- firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
- include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
- include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
- arm_scmi: don't mess with -&amp;gt;d_parent-&amp;gt;d_name (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
- firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
- redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
- i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
- i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
- tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
- tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
- tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
- fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
- tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
- function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
- tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
- tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
- x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
- tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
- tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
- tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
- tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
- ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
- selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
- tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
- tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
- tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
- fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
- fgraph: Initialize ftrace_ops-&amp;gt;private for function graph ops (Jerome Marchand) [RHEL-151695]
- ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
- tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
- tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
- selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
- tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
- tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
- ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
- ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
- ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
- Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
- tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
- ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
- powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
- selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
- selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
- tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
- ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
- Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
- arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
- atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
- fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
- tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
- ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
- docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
- tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
- md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
- md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
- block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
- block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&amp;gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&amp;gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-debug-devel-matched-6.12.0-218.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:39:21 AM GMT</pubDate>
      <guid isPermaLink="false">f6e289461bd90afb41e5e586bbd5875f026bcae247c3270f97ab741c8e5de14e</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/kernel-debug-devel-matched-6.12.0-218.el10.x86_64.rpm</link>
      <description><p><strong>kernel-debug-devel-matched</strong> - Meta package to install matching core and devel packages for a given kernel&lt;br /&gt;</p>

<p>This meta package is used to install matching core and devel packages for a given kernel.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-218.el10]
- x86/fpu: Ensure shadow stack is active before "getting" registers (Oleg Nesterov) [RHEL-152371]
- PCI: Validate window resource type in pbus_select_window_for_type() (Myron Stowe) [RHEL-139968]
- PCI: Don't claim disabled bridge windows (Myron Stowe) [RHEL-139968]
- PCI: Remove old_size limit from bridge window sizing (Myron Stowe) [RHEL-139968]
- PCI: Stop over-estimating bridge window size (Myron Stowe) [RHEL-139968]
- PCI: Rewrite bridge window head alignment function (Myron Stowe) [RHEL-139968]
- PCI: Fix bridge window alignment with optional resources (Myron Stowe) [RHEL-139968]
- sparc/PCI: Correct 64-bit non-pref -&amp;gt; pref BAR resources (Myron Stowe) [RHEL-139968]
- PCI: meson: Fix parsing the DBI register region (Myron Stowe) [RHEL-139968]
- PCI: Do not size non-existing prefetchable window (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Use pcibios_align_resource() to block io range (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix PCI southbridge legacy resource reservations (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Myron Stowe) [RHEL-139968]
- PCI: dwc: Use custom pci_ops for root bus DBI vs ECAM config access (Myron Stowe) [RHEL-139968]
- PCI: cadence: Search for MSI Capability with correct ID (Myron Stowe) [RHEL-139968]
- PCI: Fix regression in pci_bus_distribute_available_resources() (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Expose PCI device serial number (Myron Stowe) [RHEL-139968]
- PCI: xilinx-nwl: Fix ECAM programming (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Fix devm_kcalloc() argument order for port-&amp;gt;phys allocation (Myron Stowe) [RHEL-139968]
- PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Drop PMSR spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix inverted break condition in PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Assure reset occurs before DBI access (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support ECAM mechanism by enabling iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Prepare the driver for enabling ECAM mechanism using iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Add support for ELBI resource mapping (Myron Stowe) [RHEL-139968]
- PCI: qcom: Move host bridge 'phy' and 'reset' pointers to struct qcom_pcie_port (Myron Stowe) [RHEL-139968]
- PCI: qcom: Fix macro typo for CURSOR (Myron Stowe) [RHEL-139968]
- PCI: qcom: Add equalization settings for 8.0 GT/s and 32.0 GT/s (Myron Stowe) [RHEL-139968]
- PCI: plda: Remove dev_err_probe() when the errno is -ENOMEM (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Add support for MediaTek MT8196 SoC (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: mediatek-gen3: Add support for MT6991/MT8196 (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Implement sys clock ready time setting (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use kcalloc() instead of kzalloc() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix incorrect error message in probe() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix programming sequence of "strap" settings (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix module autoloading (Myron Stowe) [RHEL-139968]
- PCI: imx6: Enable the Vaux supply if available (Myron Stowe) [RHEL-139968]
- PCI: qcom-ep: Remove redundant edma.nr_irqs initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support 16-lane operation (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Handle errors in BPMP response (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Set pci_epc_features::msi_capable to true (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs (Myron Stowe) [RHEL-139968]
- selftests: pci_endpoint: Skip IRQ test if IRQ is out of range. (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Cleanup extra 0 initialization (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Skip IRQ tests if irq is out of range (Myron Stowe) [RHEL-139968]
- PCI: endpoint: Drop superfluous pci_epc_features initialization (Myron Stowe) [RHEL-139968]
- Documentation: PCI: endpoint: Document BAR assignment (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-x1e80100: Set clocks minItems for the fifth Glymur PCIe Controller (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: ti,am65: Extend for use with PVU (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-sm8550: Add SM8750 compatible (Myron Stowe) [RHEL-139968]
- PCI: cadence: Use cdns_pcie_find_*capability() to avoid hardcoding offsets (Myron Stowe) [RHEL-139968]
- PCI: cadence: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: dwc: ep: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: Refactor extended capability search into PCI_FIND_NEXT_EXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Refactor capability search into PCI_FIND_NEXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Clean up __pci_find_next_cap_ttl() readability (Myron Stowe) [RHEL-139968]
- PCI: switchtec: Replace manual locks with guard (Myron Stowe) [RHEL-139968]
- PCI: Add lockdep assertion in pci_stop_and_remove_bus_device() (Myron Stowe) [RHEL-139968]
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Myron Stowe) [RHEL-139968]
- PCI: Don't print stale information about resource (Myron Stowe) [RHEL-139968]
- PCI: Alter misleading recursion to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Pass bridge window to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add pci_setup_one_bridge_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor remove_dev_resources() to use pbus_select_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor distributing available memory to use loops (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during mem window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() in space available checker (Myron Stowe) [RHEL-139968]
- PCI: Rename resource variable from r to res (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during IO window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() during BAR resize (Myron Stowe) [RHEL-139968]
- PCI: Warn if bridge window cannot be released when resizing BAR (Myron Stowe) [RHEL-139968]
- PCI: Fix finding bridge window in pci_reassign_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add bridge window selection functions (Myron Stowe) [RHEL-139968]
- PCI: Add defines for bridge window indexing (Myron Stowe) [RHEL-139968]
- PCI: Preserve bridge window resource type flags (Myron Stowe) [RHEL-139968]
- PCI: Enable bridge even if bridge window fails to assign (Myron Stowe) [RHEL-139968]
- PCI: Use pci_release_resource() instead of release_resource() (Myron Stowe) [RHEL-139968]
- PCI: Disable non-claimed bridge window (Myron Stowe) [RHEL-139968]
- PCI: Always claim bridge window before its setup (Myron Stowe) [RHEL-139968]
- PCI: Refactor find_bus_resource_of_type() logic checks (Myron Stowe) [RHEL-139968]
- PCI: Move find_bus_resource_of_type() earlier (Myron Stowe) [RHEL-139968]
- MIPS: PCI: Use pci_enable_resources() (Myron Stowe) [RHEL-139968]
- sparc/PCI: Remove pcibios_enable_device() as they do nothing extra (Myron Stowe) [RHEL-139968]
- m68k/PCI: Use pci_enable_resources() in pcibios_enable_device() (Myron Stowe) [RHEL-139968]
- PCI: Fix failure detection during resource resize (Myron Stowe) [RHEL-139968]
- PCI: Fix pdev_resources_assignable() disparity (Myron Stowe) [RHEL-139968]
- PCI: Ensure relaxed tail alignment does not increase min_align (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Ensure devices are powered for config reads (Myron Stowe) [RHEL-139968]
- PCI/PM: Skip resuming to D0 if device is disconnected (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Reduce scope of pci_has_p2pmem() (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Myron Stowe) [RHEL-139968]
- PCI: of: Update parent unit address generation in of_pci_prop_intr_map() (Myron Stowe) [RHEL-139968]
- PCI: Disable MSI on RDC PCI to PCIe bridges (Myron Stowe) [RHEL-139968]
- PCI: hotplug: Clean up spaces in messages (Myron Stowe) [RHEL-139968]
- PCI: Add Extended Tag + MRRS quirk for Xeon 6 (Myron Stowe) [RHEL-139968]
- PCI: Clean up pci_scan_child_bus_extend() loop (Myron Stowe) [RHEL-139968]
- PCI: Clean up early_dump_pci_device() (Myron Stowe) [RHEL-139968]
- PCI: Use header type defines in pci_setup_device() (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Fix typos (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Tidy error recovery doc's PCIe nomenclature (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Amend error recovery doc with DPC/AER specifics (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync error recovery doc with code (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync AER doc with code (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix NULL pointer access by aer_info (Myron Stowe) [RHEL-139968]
- PCI/AER: Print TLP Log for errors introduced since PCIe r1.1 (Myron Stowe) [RHEL-139968]
- PCI/AER: Support errors introduced by PCIe r6.0 (Myron Stowe) [RHEL-139968]
- powerpc/eeh: Use result of error_detected() in uevent (Myron Stowe) [RHEL-139968]
- s390/pci: Use pci_uevent_ers() in PCI recovery (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix missing uevent on recovery when a reset is requested (Myron Stowe) [RHEL-139968]
- PCI/ERR: Update device error_state already after reset (Myron Stowe) [RHEL-139968]
- PCI/ERR: Notify drivers on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/ERR: Fix uevent on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/AER: Allow drivers to opt in to Bus Reset on Non-Fatal Errors (Myron Stowe) [RHEL-139968]
- MIPS: pci-legacy: Override pci_address_to_pio (Myron Stowe) [RHEL-139968]
- PCI: exynos: Switch to devm_clk_bulk_get_all_enabled() (Myron Stowe) [RHEL-139968]

Mon, 30 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-217.el10]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154397]
- smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-154397]
- ACPI: AGDI: Add interrupt signaling mode support (Charles Mirabile) [RHEL-111893]
- add xxd to as BuildRequire for bpf selftests (Ines Qian) [RHEL-157473]
- selftests/net: test ipip packets in gro.sh (Antoine Tenart) [RHEL-123213]
- net: gro: remove unnecessary df checks (Antoine Tenart) [RHEL-123213]
- net: gso: restore ids of outer ip headers correctly (Antoine Tenart) [RHEL-123213]
- net: gro: only merge packets with incrementing or fixed outer ids (Antoine Tenart) [RHEL-123213]
- net: gro: remove is_ipv6 from napi_gro_cb (Antoine Tenart) [RHEL-123213]
- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161531]
- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161531]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-145154]
- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]

Thu, 26 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-216.el10]
- redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
- net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
- mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
- mpls: Protect net-&amp;gt;mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
- mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
- mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
- ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
- mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
- mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
- neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
- sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
- rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
- net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
- ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
- net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
- net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
- neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
- neighbour: Protect tbl-&amp;gt;phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
- neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
- neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
- neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
- net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
- net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
- net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
- net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
- ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
- net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
- net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
- ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
- ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
- inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
- ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
- ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
- ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
- net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Protect nh-&amp;gt;f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
- ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
- ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
- ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate rt-&amp;gt;fib6_nh-&amp;gt;rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
- ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- net: Remove -&amp;gt;exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
- geneve: Convert geneve_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bareudp: Convert bareudp_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bonding: Convert bond_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bridge: Convert br_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- xfrm: Convert xfrmi_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert tunnel devices' -&amp;gt;exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- vxlan: Convert vxlan_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert nexthop_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- net: Add -&amp;gt;exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
- net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
- net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
- inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
- net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
- dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
- net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
- arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
- net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
- net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
- net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
- dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
- dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
- net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
- dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
- rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
- can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move ops-&amp;gt;validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
- net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
- ipmr: use READ_ONCE() to read net-&amp;gt;ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
- ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table-&amp;gt;fib_seq (Antoine Tenart) [RHEL-150155]
- ipv4: use READ_ONCE()/WRITE_ONCE() on net-&amp;gt;ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
- fib: rules: use READ_ONCE()/WRITE_ONCE() on ops-&amp;gt;fib_rules_seq (Antoine Tenart) [RHEL-150155]
- ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
- ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
- ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
- ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
- ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
- cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
- cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
- cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
- cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
- cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
- selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
- selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
- cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
- cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
- cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
- cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
- cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
- cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
- cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
- Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
- cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
- cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
- cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
- cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
- cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
- cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
- cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
- cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
- cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
- cpuset: remove unused assignment to trialcs-&amp;gt;partition_root_state (Waiman Long) [RHEL-113305]
- cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
- cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
- cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
- cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
- cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
- cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
- cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
- cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
- cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
- selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
- cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
- cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
- cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
- cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
- cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
- cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
- cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
- cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
- cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
- docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
- cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
- cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
- selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
- cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
- selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
- cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
- cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
- cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
- selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
- selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
- selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
- Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
- Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
- cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
- llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
- sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
- cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
- cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
- cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
- cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
- cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
- cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
- cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
- cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
- cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
- cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
- cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
- cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
- cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
- cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
- mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
- cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
- cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
- cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
- cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
- mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
- blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
- cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
- cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
- mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
- RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
- cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
- cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
- cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
- cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
- cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
- cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
- firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
- include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
- include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
- arm_scmi: don't mess with -&amp;gt;d_parent-&amp;gt;d_name (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
- firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
- redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
- i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
- i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
- tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
- tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
- tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
- fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
- tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
- function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
- tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
- tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
- x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
- tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
- tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
- tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
- tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
- ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
- selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
- tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
- tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
- tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
- fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
- fgraph: Initialize ftrace_ops-&amp;gt;private for function graph ops (Jerome Marchand) [RHEL-151695]
- ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
- tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
- tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
- selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
- tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
- tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
- ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
- ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
- ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
- Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
- tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
- ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
- powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
- selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
- selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
- tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
- ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
- Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
- arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
- atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
- fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
- tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
- ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
- docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
- tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
- md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
- md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
- block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
- block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&amp;gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&amp;gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-debug-devel-6.12.0-218.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:39:21 AM GMT</pubDate>
      <guid isPermaLink="false">7d95529eac05cca3b1a1102829b440c5f1e9b2ca217075707902fc8487afb4f8</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/kernel-debug-devel-6.12.0-218.el10.x86_64.rpm</link>
      <description><p><strong>kernel-debug-devel</strong> - Development package for building kernel modules to match the kernel&lt;br /&gt;</p>

<p>This package provides kernel headers and makefiles sufficient to build modules&lt;br /&gt;
against the kernel package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-218.el10]
- x86/fpu: Ensure shadow stack is active before "getting" registers (Oleg Nesterov) [RHEL-152371]
- PCI: Validate window resource type in pbus_select_window_for_type() (Myron Stowe) [RHEL-139968]
- PCI: Don't claim disabled bridge windows (Myron Stowe) [RHEL-139968]
- PCI: Remove old_size limit from bridge window sizing (Myron Stowe) [RHEL-139968]
- PCI: Stop over-estimating bridge window size (Myron Stowe) [RHEL-139968]
- PCI: Rewrite bridge window head alignment function (Myron Stowe) [RHEL-139968]
- PCI: Fix bridge window alignment with optional resources (Myron Stowe) [RHEL-139968]
- sparc/PCI: Correct 64-bit non-pref -&amp;gt; pref BAR resources (Myron Stowe) [RHEL-139968]
- PCI: meson: Fix parsing the DBI register region (Myron Stowe) [RHEL-139968]
- PCI: Do not size non-existing prefetchable window (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Use pcibios_align_resource() to block io range (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix PCI southbridge legacy resource reservations (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Myron Stowe) [RHEL-139968]
- PCI: dwc: Use custom pci_ops for root bus DBI vs ECAM config access (Myron Stowe) [RHEL-139968]
- PCI: cadence: Search for MSI Capability with correct ID (Myron Stowe) [RHEL-139968]
- PCI: Fix regression in pci_bus_distribute_available_resources() (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Expose PCI device serial number (Myron Stowe) [RHEL-139968]
- PCI: xilinx-nwl: Fix ECAM programming (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Fix devm_kcalloc() argument order for port-&amp;gt;phys allocation (Myron Stowe) [RHEL-139968]
- PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Drop PMSR spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix inverted break condition in PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Assure reset occurs before DBI access (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support ECAM mechanism by enabling iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Prepare the driver for enabling ECAM mechanism using iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Add support for ELBI resource mapping (Myron Stowe) [RHEL-139968]
- PCI: qcom: Move host bridge 'phy' and 'reset' pointers to struct qcom_pcie_port (Myron Stowe) [RHEL-139968]
- PCI: qcom: Fix macro typo for CURSOR (Myron Stowe) [RHEL-139968]
- PCI: qcom: Add equalization settings for 8.0 GT/s and 32.0 GT/s (Myron Stowe) [RHEL-139968]
- PCI: plda: Remove dev_err_probe() when the errno is -ENOMEM (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Add support for MediaTek MT8196 SoC (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: mediatek-gen3: Add support for MT6991/MT8196 (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Implement sys clock ready time setting (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use kcalloc() instead of kzalloc() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix incorrect error message in probe() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix programming sequence of "strap" settings (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix module autoloading (Myron Stowe) [RHEL-139968]
- PCI: imx6: Enable the Vaux supply if available (Myron Stowe) [RHEL-139968]
- PCI: qcom-ep: Remove redundant edma.nr_irqs initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support 16-lane operation (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Handle errors in BPMP response (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Set pci_epc_features::msi_capable to true (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs (Myron Stowe) [RHEL-139968]
- selftests: pci_endpoint: Skip IRQ test if IRQ is out of range. (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Cleanup extra 0 initialization (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Skip IRQ tests if irq is out of range (Myron Stowe) [RHEL-139968]
- PCI: endpoint: Drop superfluous pci_epc_features initialization (Myron Stowe) [RHEL-139968]
- Documentation: PCI: endpoint: Document BAR assignment (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-x1e80100: Set clocks minItems for the fifth Glymur PCIe Controller (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: ti,am65: Extend for use with PVU (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-sm8550: Add SM8750 compatible (Myron Stowe) [RHEL-139968]
- PCI: cadence: Use cdns_pcie_find_*capability() to avoid hardcoding offsets (Myron Stowe) [RHEL-139968]
- PCI: cadence: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: dwc: ep: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: Refactor extended capability search into PCI_FIND_NEXT_EXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Refactor capability search into PCI_FIND_NEXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Clean up __pci_find_next_cap_ttl() readability (Myron Stowe) [RHEL-139968]
- PCI: switchtec: Replace manual locks with guard (Myron Stowe) [RHEL-139968]
- PCI: Add lockdep assertion in pci_stop_and_remove_bus_device() (Myron Stowe) [RHEL-139968]
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Myron Stowe) [RHEL-139968]
- PCI: Don't print stale information about resource (Myron Stowe) [RHEL-139968]
- PCI: Alter misleading recursion to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Pass bridge window to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add pci_setup_one_bridge_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor remove_dev_resources() to use pbus_select_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor distributing available memory to use loops (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during mem window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() in space available checker (Myron Stowe) [RHEL-139968]
- PCI: Rename resource variable from r to res (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during IO window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() during BAR resize (Myron Stowe) [RHEL-139968]
- PCI: Warn if bridge window cannot be released when resizing BAR (Myron Stowe) [RHEL-139968]
- PCI: Fix finding bridge window in pci_reassign_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add bridge window selection functions (Myron Stowe) [RHEL-139968]
- PCI: Add defines for bridge window indexing (Myron Stowe) [RHEL-139968]
- PCI: Preserve bridge window resource type flags (Myron Stowe) [RHEL-139968]
- PCI: Enable bridge even if bridge window fails to assign (Myron Stowe) [RHEL-139968]
- PCI: Use pci_release_resource() instead of release_resource() (Myron Stowe) [RHEL-139968]
- PCI: Disable non-claimed bridge window (Myron Stowe) [RHEL-139968]
- PCI: Always claim bridge window before its setup (Myron Stowe) [RHEL-139968]
- PCI: Refactor find_bus_resource_of_type() logic checks (Myron Stowe) [RHEL-139968]
- PCI: Move find_bus_resource_of_type() earlier (Myron Stowe) [RHEL-139968]
- MIPS: PCI: Use pci_enable_resources() (Myron Stowe) [RHEL-139968]
- sparc/PCI: Remove pcibios_enable_device() as they do nothing extra (Myron Stowe) [RHEL-139968]
- m68k/PCI: Use pci_enable_resources() in pcibios_enable_device() (Myron Stowe) [RHEL-139968]
- PCI: Fix failure detection during resource resize (Myron Stowe) [RHEL-139968]
- PCI: Fix pdev_resources_assignable() disparity (Myron Stowe) [RHEL-139968]
- PCI: Ensure relaxed tail alignment does not increase min_align (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Ensure devices are powered for config reads (Myron Stowe) [RHEL-139968]
- PCI/PM: Skip resuming to D0 if device is disconnected (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Reduce scope of pci_has_p2pmem() (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Myron Stowe) [RHEL-139968]
- PCI: of: Update parent unit address generation in of_pci_prop_intr_map() (Myron Stowe) [RHEL-139968]
- PCI: Disable MSI on RDC PCI to PCIe bridges (Myron Stowe) [RHEL-139968]
- PCI: hotplug: Clean up spaces in messages (Myron Stowe) [RHEL-139968]
- PCI: Add Extended Tag + MRRS quirk for Xeon 6 (Myron Stowe) [RHEL-139968]
- PCI: Clean up pci_scan_child_bus_extend() loop (Myron Stowe) [RHEL-139968]
- PCI: Clean up early_dump_pci_device() (Myron Stowe) [RHEL-139968]
- PCI: Use header type defines in pci_setup_device() (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Fix typos (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Tidy error recovery doc's PCIe nomenclature (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Amend error recovery doc with DPC/AER specifics (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync error recovery doc with code (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync AER doc with code (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix NULL pointer access by aer_info (Myron Stowe) [RHEL-139968]
- PCI/AER: Print TLP Log for errors introduced since PCIe r1.1 (Myron Stowe) [RHEL-139968]
- PCI/AER: Support errors introduced by PCIe r6.0 (Myron Stowe) [RHEL-139968]
- powerpc/eeh: Use result of error_detected() in uevent (Myron Stowe) [RHEL-139968]
- s390/pci: Use pci_uevent_ers() in PCI recovery (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix missing uevent on recovery when a reset is requested (Myron Stowe) [RHEL-139968]
- PCI/ERR: Update device error_state already after reset (Myron Stowe) [RHEL-139968]
- PCI/ERR: Notify drivers on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/ERR: Fix uevent on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/AER: Allow drivers to opt in to Bus Reset on Non-Fatal Errors (Myron Stowe) [RHEL-139968]
- MIPS: pci-legacy: Override pci_address_to_pio (Myron Stowe) [RHEL-139968]
- PCI: exynos: Switch to devm_clk_bulk_get_all_enabled() (Myron Stowe) [RHEL-139968]

Mon, 30 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-217.el10]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154397]
- smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-154397]
- ACPI: AGDI: Add interrupt signaling mode support (Charles Mirabile) [RHEL-111893]
- add xxd to as BuildRequire for bpf selftests (Ines Qian) [RHEL-157473]
- selftests/net: test ipip packets in gro.sh (Antoine Tenart) [RHEL-123213]
- net: gro: remove unnecessary df checks (Antoine Tenart) [RHEL-123213]
- net: gso: restore ids of outer ip headers correctly (Antoine Tenart) [RHEL-123213]
- net: gro: only merge packets with incrementing or fixed outer ids (Antoine Tenart) [RHEL-123213]
- net: gro: remove is_ipv6 from napi_gro_cb (Antoine Tenart) [RHEL-123213]
- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161531]
- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161531]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-145154]
- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]

Thu, 26 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-216.el10]
- redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
- net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
- mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
- mpls: Protect net-&amp;gt;mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
- mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
- mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
- ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
- mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
- mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
- neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
- sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
- rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
- net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
- ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
- net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
- net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
- neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
- neighbour: Protect tbl-&amp;gt;phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
- neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
- neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
- neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
- net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
- net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
- net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
- net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
- ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
- net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
- net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
- ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
- ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
- inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
- ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
- ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
- ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
- net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Protect nh-&amp;gt;f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
- ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
- ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
- ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate rt-&amp;gt;fib6_nh-&amp;gt;rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
- ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- net: Remove -&amp;gt;exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
- geneve: Convert geneve_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bareudp: Convert bareudp_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bonding: Convert bond_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bridge: Convert br_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- xfrm: Convert xfrmi_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert tunnel devices' -&amp;gt;exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- vxlan: Convert vxlan_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert nexthop_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- net: Add -&amp;gt;exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
- net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
- net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
- inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
- net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
- dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
- net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
- arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
- net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
- net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
- net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
- dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
- dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
- net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
- dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
- rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
- can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move ops-&amp;gt;validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
- net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
- ipmr: use READ_ONCE() to read net-&amp;gt;ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
- ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table-&amp;gt;fib_seq (Antoine Tenart) [RHEL-150155]
- ipv4: use READ_ONCE()/WRITE_ONCE() on net-&amp;gt;ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
- fib: rules: use READ_ONCE()/WRITE_ONCE() on ops-&amp;gt;fib_rules_seq (Antoine Tenart) [RHEL-150155]
- ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
- ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
- ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
- ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
- ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
- cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
- cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
- cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
- cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
- cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
- selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
- selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
- cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
- cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
- cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
- cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
- cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
- cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
- cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
- Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
- cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
- cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
- cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
- cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
- cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
- cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
- cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
- cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
- cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
- cpuset: remove unused assignment to trialcs-&amp;gt;partition_root_state (Waiman Long) [RHEL-113305]
- cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
- cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
- cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
- cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
- cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
- cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
- cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
- cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
- cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
- selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
- cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
- cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
- cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
- cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
- cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
- cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
- cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
- cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
- cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
- docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
- cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
- cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
- selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
- cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
- selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
- cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
- cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
- cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
- selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
- selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
- selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
- Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
- Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
- cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
- llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
- sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
- cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
- cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
- cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
- cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
- cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
- cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
- cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
- cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
- cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
- cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
- cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
- cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
- cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
- cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
- mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
- cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
- cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
- cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
- cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
- mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
- blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
- cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
- cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
- mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
- RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
- cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
- cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
- cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
- cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
- cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
- cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
- firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
- include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
- include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
- arm_scmi: don't mess with -&amp;gt;d_parent-&amp;gt;d_name (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
- firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
- redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
- i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
- i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
- tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
- tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
- tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
- fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
- tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
- function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
- tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
- tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
- x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
- tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
- tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
- tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
- tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
- ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
- selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
- tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
- tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
- tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
- fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
- fgraph: Initialize ftrace_ops-&amp;gt;private for function graph ops (Jerome Marchand) [RHEL-151695]
- ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
- tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
- tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
- selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
- tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
- tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
- ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
- ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
- ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
- Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
- tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
- ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
- powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
- selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
- selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
- tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
- ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
- Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
- arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
- atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
- fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
- tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
- ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
- docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
- tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
- md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
- md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
- block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
- block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&amp;gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&amp;gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>rv-6.12.0-218.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:39:21 AM GMT</pubDate>
      <guid isPermaLink="false">5874aaefca1f45cf0e08d7bb1eab47c6a95d4432cf6b4867d4feb45fbfb5336a</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/rv-6.12.0-218.el10.x86_64.rpm</link>
      <description><p><strong>rv</strong> - RV: Runtime Verification&lt;br /&gt;</p>

<p>Runtime Verification (RV) is a lightweight (yet rigorous) method that&lt;br /&gt;
complements classical exhaustive verification techniques (such as model&lt;br /&gt;
checking and theorem proving) with a more practical approach for&lt;br /&gt;
complex systems.&lt;br /&gt;
The rv tool is the interface for a collection of monitors that aim&lt;br /&gt;
analysing the logical and timing behavior of Linux.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-218.el10]
- x86/fpu: Ensure shadow stack is active before "getting" registers (Oleg Nesterov) [RHEL-152371]
- PCI: Validate window resource type in pbus_select_window_for_type() (Myron Stowe) [RHEL-139968]
- PCI: Don't claim disabled bridge windows (Myron Stowe) [RHEL-139968]
- PCI: Remove old_size limit from bridge window sizing (Myron Stowe) [RHEL-139968]
- PCI: Stop over-estimating bridge window size (Myron Stowe) [RHEL-139968]
- PCI: Rewrite bridge window head alignment function (Myron Stowe) [RHEL-139968]
- PCI: Fix bridge window alignment with optional resources (Myron Stowe) [RHEL-139968]
- sparc/PCI: Correct 64-bit non-pref -&amp;gt; pref BAR resources (Myron Stowe) [RHEL-139968]
- PCI: meson: Fix parsing the DBI register region (Myron Stowe) [RHEL-139968]
- PCI: Do not size non-existing prefetchable window (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Use pcibios_align_resource() to block io range (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix PCI southbridge legacy resource reservations (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Myron Stowe) [RHEL-139968]
- PCI: dwc: Use custom pci_ops for root bus DBI vs ECAM config access (Myron Stowe) [RHEL-139968]
- PCI: cadence: Search for MSI Capability with correct ID (Myron Stowe) [RHEL-139968]
- PCI: Fix regression in pci_bus_distribute_available_resources() (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Expose PCI device serial number (Myron Stowe) [RHEL-139968]
- PCI: xilinx-nwl: Fix ECAM programming (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Fix devm_kcalloc() argument order for port-&amp;gt;phys allocation (Myron Stowe) [RHEL-139968]
- PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Drop PMSR spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix inverted break condition in PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Assure reset occurs before DBI access (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support ECAM mechanism by enabling iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Prepare the driver for enabling ECAM mechanism using iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Add support for ELBI resource mapping (Myron Stowe) [RHEL-139968]
- PCI: qcom: Move host bridge 'phy' and 'reset' pointers to struct qcom_pcie_port (Myron Stowe) [RHEL-139968]
- PCI: qcom: Fix macro typo for CURSOR (Myron Stowe) [RHEL-139968]
- PCI: qcom: Add equalization settings for 8.0 GT/s and 32.0 GT/s (Myron Stowe) [RHEL-139968]
- PCI: plda: Remove dev_err_probe() when the errno is -ENOMEM (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Add support for MediaTek MT8196 SoC (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: mediatek-gen3: Add support for MT6991/MT8196 (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Implement sys clock ready time setting (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use kcalloc() instead of kzalloc() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix incorrect error message in probe() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix programming sequence of "strap" settings (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix module autoloading (Myron Stowe) [RHEL-139968]
- PCI: imx6: Enable the Vaux supply if available (Myron Stowe) [RHEL-139968]
- PCI: qcom-ep: Remove redundant edma.nr_irqs initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support 16-lane operation (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Handle errors in BPMP response (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Set pci_epc_features::msi_capable to true (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs (Myron Stowe) [RHEL-139968]
- selftests: pci_endpoint: Skip IRQ test if IRQ is out of range. (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Cleanup extra 0 initialization (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Skip IRQ tests if irq is out of range (Myron Stowe) [RHEL-139968]
- PCI: endpoint: Drop superfluous pci_epc_features initialization (Myron Stowe) [RHEL-139968]
- Documentation: PCI: endpoint: Document BAR assignment (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-x1e80100: Set clocks minItems for the fifth Glymur PCIe Controller (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: ti,am65: Extend for use with PVU (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-sm8550: Add SM8750 compatible (Myron Stowe) [RHEL-139968]
- PCI: cadence: Use cdns_pcie_find_*capability() to avoid hardcoding offsets (Myron Stowe) [RHEL-139968]
- PCI: cadence: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: dwc: ep: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: Refactor extended capability search into PCI_FIND_NEXT_EXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Refactor capability search into PCI_FIND_NEXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Clean up __pci_find_next_cap_ttl() readability (Myron Stowe) [RHEL-139968]
- PCI: switchtec: Replace manual locks with guard (Myron Stowe) [RHEL-139968]
- PCI: Add lockdep assertion in pci_stop_and_remove_bus_device() (Myron Stowe) [RHEL-139968]
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Myron Stowe) [RHEL-139968]
- PCI: Don't print stale information about resource (Myron Stowe) [RHEL-139968]
- PCI: Alter misleading recursion to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Pass bridge window to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add pci_setup_one_bridge_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor remove_dev_resources() to use pbus_select_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor distributing available memory to use loops (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during mem window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() in space available checker (Myron Stowe) [RHEL-139968]
- PCI: Rename resource variable from r to res (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during IO window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() during BAR resize (Myron Stowe) [RHEL-139968]
- PCI: Warn if bridge window cannot be released when resizing BAR (Myron Stowe) [RHEL-139968]
- PCI: Fix finding bridge window in pci_reassign_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add bridge window selection functions (Myron Stowe) [RHEL-139968]
- PCI: Add defines for bridge window indexing (Myron Stowe) [RHEL-139968]
- PCI: Preserve bridge window resource type flags (Myron Stowe) [RHEL-139968]
- PCI: Enable bridge even if bridge window fails to assign (Myron Stowe) [RHEL-139968]
- PCI: Use pci_release_resource() instead of release_resource() (Myron Stowe) [RHEL-139968]
- PCI: Disable non-claimed bridge window (Myron Stowe) [RHEL-139968]
- PCI: Always claim bridge window before its setup (Myron Stowe) [RHEL-139968]
- PCI: Refactor find_bus_resource_of_type() logic checks (Myron Stowe) [RHEL-139968]
- PCI: Move find_bus_resource_of_type() earlier (Myron Stowe) [RHEL-139968]
- MIPS: PCI: Use pci_enable_resources() (Myron Stowe) [RHEL-139968]
- sparc/PCI: Remove pcibios_enable_device() as they do nothing extra (Myron Stowe) [RHEL-139968]
- m68k/PCI: Use pci_enable_resources() in pcibios_enable_device() (Myron Stowe) [RHEL-139968]
- PCI: Fix failure detection during resource resize (Myron Stowe) [RHEL-139968]
- PCI: Fix pdev_resources_assignable() disparity (Myron Stowe) [RHEL-139968]
- PCI: Ensure relaxed tail alignment does not increase min_align (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Ensure devices are powered for config reads (Myron Stowe) [RHEL-139968]
- PCI/PM: Skip resuming to D0 if device is disconnected (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Reduce scope of pci_has_p2pmem() (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Myron Stowe) [RHEL-139968]
- PCI: of: Update parent unit address generation in of_pci_prop_intr_map() (Myron Stowe) [RHEL-139968]
- PCI: Disable MSI on RDC PCI to PCIe bridges (Myron Stowe) [RHEL-139968]
- PCI: hotplug: Clean up spaces in messages (Myron Stowe) [RHEL-139968]
- PCI: Add Extended Tag + MRRS quirk for Xeon 6 (Myron Stowe) [RHEL-139968]
- PCI: Clean up pci_scan_child_bus_extend() loop (Myron Stowe) [RHEL-139968]
- PCI: Clean up early_dump_pci_device() (Myron Stowe) [RHEL-139968]
- PCI: Use header type defines in pci_setup_device() (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Fix typos (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Tidy error recovery doc's PCIe nomenclature (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Amend error recovery doc with DPC/AER specifics (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync error recovery doc with code (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync AER doc with code (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix NULL pointer access by aer_info (Myron Stowe) [RHEL-139968]
- PCI/AER: Print TLP Log for errors introduced since PCIe r1.1 (Myron Stowe) [RHEL-139968]
- PCI/AER: Support errors introduced by PCIe r6.0 (Myron Stowe) [RHEL-139968]
- powerpc/eeh: Use result of error_detected() in uevent (Myron Stowe) [RHEL-139968]
- s390/pci: Use pci_uevent_ers() in PCI recovery (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix missing uevent on recovery when a reset is requested (Myron Stowe) [RHEL-139968]
- PCI/ERR: Update device error_state already after reset (Myron Stowe) [RHEL-139968]
- PCI/ERR: Notify drivers on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/ERR: Fix uevent on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/AER: Allow drivers to opt in to Bus Reset on Non-Fatal Errors (Myron Stowe) [RHEL-139968]
- MIPS: pci-legacy: Override pci_address_to_pio (Myron Stowe) [RHEL-139968]
- PCI: exynos: Switch to devm_clk_bulk_get_all_enabled() (Myron Stowe) [RHEL-139968]

Mon, 30 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-217.el10]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154397]
- smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-154397]
- ACPI: AGDI: Add interrupt signaling mode support (Charles Mirabile) [RHEL-111893]
- add xxd to as BuildRequire for bpf selftests (Ines Qian) [RHEL-157473]
- selftests/net: test ipip packets in gro.sh (Antoine Tenart) [RHEL-123213]
- net: gro: remove unnecessary df checks (Antoine Tenart) [RHEL-123213]
- net: gso: restore ids of outer ip headers correctly (Antoine Tenart) [RHEL-123213]
- net: gro: only merge packets with incrementing or fixed outer ids (Antoine Tenart) [RHEL-123213]
- net: gro: remove is_ipv6 from napi_gro_cb (Antoine Tenart) [RHEL-123213]
- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161531]
- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161531]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-145154]
- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]

Thu, 26 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-216.el10]
- redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
- net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
- mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
- mpls: Protect net-&amp;gt;mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
- mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
- mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
- ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
- mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
- mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
- neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
- sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
- rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
- net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
- ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
- net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
- net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
- neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
- neighbour: Protect tbl-&amp;gt;phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
- neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
- neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
- neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
- net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
- net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
- net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
- net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
- ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
- net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
- net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
- ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
- ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
- inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
- ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
- ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
- ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
- net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Protect nh-&amp;gt;f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
- ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
- ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
- ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate rt-&amp;gt;fib6_nh-&amp;gt;rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
- ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- net: Remove -&amp;gt;exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
- geneve: Convert geneve_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bareudp: Convert bareudp_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bonding: Convert bond_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bridge: Convert br_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- xfrm: Convert xfrmi_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert tunnel devices' -&amp;gt;exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- vxlan: Convert vxlan_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert nexthop_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- net: Add -&amp;gt;exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
- net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
- net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
- inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
- net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
- dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
- net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
- arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
- net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
- net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
- net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
- dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
- dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
- net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
- dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
- rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
- can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move ops-&amp;gt;validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
- net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
- ipmr: use READ_ONCE() to read net-&amp;gt;ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
- ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table-&amp;gt;fib_seq (Antoine Tenart) [RHEL-150155]
- ipv4: use READ_ONCE()/WRITE_ONCE() on net-&amp;gt;ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
- fib: rules: use READ_ONCE()/WRITE_ONCE() on ops-&amp;gt;fib_rules_seq (Antoine Tenart) [RHEL-150155]
- ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
- ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
- ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
- ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
- ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
- cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
- cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
- cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
- cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
- cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
- selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
- selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
- cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
- cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
- cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
- cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
- cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
- cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
- cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
- Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
- cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
- cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
- cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
- cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
- cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
- cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
- cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
- cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
- cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
- cpuset: remove unused assignment to trialcs-&amp;gt;partition_root_state (Waiman Long) [RHEL-113305]
- cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
- cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
- cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
- cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
- cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
- cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
- cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
- cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
- cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
- selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
- cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
- cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
- cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
- cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
- cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
- cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
- cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
- cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
- cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
- docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
- cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
- cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
- selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
- cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
- selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
- cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
- cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
- cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
- selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
- selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
- selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
- Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
- Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
- cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
- llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
- sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
- cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
- cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
- cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
- cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
- cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
- cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
- cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
- cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
- cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
- cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
- cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
- cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
- cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
- cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
- mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
- cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
- cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
- cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
- cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
- mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
- blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
- cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
- cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
- mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
- RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
- cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
- cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
- cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
- cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
- cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
- cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
- firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
- include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
- include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
- arm_scmi: don't mess with -&amp;gt;d_parent-&amp;gt;d_name (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
- firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
- redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
- i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
- i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
- tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
- tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
- tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
- fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
- tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
- function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
- tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
- tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
- x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
- tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
- tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
- tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
- tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
- ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
- selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
- tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
- tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
- tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
- fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
- fgraph: Initialize ftrace_ops-&amp;gt;private for function graph ops (Jerome Marchand) [RHEL-151695]
- ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
- tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
- tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
- selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
- tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
- tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
- ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
- ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
- ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
- Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
- tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
- ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
- powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
- selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
- selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
- tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
- ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
- Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
- arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
- atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
- fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
- tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
- ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
- docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
- tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
- md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
- md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
- block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
- block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&amp;gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&amp;gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-doc-6.12.0-218.el10.noarch</title>
      <pubDate>Tue, 31 Mar 2026 11:37:25 AM GMT</pubDate>
      <guid isPermaLink="false">f0af292f84f352ba16d0f4ed33c45dbd1ee2aa1482733bf0f5c15b46a522723a</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/kernel-doc-6.12.0-218.el10.noarch.rpm</link>
      <description><p><strong>kernel-doc</strong> - Various documentation bits found in the kernel source&lt;br /&gt;</p>

<p>This package contains documentation files from the kernel&lt;br /&gt;
source. Various bits of information about the Linux kernel and the&lt;br /&gt;
device drivers shipped with it are documented in these files.&lt;br /&gt;
&lt;br /&gt;
You'll want to install this package if you need a reference to the&lt;br /&gt;
options that can be passed to Linux kernel modules at load time.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-218.el10]
- x86/fpu: Ensure shadow stack is active before "getting" registers (Oleg Nesterov) [RHEL-152371]
- PCI: Validate window resource type in pbus_select_window_for_type() (Myron Stowe) [RHEL-139968]
- PCI: Don't claim disabled bridge windows (Myron Stowe) [RHEL-139968]
- PCI: Remove old_size limit from bridge window sizing (Myron Stowe) [RHEL-139968]
- PCI: Stop over-estimating bridge window size (Myron Stowe) [RHEL-139968]
- PCI: Rewrite bridge window head alignment function (Myron Stowe) [RHEL-139968]
- PCI: Fix bridge window alignment with optional resources (Myron Stowe) [RHEL-139968]
- sparc/PCI: Correct 64-bit non-pref -&amp;gt; pref BAR resources (Myron Stowe) [RHEL-139968]
- PCI: meson: Fix parsing the DBI register region (Myron Stowe) [RHEL-139968]
- PCI: Do not size non-existing prefetchable window (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Use pcibios_align_resource() to block io range (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix PCI southbridge legacy resource reservations (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Myron Stowe) [RHEL-139968]
- PCI: dwc: Use custom pci_ops for root bus DBI vs ECAM config access (Myron Stowe) [RHEL-139968]
- PCI: cadence: Search for MSI Capability with correct ID (Myron Stowe) [RHEL-139968]
- PCI: Fix regression in pci_bus_distribute_available_resources() (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Expose PCI device serial number (Myron Stowe) [RHEL-139968]
- PCI: xilinx-nwl: Fix ECAM programming (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Fix devm_kcalloc() argument order for port-&amp;gt;phys allocation (Myron Stowe) [RHEL-139968]
- PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Drop PMSR spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix inverted break condition in PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Assure reset occurs before DBI access (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support ECAM mechanism by enabling iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Prepare the driver for enabling ECAM mechanism using iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Add support for ELBI resource mapping (Myron Stowe) [RHEL-139968]
- PCI: qcom: Move host bridge 'phy' and 'reset' pointers to struct qcom_pcie_port (Myron Stowe) [RHEL-139968]
- PCI: qcom: Fix macro typo for CURSOR (Myron Stowe) [RHEL-139968]
- PCI: qcom: Add equalization settings for 8.0 GT/s and 32.0 GT/s (Myron Stowe) [RHEL-139968]
- PCI: plda: Remove dev_err_probe() when the errno is -ENOMEM (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Add support for MediaTek MT8196 SoC (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: mediatek-gen3: Add support for MT6991/MT8196 (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Implement sys clock ready time setting (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use kcalloc() instead of kzalloc() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix incorrect error message in probe() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix programming sequence of "strap" settings (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix module autoloading (Myron Stowe) [RHEL-139968]
- PCI: imx6: Enable the Vaux supply if available (Myron Stowe) [RHEL-139968]
- PCI: qcom-ep: Remove redundant edma.nr_irqs initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support 16-lane operation (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Handle errors in BPMP response (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Set pci_epc_features::msi_capable to true (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs (Myron Stowe) [RHEL-139968]
- selftests: pci_endpoint: Skip IRQ test if IRQ is out of range. (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Cleanup extra 0 initialization (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Skip IRQ tests if irq is out of range (Myron Stowe) [RHEL-139968]
- PCI: endpoint: Drop superfluous pci_epc_features initialization (Myron Stowe) [RHEL-139968]
- Documentation: PCI: endpoint: Document BAR assignment (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-x1e80100: Set clocks minItems for the fifth Glymur PCIe Controller (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: ti,am65: Extend for use with PVU (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-sm8550: Add SM8750 compatible (Myron Stowe) [RHEL-139968]
- PCI: cadence: Use cdns_pcie_find_*capability() to avoid hardcoding offsets (Myron Stowe) [RHEL-139968]
- PCI: cadence: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: dwc: ep: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: Refactor extended capability search into PCI_FIND_NEXT_EXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Refactor capability search into PCI_FIND_NEXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Clean up __pci_find_next_cap_ttl() readability (Myron Stowe) [RHEL-139968]
- PCI: switchtec: Replace manual locks with guard (Myron Stowe) [RHEL-139968]
- PCI: Add lockdep assertion in pci_stop_and_remove_bus_device() (Myron Stowe) [RHEL-139968]
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Myron Stowe) [RHEL-139968]
- PCI: Don't print stale information about resource (Myron Stowe) [RHEL-139968]
- PCI: Alter misleading recursion to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Pass bridge window to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add pci_setup_one_bridge_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor remove_dev_resources() to use pbus_select_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor distributing available memory to use loops (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during mem window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() in space available checker (Myron Stowe) [RHEL-139968]
- PCI: Rename resource variable from r to res (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during IO window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() during BAR resize (Myron Stowe) [RHEL-139968]
- PCI: Warn if bridge window cannot be released when resizing BAR (Myron Stowe) [RHEL-139968]
- PCI: Fix finding bridge window in pci_reassign_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add bridge window selection functions (Myron Stowe) [RHEL-139968]
- PCI: Add defines for bridge window indexing (Myron Stowe) [RHEL-139968]
- PCI: Preserve bridge window resource type flags (Myron Stowe) [RHEL-139968]
- PCI: Enable bridge even if bridge window fails to assign (Myron Stowe) [RHEL-139968]
- PCI: Use pci_release_resource() instead of release_resource() (Myron Stowe) [RHEL-139968]
- PCI: Disable non-claimed bridge window (Myron Stowe) [RHEL-139968]
- PCI: Always claim bridge window before its setup (Myron Stowe) [RHEL-139968]
- PCI: Refactor find_bus_resource_of_type() logic checks (Myron Stowe) [RHEL-139968]
- PCI: Move find_bus_resource_of_type() earlier (Myron Stowe) [RHEL-139968]
- MIPS: PCI: Use pci_enable_resources() (Myron Stowe) [RHEL-139968]
- sparc/PCI: Remove pcibios_enable_device() as they do nothing extra (Myron Stowe) [RHEL-139968]
- m68k/PCI: Use pci_enable_resources() in pcibios_enable_device() (Myron Stowe) [RHEL-139968]
- PCI: Fix failure detection during resource resize (Myron Stowe) [RHEL-139968]
- PCI: Fix pdev_resources_assignable() disparity (Myron Stowe) [RHEL-139968]
- PCI: Ensure relaxed tail alignment does not increase min_align (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Ensure devices are powered for config reads (Myron Stowe) [RHEL-139968]
- PCI/PM: Skip resuming to D0 if device is disconnected (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Reduce scope of pci_has_p2pmem() (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Myron Stowe) [RHEL-139968]
- PCI: of: Update parent unit address generation in of_pci_prop_intr_map() (Myron Stowe) [RHEL-139968]
- PCI: Disable MSI on RDC PCI to PCIe bridges (Myron Stowe) [RHEL-139968]
- PCI: hotplug: Clean up spaces in messages (Myron Stowe) [RHEL-139968]
- PCI: Add Extended Tag + MRRS quirk for Xeon 6 (Myron Stowe) [RHEL-139968]
- PCI: Clean up pci_scan_child_bus_extend() loop (Myron Stowe) [RHEL-139968]
- PCI: Clean up early_dump_pci_device() (Myron Stowe) [RHEL-139968]
- PCI: Use header type defines in pci_setup_device() (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Fix typos (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Tidy error recovery doc's PCIe nomenclature (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Amend error recovery doc with DPC/AER specifics (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync error recovery doc with code (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync AER doc with code (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix NULL pointer access by aer_info (Myron Stowe) [RHEL-139968]
- PCI/AER: Print TLP Log for errors introduced since PCIe r1.1 (Myron Stowe) [RHEL-139968]
- PCI/AER: Support errors introduced by PCIe r6.0 (Myron Stowe) [RHEL-139968]
- powerpc/eeh: Use result of error_detected() in uevent (Myron Stowe) [RHEL-139968]
- s390/pci: Use pci_uevent_ers() in PCI recovery (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix missing uevent on recovery when a reset is requested (Myron Stowe) [RHEL-139968]
- PCI/ERR: Update device error_state already after reset (Myron Stowe) [RHEL-139968]
- PCI/ERR: Notify drivers on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/ERR: Fix uevent on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/AER: Allow drivers to opt in to Bus Reset on Non-Fatal Errors (Myron Stowe) [RHEL-139968]
- MIPS: pci-legacy: Override pci_address_to_pio (Myron Stowe) [RHEL-139968]
- PCI: exynos: Switch to devm_clk_bulk_get_all_enabled() (Myron Stowe) [RHEL-139968]

Mon, 30 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-217.el10]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154397]
- smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-154397]
- ACPI: AGDI: Add interrupt signaling mode support (Charles Mirabile) [RHEL-111893]
- add xxd to as BuildRequire for bpf selftests (Ines Qian) [RHEL-157473]
- selftests/net: test ipip packets in gro.sh (Antoine Tenart) [RHEL-123213]
- net: gro: remove unnecessary df checks (Antoine Tenart) [RHEL-123213]
- net: gso: restore ids of outer ip headers correctly (Antoine Tenart) [RHEL-123213]
- net: gro: only merge packets with incrementing or fixed outer ids (Antoine Tenart) [RHEL-123213]
- net: gro: remove is_ipv6 from napi_gro_cb (Antoine Tenart) [RHEL-123213]
- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161531]
- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161531]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-145154]
- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]

Thu, 26 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-216.el10]
- redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
- net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
- mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
- mpls: Protect net-&amp;gt;mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
- mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
- mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
- ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
- mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
- mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
- neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
- sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
- rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
- net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
- ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
- net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
- net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
- neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
- neighbour: Protect tbl-&amp;gt;phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
- neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
- neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
- neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
- net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
- net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
- net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
- net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
- ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
- net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
- net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
- ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
- ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
- inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
- ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
- ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
- ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
- net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Protect nh-&amp;gt;f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
- ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
- ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
- ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate rt-&amp;gt;fib6_nh-&amp;gt;rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
- ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- net: Remove -&amp;gt;exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
- geneve: Convert geneve_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bareudp: Convert bareudp_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bonding: Convert bond_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bridge: Convert br_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- xfrm: Convert xfrmi_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert tunnel devices' -&amp;gt;exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- vxlan: Convert vxlan_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert nexthop_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- net: Add -&amp;gt;exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
- net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
- net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
- inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
- net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
- dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
- net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
- arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
- net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
- net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
- net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
- dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
- dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
- net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
- dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
- rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
- can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move ops-&amp;gt;validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
- net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
- ipmr: use READ_ONCE() to read net-&amp;gt;ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
- ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table-&amp;gt;fib_seq (Antoine Tenart) [RHEL-150155]
- ipv4: use READ_ONCE()/WRITE_ONCE() on net-&amp;gt;ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
- fib: rules: use READ_ONCE()/WRITE_ONCE() on ops-&amp;gt;fib_rules_seq (Antoine Tenart) [RHEL-150155]
- ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
- ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
- ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
- ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
- ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
- cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
- cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
- cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
- cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
- cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
- selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
- selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
- cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
- cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
- cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
- cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
- cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
- cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
- cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
- Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
- cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
- cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
- cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
- cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
- cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
- cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
- cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
- cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
- cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
- cpuset: remove unused assignment to trialcs-&amp;gt;partition_root_state (Waiman Long) [RHEL-113305]
- cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
- cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
- cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
- cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
- cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
- cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
- cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
- cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
- cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
- selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
- cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
- cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
- cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
- cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
- cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
- cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
- cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
- cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
- cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
- docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
- cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
- cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
- selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
- cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
- selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
- cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
- cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
- cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
- selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
- selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
- selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
- Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
- Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
- cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
- llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
- sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
- cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
- cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
- cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
- cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
- cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
- cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
- cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
- cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
- cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
- cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
- cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
- cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
- cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
- cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
- mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
- cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
- cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
- cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
- cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
- mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
- blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
- cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
- cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
- mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
- RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
- cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
- cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
- cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
- cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
- cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
- cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
- firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
- include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
- include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
- arm_scmi: don't mess with -&amp;gt;d_parent-&amp;gt;d_name (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
- firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
- redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
- i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
- i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
- tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
- tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
- tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
- fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
- tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
- function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
- tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
- tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
- x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
- tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
- tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
- tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
- tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
- ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
- selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
- tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
- tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
- tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
- fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
- fgraph: Initialize ftrace_ops-&amp;gt;private for function graph ops (Jerome Marchand) [RHEL-151695]
- ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
- tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
- tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
- selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
- tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
- tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
- ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
- ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
- ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
- Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
- tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
- ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
- powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
- selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
- selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
- tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
- ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
- Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
- arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
- atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
- fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
- tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
- ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
- docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
- tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
- md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
- md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
- block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
- block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&amp;gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&amp;gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>aspnetcore-targeting-pack-8.0-8.0.25-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:16:17 AM GMT</pubDate>
      <guid isPermaLink="false">df3755fd01b7eb040b106f47bfd0ffd4366e94ccdbb1713677f06e4c5f55fbad</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/aspnetcore-targeting-pack-8.0-8.0.25-2.el10.x86_64.rpm</link>
      <description><p><strong>aspnetcore-targeting-pack-8.0</strong> - Targeting Pack for Microsoft.AspNetCore.App 8.0&lt;br /&gt;</p>

<p>This package provides a targeting pack for Microsoft.AspNetCore.App 8.0&lt;br /&gt;
that allows developers to compile against and target Microsoft.AspNetCore.App 8.0&lt;br /&gt;
applications using the .NET SDK.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 8.0.125-2
- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.124-2
- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.123-2
- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>aspnetcore-runtime-dbg-8.0-8.0.25-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:16:17 AM GMT</pubDate>
      <guid isPermaLink="false">e56fb97040893942ef3cf240a7c2e091cf9171cb995f8f1b43e89d498d5a7c77</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/aspnetcore-runtime-dbg-8.0-8.0.25-2.el10.x86_64.rpm</link>
      <description><p><strong>aspnetcore-runtime-dbg-8.0</strong> - Managed debug symbols for the ASP.NET Core 8.0 runtime&lt;br /&gt;</p>

<p>This package contains the managed symbol (pdb) files useful to debug the&lt;br /&gt;
managed parts of the ASP.NET Core runtime itself.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 8.0.125-2
- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.124-2
- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.123-2
- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>aspnetcore-runtime-8.0-8.0.25-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:16:17 AM GMT</pubDate>
      <guid isPermaLink="false">8e9d9fa7333160a82db150f8935be756d41027c17e10b1851446e9dcde0cca3b</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/aspnetcore-runtime-8.0-8.0.25-2.el10.x86_64.rpm</link>
      <description><p><strong>aspnetcore-runtime-8.0</strong> - ASP.NET Core 8.0 runtime&lt;br /&gt;</p>

<p>The ASP.NET Core runtime contains everything needed to run .NET&lt;br /&gt;
web applications. It includes a high performance Virtual Machine as&lt;br /&gt;
well as the framework libraries used by .NET applications.&lt;br /&gt;
&lt;br /&gt;
ASP.NET Core is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform web applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 8.0.125-2
- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.124-2
- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.123-2
- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-templates-8.0-8.0.125-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:16:17 AM GMT</pubDate>
      <guid isPermaLink="false">afff94cee71819087a6629938985ff79ba96dcad2d007959db314fb42934aea8</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dotnet-templates-8.0-8.0.125-2.el10.x86_64.rpm</link>
      <description><p><strong>dotnet-templates-8.0</strong> - .NET 8.0 templates&lt;br /&gt;</p>

<p>This package contains templates used by the .NET SDK.&lt;br /&gt;
&lt;br /&gt;
.NET is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 8.0.125-2
- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.124-2
- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.123-2
- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-targeting-pack-8.0-8.0.25-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:16:17 AM GMT</pubDate>
      <guid isPermaLink="false">2755c29638c1e505b1100af657e31e0ad4cf144e6fe4054155f2ef8e5e99fda1</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dotnet-targeting-pack-8.0-8.0.25-2.el10.x86_64.rpm</link>
      <description><p><strong>dotnet-targeting-pack-8.0</strong> - Targeting Pack for Microsoft.NETCore.App 8.0&lt;br /&gt;</p>

<p>This package provides a targeting pack for Microsoft.NETCore.App 8.0&lt;br /&gt;
that allows developers to compile against and target Microsoft.NETCore.App 8.0&lt;br /&gt;
applications using the .NET SDK.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 8.0.125-2
- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.124-2
- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.123-2
- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-sdk-dbg-8.0-8.0.125-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:16:17 AM GMT</pubDate>
      <guid isPermaLink="false">95fb3eb3273989fb3163dec5c80d7bdbd1394f4a8f56cd047a4a0eb1363c3dae</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dotnet-sdk-dbg-8.0-8.0.125-2.el10.x86_64.rpm</link>
      <description><p><strong>dotnet-sdk-dbg-8.0</strong> - Managed debug symbols for the .NET 8.0 Software Development Kit&lt;br /&gt;</p>

<p>This package contains the managed symbol (pdb) files useful to debug the .NET&lt;br /&gt;
Software Development Kit (SDK) itself.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 8.0.125-2
- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.124-2
- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.123-2
- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-sdk-8.0-8.0.125-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:16:17 AM GMT</pubDate>
      <guid isPermaLink="false">40de384a0a99e3403831d30210c2e8e0e6d460c2110aa27eff84f3d9f284ded4</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dotnet-sdk-8.0-8.0.125-2.el10.x86_64.rpm</link>
      <description><p><strong>dotnet-sdk-8.0</strong> - .NET 8.0 Software Development Kit&lt;br /&gt;</p>

<p>The .NET SDK is a collection of command line applications to&lt;br /&gt;
create, build, publish and run .NET applications.&lt;br /&gt;
&lt;br /&gt;
.NET is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 8.0.125-2
- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.124-2
- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.123-2
- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-runtime-dbg-8.0-8.0.25-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:16:17 AM GMT</pubDate>
      <guid isPermaLink="false">e4202ea3d52b03596f73334cc0f2a7e89c3d48404d537a8c83d934f754eba6f5</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dotnet-runtime-dbg-8.0-8.0.25-2.el10.x86_64.rpm</link>
      <description><p><strong>dotnet-runtime-dbg-8.0</strong> - Managed debug symbols NET 8.0 runtime&lt;br /&gt;</p>

<p>This package contains the managed symbol (pdb) files useful to debug the&lt;br /&gt;
managed parts of the .NET runtime itself.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 8.0.125-2
- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.124-2
- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.123-2
- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-runtime-8.0-8.0.25-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:16:17 AM GMT</pubDate>
      <guid isPermaLink="false">f2f719ffb82af41e155fd4fdab8ae384183ad1b471199ad958bcb04620f76e3d</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dotnet-runtime-8.0-8.0.25-2.el10.x86_64.rpm</link>
      <description><p><strong>dotnet-runtime-8.0</strong> - NET 8.0 runtime&lt;br /&gt;</p>

<p>The .NET runtime contains everything needed to run .NET applications.&lt;br /&gt;
It includes a high performance Virtual Machine as well as the framework&lt;br /&gt;
libraries used by .NET applications.&lt;br /&gt;
&lt;br /&gt;
.NET is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 8.0.125-2
- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.124-2
- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.123-2
- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-hostfxr-8.0-8.0.25-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:16:17 AM GMT</pubDate>
      <guid isPermaLink="false">55d33402a24124c864626720473ea618f9ef1db3ac8cc2410224683724d63e32</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dotnet-hostfxr-8.0-8.0.25-2.el10.x86_64.rpm</link>
      <description><p><strong>dotnet-hostfxr-8.0</strong> - .NET command line host resolver&lt;br /&gt;</p>

<p>The .NET host resolver contains the logic to resolve and select&lt;br /&gt;
the right version of the .NET SDK or runtime to use.&lt;br /&gt;
&lt;br /&gt;
.NET is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 8.0.125-2
- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.124-2
- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.123-2
- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-apphost-pack-8.0-8.0.25-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:16:17 AM GMT</pubDate>
      <guid isPermaLink="false">05c8fab0d0655982f67cf927ba0fd72f00d3f18eae3802c9e921fcba7d523d06</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dotnet-apphost-pack-8.0-8.0.25-2.el10.x86_64.rpm</link>
      <description><p><strong>dotnet-apphost-pack-8.0</strong> - Targeting Pack for Microsoft.NETCore.App 8.0&lt;br /&gt;</p>

<p>This package provides a targeting pack for Microsoft.NETCore.App 8.0&lt;br /&gt;
that allows developers to compile against and target Microsoft.NETCore.App 8.0&lt;br /&gt;
applications using the .NET SDK.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 8.0.125-2
- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.124-2
- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.123-2
- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>aspnetcore-runtime-dbg-9.0-9.0.14-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:08:24 AM GMT</pubDate>
      <guid isPermaLink="false">fdac9d40fedce1ffe03efc36cec376391187967bbaabac91860bc4f935166d1d</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/aspnetcore-runtime-dbg-9.0-9.0.14-2.el10.x86_64.rpm</link>
      <description><p><strong>aspnetcore-runtime-dbg-9.0</strong> - Managed debug symbols for the ASP.NET Core 9.0 runtime&lt;br /&gt;</p>

<p>This package contains the managed symbol (pdb) files useful to debug the&lt;br /&gt;
managed parts of the ASP.NET Core runtime itself.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 9.0.115-2
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.114-2
- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.113-2
- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>aspnetcore-runtime-9.0-9.0.14-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:08:24 AM GMT</pubDate>
      <guid isPermaLink="false">6a300dfbc4496937c47a65d702735cb1959edaf1ee4a9aa4ef560e3aef3403ef</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/aspnetcore-runtime-9.0-9.0.14-2.el10.x86_64.rpm</link>
      <description><p><strong>aspnetcore-runtime-9.0</strong> - ASP.NET Core 9.0 runtime&lt;br /&gt;</p>

<p>The ASP.NET Core runtime contains everything needed to run .NET&lt;br /&gt;
web applications. It includes a high performance Virtual Machine as&lt;br /&gt;
well as the framework libraries used by .NET applications.&lt;br /&gt;
&lt;br /&gt;
ASP.NET Core is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform web applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 9.0.115-2
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.114-2
- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.113-2
- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>netstandard-targeting-pack-2.1-9.0.115-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:08:24 AM GMT</pubDate>
      <guid isPermaLink="false">f3fb631c3037a37ee922c34b1633b9c3fb669818e8cbafbfc104c86606546098</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/netstandard-targeting-pack-2.1-9.0.115-2.el10.x86_64.rpm</link>
      <description><p><strong>netstandard-targeting-pack-2.1</strong> - Targeting Pack for NETStandard.Library 2.1&lt;br /&gt;</p>

<p>This package provides a targeting pack for NETStandard.Library 2.1&lt;br /&gt;
that allows developers to compile against and target NETStandard.Library 2.1&lt;br /&gt;
applications using the .NET SDK.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 9.0.115-2
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.114-2
- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.113-2
- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-templates-9.0-9.0.115-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:08:24 AM GMT</pubDate>
      <guid isPermaLink="false">099a038636f363a8471fdc1d649b479e8205d779fae60e3126b4175e989a300c</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dotnet-templates-9.0-9.0.115-2.el10.x86_64.rpm</link>
      <description><p><strong>dotnet-templates-9.0</strong> - .NET 9.0 templates&lt;br /&gt;</p>

<p>This package contains templates used by the .NET SDK.&lt;br /&gt;
&lt;br /&gt;
.NET is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 9.0.115-2
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.114-2
- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.113-2
- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-targeting-pack-9.0-9.0.14-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:08:24 AM GMT</pubDate>
      <guid isPermaLink="false">cd24806584135d0cb2a3047576646e4443628ba0f4a2eec53c8a6271248c2463</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dotnet-targeting-pack-9.0-9.0.14-2.el10.x86_64.rpm</link>
      <description><p><strong>dotnet-targeting-pack-9.0</strong> - Targeting Pack for Microsoft.NETCore.App 9.0&lt;br /&gt;</p>

<p>This package provides a targeting pack for Microsoft.NETCore.App 9.0&lt;br /&gt;
that allows developers to compile against and target Microsoft.NETCore.App 9.0&lt;br /&gt;
applications using the .NET SDK.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 9.0.115-2
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.114-2
- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.113-2
- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-sdk-dbg-9.0-9.0.115-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:08:24 AM GMT</pubDate>
      <guid isPermaLink="false">038d590cab170c76624fcb40bd20284ae24cef0fa36e32196c48aeea15e50993</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dotnet-sdk-dbg-9.0-9.0.115-2.el10.x86_64.rpm</link>
      <description><p><strong>dotnet-sdk-dbg-9.0</strong> - Managed debug symbols for the .NET 9.0 Software Development Kit&lt;br /&gt;</p>

<p>This package contains the managed symbol (pdb) files useful to debug the .NET&lt;br /&gt;
Software Development Kit (SDK) itself.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 9.0.115-2
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.114-2
- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.113-2
- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-sdk-aot-9.0-9.0.115-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:08:24 AM GMT</pubDate>
      <guid isPermaLink="false">b1f14b31bed8914ee0c06f0576a352ec44239afb277f292af8802d424540f660</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dotnet-sdk-aot-9.0-9.0.115-2.el10.x86_64.rpm</link>
      <description><p><strong>dotnet-sdk-aot-9.0</strong> - Ahead-of-Time (AOT) support for the .NET 9.0 Software Development Kit&lt;br /&gt;</p>

<p>This package provides Ahead-of-time (AOT) compilation support for the .NET SDK.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 9.0.115-2
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.114-2
- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.113-2
- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-sdk-9.0-9.0.115-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:08:24 AM GMT</pubDate>
      <guid isPermaLink="false">22c3aa0742e20d634a5b1de08864284a682831bc0340f4ee62080b597dd28c0d</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dotnet-sdk-9.0-9.0.115-2.el10.x86_64.rpm</link>
      <description><p><strong>dotnet-sdk-9.0</strong> - .NET 9.0 Software Development Kit&lt;br /&gt;</p>

<p>The .NET SDK is a collection of command line applications to&lt;br /&gt;
create, build, publish and run .NET applications.&lt;br /&gt;
&lt;br /&gt;
.NET is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 9.0.115-2
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.114-2
- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.113-2
- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-runtime-dbg-9.0-9.0.14-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:08:24 AM GMT</pubDate>
      <guid isPermaLink="false">8537b37f2a8e6c0d61419a70cb8c99fe3622652fcdb301cb62cfe1719f29f14a</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dotnet-runtime-dbg-9.0-9.0.14-2.el10.x86_64.rpm</link>
      <description><p><strong>dotnet-runtime-dbg-9.0</strong> - Managed debug symbols NET 9.0 runtime&lt;br /&gt;</p>

<p>This package contains the managed symbol (pdb) files useful to debug the&lt;br /&gt;
managed parts of the .NET runtime itself.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 9.0.115-2
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.114-2
- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.113-2
- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-runtime-9.0-9.0.14-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:08:24 AM GMT</pubDate>
      <guid isPermaLink="false">ef08c8811eabc0e0aa12f5175877bbcedf1990fb843c7206c5ed1e4b9062ae2d</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dotnet-runtime-9.0-9.0.14-2.el10.x86_64.rpm</link>
      <description><p><strong>dotnet-runtime-9.0</strong> - NET 9.0 runtime&lt;br /&gt;</p>

<p>The .NET runtime contains everything needed to run .NET applications.&lt;br /&gt;
It includes a high performance Virtual Machine as well as the framework&lt;br /&gt;
libraries used by .NET applications.&lt;br /&gt;
&lt;br /&gt;
.NET is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 9.0.115-2
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.114-2
- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.113-2
- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-hostfxr-9.0-9.0.14-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:08:24 AM GMT</pubDate>
      <guid isPermaLink="false">ff205731a533a54f36189db8790183b2355568e29edf3007e39f2a4b3383489c</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dotnet-hostfxr-9.0-9.0.14-2.el10.x86_64.rpm</link>
      <description><p><strong>dotnet-hostfxr-9.0</strong> - .NET command line host resolver&lt;br /&gt;</p>

<p>The .NET host resolver contains the logic to resolve and select&lt;br /&gt;
the right version of the .NET SDK or runtime to use.&lt;br /&gt;
&lt;br /&gt;
.NET is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 9.0.115-2
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.114-2
- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.113-2
- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-apphost-pack-9.0-9.0.14-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:08:24 AM GMT</pubDate>
      <guid isPermaLink="false">756d2ea5c58ad217fdd06fc67deae2b1435687e53cb8a641b0221d4fb14e806d</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dotnet-apphost-pack-9.0-9.0.14-2.el10.x86_64.rpm</link>
      <description><p><strong>dotnet-apphost-pack-9.0</strong> - Targeting Pack for Microsoft.NETCore.App 9.0&lt;br /&gt;</p>

<p>This package provides a targeting pack for Microsoft.NETCore.App 9.0&lt;br /&gt;
that allows developers to compile against and target Microsoft.NETCore.App 9.0&lt;br /&gt;
applications using the .NET SDK.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 9.0.115-2
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.114-2
- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.113-2
- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>aspnetcore-targeting-pack-9.0-9.0.14-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 11:08:24 AM GMT</pubDate>
      <guid isPermaLink="false">160ace9d8a6609af2c9891efbf55a7d49a98d2f7f48dc0eb090d279579a7c891</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/aspnetcore-targeting-pack-9.0-9.0.14-2.el10.x86_64.rpm</link>
      <description><p><strong>aspnetcore-targeting-pack-9.0</strong> - Targeting Pack for Microsoft.AspNetCore.App 9.0&lt;br /&gt;</p>

<p>This package provides a targeting pack for Microsoft.AspNetCore.App 9.0&lt;br /&gt;
that allows developers to compile against and target Microsoft.AspNetCore.App 9.0&lt;br /&gt;
applications using the .NET SDK.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 9.0.115-2
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.114-2
- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.113-2
- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gnome-connections-47.2.1-6.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 10:43:40 AM GMT</pubDate>
      <guid isPermaLink="false">2eaa0cc7968d33f22dc22314ffc254b560cd7d500ee248a42ba4e324b8a88a65</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/gnome-connections-47.2.1-6.el10.x86_64.rpm</link>
      <description><p><strong>gnome-connections</strong> - A remote desktop client for the GNOME desktop environment&lt;br /&gt;</p>

<p>Connections is a remote desktop client for the GNOME desktop environment.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - Marek Kasik &amp;lt;mkasik@redhat.com&amp;gt; - 47.2.1-6
- Propagate cursor changes
- Resolves: RHEL-153847

Fri, 20 Mar 2026 GMT - Marek Kasik &amp;lt;mkasik@redhat.com&amp;gt; - 47.2.1-5
- Fix focus chain of authentication dialog
- Resolves: RHEL-153842

Fri, 27 Feb 2026 GMT - Marek Kasik &amp;lt;mkasik@redhat.com&amp;gt; - 47.2.1-4
- Check initialization of RDP
- Resolves: RHEL-143806

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gstreamer1-plugins-ugly-free-1.26.7-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 10:01:23 AM GMT</pubDate>
      <guid isPermaLink="false">93cd57fa54d976479ebd9b7d9b68832a3293781e51b5ffce4731bc06d6d3a12b</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/gstreamer1-plugins-ugly-free-1.26.7-2.el10.x86_64.rpm</link>
      <description><p><strong>gstreamer1-plugins-ugly-free</strong> - GStreamer streaming media framework "ugly" plugins&lt;br /&gt;</p>

<p>GStreamer is a streaming media framework, based on graphs of elements which&lt;br /&gt;
operate on media data.&lt;br /&gt;
&lt;br /&gt;
This package contains plug-ins whose license is not fully compatible with LGPL.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.7-2
- Add patches for CVE-2026-2920 and CVE-2026-2922
  Resolves: RHEL-156045, RHEL-156176

Tue, 04 Nov 2025 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.7-1
- Update to 1.26.7
  Resolves: RHEL-126057

Tue, 17 Jun 2025 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.2-1
- Update to 1.26.2
  Resolves: DESKTOP-1858

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gstreamer1-plugins-bad-free-libs-1.26.7-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 09:55:31 AM GMT</pubDate>
      <guid isPermaLink="false">a51438f3507b1e78ffd06e040f60d5ccf4b676dc4192cceb2cebd6ef4683be68</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/gstreamer1-plugins-bad-free-libs-1.26.7-2.el10.x86_64.rpm</link>
      <description><p><strong>gstreamer1-plugins-bad-free-libs</strong> - Runtime libraries for the GStreamer media framework "bad" plug-ins&lt;br /&gt;</p>

<p>GStreamer is a streaming media framework, based on graphs of elements which&lt;br /&gt;
operate on media data.&lt;br /&gt;
&lt;br /&gt;
This package contains the runtime libraries for plugins that&lt;br /&gt;
aren't tested well enough, or the code is not of good enough quality.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.7-2
- Add patches for CVE-2026-2923 and CVE-2026-3082
  Resolves: RHEL-156118, RHEL-156189

Tue, 04 Nov 2025 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.7-1
- Update to 1.26.7
  Resolves: RHEL-126057

Tue, 17 Jun 2025 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.2-1
- Update to 1.26.2
  Resolves: DESKTOP-1858

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gstreamer1-plugins-bad-free-1.26.7-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 09:55:31 AM GMT</pubDate>
      <guid isPermaLink="false">abae1aa289e8f7a7eb0b2057a60b5d3103f18013b551db5d703f95f557f85e8d</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/gstreamer1-plugins-bad-free-1.26.7-2.el10.x86_64.rpm</link>
      <description><p><strong>gstreamer1-plugins-bad-free</strong> - GStreamer streaming media framework "bad" plugins&lt;br /&gt;</p>

<p>GStreamer is a streaming media framework, based on graphs of elements which&lt;br /&gt;
operate on media data.&lt;br /&gt;
&lt;br /&gt;
This package contains plug-ins that aren't tested well enough, or the code&lt;br /&gt;
is not of good enough quality.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.7-2
- Add patches for CVE-2026-2923 and CVE-2026-3082
  Resolves: RHEL-156118, RHEL-156189

Tue, 04 Nov 2025 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.7-1
- Update to 1.26.7
  Resolves: RHEL-126057

Tue, 17 Jun 2025 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.2-1
- Update to 1.26.2
  Resolves: DESKTOP-1858

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gstreamer1-plugins-good-gtk-1.26.7-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 09:48:34 AM GMT</pubDate>
      <guid isPermaLink="false">cb71d0f510c039ac5e972129e712e5f81f97d171b8d981044ec3c6bae131fc51</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/gstreamer1-plugins-good-gtk-1.26.7-2.el10.x86_64.rpm</link>
      <description><p><strong>gstreamer1-plugins-good-gtk</strong> - GStreamer "good" plugins gtk plugin&lt;br /&gt;</p>

<p>GStreamer is a streaming media framework, based on graphs of elements which&lt;br /&gt;
operate on media data.&lt;br /&gt;
&lt;br /&gt;
GStreamer Good Plugins is a collection of well-supported plugins of&lt;br /&gt;
good quality and under the LGPL license.&lt;br /&gt;
&lt;br /&gt;
This package (gstreamer1-plugins-good-gtk) contains the gtksink output plugin.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.7-2
- Add patch for CVE-2026-3083 and CVE-2026-3085
  Resolves: RHEL-156142, RHEL-156119

Tue, 04 Nov 2025 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.7-1
- Update to 1.26.7
  Resolves: RHEL-126057

Tue, 17 Jun 2025 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.2-1
- Update to 1.26.2
  Resolves: DESKTOP-1858

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gstreamer1-plugins-good-1.26.7-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 09:48:34 AM GMT</pubDate>
      <guid isPermaLink="false">6f2d4d47a0f7969782f722913e3b5ad28b568f7df63f2960316a33df3373f44c</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/gstreamer1-plugins-good-1.26.7-2.el10.x86_64.rpm</link>
      <description><p><strong>gstreamer1-plugins-good</strong> - GStreamer plugins with good code and licensing&lt;br /&gt;</p>

<p>GStreamer is a streaming media framework, based on graphs of filters which&lt;br /&gt;
operate on media data. Applications using this library can do anything&lt;br /&gt;
from real-time sound processing to playing videos, and just about anything&lt;br /&gt;
else media-related.  Its plugin-based architecture means that new data&lt;br /&gt;
types or processing capabilities can be added simply by installing new&lt;br /&gt;
plugins.&lt;br /&gt;
&lt;br /&gt;
GStreamer Good Plugins is a collection of well-supported plugins of&lt;br /&gt;
good quality and under the LGPL license.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.7-2
- Add patch for CVE-2026-3083 and CVE-2026-3085
  Resolves: RHEL-156142, RHEL-156119

Tue, 04 Nov 2025 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.7-1
- Update to 1.26.7
  Resolves: RHEL-126057

Tue, 17 Jun 2025 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.2-1
- Update to 1.26.2
  Resolves: DESKTOP-1858

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dnf-bootc-4.20.0-23.el10.noarch</title>
      <pubDate>Tue, 31 Mar 2026 09:48:18 AM GMT</pubDate>
      <guid isPermaLink="false">0861de9448d7a2815bd26eb4903e0e11d8b666ac1d8731acd51eeb6b535af851</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dnf-bootc-4.20.0-23.el10.noarch.rpm</link>
      <description><p><strong>dnf-bootc</strong> - Package manager - additional bootc dependencies&lt;br /&gt;</p>

<p>Additional dependencies needed to perform transactions on booted bootc (bootable containers) systems.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Petr Pisar &amp;lt;ppisar@redhat.com&amp;gt; - 4.20.0-23
- Preserve ACL when rotating logs (RHEL-123670)

Wed, 25 Mar 2026 GMT - Evan Goode &amp;lt;egoode@redhat.com&amp;gt; - 4.20.0-22
- bootc: unlock only if /usr is read-only (RHEL-145780)

Mon, 16 Feb 2026 GMT - Ales Matej &amp;lt;amatej@redhat.com&amp;gt; - 4.20.0-21
- autoremove: when a dangling protected dependency is found produce a warning
  and skip it (RHEL-128445)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gstreamer1-plugins-base-tools-1.26.7-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 09:25:24 AM GMT</pubDate>
      <guid isPermaLink="false">4e69e61901eeb1bb51e664f9baed02da63c1886481eeedb9b4505d4595a52b86</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/gstreamer1-plugins-base-tools-1.26.7-2.el10.x86_64.rpm</link>
      <description><p><strong>gstreamer1-plugins-base-tools</strong> - Tools for GStreamer streaming media framework base plugins&lt;br /&gt;</p>

<p>GStreamer is a streaming media framework, based on graphs of filters which&lt;br /&gt;
operate on media data. Applications using this library can do anything&lt;br /&gt;
from real-time sound processing to playing videos, and just about anything&lt;br /&gt;
else media-related.  Its plugin-based architecture means that new data&lt;br /&gt;
types or processing capabilities can be added simply by installing new&lt;br /&gt;
plug-ins.&lt;br /&gt;
&lt;br /&gt;
This package contains the command-line tools for the base plugins.&lt;br /&gt;
These include:&lt;br /&gt;
&lt;br /&gt;
* gst-discoverer</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 31 Mar 2025 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.7-2
- Add patch for CVE-2026-2921
  Resolves: RHEL-156137

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gstreamer1-plugins-base-devel-1.26.7-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 09:25:24 AM GMT</pubDate>
      <guid isPermaLink="false">3ab7b29610710a43e4460b62966d6117a6be58024b7192b4915bb6907404f2bc</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/gstreamer1-plugins-base-devel-1.26.7-2.el10.x86_64.rpm</link>
      <description><p><strong>gstreamer1-plugins-base-devel</strong> - GStreamer Base Plugins Development files&lt;br /&gt;</p>

<p>The gstreamer1-plugins-base-devel package contains libraries and header files&lt;br /&gt;
for developing applications that use gstreamer1-plugins-base.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 31 Mar 2025 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.7-2
- Add patch for CVE-2026-2921
  Resolves: RHEL-156137

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gstreamer1-plugins-base-1.26.7-2.el10.x86_64</title>
      <pubDate>Tue, 31 Mar 2026 09:25:24 AM GMT</pubDate>
      <guid isPermaLink="false">73de80457bc9b2a1047800c553e3af162442472d9a8c605494523d4ab24dac27</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/gstreamer1-plugins-base-1.26.7-2.el10.x86_64.rpm</link>
      <description><p><strong>gstreamer1-plugins-base</strong> - GStreamer streaming media framework base plugins&lt;br /&gt;</p>

<p>GStreamer is a streaming media framework, based on graphs of filters which&lt;br /&gt;
operate on media data. Applications using this library can do anything&lt;br /&gt;
from real-time sound processing to playing videos, and just about anything&lt;br /&gt;
else media-related.  Its plugin-based architecture means that new data&lt;br /&gt;
types or processing capabilities can be added simply by installing new&lt;br /&gt;
plug-ins.&lt;br /&gt;
&lt;br /&gt;
This package contains a set of well-maintained base plug-ins.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 31 Mar 2025 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.7-2
- Add patch for CVE-2026-2921
  Resolves: RHEL-156137

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>aspnetcore-targeting-pack-10.0-10.0.4-2.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 05:19:06 PM GMT</pubDate>
      <guid isPermaLink="false">0f9fa6db712f1094e12ca981893720df4c30791043293f75f3616dd0d07533f9</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/aspnetcore-targeting-pack-10.0-10.0.4-2.el10.x86_64.rpm</link>
      <description><p><strong>aspnetcore-targeting-pack-10.0</strong> - Targeting Pack for Microsoft.AspNetCore.App 10.0&lt;br /&gt;</p>

<p>This package provides a targeting pack for Microsoft.AspNetCore.App 10.0&lt;br /&gt;
that allows developers to compile against and target Microsoft.AspNetCore.App 10.0&lt;br /&gt;
applications using the .NET SDK.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 10.0.104-2
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.103-2
- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.102-2
- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>aspnetcore-runtime-dbg-10.0-10.0.4-2.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 05:19:06 PM GMT</pubDate>
      <guid isPermaLink="false">67792ddcd2e756ca9cd08050d65d44531aa7d5fa463313cc09115e7eed1550f1</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/aspnetcore-runtime-dbg-10.0-10.0.4-2.el10.x86_64.rpm</link>
      <description><p><strong>aspnetcore-runtime-dbg-10.0</strong> - Managed debug symbols for the ASP.NET Core 10.0 runtime&lt;br /&gt;</p>

<p>This package contains the managed symbol (pdb) files useful to debug the&lt;br /&gt;
managed parts of the ASP.NET Core runtime itself.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 10.0.104-2
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.103-2
- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.102-2
- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>aspnetcore-runtime-10.0-10.0.4-2.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 05:19:06 PM GMT</pubDate>
      <guid isPermaLink="false">631c4a6396b78be285a03960d72edd6ef052d3287351a2e71f83d359146044bb</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/aspnetcore-runtime-10.0-10.0.4-2.el10.x86_64.rpm</link>
      <description><p><strong>aspnetcore-runtime-10.0</strong> - ASP.NET Core 10.0 runtime&lt;br /&gt;</p>

<p>The ASP.NET Core runtime contains everything needed to run .NET&lt;br /&gt;
web applications. It includes a high performance Virtual Machine as&lt;br /&gt;
well as the framework libraries used by .NET applications.&lt;br /&gt;
&lt;br /&gt;
ASP.NET Core is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform web applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 10.0.104-2
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.103-2
- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.102-2
- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-templates-10.0-10.0.104-2.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 05:19:06 PM GMT</pubDate>
      <guid isPermaLink="false">f2996f2e849dad9fb466a8ca085e5dd7ce469208e5d98b16eb606dba3271d0e1</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dotnet-templates-10.0-10.0.104-2.el10.x86_64.rpm</link>
      <description><p><strong>dotnet-templates-10.0</strong> - .NET 10.0 templates&lt;br /&gt;</p>

<p>This package contains templates used by the .NET SDK.&lt;br /&gt;
&lt;br /&gt;
.NET is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 10.0.104-2
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.103-2
- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.102-2
- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-targeting-pack-10.0-10.0.4-2.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 05:19:06 PM GMT</pubDate>
      <guid isPermaLink="false">2b0bab9b570bd7301b2ba8cccef7d829cb5a6044972839a1ba5d939fca0b659a</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dotnet-targeting-pack-10.0-10.0.4-2.el10.x86_64.rpm</link>
      <description><p><strong>dotnet-targeting-pack-10.0</strong> - Targeting Pack for Microsoft.NETCore.App 10.0&lt;br /&gt;</p>

<p>This package provides a targeting pack for Microsoft.NETCore.App 10.0&lt;br /&gt;
that allows developers to compile against and target Microsoft.NETCore.App 10.0&lt;br /&gt;
applications using the .NET SDK.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 10.0.104-2
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.103-2
- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.102-2
- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-sdk-dbg-10.0-10.0.104-2.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 05:19:06 PM GMT</pubDate>
      <guid isPermaLink="false">f7dfa64572e5218670c701dc0b7c2508fca7944fd077fcd3df9cabbf8a6f36da</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dotnet-sdk-dbg-10.0-10.0.104-2.el10.x86_64.rpm</link>
      <description><p><strong>dotnet-sdk-dbg-10.0</strong> - Managed debug symbols for the .NET 10.0 Software Development Kit&lt;br /&gt;</p>

<p>This package contains the managed symbol (pdb) files useful to debug the .NET&lt;br /&gt;
Software Development Kit (SDK) itself.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 10.0.104-2
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.103-2
- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.102-2
- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-sdk-aot-10.0-10.0.104-2.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 05:19:06 PM GMT</pubDate>
      <guid isPermaLink="false">8867a6cae693dabb2c1ae44b4786fc163a18755c5e5f6fb883048eb1e1675781</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dotnet-sdk-aot-10.0-10.0.104-2.el10.x86_64.rpm</link>
      <description><p><strong>dotnet-sdk-aot-10.0</strong> - Ahead-of-Time (AOT) support for the .NET 10.0 Software Development Kit&lt;br /&gt;</p>

<p>This package provides Ahead-of-time (AOT) compilation support for the .NET SDK.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 10.0.104-2
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.103-2
- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.102-2
- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-sdk-10.0-10.0.104-2.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 05:19:06 PM GMT</pubDate>
      <guid isPermaLink="false">3238967f64781a2b3644550c4ef97c42cc1c97e7bc8bf0bd12d14fb4416456e6</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dotnet-sdk-10.0-10.0.104-2.el10.x86_64.rpm</link>
      <description><p><strong>dotnet-sdk-10.0</strong> - .NET 10.0 Software Development Kit&lt;br /&gt;</p>

<p>The .NET SDK is a collection of command line applications to&lt;br /&gt;
create, build, publish and run .NET applications.&lt;br /&gt;
&lt;br /&gt;
.NET is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 10.0.104-2
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.103-2
- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.102-2
- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-runtime-dbg-10.0-10.0.4-2.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 05:19:06 PM GMT</pubDate>
      <guid isPermaLink="false">87b5dfd38e29fd179cf04a1fe2eaa36fcb59caa410d4ab5d3868ba1e394bac31</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dotnet-runtime-dbg-10.0-10.0.4-2.el10.x86_64.rpm</link>
      <description><p><strong>dotnet-runtime-dbg-10.0</strong> - Managed debug symbols NET 10.0 runtime&lt;br /&gt;</p>

<p>This package contains the managed symbol (pdb) files useful to debug the&lt;br /&gt;
managed parts of the .NET runtime itself.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 10.0.104-2
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.103-2
- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.102-2
- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-runtime-10.0-10.0.4-2.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 05:19:06 PM GMT</pubDate>
      <guid isPermaLink="false">5b97dd903c6a12357587feb7c7ee2849c6d0d24bb4ce4039ee375170d8667299</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dotnet-runtime-10.0-10.0.4-2.el10.x86_64.rpm</link>
      <description><p><strong>dotnet-runtime-10.0</strong> - NET 10.0 runtime&lt;br /&gt;</p>

<p>The .NET runtime contains everything needed to run .NET applications.&lt;br /&gt;
It includes a high performance Virtual Machine as well as the framework&lt;br /&gt;
libraries used by .NET applications.&lt;br /&gt;
&lt;br /&gt;
.NET is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 10.0.104-2
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.103-2
- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.102-2
- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-hostfxr-10.0-10.0.4-2.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 05:19:06 PM GMT</pubDate>
      <guid isPermaLink="false">119a6eeded54d86e463abe8c0a4d76894a5da9edc7ec72573da22998c812d8fd</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dotnet-hostfxr-10.0-10.0.4-2.el10.x86_64.rpm</link>
      <description><p><strong>dotnet-hostfxr-10.0</strong> - .NET command line host resolver&lt;br /&gt;</p>

<p>The .NET host resolver contains the logic to resolve and select&lt;br /&gt;
the right version of the .NET SDK or runtime to use.&lt;br /&gt;
&lt;br /&gt;
.NET is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 10.0.104-2
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.103-2
- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.102-2
- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-host-10.0.4-2.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 05:19:06 PM GMT</pubDate>
      <guid isPermaLink="false">a30abe4ede1e7b1d1d56e12c2d8075345ae52c9b03a9f1cfc042128ea8d733e5</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dotnet-host-10.0.4-2.el10.x86_64.rpm</link>
      <description><p><strong>dotnet-host</strong> - .NET command line launcher&lt;br /&gt;</p>

<p>The .NET host is a command line program that runs a standalone&lt;br /&gt;
.NET application or launches the SDK.&lt;br /&gt;
&lt;br /&gt;
.NET is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 10.0.104-2
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.103-2
- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.102-2
- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-apphost-pack-10.0-10.0.4-2.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 05:19:06 PM GMT</pubDate>
      <guid isPermaLink="false">a79a9156f52c88e9f62d82a7d7a39698798f73cf0ce817ea083ff144ad8f6a50</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/dotnet-apphost-pack-10.0-10.0.4-2.el10.x86_64.rpm</link>
      <description><p><strong>dotnet-apphost-pack-10.0</strong> - Targeting Pack for Microsoft.NETCore.App 10.0&lt;br /&gt;</p>

<p>This package provides a targeting pack for Microsoft.NETCore.App 10.0&lt;br /&gt;
that allows developers to compile against and target Microsoft.NETCore.App 10.0&lt;br /&gt;
applications using the .NET SDK.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 10.0.104-2
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.103-2
- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.102-2
- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-pr-helper-18:10.1.0-16.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:07 PM GMT</pubDate>
      <guid isPermaLink="false">5a9d60e64eb0624e108aaeada1ea237856022736b77b02247dce78609364fbda</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/qemu-pr-helper-10.1.0-16.el10.x86_64.rpm</link>
      <description><p><strong>qemu-pr-helper</strong> - qemu-pr-helper utility for qemu-kvm&lt;br /&gt;</p>

<p>This package provides the qemu-pr-helper utility that is required for certain&lt;br /&gt;
SCSI features.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-ui-opengl-18:10.1.0-16.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:07 PM GMT</pubDate>
      <guid isPermaLink="false">e2d2cbccaaf343faca83ad2afa9146c64076376ba4d56460742b46175857fe56</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/qemu-kvm-ui-opengl-10.1.0-16.el10.x86_64.rpm</link>
      <description><p><strong>qemu-kvm-ui-opengl</strong> - QEMU opengl support&lt;br /&gt;</p>

<p>This package provides opengl support.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-ui-egl-headless-18:10.1.0-16.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:07 PM GMT</pubDate>
      <guid isPermaLink="false">62491e146b7ec3edbe541979d6eb4a028c29be9badc889b4e7d7b66a08b649b6</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/qemu-kvm-ui-egl-headless-10.1.0-16.el10.x86_64.rpm</link>
      <description><p><strong>qemu-kvm-ui-egl-headless</strong> - QEMU EGL headless driver&lt;br /&gt;</p>

<p>This package provides the additional egl-headless UI for QEMU.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-tools-18:10.1.0-16.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:07 PM GMT</pubDate>
      <guid isPermaLink="false">8511891318d88f5da992390e3a0b99fee8c1f197625b02c204e12717bc053b7a</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/qemu-kvm-tools-10.1.0-16.el10.x86_64.rpm</link>
      <description><p><strong>qemu-kvm-tools</strong> - qemu-kvm support tools&lt;br /&gt;</p>

<p>qemu-kvm-tools provides various tools related to qemu-kvm usage.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-docs-18:10.1.0-16.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:07 PM GMT</pubDate>
      <guid isPermaLink="false">9904444c8a910f11ac13d99f2162fe0a3b8fbfd976dcd9e4d225c39353a956a3</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/qemu-kvm-docs-10.1.0-16.el10.x86_64.rpm</link>
      <description><p><strong>qemu-kvm-docs</strong> - qemu-kvm documentation&lt;br /&gt;</p>

<p>qemu-kvm-docs provides documentation files regarding qemu-kvm.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-device-usb-redirect-18:10.1.0-16.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:07 PM GMT</pubDate>
      <guid isPermaLink="false">9c86b91fd784e587daba17a571f6cbedcc76f7a34f527b44b6dc300b19dfa83a</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/qemu-kvm-device-usb-redirect-10.1.0-16.el10.x86_64.rpm</link>
      <description><p><strong>qemu-kvm-device-usb-redirect</strong> - QEMU usbredir support&lt;br /&gt;</p>

<p>This package provides usbredir support.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-device-usb-host-18:10.1.0-16.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:07 PM GMT</pubDate>
      <guid isPermaLink="false">e532d679231ae5e3bdeaff09cb2a6de90246e1e2c188dd0bcfada7a621c949b6</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/qemu-kvm-device-usb-host-10.1.0-16.el10.x86_64.rpm</link>
      <description><p><strong>qemu-kvm-device-usb-host</strong> - QEMU usb host device&lt;br /&gt;</p>

<p>This package provides the USB pass through driver for QEMU.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-device-display-virtio-vga-18:10.1.0-16.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:07 PM GMT</pubDate>
      <guid isPermaLink="false">286b9694ea35e611e9e55bcbdb6b4fdc26a458607536080745d9cc590d810e88</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/qemu-kvm-device-display-virtio-vga-10.1.0-16.el10.x86_64.rpm</link>
      <description><p><strong>qemu-kvm-device-display-virtio-vga</strong> - QEMU virtio-vga display device&lt;br /&gt;</p>

<p>This package provides the virtio-vga display device for QEMU.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-device-display-virtio-gpu-pci-18:10.1.0-16.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:07 PM GMT</pubDate>
      <guid isPermaLink="false">bfab16278bbf6b1dab9d57a7feb9c20b237fa5d551d76c4c79f12b79eb67c7ad</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/qemu-kvm-device-display-virtio-gpu-pci-10.1.0-16.el10.x86_64.rpm</link>
      <description><p><strong>qemu-kvm-device-display-virtio-gpu-pci</strong> - QEMU virtio-gpu-pci display device&lt;br /&gt;</p>

<p>This package provides the virtio-gpu-pci display device for QEMU.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-device-display-virtio-gpu-18:10.1.0-16.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:07 PM GMT</pubDate>
      <guid isPermaLink="false">28de72ca380cff1fbd09f85f173e85ee5cbc2d2f0be6773047e629367d29eaba</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/qemu-kvm-device-display-virtio-gpu-10.1.0-16.el10.x86_64.rpm</link>
      <description><p><strong>qemu-kvm-device-display-virtio-gpu</strong> - QEMU virtio-gpu display device&lt;br /&gt;</p>

<p>This package provides the virtio-gpu display device for QEMU.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-core-18:10.1.0-16.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:07 PM GMT</pubDate>
      <guid isPermaLink="false">305d0b8b92a4bcdb4df164980c2533b7fbc59e43be9f0b2bf831ab52e37d53a1</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/qemu-kvm-core-10.1.0-16.el10.x86_64.rpm</link>
      <description><p><strong>qemu-kvm-core</strong> - qemu-kvm core components&lt;br /&gt;</p>

<p>qemu-kvm is an open source virtualizer that provides hardware&lt;br /&gt;
emulation for the KVM hypervisor. qemu-kvm acts as a virtual&lt;br /&gt;
machine monitor together with the KVM kernel modules, and emulates the&lt;br /&gt;
hardware for a full system such as a PC and its associated peripherals.&lt;br /&gt;
This is a minimalistic installation of qemu-kvm. Functionality provided by&lt;br /&gt;
this package is not ensured and it can change in a future version as some&lt;br /&gt;
functionality can be split out to separate package.&lt;br /&gt;
Before updating this package, it is recommended to check the package&lt;br /&gt;
changelog for information on functionality which might have been moved to&lt;br /&gt;
a separate package to prevent issues due to the moved functionality.&lt;br /&gt;
If apps opt-in to minimalist packaging by depending on qemu-kvm-core, they&lt;br /&gt;
explicitly accept that features may disappear from qemu-kvm-core in future&lt;br /&gt;
updates.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-common-18:10.1.0-16.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:07 PM GMT</pubDate>
      <guid isPermaLink="false">ac713982acceee55d341083258e892e5e95ae1d070b732613d2bfb5a53fe8a03</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/qemu-kvm-common-10.1.0-16.el10.x86_64.rpm</link>
      <description><p><strong>qemu-kvm-common</strong> - QEMU common files needed by all QEMU targets&lt;br /&gt;</p>

<p>qemu-kvm is an open source virtualizer that provides hardware emulation for&lt;br /&gt;
the KVM hypervisor.&lt;br /&gt;
&lt;br /&gt;
This package provides documentation and auxiliary programs used with qemu-kvm.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-block-rbd-18:10.1.0-16.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:07 PM GMT</pubDate>
      <guid isPermaLink="false">0a259638952db3923df03edc3f5a0000adcd8b4f77ce04a0a4eb99a2670d93c1</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/qemu-kvm-block-rbd-10.1.0-16.el10.x86_64.rpm</link>
      <description><p><strong>qemu-kvm-block-rbd</strong> - QEMU Ceph/RBD block driver&lt;br /&gt;</p>

<p>This package provides the additional Ceph/RBD block driver for QEMU.&lt;br /&gt;
&lt;br /&gt;
Install this package if you want to access remote Ceph volumes&lt;br /&gt;
using the rbd protocol.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-block-curl-18:10.1.0-16.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:07 PM GMT</pubDate>
      <guid isPermaLink="false">455672fba930a47304e0b9963cf70f6e5f16c75a4a500c81e001a46714e81077</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/qemu-kvm-block-curl-10.1.0-16.el10.x86_64.rpm</link>
      <description><p><strong>qemu-kvm-block-curl</strong> - QEMU CURL block driver&lt;br /&gt;</p>

<p>This package provides the additional CURL block driver for QEMU.&lt;br /&gt;
&lt;br /&gt;
Install this package if you want to access remote disks over&lt;br /&gt;
http, https, ftp and other transports provided by the CURL library.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-block-blkio-18:10.1.0-16.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:07 PM GMT</pubDate>
      <guid isPermaLink="false">6d5964d3f15cb7ec041ccc7be2bc65eb56fc261cbf2a8ce212e1f0967ee2d72b</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/qemu-kvm-block-blkio-10.1.0-16.el10.x86_64.rpm</link>
      <description><p><strong>qemu-kvm-block-blkio</strong> - QEMU libblkio block drivers&lt;br /&gt;</p>

<p>This package provides the additional libblkio block drivers for QEMU.&lt;br /&gt;
&lt;br /&gt;
Install this package if you want to use virtio-blk-vdpa-blk,&lt;br /&gt;
virtio-blk-vfio-pci, virtio-blk-vhost-user, io_uring, and nvme-io_uring block&lt;br /&gt;
drivers provided by libblkio.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-audio-pa-18:10.1.0-16.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:07 PM GMT</pubDate>
      <guid isPermaLink="false">337990508da3f0017854faf352fc88d62169f79a0556b05598c4e2a05f53ca27</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/qemu-kvm-audio-pa-10.1.0-16.el10.x86_64.rpm</link>
      <description><p><strong>qemu-kvm-audio-pa</strong> - QEMU PulseAudio audio driver&lt;br /&gt;</p>

<p>This package provides the additional PulseAudio audio driver for QEMU.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-18:10.1.0-16.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:07 PM GMT</pubDate>
      <guid isPermaLink="false">807b9c0bcb09233399d647e4242dc41cdefa5cd5c28005757b08601934a6c975</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/qemu-kvm-10.1.0-16.el10.x86_64.rpm</link>
      <description><p><strong>qemu-kvm</strong> - QEMU is a machine emulator and virtualizer&lt;br /&gt;</p>

<p>qemu-kvm is an open source virtualizer that provides hardware&lt;br /&gt;
emulation for the KVM hypervisor. qemu-kvm acts as a virtual&lt;br /&gt;
machine monitor together with the KVM kernel modules, and emulates the&lt;br /&gt;
hardware for a full system such as a PC and its associated peripherals.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-img-18:10.1.0-16.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:07 PM GMT</pubDate>
      <guid isPermaLink="false">ec25ef03212bb114a98a4d0810240860be5025eb239c708641d8dbbc5da10597</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/qemu-img-10.1.0-16.el10.x86_64.rpm</link>
      <description><p><strong>qemu-img</strong> - QEMU command line tool for manipulating disk images&lt;br /&gt;</p>

<p>This package provides a command line tool for manipulating disk images.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-guest-agent-18:10.1.0-16.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:07 PM GMT</pubDate>
      <guid isPermaLink="false">835016b7c2a50a3ad26d73ed271b6d1557805771ce3635db1d6be89f36587543</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/qemu-guest-agent-10.1.0-16.el10.x86_64.rpm</link>
      <description><p><strong>qemu-guest-agent</strong> - QEMU guest agent&lt;br /&gt;</p>

<p>qemu-kvm is an open source virtualizer that provides hardware emulation for&lt;br /&gt;
the KVM hypervisor.&lt;br /&gt;
&lt;br /&gt;
This package provides an agent to run inside guests, which communicates&lt;br /&gt;
with the host over a virtio-serial channel named "org.qemu.guest_agent.0"&lt;br /&gt;
&lt;br /&gt;
This package does not need to be installed on the host OS.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>golang-race-1.26.1-1.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 01:20:44 PM GMT</pubDate>
      <guid isPermaLink="false">6c9e7e2dcafd423f1b6f91deed3c2f0e21c15baab544514bb5906f7a4529721e</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/golang-race-1.26.1-1.el10.x86_64.rpm</link>
      <description><p><strong>golang-race</strong> - Race detetector library object files.&lt;br /&gt;</p>

<p>Binary library objects for Go's race detector.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Alejandro Sáez &amp;lt;asm@redhat.com&amp;gt; - 1.26.1-1
- Update to Go 1.26.1

Thu, 12 Feb 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.7-1
- Update to Go 1.25.7 (fips-1)

Mon, 19 Jan 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.5-1
- Update to Go 1.25.5 (fips-1)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>golang-bin-1.26.1-1.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 01:20:44 PM GMT</pubDate>
      <guid isPermaLink="false">668feed55836907b671ec608c36158325f59c0675ee76fe025aca4b3463b29d3</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/golang-bin-1.26.1-1.el10.x86_64.rpm</link>
      <description><p><strong>golang-bin</strong> - Golang core compiler tools&lt;br /&gt;</p>

<p>Golang core compiler tools</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Alejandro Sáez &amp;lt;asm@redhat.com&amp;gt; - 1.26.1-1
- Update to Go 1.26.1

Thu, 12 Feb 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.7-1
- Update to Go 1.25.7 (fips-1)

Mon, 19 Jan 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.5-1
- Update to Go 1.25.5 (fips-1)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>golang-1.26.1-1.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 01:20:44 PM GMT</pubDate>
      <guid isPermaLink="false">42a7c660efb94d26099e164908af28e21ab53ae78b4936c239aaed25022564d2</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/golang-1.26.1-1.el10.x86_64.rpm</link>
      <description><p><strong>golang</strong> - The Go Programming Language&lt;br /&gt;</p>

<p>The Go Programming Language.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Alejandro Sáez &amp;lt;asm@redhat.com&amp;gt; - 1.26.1-1
- Update to Go 1.26.1

Thu, 12 Feb 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.7-1
- Update to Go 1.25.7 (fips-1)

Mon, 19 Jan 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.5-1
- Update to Go 1.25.5 (fips-1)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>go-toolset-1.26.1-1.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 01:20:44 PM GMT</pubDate>
      <guid isPermaLink="false">55de0e507e917f7507cca931010843204dcebe0883e05ed95bb3c48633cae34f</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/go-toolset-1.26.1-1.el10.x86_64.rpm</link>
      <description><p><strong>go-toolset</strong> - Package that installs go-toolset&lt;br /&gt;</p>

<p>This is the main package for go-toolset.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Alejandro Sáez &amp;lt;asm@redhat.com&amp;gt; - 1.26.1-1
- Update to Go 1.26.1

Thu, 12 Feb 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.7-1
- Update to Go 1.25.7 (fips-1)

Mon, 19 Jan 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.5-1
- Update to Go 1.25.5 (fips-1)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>golang-tests-1.26.1-1.el10.noarch</title>
      <pubDate>Mon, 30 Mar 2026 01:20:39 PM GMT</pubDate>
      <guid isPermaLink="false">39d8e4de363de000d7d4dec5d689c9c68e7c5e114dc0d1f75234f57049ece4f6</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/golang-tests-1.26.1-1.el10.noarch.rpm</link>
      <description><p><strong>golang-tests</strong> - Golang compiler tests for stdlib&lt;br /&gt;</p>

<p>Golang compiler tests for stdlib.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Alejandro Sáez &amp;lt;asm@redhat.com&amp;gt; - 1.26.1-1
- Update to Go 1.26.1

Thu, 12 Feb 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.7-1
- Update to Go 1.25.7 (fips-1)

Mon, 19 Jan 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.5-1
- Update to Go 1.25.5 (fips-1)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>golang-src-1.26.1-1.el10.noarch</title>
      <pubDate>Mon, 30 Mar 2026 01:20:39 PM GMT</pubDate>
      <guid isPermaLink="false">622d6af7646556afcfb0eaafae378ee93fbaa34ead243c28f6fa25a118ceecb6</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/golang-src-1.26.1-1.el10.noarch.rpm</link>
      <description><p><strong>golang-src</strong> - Golang compiler source tree&lt;br /&gt;</p>

<p>Golang compiler source tree</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Alejandro Sáez &amp;lt;asm@redhat.com&amp;gt; - 1.26.1-1
- Update to Go 1.26.1

Thu, 12 Feb 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.7-1
- Update to Go 1.25.7 (fips-1)

Mon, 19 Jan 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.5-1
- Update to Go 1.25.5 (fips-1)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>golang-misc-1.26.1-1.el10.noarch</title>
      <pubDate>Mon, 30 Mar 2026 01:20:39 PM GMT</pubDate>
      <guid isPermaLink="false">1f4bca5bfb88a8954696dc866c212c3432118c5c7c44fb8911fcef0344db8c5c</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/golang-misc-1.26.1-1.el10.noarch.rpm</link>
      <description><p><strong>golang-misc</strong> - Golang compiler miscellaneous sources&lt;br /&gt;</p>

<p>Golang compiler miscellaneous sources.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Alejandro Sáez &amp;lt;asm@redhat.com&amp;gt; - 1.26.1-1
- Update to Go 1.26.1

Thu, 12 Feb 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.7-1
- Update to Go 1.25.7 (fips-1)

Mon, 19 Jan 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.5-1
- Update to Go 1.25.5 (fips-1)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>golang-docs-1.26.1-1.el10.noarch</title>
      <pubDate>Mon, 30 Mar 2026 01:20:39 PM GMT</pubDate>
      <guid isPermaLink="false">c395c2770c88696e23bfd3cdf3585693a9c1bb158f226dbcd427eb72ed6fa2c0</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/golang-docs-1.26.1-1.el10.noarch.rpm</link>
      <description><p><strong>golang-docs</strong> - Golang compiler docs&lt;br /&gt;</p>

<p>Golang compiler docs.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Alejandro Sáez &amp;lt;asm@redhat.com&amp;gt; - 1.26.1-1
- Update to Go 1.26.1

Thu, 12 Feb 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.7-1
- Update to Go 1.25.7 (fips-1)

Mon, 19 Jan 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.5-1
- Update to Go 1.25.5 (fips-1)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mysql-selinux-1.0.15-1.el10.noarch</title>
      <pubDate>Mon, 30 Mar 2026 12:09:35 PM GMT</pubDate>
      <guid isPermaLink="false">550fe40aa28f312fc6712e3555514601d198d78ca6944b687d80082bc42d3f93</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/mysql-selinux-1.0.15-1.el10.noarch.rpm</link>
      <description><p><strong>mysql-selinux</strong> - SELinux policy modules for MySQL and MariaDB packages&lt;br /&gt;</p>

<p>SELinux policy modules for MySQL and MariaDB packages.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 24 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 1.0.15-1
- Update to version 1.0.15
- Fixes mysql-selinux issue
- Related: RHEL-119660

Tue, 15 Jul 2025 GMT - Packit &amp;lt;hello@packit.dev&amp;gt; - 1.0.14-1
- Update to version 1.0.14
- Resolves: rhbz#2380217

Tue, 04 Feb 2025 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 1.0.13-2
- Rebase to 1.0.13

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>nodejs-npm-1:10.9.7-1.22.22.2.1.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 09:27:48 AM GMT</pubDate>
      <guid isPermaLink="false">33f18e2df181e7aa1695bccaa8b8130d385abadccd8a985a89adef2d85088b3d</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/nodejs-npm-10.9.7-1.22.22.2.1.el10.x86_64.rpm</link>
      <description><p><strong>nodejs-npm</strong> - Node.js Package Manager&lt;br /&gt;</p>

<p>npm is a package manager for node.js. You can use it to install and publish&lt;br /&gt;
your node programs. It manages dependencies and does other cool stuff.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.2-1
- Update to version 22.22.2
- introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
- disabled failing tests in nghttp2 due to newer version
- patch for npm/braces CVE-2026-25547

Wed, 25 Mar 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.0-4
- sources: changed ICU version syntax

Tue, 20 Jan 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.0-3
- Bump release to get correct RHEL build

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>nodejs-libs-1:22.22.2-1.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 09:27:48 AM GMT</pubDate>
      <guid isPermaLink="false">0b0cbe9576e22cc1c65016c94cdb9e9dedb343b1f0175c2a7474ab54fcc253a1</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/nodejs-libs-22.22.2-1.el10.x86_64.rpm</link>
      <description><p><strong>nodejs-libs</strong> - Node.js and v8 libraries&lt;br /&gt;</p>

<p>Libraries to support Node.js and provide stable v8 interfaces.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.2-1
- Update to version 22.22.2
- introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
- disabled failing tests in nghttp2 due to newer version
- patch for npm/braces CVE-2026-25547

Wed, 25 Mar 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.0-4
- sources: changed ICU version syntax

Tue, 20 Jan 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.0-3
- Bump release to get correct RHEL build

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>nodejs-full-i18n-1:22.22.2-1.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 09:27:48 AM GMT</pubDate>
      <guid isPermaLink="false">2c947729f9b1966aa74c5bdbb5de2b5339b54c57970732153b247362765a6a96</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/nodejs-full-i18n-22.22.2-1.el10.x86_64.rpm</link>
      <description><p><strong>nodejs-full-i18n</strong> - Non-English locale data for Node.js&lt;br /&gt;</p>

<p>Optional data files to provide full-icu support for Node.js. Remove this&lt;br /&gt;
package to save space if non-English locales are not needed.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.2-1
- Update to version 22.22.2
- introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
- disabled failing tests in nghttp2 due to newer version
- patch for npm/braces CVE-2026-25547

Wed, 25 Mar 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.0-4
- sources: changed ICU version syntax

Tue, 20 Jan 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.0-3
- Bump release to get correct RHEL build

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>nodejs-devel-1:22.22.2-1.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 09:27:48 AM GMT</pubDate>
      <guid isPermaLink="false">5251182ada06f354f17210e48cd82f050e2445d4b910177a321c43701da59c9e</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/nodejs-devel-22.22.2-1.el10.x86_64.rpm</link>
      <description><p><strong>nodejs-devel</strong> - JavaScript runtime - development headers&lt;br /&gt;</p>

<p>Development headers for the Node.js JavaScript runtime.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.2-1
- Update to version 22.22.2
- introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
- disabled failing tests in nghttp2 due to newer version
- patch for npm/braces CVE-2026-25547

Wed, 25 Mar 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.0-4
- sources: changed ICU version syntax

Tue, 20 Jan 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.0-3
- Bump release to get correct RHEL build

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>nodejs-1:22.22.2-1.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 09:27:48 AM GMT</pubDate>
      <guid isPermaLink="false">854625cc62d18342d2244e9ceb1d4019bc0bff40d5d198b565111e6c027503c6</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/nodejs-22.22.2-1.el10.x86_64.rpm</link>
      <description><p><strong>nodejs</strong> - JavaScript runtime&lt;br /&gt;</p>

<p>Node.js is a platform built on Chrome's JavaScript runtime \&lt;br /&gt;
for easily building fast, scalable network applications. \&lt;br /&gt;
Node.js uses an event-driven, non-blocking I/O model that \&lt;br /&gt;
makes it lightweight and efficient, perfect for data-intensive \&lt;br /&gt;
real-time applications that run across distributed devices.}</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.2-1
- Update to version 22.22.2
- introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
- disabled failing tests in nghttp2 due to newer version
- patch for npm/braces CVE-2026-25547

Wed, 25 Mar 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.0-4
- sources: changed ICU version syntax

Tue, 20 Jan 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.0-3
- Bump release to get correct RHEL build

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>nodejs-docs-1:22.22.2-1.el10.noarch</title>
      <pubDate>Mon, 30 Mar 2026 09:27:47 AM GMT</pubDate>
      <guid isPermaLink="false">197c9d115b5eb035bfd3ca29f01b5526c324b66fc1031e0e130479ca81f38275</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/nodejs-docs-22.22.2-1.el10.noarch.rpm</link>
      <description><p><strong>nodejs-docs</strong> - Node.js API documentation&lt;br /&gt;</p>

<p>The API documentation for the Node.js JavaScript runtime.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.2-1
- Update to version 22.22.2
- introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
- disabled failing tests in nghttp2 due to newer version
- patch for npm/braces CVE-2026-25547

Wed, 25 Mar 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.0-4
- sources: changed ICU version syntax

Tue, 20 Jan 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.0-3
- Bump release to get correct RHEL build

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>thunderbird-140.9.0-1.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 08:43:36 AM GMT</pubDate>
      <guid isPermaLink="false">475414b39d8603f443ebd7cba86ee5db85cb17f1f73f8080fe356e9a14f654d9</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/thunderbird-140.9.0-1.el10.x86_64.rpm</link>
      <description><p><strong>thunderbird</strong> - Mozilla Thunderbird mail/newsgroup client&lt;br /&gt;</p>

<p>Mozilla Thunderbird is a standalone mail and newsgroup client.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 23 Mar 2026 GMT - Jan Horak &amp;lt;jhorak@redhat.com&amp;gt; - 140.9.0-1
- Update to 140.9.0 ESR

Mon, 23 Feb 2026 GMT - Jan Horak &amp;lt;jhorak@redhat.com&amp;gt; - 140.8.0-1
- Update to 140.8.0 ESR

Mon, 12 Jan 2026 GMT - Jan Horak &amp;lt;jhorak@redhat.com&amp;gt; - 140.7.0-1
- Update to 140.7.0 ESR

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>firefox-140.9.0-1.el10.x86_64</title>
      <pubDate>Mon, 30 Mar 2026 08:42:40 AM GMT</pubDate>
      <guid isPermaLink="false">41fea7a84d9dfaeacb32090a34d24f9d8b60ad77c4c22f4b04eeaf42be2bbcfe</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/firefox-140.9.0-1.el10.x86_64.rpm</link>
      <description><p><strong>firefox</strong> - Mozilla Firefox Web browser&lt;br /&gt;</p>

<p>Mozilla Firefox is an open-source web browser, designed for standards&lt;br /&gt;
compliance, performance and portability.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Mar 2026 GMT - Jan Horak &amp;lt;jhorak@redhat.com&amp;gt; - 140.9.0-1
- Update to 140.9.0 ESR

Tue, 17 Feb 2026 GMT - Jan Horak &amp;lt;jhorak@redhat.com&amp;gt; - 140.8.0-2
- Update to 140.8.0 ESR

Wed, 07 Jan 2026 GMT - Jan Horak &amp;lt;jhorak@redhat.com&amp;gt; - 140.7.0-1
- Update to 140.7.0 ESR

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>cockpit-storaged-359-1.el10.noarch</title>
      <pubDate>Mon, 30 Mar 2026 07:44:37 AM GMT</pubDate>
      <guid isPermaLink="false">dbc8aeb3220e8b65fafcf2797178fe9e941199efec8228fc726f76fa82b7bddc</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/cockpit-storaged-359-1.el10.noarch.rpm</link>
      <description><p><strong>cockpit-storaged</strong> - Cockpit user interface for storage, using udisks&lt;br /&gt;</p>

<p>The Cockpit component for managing storage.  This package uses udisks.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Packit &amp;lt;hello@packit.dev&amp;gt; - 359-1
- Bug fixes and translation updates

Wed, 18 Mar 2026 GMT - Packit &amp;lt;hello@packit.dev&amp;gt; - 358-1
- Networking: Add Wi-Fi support
- Cockpit Client updated to GTK 4
- Bugfixes and translation updates

Fri, 27 Feb 2026 GMT - Packit &amp;lt;hello@packit.dev&amp;gt; - 357-1
- lib: Use browser context menu on shift
- bridge: support Python 3.14 on old kernels (RHEL 8)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>cockpit-packagekit-359-1.el10.noarch</title>
      <pubDate>Mon, 30 Mar 2026 07:44:37 AM GMT</pubDate>
      <guid isPermaLink="false">ff5e9dbce67bff24e60d872a3f5bc7bd43dbd74578f9981a96b90edbef3de954</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/cockpit-packagekit-359-1.el10.noarch.rpm</link>
      <description><p><strong>cockpit-packagekit</strong> - Cockpit user interface for packages&lt;br /&gt;</p>

<p>The Cockpit components for installing OS updates and Cockpit add-ons,&lt;br /&gt;
via PackageKit.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Packit &amp;lt;hello@packit.dev&amp;gt; - 359-1
- Bug fixes and translation updates

Wed, 18 Mar 2026 GMT - Packit &amp;lt;hello@packit.dev&amp;gt; - 358-1
- Networking: Add Wi-Fi support
- Cockpit Client updated to GTK 4
- Bugfixes and translation updates

Fri, 27 Feb 2026 GMT - Packit &amp;lt;hello@packit.dev&amp;gt; - 357-1
- lib: Use browser context menu on shift
- bridge: support Python 3.14 on old kernels (RHEL 8)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>selinux-policy-devel-42.1.19-1.el10.noarch</title>
      <pubDate>Fri, 27 Mar 2026 03:41:25 PM GMT</pubDate>
      <guid isPermaLink="false">2788a666dd1d82efab615c6cfa57c3bdb1f067c51c3ccef2f5d7039b9dfa583e</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/selinux-policy-devel-42.1.19-1.el10.noarch.rpm</link>
      <description><p><strong>selinux-policy-devel</strong> - SELinux policy development files&lt;br /&gt;</p>

<p>SELinux policy development package.&lt;br /&gt;
This package contains:&lt;br /&gt;
- interfaces, macros, and patterns for policy development&lt;br /&gt;
- a policy example&lt;br /&gt;
- the macro-expander utility&lt;br /&gt;
and some additional files.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Zdenek Pytela &amp;lt;zpytela@redhat.com&amp;gt; - 42.1.19-1
- Label the greetd login manager framework as a display manager
Resolves: RHEL-147638
- Allow sysadm user connect to lvm over a unix stream socket
Resolves: RHEL-153729
- Allow virtqemud map vhost net device
Resolves: RHEL-141541
- Allow virtqemud_t send kill signal to svirt_tcg_t
Resolves: RHEL-69913
- Allow virtqemud_t get priority of a svirt_t process
Resolves: RHEL-69920
- Dontaudit tlshd write generic certificate dirs
Resolves: RHEL-152619
- Allow redis_t to create netlink_rdma_socket
Resolves: RHEL-154814
- Remove "minimum" as a SELINUXTYPE from /etc/selinux/config
Resolves: RHEL-140212

Tue, 10 Mar 2026 GMT - Vit Mojzis &amp;lt;vmojzis@redhat.com&amp;gt; - 42.1.18.4
- Rebuild because of a missing target tag
Resolves: RHEL-152308

Fri, 27 Feb 2026 GMT - Vit Mojzis &amp;lt;vmojzis@redhat.com&amp;gt; - 42.1.18-2
- Rebuild for SELinux userspace 3.10

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3-libnvme-1.16.1-3.el10.x86_64</title>
      <pubDate>Fri, 27 Mar 2026 12:59:53 PM GMT</pubDate>
      <guid isPermaLink="false">08353c013a75b5dc1170c2737074e8b964510ecf0267b8d0724d7722839d65bb</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/python3-libnvme-1.16.1-3.el10.x86_64.rpm</link>
      <description><p><strong>python3-libnvme</strong> - Python3 bindings for libnvme&lt;br /&gt;</p>

<p>This package contains Python bindings for libnvme.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 27 Mar 2026 GMT - Maurizio Lombardi &amp;lt;mlombard@redhat.com&amp;gt; - 1.16.1-3
- Fix linked list corruption (RHEL-156539)

Wed, 19 Nov 2025 GMT - Maurizio Lombardi &amp;lt;mlombard@redhat.com&amp;gt; - 1.16.1-2
- Fix gating tests for RHEL-127740

Wed, 12 Nov 2025 GMT - Maurizio Lombardi &amp;lt;mlombard@redhat.com&amp;gt; - 1.16.1-1
- Rebase to version 1.16.1 (RHEL-127740)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>cockpit-files-39-1.el10.noarch</title>
      <pubDate>Fri, 27 Mar 2026 10:30:48 AM GMT</pubDate>
      <guid isPermaLink="false">75036c360734e67259072517771882fcd0f83e5fa1275e1e15535536d4c49078</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/cockpit-files-39-1.el10.noarch.rpm</link>
      <description><p><strong>cockpit-files</strong> - A filesystem browser for Cockpit&lt;br /&gt;</p>

<p>A filesystem browser for Cockpit</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Packit &amp;lt;hello@packit.dev&amp;gt; - 39-1
- Bugfixes and translation updates

Wed, 18 Mar 2026 GMT - Packit &amp;lt;hello@packit.dev&amp;gt; - 38-1
- Add discard changes dialog
- Bugfixes and translation updates

Thu, 26 Feb 2026 GMT - Packit &amp;lt;hello@packit.dev&amp;gt; - 37-1
- Bug fixes and translation updates

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>cockpit-podman-124-1.el10.noarch</title>
      <pubDate>Fri, 27 Mar 2026 10:30:25 AM GMT</pubDate>
      <guid isPermaLink="false">d14f6956c76e482943fba2c237e4f5870b66bfd2bc8df5d875dedf44fbf53f50</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/cockpit-podman-124-1.el10.noarch.rpm</link>
      <description><p><strong>cockpit-podman</strong> - Cockpit component for Podman containers&lt;br /&gt;</p>

<p>The Cockpit user interface for Podman containers.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Packit &amp;lt;hello@packit.dev&amp;gt; - 124-1
- Translation and dependency updates

Wed, 18 Mar 2026 GMT - Packit &amp;lt;hello@packit.dev&amp;gt; - 123-1
- Don't show Quadlet template units
- Handle quadlet lifecycle errors
- Translation update

Thu, 26 Feb 2026 GMT - Packit &amp;lt;hello@packit.dev&amp;gt; - 122-1
- Show description, version and documentation image labels
- Bug fixes and translation updates

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>openssh-keysign-9.9p1-24.el10.x86_64</title>
      <pubDate>Fri, 27 Mar 2026 09:02:07 AM GMT</pubDate>
      <guid isPermaLink="false">86ff815e9692a26ab97fd3ba64a168167d4cd5878fda4b32bf156071847a5807</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/openssh-keysign-9.9p1-24.el10.x86_64.rpm</link>
      <description><p><strong>openssh-keysign</strong> - A helper program used for host-based authentication&lt;br /&gt;</p>

<p>OpenSSH is a free version of SSH (Secure SHell), a program for logging&lt;br /&gt;
into and executing commands on a remote machine. ssh-keysign is a&lt;br /&gt;
helper program used for host-based authentication disabled by default.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 27 Mar 2026 GMT - Zoltan Fridrich &amp;lt;zfridric@redhat.com&amp;gt; - 9.9p1-24
- Fix typo in SPDX license name
  Resolves: RHEL-161464

Wed, 18 Mar 2026 GMT - Zoltan Fridrich &amp;lt;zfridric@redhat.com&amp;gt; - 9.9p1-23
- Don't negotiate non-FIPS algorithms in ssh-keyscan key exchange in FIPS mode
  Resolves: RHEL-88565
- Fix duplicate audit log entry when destroying ed25519 private keys
  Resolves: RHEL-46782
- Fix typo in GSSAPIProxyS4U2Services
  Related: RHEL-92932

Thu, 12 Mar 2026 GMT - Zoltan Fridrich &amp;lt;zfridric@redhat.com&amp;gt; - 9.9p1-22
- Remove recommendation of p11-kit
  Resolves: RHEL-139070
- Only the first value of MaxStartups, PerSourceNetBlockSize and IPQoS
  in sshd_config should count when defined multiple times
  Resolves: RHEL-150365
- Fix mistracking of MaxStartups process exits in some situations
  Resolves: RHEL-121768
- Fix GSSAPI authentication indicator issues found by AI
  Resolves: RHEL-154309
- CVE-2026-3497: Fix information disclosure or denial of service due
  to uninitialized variables in gssapi-keyex
  Resolves: RHEL-155813

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>openssh-askpass-9.9p1-24.el10.x86_64</title>
      <pubDate>Fri, 27 Mar 2026 09:02:07 AM GMT</pubDate>
      <guid isPermaLink="false">8cf0c75714fd5dbb23972aa29c9036c31b49113fb9591e9b51eed907b9a2b8a2</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/openssh-askpass-9.9p1-24.el10.x86_64.rpm</link>
      <description><p><strong>openssh-askpass</strong> - A passphrase dialog for OpenSSH and X&lt;br /&gt;</p>

<p>OpenSSH is a free version of SSH (Secure SHell), a program for logging&lt;br /&gt;
into and executing commands on a remote machine. This package contains&lt;br /&gt;
an X11 passphrase dialog for OpenSSH.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 27 Mar 2026 GMT - Zoltan Fridrich &amp;lt;zfridric@redhat.com&amp;gt; - 9.9p1-24
- Fix typo in SPDX license name
  Resolves: RHEL-161464

Wed, 18 Mar 2026 GMT - Zoltan Fridrich &amp;lt;zfridric@redhat.com&amp;gt; - 9.9p1-23
- Don't negotiate non-FIPS algorithms in ssh-keyscan key exchange in FIPS mode
  Resolves: RHEL-88565
- Fix duplicate audit log entry when destroying ed25519 private keys
  Resolves: RHEL-46782
- Fix typo in GSSAPIProxyS4U2Services
  Related: RHEL-92932

Thu, 12 Mar 2026 GMT - Zoltan Fridrich &amp;lt;zfridric@redhat.com&amp;gt; - 9.9p1-22
- Remove recommendation of p11-kit
  Resolves: RHEL-139070
- Only the first value of MaxStartups, PerSourceNetBlockSize and IPQoS
  in sshd_config should count when defined multiple times
  Resolves: RHEL-150365
- Fix mistracking of MaxStartups process exits in some situations
  Resolves: RHEL-121768
- Fix GSSAPI authentication indicator issues found by AI
  Resolves: RHEL-154309
- CVE-2026-3497: Fix information disclosure or denial of service due
  to uninitialized variables in gssapi-keyex
  Resolves: RHEL-155813

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3-devel-3.12.12-6.el10.x86_64</title>
      <pubDate>Fri, 27 Mar 2026 08:06:04 AM GMT</pubDate>
      <guid isPermaLink="false">2b9ef8de3de1cbb31eb3d8b40d447e22bd47f6fca551671c4b802ebbcbd41a64</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/python3-devel-3.12.12-6.el10.x86_64.rpm</link>
      <description><p><strong>python3-devel</strong> - Libraries and header files needed for Python development&lt;br /&gt;</p>

<p>This package contains the header files and configuration needed to compile&lt;br /&gt;
Python extension modules (typically written in C or C++), to embed Python&lt;br /&gt;
into other programs, and to make binary distributions for Python libraries.&lt;br /&gt;
&lt;br /&gt;
It also contains the necessary macros to build RPM packages with Python modules&lt;br /&gt;
and 2to3 tool, an automatic source converter from Python 2.X.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 27 Mar 2026 GMT - Tomáš Hrnčiar &amp;lt;thrnciar@redhat.com&amp;gt; - 3.12.12-6
- Security fix for CVE-2026-4519
Resolves: RHEL-158079

Mon, 09 Mar 2026 GMT - Tomáš Hrnčiar &amp;lt;thrnciar@redhat.com&amp;gt; - 3.12.12-5
- Rebuilding previous fixes for different build target
Related: RHEL-143057, RHEL-143109, RHEL-144854

Fri, 27 Feb 2026 GMT - Tomáš Hrnčiar &amp;lt;thrnciar@redhat.com&amp;gt; - 3.12.12-4
- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143057
Resolves: RHEL-143109
Resolves: RHEL-144854

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3-tkinter-3.12.12-6.el10.x86_64</title>
      <pubDate>Fri, 27 Mar 2026 08:06:04 AM GMT</pubDate>
      <guid isPermaLink="false">219eca093f05a730b2f6f346aa0c1a15a05c10f290866d185ee6f40415b2cd5e</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/python3-tkinter-3.12.12-6.el10.x86_64.rpm</link>
      <description><p><strong>python3-tkinter</strong> - A GUI toolkit for Python&lt;br /&gt;</p>

<p>The Tkinter (Tk interface) library is a graphical user interface toolkit for&lt;br /&gt;
the Python programming language.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 27 Mar 2026 GMT - Tomáš Hrnčiar &amp;lt;thrnciar@redhat.com&amp;gt; - 3.12.12-6
- Security fix for CVE-2026-4519
Resolves: RHEL-158079

Mon, 09 Mar 2026 GMT - Tomáš Hrnčiar &amp;lt;thrnciar@redhat.com&amp;gt; - 3.12.12-5
- Rebuilding previous fixes for different build target
Related: RHEL-143057, RHEL-143109, RHEL-144854

Fri, 27 Feb 2026 GMT - Tomáš Hrnčiar &amp;lt;thrnciar@redhat.com&amp;gt; - 3.12.12-4
- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143057
Resolves: RHEL-143109
Resolves: RHEL-144854

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python-unversioned-command-3.12.12-6.el10.noarch</title>
      <pubDate>Fri, 27 Mar 2026 08:06:00 AM GMT</pubDate>
      <guid isPermaLink="false">dc97241935e6c79694755419b945d2c654d9f68c1f3aa27bd921f9a85b379b53</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/python-unversioned-command-3.12.12-6.el10.noarch.rpm</link>
      <description><p><strong>python-unversioned-command</strong> - The "python" command that runs Python 3&lt;br /&gt;</p>

<p>This package contains /usr/bin/python - the "python" command that runs Python 3.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 27 Mar 2026 GMT - Tomáš Hrnčiar &amp;lt;thrnciar@redhat.com&amp;gt; - 3.12.12-6
- Security fix for CVE-2026-4519
Resolves: RHEL-158079

Mon, 09 Mar 2026 GMT - Tomáš Hrnčiar &amp;lt;thrnciar@redhat.com&amp;gt; - 3.12.12-5
- Rebuilding previous fixes for different build target
Related: RHEL-143057, RHEL-143109, RHEL-144854

Fri, 27 Feb 2026 GMT - Tomáš Hrnčiar &amp;lt;thrnciar@redhat.com&amp;gt; - 3.12.12-4
- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143057
Resolves: RHEL-143109
Resolves: RHEL-144854

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>NetworkManager-libreswan-gnome-1.2.30-2.el10.x86_64</title>
      <pubDate>Fri, 27 Mar 2026 02:33:22 AM GMT</pubDate>
      <guid isPermaLink="false">89bc5bb3ebbd167d37eee6eccb59b70d790aae215091e85983ec3fd60e5fdf67</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/NetworkManager-libreswan-gnome-1.2.30-2.el10.x86_64.rpm</link>
      <description><p><strong>NetworkManager-libreswan-gnome</strong> - NetworkManager VPN plugin for libreswan - GNOME files&lt;br /&gt;</p>

<p>This package contains software for integrating VPN capabilities with&lt;br /&gt;
the libreswan server with NetworkManager (GNOME files).</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 27 Mar 2026 GMT - Gris Ge &amp;lt;fge@redhat.com&amp;gt; - 1.2.30-2
- Fix support of leftsubnets and rightsubnets. (RHEL-155372)

Mon, 12 Jan 2026 GMT - Vladimír Beneš &amp;lt;vbenes@redhat.com&amp;gt; - 1.2.30-1
- Upgrade to 1.2.30
- Declare supports-safe-private-file-access (RHEL-140608)

Tue, 09 Dec 2025 GMT - Gris Ge &amp;lt;fge@redhat.com&amp;gt; - 1.2.29-1
- Upgrade to 1.2.29
- Support creating both ends of IPsec (Libreswan) tunnels. (RHEL-67307)
- Support leftprotoport and rightprotoport options. (RHEL-130888)
- Fix error on duplicate key 'phase2alg'. (RHEL-128213)
- Fix import connection with RSA key. (RHEL-125174)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>NetworkManager-libreswan-1.2.30-2.el10.x86_64</title>
      <pubDate>Fri, 27 Mar 2026 02:33:22 AM GMT</pubDate>
      <guid isPermaLink="false">95e4962d146d99585e649b25618ec7eba1103f293a8344cee831ebd531266e56</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/NetworkManager-libreswan-1.2.30-2.el10.x86_64.rpm</link>
      <description><p><strong>NetworkManager-libreswan</strong> - NetworkManager VPN plug-in for IPsec VPN&lt;br /&gt;</p>

<p>This package contains software for integrating the libreswan VPN software&lt;br /&gt;
with NetworkManager and the GNOME desktop</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 27 Mar 2026 GMT - Gris Ge &amp;lt;fge@redhat.com&amp;gt; - 1.2.30-2
- Fix support of leftsubnets and rightsubnets. (RHEL-155372)

Mon, 12 Jan 2026 GMT - Vladimír Beneš &amp;lt;vbenes@redhat.com&amp;gt; - 1.2.30-1
- Upgrade to 1.2.30
- Declare supports-safe-private-file-access (RHEL-140608)

Tue, 09 Dec 2025 GMT - Gris Ge &amp;lt;fge@redhat.com&amp;gt; - 1.2.29-1
- Upgrade to 1.2.29
- Support creating both ends of IPsec (Libreswan) tunnels. (RHEL-67307)
- Support leftprotoport and rightprotoport options. (RHEL-130888)
- Fix error on duplicate key 'phase2alg'. (RHEL-128213)
- Fix import connection with RSA key. (RHEL-125174)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3.14-tkinter-3.14.3-2.el10.x86_64</title>
      <pubDate>Thu, 26 Mar 2026 10:19:23 PM GMT</pubDate>
      <guid isPermaLink="false">75a75bc6416326f9554092f0e2b641646a641b04777a67cac78c2c98975783a4</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/python3.14-tkinter-3.14.3-2.el10.x86_64.rpm</link>
      <description><p><strong>python3.14-tkinter</strong> - A GUI toolkit for Python&lt;br /&gt;</p>

<p>The Tkinter (Tk interface) library is a graphical user interface toolkit for&lt;br /&gt;
the Python programming language.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Lumír Balhar &amp;lt;lbalhar@redhat.com&amp;gt; - 3.14.3-2
- Security fix for CVE-2026-4519
Resolves: RHEL-158114

Wed, 04 Feb 2026 GMT - Karolina Surma &amp;lt;ksurma@redhat.com&amp;gt; - 3.14.3-1
- Update to Python 3.14.3
- Security fixes for CVE-2025-11468, CVE-2026-0672,CVE-2026-0865,
CVE-2025-15282, CVE-2026-1299, CVE-2025-11468, CVE-2025-15366,
CVE-2025-15367
Resolves: RHEL-144855, RHEL-143058, RHEL-143111

Mon, 19 Jan 2026 GMT - Charalampos Stratakis &amp;lt;cstratak@redhat.com&amp;gt; - 3.14.2-3
- Support OpenSSL FIPS mode
- Disable the builtin hashlib hashes except blake2
Related: RHEL-120788

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3.14-libs-3.14.3-2.el10.x86_64</title>
      <pubDate>Thu, 26 Mar 2026 10:19:23 PM GMT</pubDate>
      <guid isPermaLink="false">73526af10a80d8cd4c7ce3b172f1bf403f7f9f10c685f7f29f047eb062ddb1bb</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/python3.14-libs-3.14.3-2.el10.x86_64.rpm</link>
      <description><p><strong>python3.14-libs</strong> - Python runtime libraries&lt;br /&gt;</p>

<p>This package contains runtime libraries for use by Python:&lt;br /&gt;
- the majority of the Python standard library&lt;br /&gt;
- a dynamically linked library for use by applications that embed Python as&lt;br /&gt;
  a scripting language, and by the main "python3.14" executable</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Lumír Balhar &amp;lt;lbalhar@redhat.com&amp;gt; - 3.14.3-2
- Security fix for CVE-2026-4519
Resolves: RHEL-158114

Wed, 04 Feb 2026 GMT - Karolina Surma &amp;lt;ksurma@redhat.com&amp;gt; - 3.14.3-1
- Update to Python 3.14.3
- Security fixes for CVE-2025-11468, CVE-2026-0672,CVE-2026-0865,
CVE-2025-15282, CVE-2026-1299, CVE-2025-11468, CVE-2025-15366,
CVE-2025-15367
Resolves: RHEL-144855, RHEL-143058, RHEL-143111

Mon, 19 Jan 2026 GMT - Charalampos Stratakis &amp;lt;cstratak@redhat.com&amp;gt; - 3.14.2-3
- Support OpenSSL FIPS mode
- Disable the builtin hashlib hashes except blake2
Related: RHEL-120788

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3.14-devel-3.14.3-2.el10.x86_64</title>
      <pubDate>Thu, 26 Mar 2026 10:19:23 PM GMT</pubDate>
      <guid isPermaLink="false">bec31f4839237b8f1c0ae57d8243f2f8802bf833f86c49278c17ef4f5734062b</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/python3.14-devel-3.14.3-2.el10.x86_64.rpm</link>
      <description><p><strong>python3.14-devel</strong> - Libraries and header files needed for Python development&lt;br /&gt;</p>

<p>This package contains the header files and configuration needed to compile&lt;br /&gt;
Python extension modules (typically written in C or C++), to embed Python&lt;br /&gt;
into other programs, and to make binary distributions for Python libraries.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Lumír Balhar &amp;lt;lbalhar@redhat.com&amp;gt; - 3.14.3-2
- Security fix for CVE-2026-4519
Resolves: RHEL-158114

Wed, 04 Feb 2026 GMT - Karolina Surma &amp;lt;ksurma@redhat.com&amp;gt; - 3.14.3-1
- Update to Python 3.14.3
- Security fixes for CVE-2025-11468, CVE-2026-0672,CVE-2026-0865,
CVE-2025-15282, CVE-2026-1299, CVE-2025-11468, CVE-2025-15366,
CVE-2025-15367
Resolves: RHEL-144855, RHEL-143058, RHEL-143111

Mon, 19 Jan 2026 GMT - Charalampos Stratakis &amp;lt;cstratak@redhat.com&amp;gt; - 3.14.2-3
- Support OpenSSL FIPS mode
- Disable the builtin hashlib hashes except blake2
Related: RHEL-120788

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3.14-3.14.3-2.el10.x86_64</title>
      <pubDate>Thu, 26 Mar 2026 10:19:23 PM GMT</pubDate>
      <guid isPermaLink="false">fb024738e923203acc8b34cb3a3f1ceb6d0dd22d05e5179cc4314d4dbcf5d014</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/python3.14-3.14.3-2.el10.x86_64.rpm</link>
      <description><p><strong>python3.14</strong> - Version 3.14 of the Python interpreter&lt;br /&gt;</p>

<p>Python 3.14 is an accessible, high-level, dynamically typed, interpreted&lt;br /&gt;
programming language, designed with an emphasis on code readability.&lt;br /&gt;
It includes an extensive standard library, and has a vast ecosystem of&lt;br /&gt;
third-party libraries.&lt;br /&gt;
&lt;br /&gt;
The python3.14 package provides the "python3.14" executable: the reference&lt;br /&gt;
interpreter for the Python language, version 3.&lt;br /&gt;
The majority of its standard library is provided in the python3.14-libs package,&lt;br /&gt;
which should be installed automatically along with python3.14.&lt;br /&gt;
The remaining parts of the Python standard library are broken out into the&lt;br /&gt;
python3.14-tkinter and python3.14-test packages, which may need to be installed&lt;br /&gt;
separately.&lt;br /&gt;
&lt;br /&gt;
Documentation for Python is provided in the python3.14-docs package.&lt;br /&gt;
&lt;br /&gt;
Packages containing additional libraries for Python are generally named with&lt;br /&gt;
the "python3.14-" prefix.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Lumír Balhar &amp;lt;lbalhar@redhat.com&amp;gt; - 3.14.3-2
- Security fix for CVE-2026-4519
Resolves: RHEL-158114

Wed, 04 Feb 2026 GMT - Karolina Surma &amp;lt;ksurma@redhat.com&amp;gt; - 3.14.3-1
- Update to Python 3.14.3
- Security fixes for CVE-2025-11468, CVE-2026-0672,CVE-2026-0865,
CVE-2025-15282, CVE-2026-1299, CVE-2025-11468, CVE-2025-15366,
CVE-2025-15367
Resolves: RHEL-144855, RHEL-143058, RHEL-143111

Mon, 19 Jan 2026 GMT - Charalampos Stratakis &amp;lt;cstratak@redhat.com&amp;gt; - 3.14.2-3
- Support OpenSSL FIPS mode
- Disable the builtin hashlib hashes except blake2
Related: RHEL-120788

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>cscope-15.9-31.el10.x86_64</title>
      <pubDate>Thu, 26 Mar 2026 08:12:58 PM GMT</pubDate>
      <guid isPermaLink="false">9e9bf10fc7efa577685a18f2021e2a5d7f8290f1e14ec3ba42ddc828842cc451</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/cscope-15.9-31.el10.x86_64.rpm</link>
      <description><p><strong>cscope</strong> - C source code tree search and browse tool&lt;br /&gt;</p>

<p>cscope is a mature, ncurses based, C source code tree browsing tool.  It&lt;br /&gt;
allows users to search large source code bases for variables, functions,&lt;br /&gt;
macros, etc, as well as perform general regex and plain text searches.&lt;br /&gt;
Results are returned in lists, from which the user can select individual&lt;br /&gt;
matches for use in file editing.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Vladislav Dronov &amp;lt;vdronov@redhat.com&amp;gt; - 15.9-31
- Add two latest distribution patches (RHEL-158207)
- Correct the erroneous brace count caused by the unbalanced { }
- Make it possible to add the new keywords

Thu, 31 Oct 2024 GMT - Vladis Dronov &amp;lt;vdronov@redhat.com&amp;gt; - 15.9-26
- Update cscope to 15.9-26 from Fedora (RHEL-65464)
- Fix signal handling at exit
- Add emacs-nw and emacs-gtk+x11 to supported emacs flavors
- Minor edits in the rpm scripts
- Make xemacs a bcond

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 15.9-25
- Bump release for October 2024 mass rebuild (RHEL-64018)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>virt-firmware-rs-26.4-1.el10.x86_64</title>
      <pubDate>Thu, 26 Mar 2026 07:48:47 PM GMT</pubDate>
      <guid isPermaLink="false">f8cdce085937e6c07d40e4477f75741b60fd18485ba33bfa1d36bac51b177210</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/virt-firmware-rs-26.4-1.el10.x86_64.rpm</link>
      <description><p><strong>virt-firmware-rs</strong> - Tools for EFI and virtual machine firmware&lt;br /&gt;</p>

<p>A collection of tools to deal with efi and virtual machine&lt;br /&gt;
firmware.  This package has linux tools.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Gerd Hoffmann &amp;lt;kraxel@redhat.com&amp;gt; - 26.4-1
- update to version 26.4

Wed, 14 Jan 2026 GMT - Gerd Hoffmann &amp;lt;kraxel@redhat.com&amp;gt; - 26.1-1
- update to version v26.1

Thu, 18 Dec 2025 GMT - Gerd Hoffmann &amp;lt;kraxel@redhat.com&amp;gt; - 25.12-3
- add tmt config

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-test-3:11.8.6-2.el10.x86_64</title>
      <pubDate>Thu, 26 Mar 2026 03:15:06 PM GMT</pubDate>
      <guid isPermaLink="false">a54bde4df089693afef288d3c0e66d7765406f051ed34ba903e67245b52a1fa1</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/mariadb11.8-test-11.8.6-2.el10.x86_64.rpm</link>
      <description><p><strong>mariadb11.8-test</strong> - The test suite distributed with MariaDB&lt;br /&gt;</p>

<p>MariaDB is a multi-user, multi-threaded SQL database server.&lt;br /&gt;
MariaDB is a community developed fork from MySQL.&lt;br /&gt;
This package contains the regression test suite distributed with the MariaDB&lt;br /&gt;
sources.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-server-galera-3:11.8.6-2.el10.x86_64</title>
      <pubDate>Thu, 26 Mar 2026 03:15:06 PM GMT</pubDate>
      <guid isPermaLink="false">661c904fca0dd9d738ea19172d472e8d01b806281d024742d9a1f1a096383f1f</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/mariadb11.8-server-galera-11.8.6-2.el10.x86_64.rpm</link>
      <description><p><strong>mariadb11.8-server-galera</strong> - The configuration files and scripts for galera replication&lt;br /&gt;</p>

<p>MariaDB is a multi-user, multi-threaded SQL database server. It is a&lt;br /&gt;
client/server implementation consisting of a server daemon (mariadbd)&lt;br /&gt;
and many different client programs and libraries. This package contains&lt;br /&gt;
added files to allow MariaDB server to operate as a Galera cluster&lt;br /&gt;
member. MariaDB is a community developed fork originally from MySQL.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-server-3:11.8.6-2.el10.x86_64</title>
      <pubDate>Thu, 26 Mar 2026 03:15:06 PM GMT</pubDate>
      <guid isPermaLink="false">4420c4a62453b4462de9750c3ff48ba7b78042e129bb958042eadc6906eae2eb</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/mariadb11.8-server-11.8.6-2.el10.x86_64.rpm</link>
      <description><p><strong>mariadb11.8-server</strong> - The MariaDB server and related files&lt;br /&gt;</p>

<p>MariaDB is a multi-user, multi-threaded SQL database server. It is a&lt;br /&gt;
client/server implementation consisting of a server daemon (mariadbd)&lt;br /&gt;
and many different client programs and libraries. This package contains&lt;br /&gt;
the MariaDB server and some accompanying files and directories.&lt;br /&gt;
MariaDB is a community developed fork from MySQL.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-pam-3:11.8.6-2.el10.x86_64</title>
      <pubDate>Thu, 26 Mar 2026 03:15:06 PM GMT</pubDate>
      <guid isPermaLink="false">9cbea4eceea7d7f7d4038ac56ae40589590fb812c72827facc9eec22e47b6923</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/mariadb11.8-pam-11.8.6-2.el10.x86_64.rpm</link>
      <description><p><strong>mariadb11.8-pam</strong> - PAM authentication plugin for the MariaDB server&lt;br /&gt;</p>

<p>PAM authentication server-side plugin for MariaDB.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-oqgraph-engine-3:11.8.6-2.el10.x86_64</title>
      <pubDate>Thu, 26 Mar 2026 03:15:06 PM GMT</pubDate>
      <guid isPermaLink="false">7a24cec5f8e4a382571865e49bd213208bebb5e988f6210bda6dc7f772b755aa</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/mariadb11.8-oqgraph-engine-11.8.6-2.el10.x86_64.rpm</link>
      <description><p><strong>mariadb11.8-oqgraph-engine</strong> - The Open Query GRAPH engine for MariaDB&lt;br /&gt;</p>

<p>The package provides Open Query GRAPH engine (OQGRAPH) as plugin for MariaDB&lt;br /&gt;
database server. OQGRAPH is a computation engine allowing hierarchies and more&lt;br /&gt;
complex graph structures to be handled in a relational fashion. In a nutshell,&lt;br /&gt;
tree structures and friend-of-a-friend style searches can now be done using&lt;br /&gt;
standard SQL syntax, and results joined onto other tables.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-gssapi-server-3:11.8.6-2.el10.x86_64</title>
      <pubDate>Thu, 26 Mar 2026 03:15:06 PM GMT</pubDate>
      <guid isPermaLink="false">373229c1189c3e7db220fb4c05ffffda629079815b4f18e97791d018597b0216</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/mariadb11.8-gssapi-server-11.8.6-2.el10.x86_64.rpm</link>
      <description><p><strong>mariadb11.8-gssapi-server</strong> - GSSAPI authentication plugin for server&lt;br /&gt;</p>

<p>GSSAPI authentication server-side plugin for MariaDB for passwordless login.&lt;br /&gt;
This plugin includes support for Kerberos on Unix.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-embedded-devel-3:11.8.6-2.el10.x86_64</title>
      <pubDate>Thu, 26 Mar 2026 03:15:06 PM GMT</pubDate>
      <guid isPermaLink="false">e8e8ca370d534ea23e01769f7499fb20b8dd541239dada1a0b63eda02520ee32</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/mariadb11.8-embedded-devel-11.8.6-2.el10.x86_64.rpm</link>
      <description><p><strong>mariadb11.8-embedded-devel</strong> - Development files for MariaDB as an embeddable library&lt;br /&gt;</p>

<p>MariaDB is a multi-user, multi-threaded SQL database server.&lt;br /&gt;
MariaDB is a community developed fork from MySQL.&lt;br /&gt;
This package contains files needed for developing and testing with&lt;br /&gt;
the embedded version of the MariaDB server.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-embedded-3:11.8.6-2.el10.x86_64</title>
      <pubDate>Thu, 26 Mar 2026 03:15:06 PM GMT</pubDate>
      <guid isPermaLink="false">8dcc1dee84ad43ab44e1667bc666d0dcfd979c2a294b3ff3598fa84612a9773f</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/mariadb11.8-embedded-11.8.6-2.el10.x86_64.rpm</link>
      <description><p><strong>mariadb11.8-embedded</strong> - MariaDB as an embeddable library&lt;br /&gt;</p>

<p>MariaDB is a multi-user, multi-threaded SQL database server. This&lt;br /&gt;
package contains a version of the MariaDB server that can be embedded&lt;br /&gt;
into a client application instead of running as a separate process.&lt;br /&gt;
MariaDB is a community developed fork from MySQL.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-devel-3:11.8.6-2.el10.x86_64</title>
      <pubDate>Thu, 26 Mar 2026 03:15:06 PM GMT</pubDate>
      <guid isPermaLink="false">37b1432997242b7ae1eb274571cd7a2dcb67237c63be007bbbe529edb5ac3a5d</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/mariadb11.8-devel-11.8.6-2.el10.x86_64.rpm</link>
      <description><p><strong>mariadb11.8-devel</strong> - Files for development of MariaDB/MySQL applications&lt;br /&gt;</p>

<p>MariaDB is a multi-user, multi-threaded SQL database server.&lt;br /&gt;
MariaDB is a community developed branch of MySQL.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
This package contains everything needed for developing MariaDB/MySQL server&lt;br /&gt;
plugins and applications. For developing client applications, use&lt;br /&gt;
mariadb-connector-c package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-backup-3:11.8.6-2.el10.x86_64</title>
      <pubDate>Thu, 26 Mar 2026 03:15:06 PM GMT</pubDate>
      <guid isPermaLink="false">f58e90c4b87cc991c5dcd78e9d2565c4cef7b52144188c649acc59c1674a4aa5</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/mariadb11.8-backup-11.8.6-2.el10.x86_64.rpm</link>
      <description><p><strong>mariadb11.8-backup</strong> - The mariabackup tool for physical online backups&lt;br /&gt;</p>

<p>MariaDB Backup is an open source tool provided by MariaDB for performing&lt;br /&gt;
physical online backups of InnoDB, Aria and MyISAM tables.&lt;br /&gt;
For InnoDB, "hot online" backups are possible.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-3:11.8.6-2.el10.x86_64</title>
      <pubDate>Thu, 26 Mar 2026 03:15:06 PM GMT</pubDate>
      <guid isPermaLink="false">5d9a59cf128de6ed078f9f8bfaf1ec8ce2ae625c49ee0e85a2b97182905a6242</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/mariadb11.8-11.8.6-2.el10.x86_64.rpm</link>
      <description><p><strong>mariadb11.8</strong> - A very fast and robust SQL database server&lt;br /&gt;</p>

<p>MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded&lt;br /&gt;
SQL database server. It is a client/server implementation consisting of&lt;br /&gt;
a server daemon (mariadbd) and many different client programs and libraries.&lt;br /&gt;
The base package contains the standard MariaDB/MySQL client programs and&lt;br /&gt;
utilities.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-server-utils-3:11.8.6-2.el10.noarch</title>
      <pubDate>Thu, 26 Mar 2026 03:14:58 PM GMT</pubDate>
      <guid isPermaLink="false">3bbdca0baf9cc28132f3453f5c156bb911d0163cc2d39be16062edc8d76d77c4</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/mariadb11.8-server-utils-11.8.6-2.el10.noarch.rpm</link>
      <description><p><strong>mariadb11.8-server-utils</strong> - Non-essential server utilities for MariaDB/MySQL applications&lt;br /&gt;</p>

<p>This package contains all non-essential server utilities and scripts for&lt;br /&gt;
managing databases. It also contains all utilities requiring Perl and it is&lt;br /&gt;
the only MariaDB sub-package with the corresponding client-utils one, except&lt;br /&gt;
test subpackage, that depends on Perl.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-errmsg-3:11.8.6-2.el10.noarch</title>
      <pubDate>Thu, 26 Mar 2026 03:14:58 PM GMT</pubDate>
      <guid isPermaLink="false">d0e1b0d6045f4e01ce9a46af78654d0d9180658a85b3323768f3c75e0176e48b</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/mariadb11.8-errmsg-11.8.6-2.el10.noarch.rpm</link>
      <description><p><strong>mariadb11.8-errmsg</strong> - The error messages files required by server and embedded&lt;br /&gt;</p>

<p>The package provides error messages files for the MariaDB daemon and the&lt;br /&gt;
embedded server. You will need to install this package to use any of those&lt;br /&gt;
MariaDB packages.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-common-3:11.8.6-2.el10.noarch</title>
      <pubDate>Thu, 26 Mar 2026 03:14:58 PM GMT</pubDate>
      <guid isPermaLink="false">86df2bf9655b5270c32582190e0100f003ad203fc97a550b3717344b567065ea</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/mariadb11.8-common-11.8.6-2.el10.noarch.rpm</link>
      <description><p><strong>mariadb11.8-common</strong> - The shared files required by server and client&lt;br /&gt;</p>

<p>The package provides the essential shared files for any MariaDB program.&lt;br /&gt;
You will need to install this package to use any other MariaDB package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-client-utils-3:11.8.6-2.el10.noarch</title>
      <pubDate>Thu, 26 Mar 2026 03:14:58 PM GMT</pubDate>
      <guid isPermaLink="false">1db77cda6c60045779368dac3485a73e239a0f843cd1cfaffb6b572c60443dc8</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/mariadb11.8-client-utils-11.8.6-2.el10.noarch.rpm</link>
      <description><p><strong>mariadb11.8-client-utils</strong> - Non-essential client utilities for MariaDB/MySQL applications&lt;br /&gt;</p>

<p>This package contains all non-essential client utilities and scripts for&lt;br /&gt;
managing databases. It also contains all utilities requiring Perl and it is the&lt;br /&gt;
only MariaDB sub-package with the corresponding server-utils one, except test&lt;br /&gt;
subpackage, that depends on Perl.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>galera-26.4.25-1.el10.x86_64</title>
      <pubDate>Thu, 26 Mar 2026 12:59:09 PM GMT</pubDate>
      <guid isPermaLink="false">287429dd668a57ed3220f09e3f596de0c69b95bd7a68ebf8c8bbba65adf55282</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/galera-26.4.25-1.el10.x86_64.rpm</link>
      <description><p><strong>galera</strong> - Synchronous multi-master wsrep provider (replication engine)&lt;br /&gt;</p>

<p>Galera is a fast synchronous multimaster wsrep provider (replication engine)&lt;br /&gt;
for transactional databases and similar applications. For more information&lt;br /&gt;
about wsrep API see https://github.com/codership/wsrep-API repository. For a&lt;br /&gt;
description of Galera replication engine see https://www.galeracluster.com web.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Sun, 08 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 26.4.25-1
- Rebased to 26.4.25

Tue, 06 Jan 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 26.4.24-1
- Rebase to 26.4.24

Fri, 08 Aug 2025 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 26.4.23-1
- Rebase to 26.4.23

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gnome-shell-49.5-1.el10.x86_64</title>
      <pubDate>Wed, 25 Mar 2026 11:29:25 PM GMT</pubDate>
      <guid isPermaLink="false">45b635ea2d5d2def131c2c9a6e8414a56c99ad0ec2a0262d6b47e68996b1a06f</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/gnome-shell-49.5-1.el10.x86_64.rpm</link>
      <description><p><strong>gnome-shell</strong> - Window management and application launching for GNOME&lt;br /&gt;</p>

<p>GNOME Shell provides core user interface functions for the GNOME 3 desktop,&lt;br /&gt;
like switching to windows and launching applications. GNOME Shell takes&lt;br /&gt;
advantage of the capabilities of modern graphics hardware and introduces&lt;br /&gt;
innovative user interface concepts to provide a visually attractive and&lt;br /&gt;
easy to use experience.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Florian Müllner &amp;lt;fmuellner@redhat.com&amp;gt; - 49.5-1
- Update to 49.5

Wed, 25 Mar 2026 GMT - Florian Müllner &amp;lt;fmuellner@redhat.com&amp;gt; - 49.4-3
- rpminspect: Use correct paths in runpath exception

Tue, 17 Feb 2026 GMT - Joan Torres Lopez &amp;lt;joantolo@redhat.com&amp;gt; - 49.4-2
- Update passwordless GDM implementation to match upstream

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libarchive-devel-3.7.7-7.el10.x86_64</title>
      <pubDate>Wed, 25 Mar 2026 12:35:41 PM GMT</pubDate>
      <guid isPermaLink="false">e88d04b8ccfe9b4a491351e2e6eb3fc968419800676b4d8a92527ab2a62d5045</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/libarchive-devel-3.7.7-7.el10.x86_64.rpm</link>
      <description><p><strong>libarchive-devel</strong> - Development files for libarchive&lt;br /&gt;</p>

<p>The libarchive-devel package contains libraries and header files for&lt;br /&gt;
developing applications that use libarchive.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Lukas Javorsky &amp;lt;ljavorsk@redhat.com&amp;gt; - 3.7.7-7
- Release bump for typo in dist

Tue, 24 Mar 2026 GMT - Lukas Javorsky &amp;lt;ljavorsk@redhat.com&amp;gt; - 3.7.7-6
- Release bump

Mon, 16 Mar 2026 GMT - Lukas Javorsky &amp;lt;ljavorsk@redhat.com&amp;gt; - 3.7.7-5
- Resolves: CVE-2026-4111

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>bsdtar-3.7.7-7.el10.x86_64</title>
      <pubDate>Wed, 25 Mar 2026 12:35:41 PM GMT</pubDate>
      <guid isPermaLink="false">9e06b7827162d98758cabe42a220857f332f919e4a96c1af8b9159c4388788dd</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/bsdtar-3.7.7-7.el10.x86_64.rpm</link>
      <description><p><strong>bsdtar</strong> - Manipulate tape archives&lt;br /&gt;</p>

<p>The bsdtar package contains standalone bsdtar utility split off regular&lt;br /&gt;
libarchive packages.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Lukas Javorsky &amp;lt;ljavorsk@redhat.com&amp;gt; - 3.7.7-7
- Release bump for typo in dist

Tue, 24 Mar 2026 GMT - Lukas Javorsky &amp;lt;ljavorsk@redhat.com&amp;gt; - 3.7.7-6
- Release bump

Mon, 16 Mar 2026 GMT - Lukas Javorsky &amp;lt;ljavorsk@redhat.com&amp;gt; - 3.7.7-5
- Resolves: CVE-2026-4111

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>tomcat9-webapps-1:9.0.110-2.el10.noarch</title>
      <pubDate>Tue, 24 Mar 2026 05:51:27 PM GMT</pubDate>
      <guid isPermaLink="false">74d65380bc273bb51a8e4d405fa60f3b76c9b3f01c3fbf48583673ccd83a9c7a</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/tomcat9-webapps-9.0.110-2.el10.noarch.rpm</link>
      <description><p><strong>tomcat9-webapps</strong> - The ROOT web application for Apache Tomcat&lt;br /&gt;</p>

<p>The ROOT web application for Apache Tomcat.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 23 Mar 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-2
- Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector

Wed, 11 Feb 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-1
- Resolves: RHEL-148687
  Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support

Fri, 23 Jan 2026 GMT - Pietro Meloni &amp;lt;pmeloni@redhat.com&amp;gt; - 1:9.0.87-9
- Resolves: RHEL-124496
  tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
- Resolves: RHEL-132559
  tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>tomcat9-servlet-4.0-api-1:9.0.110-2.el10.noarch</title>
      <pubDate>Tue, 24 Mar 2026 05:51:27 PM GMT</pubDate>
      <guid isPermaLink="false">9fb89df4e40225c8281068b61e9cd20ae425774e68e6a3c6dcba54ada49ef9a9</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/tomcat9-servlet-4.0-api-9.0.110-2.el10.noarch.rpm</link>
      <description><p><strong>tomcat9-servlet-4.0-api</strong> - Apache Tomcat Java Servlet v4.0 API Implementation Classes&lt;br /&gt;</p>

<p>Apache Tomcat Servlet API Implementation Classes.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 23 Mar 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-2
- Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector

Wed, 11 Feb 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-1
- Resolves: RHEL-148687
  Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support

Fri, 23 Jan 2026 GMT - Pietro Meloni &amp;lt;pmeloni@redhat.com&amp;gt; - 1:9.0.87-9
- Resolves: RHEL-124496
  tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
- Resolves: RHEL-132559
  tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>tomcat9-lib-1:9.0.110-2.el10.noarch</title>
      <pubDate>Tue, 24 Mar 2026 05:51:27 PM GMT</pubDate>
      <guid isPermaLink="false">d001fd353997ab5679fe22065b96fa5c51d93e36ccc6609a6ccc2aefafff7643</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/tomcat9-lib-9.0.110-2.el10.noarch.rpm</link>
      <description><p><strong>tomcat9-lib</strong> - Libraries needed to run the Tomcat Web container&lt;br /&gt;</p>

<p>Libraries needed to run the Tomcat Web container.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 23 Mar 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-2
- Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector

Wed, 11 Feb 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-1
- Resolves: RHEL-148687
  Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support

Fri, 23 Jan 2026 GMT - Pietro Meloni &amp;lt;pmeloni@redhat.com&amp;gt; - 1:9.0.87-9
- Resolves: RHEL-124496
  tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
- Resolves: RHEL-132559
  tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>tomcat9-jsp-2.3-api-1:9.0.110-2.el10.noarch</title>
      <pubDate>Tue, 24 Mar 2026 05:51:27 PM GMT</pubDate>
      <guid isPermaLink="false">b5fe0bd8c6f6408c2f3d1cfb0da7ebe54fe2ba4d1344c90dda71f35c3e43561b</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/tomcat9-jsp-2.3-api-9.0.110-2.el10.noarch.rpm</link>
      <description><p><strong>tomcat9-jsp-2.3-api</strong> - Apache Tomcat JavaServer Pages v2.3 API Implementation Classes&lt;br /&gt;</p>

<p>Apache Tomcat JSP API Implementation Classes.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 23 Mar 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-2
- Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector

Wed, 11 Feb 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-1
- Resolves: RHEL-148687
  Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support

Fri, 23 Jan 2026 GMT - Pietro Meloni &amp;lt;pmeloni@redhat.com&amp;gt; - 1:9.0.87-9
- Resolves: RHEL-124496
  tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
- Resolves: RHEL-132559
  tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>tomcat9-el-3.0-api-1:9.0.110-2.el10.noarch</title>
      <pubDate>Tue, 24 Mar 2026 05:51:27 PM GMT</pubDate>
      <guid isPermaLink="false">1849a4f5c41c3e574377a50a8517c7c35b2cdfd755288c6b73af764fdc6bdd1b</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/tomcat9-el-3.0-api-9.0.110-2.el10.noarch.rpm</link>
      <description><p><strong>tomcat9-el-3.0-api</strong> - Apache Tomcat Expression Language v3.0 API Implementation Classes&lt;br /&gt;</p>

<p>Apache Tomcat EL API Implementation Classes.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 23 Mar 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-2
- Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector

Wed, 11 Feb 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-1
- Resolves: RHEL-148687
  Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support

Fri, 23 Jan 2026 GMT - Pietro Meloni &amp;lt;pmeloni@redhat.com&amp;gt; - 1:9.0.87-9
- Resolves: RHEL-124496
  tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
- Resolves: RHEL-132559
  tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>tomcat9-docs-webapp-1:9.0.110-2.el10.noarch</title>
      <pubDate>Tue, 24 Mar 2026 05:51:27 PM GMT</pubDate>
      <guid isPermaLink="false">af8dc44bc3599b312a7a9ad53d79458eee4de70c99da89dc7e8b2d6a5be302d9</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/tomcat9-docs-webapp-9.0.110-2.el10.noarch.rpm</link>
      <description><p><strong>tomcat9-docs-webapp</strong> - The docs web application for Apache Tomcat&lt;br /&gt;</p>

<p>The docs web application for Apache Tomcat.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 23 Mar 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-2
- Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector

Wed, 11 Feb 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-1
- Resolves: RHEL-148687
  Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support

Fri, 23 Jan 2026 GMT - Pietro Meloni &amp;lt;pmeloni@redhat.com&amp;gt; - 1:9.0.87-9
- Resolves: RHEL-124496
  tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
- Resolves: RHEL-132559
  tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>tomcat9-admin-webapps-1:9.0.110-2.el10.noarch</title>
      <pubDate>Tue, 24 Mar 2026 05:51:27 PM GMT</pubDate>
      <guid isPermaLink="false">984daf9446ec16397866923951f3e0464b1082a79e5a7f023c54003248bad66e</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/tomcat9-admin-webapps-9.0.110-2.el10.noarch.rpm</link>
      <description><p><strong>tomcat9-admin-webapps</strong> - The host-manager and manager web applications for Apache Tomcat&lt;br /&gt;</p>

<p>The host-manager and manager web applications for Apache Tomcat.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 23 Mar 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-2
- Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector

Wed, 11 Feb 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-1
- Resolves: RHEL-148687
  Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support

Fri, 23 Jan 2026 GMT - Pietro Meloni &amp;lt;pmeloni@redhat.com&amp;gt; - 1:9.0.87-9
- Resolves: RHEL-124496
  tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
- Resolves: RHEL-132559
  tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>tomcat9-1:9.0.110-2.el10.noarch</title>
      <pubDate>Tue, 24 Mar 2026 05:51:27 PM GMT</pubDate>
      <guid isPermaLink="false">e08a5af68e378b21017151e73bef197cb112c9019905dcee40ac5532ae6f740a</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/tomcat9-9.0.110-2.el10.noarch.rpm</link>
      <description><p><strong>tomcat9</strong> - Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API&lt;br /&gt;</p>

<p>Tomcat is the servlet container that is used in the official Reference&lt;br /&gt;
Implementation for the Java Servlet and JavaServer Pages technologies.&lt;br /&gt;
The Java Servlet and JavaServer Pages specifications are developed by&lt;br /&gt;
Sun under the Java Community Process.&lt;br /&gt;
&lt;br /&gt;
Tomcat is developed in an open and participatory environment and&lt;br /&gt;
released under the Apache Software License version 2.0. Tomcat is intended&lt;br /&gt;
to be a collaboration of the best-of-breed developers from around the world.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 23 Mar 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-2
- Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector

Wed, 11 Feb 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-1
- Resolves: RHEL-148687
  Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support

Fri, 23 Jan 2026 GMT - Pietro Meloni &amp;lt;pmeloni@redhat.com&amp;gt; - 1:9.0.87-9
- Resolves: RHEL-124496
  tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
- Resolves: RHEL-132559
  tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>scap-security-guide-doc-0.1.80-1.el10.noarch</title>
      <pubDate>Tue, 24 Mar 2026 02:49:56 PM GMT</pubDate>
      <guid isPermaLink="false">500da6931e009029b710cee10dd540c1e268ef8c3bbd6eb437f7792ba5dde953</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/scap-security-guide-doc-0.1.80-1.el10.noarch.rpm</link>
      <description><p><strong>scap-security-guide-doc</strong> - HTML formatted security guides generated from XCCDF benchmarks&lt;br /&gt;</p>

<p>The scap-security-guide-doc package contains HTML formatted documents containing&lt;br /&gt;
hardening guidances that have been generated from XCCDF benchmarks&lt;br /&gt;
present in scap-security-guide package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 10 Mar 2026 GMT - Vojtech Polasek &amp;lt;vpolasek@redhat.com&amp;gt; - 0.1.80-1
- Import Red Hat quantum-resistant keys using sequoia commands (RHEL-127300)
- Rule audit_rules_privileged_commands adds architecture filters in audit rules (RHEL-142647)
- Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549)
- Add a new BSI profile to RHEL 10 that aligns to the BSI (Federal Office for Security Information in Germany) IT-Grundschutz Basic-Protection. (RHEL-134722)
- Corrected version in the description of CIS profiles (RHEL-143955)
- Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-152059)

Mon, 05 Jan 2026 GMT - Jan Černý &amp;lt;jcerny@redhat.com&amp;gt; - 0.1.79-2
- Bump version and rebuild

Mon, 15 Dec 2025 GMT - Jan Černý &amp;lt;jcerny@redhat.com&amp;gt; - 0.1.79-1
- Update to the latest upstream release (RHEL-135774)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>scap-security-guide-0.1.80-1.el10.noarch</title>
      <pubDate>Tue, 24 Mar 2026 02:49:56 PM GMT</pubDate>
      <guid isPermaLink="false">24759642f84630063c8cea14e15587a2181596eeba97bcccafe37935d3522dfa</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/scap-security-guide-0.1.80-1.el10.noarch.rpm</link>
      <description><p><strong>scap-security-guide</strong> - Security guidance and baselines in SCAP formats&lt;br /&gt;</p>

<p>The scap-security-guide project provides a guide for configuration of the&lt;br /&gt;
system from the final system's security point of view. The guidance is specified&lt;br /&gt;
in the Security Content Automation Protocol (SCAP) format and constitutes&lt;br /&gt;
a catalog of practical hardening advice, linked to government requirements&lt;br /&gt;
where applicable. The project bridges the gap between generalized policy&lt;br /&gt;
requirements and specific implementation guidelines. The system&lt;br /&gt;
administrator can use the oscap CLI tool from openscap-scanner package, or the&lt;br /&gt;
scap-workbench GUI tool from scap-workbench package to verify that the system&lt;br /&gt;
conforms to provided guideline. Refer to scap-security-guide(8) manual page for&lt;br /&gt;
further information.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 10 Mar 2026 GMT - Vojtech Polasek &amp;lt;vpolasek@redhat.com&amp;gt; - 0.1.80-1
- Import Red Hat quantum-resistant keys using sequoia commands (RHEL-127300)
- Rule audit_rules_privileged_commands adds architecture filters in audit rules (RHEL-142647)
- Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549)
- Add a new BSI profile to RHEL 10 that aligns to the BSI (Federal Office for Security Information in Germany) IT-Grundschutz Basic-Protection. (RHEL-134722)
- Corrected version in the description of CIS profiles (RHEL-143955)
- Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-152059)

Mon, 05 Jan 2026 GMT - Jan Černý &amp;lt;jcerny@redhat.com&amp;gt; - 0.1.79-2
- Bump version and rebuild

Mon, 15 Dec 2025 GMT - Jan Černý &amp;lt;jcerny@redhat.com&amp;gt; - 0.1.79-1
- Update to the latest upstream release (RHEL-135774)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ncurses-term-6.4-15.20240127.el10.noarch</title>
      <pubDate>Tue, 24 Mar 2026 09:18:48 AM GMT</pubDate>
      <guid isPermaLink="false">a7541701dd34762f83d2fd4f2dc02b8c99d1aaa0bb989b262fcafcc1ecaa72df</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/ncurses-term-6.4-15.20240127.el10.noarch.rpm</link>
      <description><p><strong>ncurses-term</strong> - Terminal descriptions&lt;br /&gt;</p>

<p>This package contains additional terminal descriptions not found in&lt;br /&gt;
the ncurses-base package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 24 Mar 2026 GMT - Miroslav Lichvar &amp;lt;mlichvar@redhat.com&amp;gt; 6.4-15.20240127
- fix buffer overflow in infocmp -i (CVE-2025-69720)

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 6.4-14.20240127
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

Mon, 24 Jun 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 6.4-13.20240127
- Bump release for June 2024 mass rebuild

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ncurses-devel-6.4-15.20240127.el10.x86_64</title>
      <pubDate>Tue, 24 Mar 2026 09:18:41 AM GMT</pubDate>
      <guid isPermaLink="false">095f6d0ffde48c798d1bd7a61daea28255bf5977a87e73b220626fbec48c0bef</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/ncurses-devel-6.4-15.20240127.el10.x86_64.rpm</link>
      <description><p><strong>ncurses-devel</strong> - Development files for the ncurses library&lt;br /&gt;</p>

<p>The header files and libraries for developing applications that use&lt;br /&gt;
the ncurses terminal handling library.&lt;br /&gt;
&lt;br /&gt;
Install the ncurses-devel package if you want to develop applications&lt;br /&gt;
which will use ncurses.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 24 Mar 2026 GMT - Miroslav Lichvar &amp;lt;mlichvar@redhat.com&amp;gt; 6.4-15.20240127
- fix buffer overflow in infocmp -i (CVE-2025-69720)

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 6.4-14.20240127
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

Mon, 24 Jun 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 6.4-13.20240127
- Bump release for June 2024 mass rebuild

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ncurses-c++-libs-6.4-15.20240127.el10.x86_64</title>
      <pubDate>Tue, 24 Mar 2026 09:18:41 AM GMT</pubDate>
      <guid isPermaLink="false">77135695bc1266c2d7c398d4fcd81e389fa556bb86b01e839bad9933667ffa18</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/ncurses-c++-libs-6.4-15.20240127.el10.x86_64.rpm</link>
      <description><p><strong>ncurses-c++-libs</strong> - Ncurses C++ bindings&lt;br /&gt;</p>

<p>The curses library routines are a terminal-independent method of&lt;br /&gt;
updating character screens with reasonable optimization.  The ncurses&lt;br /&gt;
(new curses) library is a freely distributable replacement for the&lt;br /&gt;
discontinued 4.4 BSD classic curses library.&lt;br /&gt;
&lt;br /&gt;
This package contains C++ bindings of the ncurses ABI version 6 libraries.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 24 Mar 2026 GMT - Miroslav Lichvar &amp;lt;mlichvar@redhat.com&amp;gt; 6.4-15.20240127
- fix buffer overflow in infocmp -i (CVE-2025-69720)

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 6.4-14.20240127
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

Mon, 24 Jun 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 6.4-13.20240127
- Bump release for June 2024 mass rebuild

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>idm-pki-server-11.9.0-3.el10.noarch</title>
      <pubDate>Mon, 23 Mar 2026 11:14:36 AM GMT</pubDate>
      <guid isPermaLink="false">8b5c6f0462b39aa725a8384263f1672e7720ffdd288c913904242a504379ff79</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/idm-pki-server-11.9.0-3.el10.noarch.rpm</link>
      <description><p><strong>idm-pki-server</strong> - IdM PKI Server Package&lt;br /&gt;</p>

<p>This package provides libraries and utilities needed by IdM PKI services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 13 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-3
- Revert to tomcat 9
- Resolves: RHEL-155406

Tue, 10 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-2
- Rebuilt for exception target

Fri, 06 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-1
- Rebase to PKI 11.9.0
- Resolves: RHEL-150666

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>idm-pki-kra-11.9.0-3.el10.noarch</title>
      <pubDate>Mon, 23 Mar 2026 11:14:36 AM GMT</pubDate>
      <guid isPermaLink="false">c6c150c0506707b84c6510e40868b5ee1bddccd6dc7089c63830c0db9265c2e9</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/idm-pki-kra-11.9.0-3.el10.noarch.rpm</link>
      <description><p><strong>idm-pki-kra</strong> - IdM PKI KRA Package&lt;br /&gt;</p>

<p>IdM PKI Key Recovery Authority (KRA) is an optional subsystem that can act&lt;br /&gt;
as a key archival facility.  When configured in conjunction with the&lt;br /&gt;
Certificate Authority (CA), the KRA stores private encryption keys as part of&lt;br /&gt;
the certificate enrollment process.  The key archival mechanism is triggered&lt;br /&gt;
when a user enrolls in the PKI and creates the certificate request.  Using the&lt;br /&gt;
Certificate Request Message Format (CRMF) request format, a request is&lt;br /&gt;
generated for the user's private encryption key.  This key is then stored in&lt;br /&gt;
the KRA which is configured to store keys in an encrypted format that can only&lt;br /&gt;
be decrypted by several agents requesting the key at one time, providing for&lt;br /&gt;
protection of the public encryption keys for the users in the PKI deployment.&lt;br /&gt;
&lt;br /&gt;
Note that the KRA archives encryption keys; it does NOT archive signing keys,&lt;br /&gt;
since such archival would undermine non-repudiation properties of signing keys.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 13 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-3
- Revert to tomcat 9
- Resolves: RHEL-155406

Tue, 10 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-2
- Rebuilt for exception target

Fri, 06 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-1
- Rebase to PKI 11.9.0
- Resolves: RHEL-150666

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>idm-pki-java-11.9.0-3.el10.noarch</title>
      <pubDate>Mon, 23 Mar 2026 11:14:36 AM GMT</pubDate>
      <guid isPermaLink="false">cbeaf99b27e68b2bc26f43e6d059e84c4e90912dce16b98861d0be641331d246</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/idm-pki-java-11.9.0-3.el10.noarch.rpm</link>
      <description><p><strong>idm-pki-java</strong> - IdM PKI Base Java Package&lt;br /&gt;</p>

<p>This package provides common and client libraries for Java.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 13 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-3
- Revert to tomcat 9
- Resolves: RHEL-155406

Tue, 10 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-2
- Rebuilt for exception target

Fri, 06 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-1
- Rebase to PKI 11.9.0
- Resolves: RHEL-150666

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>idm-pki-ca-11.9.0-3.el10.noarch</title>
      <pubDate>Mon, 23 Mar 2026 11:14:36 AM GMT</pubDate>
      <guid isPermaLink="false">81124103de77948e3e9e133fbcc64568c875b6976b91c2a8ed48c5bc2dd2778d</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/idm-pki-ca-11.9.0-3.el10.noarch.rpm</link>
      <description><p><strong>idm-pki-ca</strong> - IdM PKI CA Package&lt;br /&gt;</p>

<p>IdM PKI Certificate Authority (CA) is a required subsystem which issues,&lt;br /&gt;
renews, revokes, and publishes certificates as well as compiling and&lt;br /&gt;
publishing Certificate Revocation Lists (CRLs).&lt;br /&gt;
&lt;br /&gt;
The Certificate Authority can be configured as a self-signing Certificate&lt;br /&gt;
Authority, where it is the root CA, or it can act as a subordinate CA,&lt;br /&gt;
where it obtains its own signing certificate from a public CA.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 13 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-3
- Revert to tomcat 9
- Resolves: RHEL-155406

Tue, 10 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-2
- Rebuilt for exception target

Fri, 06 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-1
- Rebase to PKI 11.9.0
- Resolves: RHEL-150666

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>idm-pki-base-11.9.0-3.el10.noarch</title>
      <pubDate>Mon, 23 Mar 2026 11:14:36 AM GMT</pubDate>
      <guid isPermaLink="false">29d15ac51bde25c265abfd08dcb7519d9754a3ab0c26a790c3aab14570f97001</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/idm-pki-base-11.9.0-3.el10.noarch.rpm</link>
      <description><p><strong>idm-pki-base</strong> - IdM PKI Base Package&lt;br /&gt;</p>

<p>This package provides default configuration files for IdM PKI client.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 13 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-3
- Revert to tomcat 9
- Resolves: RHEL-155406

Tue, 10 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-2
- Rebuilt for exception target

Fri, 06 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-1
- Rebase to PKI 11.9.0
- Resolves: RHEL-150666

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>idm-pki-acme-11.9.0-3.el10.noarch</title>
      <pubDate>Mon, 23 Mar 2026 11:14:36 AM GMT</pubDate>
      <guid isPermaLink="false">d057e16644c4d0a16d8970dfd66649bd709a6fba197dec2d9dbfec2dadddd6cf</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/idm-pki-acme-11.9.0-3.el10.noarch.rpm</link>
      <description><p><strong>idm-pki-acme</strong> - IdM PKI ACME Package&lt;br /&gt;</p>

<p>IdM PKI ACME responder is a service that provides an automatic certificate&lt;br /&gt;
management via ACME v2 protocol defined in RFC 8555.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 13 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-3
- Revert to tomcat 9
- Resolves: RHEL-155406

Tue, 10 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-2
- Rebuilt for exception target

Fri, 06 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-1
- Rebase to PKI 11.9.0
- Resolves: RHEL-150666

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3-idm-pki-11.9.0-3.el10.noarch</title>
      <pubDate>Mon, 23 Mar 2026 11:14:36 AM GMT</pubDate>
      <guid isPermaLink="false">4e5b5ad8e5abe54b1efb772118a95e51c18a269bbed55742789cb488dc52f7f8</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/python3-idm-pki-11.9.0-3.el10.noarch.rpm</link>
      <description><p><strong>python3-idm-pki</strong> - IdM PKI Python 3 Package&lt;br /&gt;</p>

<p>This package provides common and client library for Python 3.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 13 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-3
- Revert to tomcat 9
- Resolves: RHEL-155406

Tue, 10 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-2
- Rebuilt for exception target

Fri, 06 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-1
- Rebase to PKI 11.9.0
- Resolves: RHEL-150666

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>idm-pki-tools-11.9.0-3.el10.x86_64</title>
      <pubDate>Mon, 23 Mar 2026 11:14:28 AM GMT</pubDate>
      <guid isPermaLink="false">71434a847733087c3616b6286d142393ed8274a096be9b706aaecd1269142fc5</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/idm-pki-tools-11.9.0-3.el10.x86_64.rpm</link>
      <description><p><strong>idm-pki-tools</strong> - IdM PKI Tools Package&lt;br /&gt;</p>

<p>This package provides tools that can be used to help make&lt;br /&gt;
IdM PKI into a more complete and robust PKI solution.&lt;br /&gt;
&lt;br /&gt;
The utility "tpsclient" is a test tool that interacts with TPS.&lt;br /&gt;
This tool is useful to test TPS server without risking an actual smart card.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 13 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-3
- Revert to tomcat 9
- Resolves: RHEL-155406

Tue, 10 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-2
- Rebuilt for exception target

Fri, 06 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-1
- Rebase to PKI 11.9.0
- Resolves: RHEL-150666

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>openexr-libs-3.1.10-9.el10.x86_64</title>
      <pubDate>Mon, 23 Mar 2026 11:12:19 AM GMT</pubDate>
      <guid isPermaLink="false">8412123df2502ac7e42f9ae72bb2411d5f0beb8f31a7cac862e567b1dedd9826</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/openexr-libs-3.1.10-9.el10.x86_64.rpm</link>
      <description><p><strong>openexr-libs</strong> - OpenEXR Libraries&lt;br /&gt;</p>

<p>OpenEXR is an open-source high-dynamic-range floating-point image file format&lt;br /&gt;
for high-quality image processing and storage. This document presents a brief&lt;br /&gt;
overview of OpenEXR and explains concepts that are specific to this format.&lt;br /&gt;
&lt;br /&gt;
OpenEXR Features:&lt;br /&gt;
&lt;br /&gt;
* High dynamic range and color precision.  Support for 16-bit floating-point,&lt;br /&gt;
* 32-bit floating-point, and 32-bit integer pixels.&lt;br /&gt;
* Multiple image compression algorithms, both lossless and lossy. Some of&lt;br /&gt;
  the included codecs can achieve 2:1 lossless compression ratios on images&lt;br /&gt;
  with film grain.  The lossy codecs have been tuned for visual quality and&lt;br /&gt;
  decoding performance.&lt;br /&gt;
* Extensibility. New compression codecs and image types can easily be added&lt;br /&gt;
  by extending the C++ classes included in the OpenEXR software distribution.&lt;br /&gt;
  New image attributes (strings, vectors, integers, etc.) can be added to&lt;br /&gt;
  OpenEXR image headers without affecting backward compatibility with existing&lt;br /&gt;
  OpenEXR applications.&lt;br /&gt;
* Support for stereoscopic image workflows and a generalization&lt;br /&gt;
  to multi-views.&lt;br /&gt;
* Flexible support for deep data: pixels can store a variable-length list&lt;br /&gt;
  of samples and, thus, it is possible to store multiple values at different&lt;br /&gt;
  depths for each pixel. Hard surfaces and volumetric data representations are&lt;br /&gt;
  accommodated.&lt;br /&gt;
* Multipart: ability to encode separate, but related, images in one file.&lt;br /&gt;
  This allows for access to individual parts without the need to read other&lt;br /&gt;
  parts in the file.&lt;br /&gt;
* Versioning: OpenEXR source allows for user configurable C++&lt;br /&gt;
  namespaces to provide protection when using multiple versions of the library&lt;br /&gt;
  in the same process space.&lt;br /&gt;
&lt;br /&gt;
The IlmBase Library:&lt;br /&gt;
&lt;br /&gt;
Also a part of OpenEXR, the IlmBase library is a basic, light-weight, and&lt;br /&gt;
efficient representation of 2D and 3D vectors and matrices and other simple but&lt;br /&gt;
useful mathematical objects, functions, and data types common in computer&lt;br /&gt;
graphics applications, including the “half” 16-bit floating-point type.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 23 Mar 2026 GMT - Josef Ridky &amp;lt;jridky@redhat.com&amp;gt; - 3.1.10-9
- fix CVE-2026-27622

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 3.1.10-8
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

Wed, 26 Jun 2024 GMT - Josef Ridky &amp;lt;jridky@redhat.com&amp;gt; - 3.1.10-7
- Add gating.yaml file

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>openexr-3.1.10-9.el10.x86_64</title>
      <pubDate>Mon, 23 Mar 2026 11:12:19 AM GMT</pubDate>
      <guid isPermaLink="false">81b715667d892b24cc8a72113fcdd941ed66eeda8662cb86e4a019e7c13a39eb</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/openexr-3.1.10-9.el10.x86_64.rpm</link>
      <description><p><strong>openexr</strong> - Provides the specification and reference implementation of the EXR file format&lt;br /&gt;</p>

<p>OpenEXR is an open-source high-dynamic-range floating-point image file format&lt;br /&gt;
for high-quality image processing and storage. This document presents a brief&lt;br /&gt;
overview of OpenEXR and explains concepts that are specific to this format.&lt;br /&gt;
&lt;br /&gt;
This package containes the binaries for OpenEXR.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 23 Mar 2026 GMT - Josef Ridky &amp;lt;jridky@redhat.com&amp;gt; - 3.1.10-9
- fix CVE-2026-27622

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 3.1.10-8
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

Wed, 26 Jun 2024 GMT - Josef Ridky &amp;lt;jridky@redhat.com&amp;gt; - 3.1.10-7
- Add gating.yaml file

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>clevis-luks-22-1.el10.x86_64</title>
      <pubDate>Mon, 23 Mar 2026 10:46:18 AM GMT</pubDate>
      <guid isPermaLink="false">ede877977c87dee8b68a328c7fd38c6fe7e662523021ddc09bec20f20299c798</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/clevis-luks-22-1.el10.x86_64.rpm</link>
      <description><p><strong>clevis-luks</strong> - LUKS integration for clevis&lt;br /&gt;</p>

<p>LUKS integration for clevis. This package allows you to bind a LUKS&lt;br /&gt;
volume to a clevis unlocking policy. For automated unlocking, an unlocker&lt;br /&gt;
will also be required. See, for example, clevis-dracut and clevis-udisks2.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 17 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 22-1
- Rebase to clevis-22 upstream version

Thu, 08 Jan 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 21-9
- Add clevis user to tss group via sysusers

Thu, 09 Jan 2025 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 21-8
- Include socat, openssl as PKCS#11 pin requirements

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>clevis-dracut-22-1.el10.x86_64</title>
      <pubDate>Mon, 23 Mar 2026 10:46:18 AM GMT</pubDate>
      <guid isPermaLink="false">cc5b72547f78a146ee479070af32233396b0cfdd5a469f751ed7e4e63d3bb02f</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/clevis-dracut-22-1.el10.x86_64.rpm</link>
      <description><p><strong>clevis-dracut</strong> - Dracut integration for clevis&lt;br /&gt;</p>

<p>Automatically unlocks LUKS block devices in early boot.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 17 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 22-1
- Rebase to clevis-22 upstream version

Thu, 08 Jan 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 21-9
- Add clevis user to tss group via sysusers

Thu, 09 Jan 2025 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 21-8
- Include socat, openssl as PKCS#11 pin requirements

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>clevis-22-1.el10.x86_64</title>
      <pubDate>Mon, 23 Mar 2026 10:46:18 AM GMT</pubDate>
      <guid isPermaLink="false">62b62e4c063c46ff29df8d663aaa7722f6b6bae1f156a74c8c61d7c94a589e8e</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/clevis-22-1.el10.x86_64.rpm</link>
      <description><p><strong>clevis</strong> - Automated decryption framework&lt;br /&gt;</p>

<p>Clevis is a framework for automated decryption. It allows you to encrypt&lt;br /&gt;
data using sophisticated unlocking policies which enable decryption to&lt;br /&gt;
occur automatically.&lt;br /&gt;
&lt;br /&gt;
The clevis package provides basic encryption/decryption policy support.&lt;br /&gt;
Users can use this directly; but most commonly, it will be used as a&lt;br /&gt;
building block for other packages. For example, see the clevis-luks&lt;br /&gt;
and clevis-dracut packages for automatic root volume unlocking of&lt;br /&gt;
LUKSv1/LUKSv2 volumes during early boot.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 17 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 22-1
- Rebase to clevis-22 upstream version

Thu, 08 Jan 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 21-9
- Add clevis user to tss group via sysusers

Thu, 09 Jan 2025 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 21-8
- Include socat, openssl as PKCS#11 pin requirements

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>clevis-udisks2-22-1.el10.x86_64</title>
      <pubDate>Mon, 23 Mar 2026 10:46:18 AM GMT</pubDate>
      <guid isPermaLink="false">be7d60848682c0d9395bb7f5867298605cd537d4a59ab928794f1c0604819412</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/clevis-udisks2-22-1.el10.x86_64.rpm</link>
      <description><p><strong>clevis-udisks2</strong> - UDisks2/Storaged integration for clevis&lt;br /&gt;</p>

<p>Automatically unlocks LUKS block devices in desktop environments that&lt;br /&gt;
use UDisks2 or storaged (like GNOME).</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 17 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 22-1
- Rebase to clevis-22 upstream version

Thu, 08 Jan 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 21-9
- Add clevis user to tss group via sysusers

Thu, 09 Jan 2025 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 21-8
- Include socat, openssl as PKCS#11 pin requirements

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>clevis-systemd-22-1.el10.x86_64</title>
      <pubDate>Mon, 23 Mar 2026 10:46:18 AM GMT</pubDate>
      <guid isPermaLink="false">616aa9a30e8794dc8e4df203d0fe8e602500bfda534c53eff653d512ee04df92</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/clevis-systemd-22-1.el10.x86_64.rpm</link>
      <description><p><strong>clevis-systemd</strong> - systemd integration for clevis&lt;br /&gt;</p>

<p>Automatically unlocks LUKS _netdev block devices from /etc/crypttab.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 17 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 22-1
- Rebase to clevis-22 upstream version

Thu, 08 Jan 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 21-9
- Add clevis user to tss group via sysusers

Thu, 09 Jan 2025 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 21-8
- Include socat, openssl as PKCS#11 pin requirements

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>clevis-pin-pkcs11-22-1.el10.x86_64</title>
      <pubDate>Mon, 23 Mar 2026 10:46:18 AM GMT</pubDate>
      <guid isPermaLink="false">c52f40fd6956ec9c199d7a028e08a2b280fe22005748cc4f96d15dc0efcf58b5</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/clevis-pin-pkcs11-22-1.el10.x86_64.rpm</link>
      <description><p><strong>clevis-pin-pkcs11</strong> - PKCS#11 for clevis&lt;br /&gt;</p>

<p>Automatically unlocks LUKS block devices through a PKCS#11 device.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 17 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 22-1
- Rebase to clevis-22 upstream version

Thu, 08 Jan 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 21-9
- Add clevis user to tss group via sysusers

Thu, 09 Jan 2025 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 21-8
- Include socat, openssl as PKCS#11 pin requirements

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>idm-jss-tomcat-5.9.0-3.el10.x86_64</title>
      <pubDate>Mon, 23 Mar 2026 09:27:20 AM GMT</pubDate>
      <guid isPermaLink="false">8c409c2c2788df96de5359471d039e9c25a1cf1dc43ed91244d8d4ae83628e96</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/idm-jss-tomcat-5.9.0-3.el10.x86_64.rpm</link>
      <description><p><strong>idm-jss-tomcat</strong> - Java Security Services (JSS) Connector for Tomcat&lt;br /&gt;</p>

<p>JSS Connector for Tomcat is a Java Secure Socket Extension (JSSE)&lt;br /&gt;
module for Apache Tomcat that uses Java Security Services (JSS),&lt;br /&gt;
a Java interface to Network Security Services (NSS).</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 13 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 5.9.0-3
- Revert to tomcat 9
- Resolves: RHEL-155406

Tue, 10 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 5.9.0-2
- Rebuilt for exception target

Fri, 06 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 5.9.0-1
- Rebase to JSS 5.9.0
- Resolves: RHEL-150666

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>idm-jss-5.9.0-3.el10.x86_64</title>
      <pubDate>Mon, 23 Mar 2026 09:27:20 AM GMT</pubDate>
      <guid isPermaLink="false">67e370178956afe825d4a072f95f5c005f1a126ddcd0d3314c8d8879d16c8243</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/idm-jss-5.9.0-3.el10.x86_64.rpm</link>
      <description><p><strong>idm-jss</strong> - Java Security Services (JSS)&lt;br /&gt;</p>

<p>Java Security Services (JSS) is a java native interface which provides a bridge&lt;br /&gt;
for java-based applications to use native Network Security Services (NSS).&lt;br /&gt;
This only works with gcj. Other JREs require that JCE providers be signed.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 13 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 5.9.0-3
- Revert to tomcat 9
- Resolves: RHEL-155406

Tue, 10 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 5.9.0-2
- Rebuilt for exception target

Fri, 06 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 5.9.0-1
- Rebase to JSS 5.9.0
- Resolves: RHEL-150666

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>lldpd-devel-1.0.21-1.el10.x86_64</title>
      <pubDate>Mon, 23 Mar 2026 05:37:46 AM GMT</pubDate>
      <guid isPermaLink="false">44f8d1a419904ff9b5cc717a57011f2426a3b54de93a5e9cd10df34e198a355c</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/lldpd-devel-1.0.21-1.el10.x86_64.rpm</link>
      <description><p><strong>lldpd-devel</strong> - ISC-licensed implementation of LLDP&lt;br /&gt;</p>

<p>lldpd development libraries and headers</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 23 Mar 2026 GMT - Hangbin Liu &amp;lt;haliu@redhat.com&amp;gt; - 1.0.21-1
- Rebased to 1.0.21 (RHEL-158236)

Mon, 13 Jan 2025 GMT - Hangbin Liu &amp;lt;haliu@redhat.com&amp;gt; - 1.0.19-1
- Rebased to 1.0.19 (RHEL-73629)

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 1.0.18-4
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>lldpd-1.0.21-1.el10.x86_64</title>
      <pubDate>Mon, 23 Mar 2026 05:37:46 AM GMT</pubDate>
      <guid isPermaLink="false">05d57d5fac706db2129814e3a5be992f6f24a3d449292112f3825ff39e1156b3</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/lldpd-1.0.21-1.el10.x86_64.rpm</link>
      <description><p><strong>lldpd</strong> - ISC-licensed implementation of LLDP&lt;br /&gt;</p>

<p>LLDP is an industry standard protocol designed to supplant proprietary&lt;br /&gt;
Link-Layer protocols such as EDP or CDP. The goal of LLDP is to provide&lt;br /&gt;
an inter-vendor compatible mechanism to deliver Link-Layer notifications&lt;br /&gt;
to adjacent network devices.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 23 Mar 2026 GMT - Hangbin Liu &amp;lt;haliu@redhat.com&amp;gt; - 1.0.21-1
- Rebased to 1.0.21 (RHEL-158236)

Mon, 13 Jan 2025 GMT - Hangbin Liu &amp;lt;haliu@redhat.com&amp;gt; - 1.0.19-1
- Rebased to 1.0.19 (RHEL-73629)

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 1.0.18-4
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ignition-validate-2.26.0-2.el10.x86_64</title>
      <pubDate>Fri, 20 Mar 2026 06:28:06 PM GMT</pubDate>
      <guid isPermaLink="false">1d8a74fae467d6af055e975d778781716e129d869ce39d6e020e5f4c64e3d12c</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/ignition-validate-2.26.0-2.el10.x86_64.rpm</link>
      <description><p><strong>ignition-validate</strong> - Validation tool for Ignition configs&lt;br /&gt;</p>

<p>Ignition is a utility used to manipulate systems during the initramfs.&lt;br /&gt;
This includes partitioning disks, formatting partitions, writing files&lt;br /&gt;
(regular files, systemd units, etc.), and configuring users. On first&lt;br /&gt;
boot, Ignition reads its configuration from a source of truth (remote&lt;br /&gt;
URL, network metadata service, hypervisor bridge, etc.) and applies&lt;br /&gt;
the configuration.&lt;br /&gt;
&lt;br /&gt;
This package contains a tool for validating Ignition configurations.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 20 Mar 2026 GMT - Steven Presti &amp;lt;spresti@redhat.com&amp;gt; - 2.26.0-2
- spec: rebuild for 10.2

Wed, 11 Mar 2026 GMT - Yasmin de Souza &amp;lt;ydesouza@redhat.com&amp;gt; - 2.26.0-1
- spec: new upstream version 2.26.0

Tue, 13 Jan 2026 GMT - Yasmin de Souza &amp;lt;ydesouza@redhat.com&amp;gt; - 2.25.1-1
- spec: new upstream version 2.25.1

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ignition-grub-2.26.0-2.el10.x86_64</title>
      <pubDate>Fri, 20 Mar 2026 06:28:06 PM GMT</pubDate>
      <guid isPermaLink="false">8786ae7aa942394419be505a8e8b930b8975a905b964611494b526dfbd7f682a</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/ignition-grub-2.26.0-2.el10.x86_64.rpm</link>
      <description><p><strong>ignition-grub</strong> - Enablement glue for bootupd's grub2 config&lt;br /&gt;</p>

<p>This package contains the grub2 config which is compatable with bootupd.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 20 Mar 2026 GMT - Steven Presti &amp;lt;spresti@redhat.com&amp;gt; - 2.26.0-2
- spec: rebuild for 10.2

Wed, 11 Mar 2026 GMT - Yasmin de Souza &amp;lt;ydesouza@redhat.com&amp;gt; - 2.26.0-1
- spec: new upstream version 2.26.0

Tue, 13 Jan 2026 GMT - Yasmin de Souza &amp;lt;ydesouza@redhat.com&amp;gt; - 2.25.1-1
- spec: new upstream version 2.25.1

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ignition-edge-2.26.0-2.el10.x86_64</title>
      <pubDate>Fri, 20 Mar 2026 06:28:06 PM GMT</pubDate>
      <guid isPermaLink="false">9a0f88b2a1a7c94699aa2868a973594810b8b27edf570a6fae1739973490cb5b</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/ignition-edge-2.26.0-2.el10.x86_64.rpm</link>
      <description><p><strong>ignition-edge</strong> - Enablement glue for Ignition on IoT/Edge systems&lt;br /&gt;</p>

<p>This package contains dracut modules, services and binaries needed to enable&lt;br /&gt;
Ignition on IoT/Edge systems.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 20 Mar 2026 GMT - Steven Presti &amp;lt;spresti@redhat.com&amp;gt; - 2.26.0-2
- spec: rebuild for 10.2

Wed, 11 Mar 2026 GMT - Yasmin de Souza &amp;lt;ydesouza@redhat.com&amp;gt; - 2.26.0-1
- spec: new upstream version 2.26.0

Tue, 13 Jan 2026 GMT - Yasmin de Souza &amp;lt;ydesouza@redhat.com&amp;gt; - 2.25.1-1
- spec: new upstream version 2.25.1

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ignition-2.26.0-2.el10.x86_64</title>
      <pubDate>Fri, 20 Mar 2026 06:28:06 PM GMT</pubDate>
      <guid isPermaLink="false">636c40dbddcfcd22d818625395076ac1112ed55c8c4f98977690f87290986381</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/ignition-2.26.0-2.el10.x86_64.rpm</link>
      <description><p><strong>ignition</strong> - First boot installer and configuration tool&lt;br /&gt;</p>

<p>Ignition is a utility used to manipulate systems during the initramfs.&lt;br /&gt;
This includes partitioning disks, formatting partitions, writing files&lt;br /&gt;
(regular files, systemd units, etc.), and configuring users. On first&lt;br /&gt;
boot, Ignition reads its configuration from a source of truth (remote&lt;br /&gt;
URL, network metadata service, hypervisor bridge, etc.) and applies&lt;br /&gt;
the configuration.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 20 Mar 2026 GMT - Steven Presti &amp;lt;spresti@redhat.com&amp;gt; - 2.26.0-2
- spec: rebuild for 10.2

Wed, 11 Mar 2026 GMT - Yasmin de Souza &amp;lt;ydesouza@redhat.com&amp;gt; - 2.26.0-1
- spec: new upstream version 2.26.0

Tue, 13 Jan 2026 GMT - Yasmin de Souza &amp;lt;ydesouza@redhat.com&amp;gt; - 2.25.1-1
- spec: new upstream version 2.25.1

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>butane-0.27.0-1.el10.x86_64</title>
      <pubDate>Fri, 20 Mar 2026 05:27:31 PM GMT</pubDate>
      <guid isPermaLink="false">6263c7c7510ed26b68ff49b603d12bedddb156b8f35844c074dc992610db8ef7</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/butane-0.27.0-1.el10.x86_64.rpm</link>
      <description><p><strong>butane</strong> - Butane config transpiler&lt;br /&gt;</p>

<p>&lt;br /&gt;
Butane translates human-readable Butane Configs into machine-readable Ignition&lt;br /&gt;
configs for provisioning operating systems that use Ignition.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 09 Mar 2026 GMT - Yasmin de Souza &amp;lt;ydesouza@redhat.com&amp;gt; - 0.27.0-1
- new version

Tue, 20 Jan 2026 GMT - Steven Presti &amp;lt;spresti@redhat.com&amp;gt; - 0.26.0-1
- new version

Wed, 08 Oct 2025 GMT - Tiago Bueno &amp;lt;tbueno@redhat.com&amp;gt; - 0.25.1-1
- new version

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>coreos-installer-dracut-0.26.0-1.el10.x86_64</title>
      <pubDate>Fri, 20 Mar 2026 05:24:34 PM GMT</pubDate>
      <guid isPermaLink="false">9f66463fb67c5ca1bb11db7928a219fa6a3e2fba881f526cb140b217028aa627</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/coreos-installer-dracut-0.26.0-1.el10.x86_64.rpm</link>
      <description><p><strong>coreos-installer-dracut</strong> - Dracut module for running coreos-installer in the initrd&lt;br /&gt;</p>

<p>This subpackage contains files and configuration to run coreos-installer&lt;br /&gt;
from the initramfs.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 10 Mar 2026 GMT - Yasmin de Souza &amp;lt;ydesouza@redhat.com&amp;gt; - 0.26.0-1
- new version

Fri, 24 Oct 2025 GMT - Aashish Radhakrishnan - 0.25.0-1
- New upstream release

Wed, 16 Apr 2025 GMT - Joel Capitao &amp;lt;jcapitao@redhat.com&amp;gt; - 0.24.0-1
- Update to latest upstream

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>coreos-installer-bootinfra-0.26.0-1.el10.x86_64</title>
      <pubDate>Fri, 20 Mar 2026 05:24:34 PM GMT</pubDate>
      <guid isPermaLink="false">51eeac9eb1eac09c090a46c68fdced82393c8a0d8c3305a071975f46c437c3fc</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/coreos-installer-bootinfra-0.26.0-1.el10.x86_64.rpm</link>
      <description><p><strong>coreos-installer-bootinfra</strong> - coreos-installer boot-time infrastructure for use on Fedora/RHEL CoreOS&lt;br /&gt;</p>

<p>This subpackage contains boot-time infrastructure for Fedora CoreOS and&lt;br /&gt;
RHEL CoreOS.  It is not needed on other platforms.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 10 Mar 2026 GMT - Yasmin de Souza &amp;lt;ydesouza@redhat.com&amp;gt; - 0.26.0-1
- new version

Fri, 24 Oct 2025 GMT - Aashish Radhakrishnan - 0.25.0-1
- New upstream release

Wed, 16 Apr 2025 GMT - Joel Capitao &amp;lt;jcapitao@redhat.com&amp;gt; - 0.24.0-1
- Update to latest upstream

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>coreos-installer-0.26.0-1.el10.x86_64</title>
      <pubDate>Fri, 20 Mar 2026 05:24:34 PM GMT</pubDate>
      <guid isPermaLink="false">7d3c3894b30f93387c7e3b243faf74fa0db0b36049a4789d94bc36a0d86fe912</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/coreos-installer-0.26.0-1.el10.x86_64.rpm</link>
      <description><p><strong>coreos-installer</strong> - Installer for Fedora CoreOS and RHEL CoreOS&lt;br /&gt;</p>

<p>coreos-installer installs Fedora CoreOS or RHEL CoreOS to bare-metal&lt;br /&gt;
machines (or, occasionally, to virtual machines).</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 10 Mar 2026 GMT - Yasmin de Souza &amp;lt;ydesouza@redhat.com&amp;gt; - 0.26.0-1
- new version

Fri, 24 Oct 2025 GMT - Aashish Radhakrishnan - 0.25.0-1
- New upstream release

Wed, 16 Apr 2025 GMT - Joel Capitao &amp;lt;jcapitao@redhat.com&amp;gt; - 0.24.0-1
- Update to latest upstream

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>rpm-ostree-libs-2026.1-4.el10.x86_64</title>
      <pubDate>Fri, 20 Mar 2026 04:04:52 PM GMT</pubDate>
      <guid isPermaLink="false">c5bbb948d4bcdfb1e7c69de949d13b5093d7f37ab7a049dcb50e1af31df74052</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/rpm-ostree-libs-2026.1-4.el10.x86_64.rpm</link>
      <description><p><strong>rpm-ostree-libs</strong> - Shared library for rpm-ostree&lt;br /&gt;</p>

<p>The rpm-ostree-libs package includes the shared library for rpm-ostree.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 20 Mar 2026 GMT - Joseph Marrero Corchado &amp;lt;jmarrero@redhat.com&amp;gt; - 2026.1-4
- Backport: https://github.com/coreos/rpm-ostree/pull/5575

Tue, 10 Mar 2026 GMT - Joseph Marrero Corchado &amp;lt;jmarrero@redhat.com&amp;gt; - 2026.1-3
- Backport https://github.com/coreos/rpm-ostree/pull/5569

Thu, 05 Feb 2026 GMT - Joseph Marrero Corchado &amp;lt;jmarrero@redhat.com&amp;gt; - 2026.1-2
- Backport https://github.com/coreos/rpm-ostree/pull/5558

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>rpm-ostree-2026.1-4.el10.x86_64</title>
      <pubDate>Fri, 20 Mar 2026 04:04:52 PM GMT</pubDate>
      <guid isPermaLink="false">5de24a782c2d55513297dab972386becfc258b6167f52fc52da06649bb3757f5</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/rpm-ostree-2026.1-4.el10.x86_64.rpm</link>
      <description><p><strong>rpm-ostree</strong> - Hybrid image/package system&lt;br /&gt;</p>

<p>rpm-ostree is a hybrid image/package system.  It supports&lt;br /&gt;
"composing" packages on a build server into an OSTree repository,&lt;br /&gt;
which can then be replicated by client systems with atomic upgrades.&lt;br /&gt;
Additionally, unlike many "pure" image systems, with rpm-ostree&lt;br /&gt;
each client system can layer on additional packages, providing&lt;br /&gt;
a "best of both worlds" approach.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 20 Mar 2026 GMT - Joseph Marrero Corchado &amp;lt;jmarrero@redhat.com&amp;gt; - 2026.1-4
- Backport: https://github.com/coreos/rpm-ostree/pull/5575

Tue, 10 Mar 2026 GMT - Joseph Marrero Corchado &amp;lt;jmarrero@redhat.com&amp;gt; - 2026.1-3
- Backport https://github.com/coreos/rpm-ostree/pull/5569

Thu, 05 Feb 2026 GMT - Joseph Marrero Corchado &amp;lt;jmarrero@redhat.com&amp;gt; - 2026.1-2
- Backport https://github.com/coreos/rpm-ostree/pull/5558

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ansible-collection-redhat-leapp-1.7.4-1.el10.noarch</title>
      <pubDate>Fri, 20 Mar 2026 12:57:39 PM GMT</pubDate>
      <guid isPermaLink="false">74f917a8174bc4ad57f50da3cc7695bc866f0b0c64fb30785c4cd27843ee6690</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/ansible-collection-redhat-leapp-1.7.4-1.el10.noarch.rpm</link>
      <description><p><strong>ansible-collection-redhat-leapp</strong> - redhat.leapp Ansible collection that handles RHEL upgrades&lt;br /&gt;</p>

<p>redhat.leapp Ansible collection that handles RHEL upgrades.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 09 Mar 2026 GMT - Sergei Petrosian &amp;lt;spetrosi@redhat.com&amp;gt; - 1.7.4-1
- Update to latest upstream version 1.7.4
- Resolves: RHEL-153382 : Fix the role failing on steps that copy logs to the controller EL10

Tue, 24 Feb 2026 GMT - Sergei Petrosian &amp;lt;spetrosi@redhat.com&amp;gt; - 1.7.1-2
- Fix spec file to require rhel-system-roles package
- Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10

Mon, 23 Feb 2026 GMT - Sergei Petrosian &amp;lt;spetrosi@redhat.com&amp;gt; - 1.7.1-1
- Update to latest upstream version via commit hash
- Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>greenboot-default-health-checks-0.16.3-0.el10.x86_64</title>
      <pubDate>Fri, 20 Mar 2026 12:07:08 PM GMT</pubDate>
      <guid isPermaLink="false">cced5b07e069ca25496d33540f0ee45d4cc829babc6236a773d0850bb52cf352</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/greenboot-default-health-checks-0.16.3-0.el10.x86_64.rpm</link>
      <description><p><strong>greenboot-default-health-checks</strong> - Series of optional and curated health checks&lt;br /&gt;</p>

<p>%{description}.&lt;br /&gt;
&lt;br /&gt;
This package adds some default healthchecks for greenboot.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 21 Jan 2026 GMT - Sayan Paul &amp;lt;saypaul@redhat.com&amp;gt; - 0.16.2
- restrict manual restart of healthcheck service
- fixed error while running healtcheck inside container
- removed bootupd dependency
- fixed CI tests

Wed, 03 Dec 2025 GMT - Sayan Paul &amp;lt;saypaul@redhat.com&amp;gt; - 0.16.1
- Ensure rollback trigger runs before systemd-update-done and only on updates
- Log the correct system type when reporting rollback decisions
- Fix CI/tests (Ansible callback config, GI deps) to keep gating green
- Refresh Packit release config for Fedora delivery

Wed, 15 Oct 2025 GMT - Sayan Paul &amp;lt;saypaul@redhat.com&amp;gt; - 0.16.0-6
- Fix OS type detection
- Do not remount /boot superblock/filesystem readonly

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>greenboot-0.16.3-0.el10.x86_64</title>
      <pubDate>Fri, 20 Mar 2026 12:07:08 PM GMT</pubDate>
      <guid isPermaLink="false">32a547352fe8eee3e3d359593f3edc8751c9d66271d878891817152311cc0a70</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/greenboot-0.16.3-0.el10.x86_64.rpm</link>
      <description><p><strong>greenboot</strong> - Generic Health Check Framework for systemd&lt;br /&gt;</p>

<p>&lt;br /&gt;
%{description}.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 21 Jan 2026 GMT - Sayan Paul &amp;lt;saypaul@redhat.com&amp;gt; - 0.16.2
- restrict manual restart of healthcheck service
- fixed error while running healtcheck inside container
- removed bootupd dependency
- fixed CI tests

Wed, 03 Dec 2025 GMT - Sayan Paul &amp;lt;saypaul@redhat.com&amp;gt; - 0.16.1
- Ensure rollback trigger runs before systemd-update-done and only on updates
- Log the correct system type when reporting rollback decisions
- Fix CI/tests (Ansible callback config, GI deps) to keep gating green
- Refresh Packit release config for Fedora delivery

Wed, 15 Oct 2025 GMT - Sayan Paul &amp;lt;saypaul@redhat.com&amp;gt; - 0.16.0-6
- Fix OS type detection
- Do not remount /boot superblock/filesystem readonly

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>sisu-1:0.3.5-15.el10.noarch</title>
      <pubDate>Fri, 20 Mar 2026 11:48:46 AM GMT</pubDate>
      <guid isPermaLink="false">d21f39167635e3ab00bfc25da4a40872110da1efa6e4d23ade12b71880b47188</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/sisu-0.3.5-15.el10.noarch.rpm</link>
      <description><p><strong>sisu</strong> - Eclipse dependency injection framework&lt;br /&gt;</p>

<p>Java dependency injection framework with backward support for plexus and bean&lt;br /&gt;
style dependency injection.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 19 Mar 2026 GMT - Marian Koncek &amp;lt;mkoncek@redhat.com&amp;gt; - 1:0.3.5-15
- Update-bundled-ASM-bytecode-versions-up-to-Java-25.patch

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 1:0.3.5-14
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

Thu, 01 Aug 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 1:0.3.5-13
- Bump release for Aug 2024 java mass rebuild

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>insights-core-selinux-3.7.5-1.el10.noarch</title>
      <pubDate>Fri, 20 Mar 2026 05:33:52 AM GMT</pubDate>
      <guid isPermaLink="false">aaea3d7874012f2b145aa999e7062927e1e7696377a770b0ecd2e439f46be0f8</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/insights-core-selinux-3.7.5-1.el10.noarch.rpm</link>
      <description><p><strong>insights-core-selinux</strong> - Insights Core SELinux policy&lt;br /&gt;</p>

<p>Insights Core Custom SELinux policy module</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 19 Mar 2026 GMT - Xiangce Liu &amp;lt;xiangceliu@redhat.com&amp;gt; 3.7.5-1
- Fix: Update ls to handle special lines (#4750) (986222045@qq.com)
- feat: Malware Detection wildcards support and fix concurrent scan false
  positives (#4746) (63891960+mtclinton@users.noreply.github.com)
- chore(pre-commit): update and add new hook conventional-pre-commit
  (xiangceliu@redhat.com)
- chore(build): enable packit building for release branch
  (xiangceliu@redhat.com)
- feat: add all rules scanned to malware detection upload (#4735)
  (63891960+mtclinton@users.noreply.github.com)
- fix(data-processing): fix unpredictable behavior of --context (#4740)
  (71874510+jholecek-rh@users.noreply.github.com)
- chore: remove planned deprecations for v3.7.0 (xiangceliu@redhat.com)
- fix(rpm-build): add 'BuildRequires: pkgconfig(systemd)' back for insights-
  core-selinux (xiangceliu@redhat.com)
- feat: New spec "/etc/modules-load.d/*.conf" and its parser (shlao@redhat.com)
- chore(spec): New spec "podman system info --json" for data analysis
  (huali@redhat.com)
- chore(manifests): remove/merge remained useless components (#4747)
  (xiangceliu@redhat.com)
- chore(manifests): use the base module instead of component (#4730)
  (xiangceliu@redhat.com)
- chore: add egg_release back to collection with a condition (#4729)
  (xiangceliu@redhat.com)
- fix(build): prepare the filters.yaml before setting up  (#4745)
  (xiangceliu@redhat.com)
- chore(spec): update SELinux relevant specs (#4728) (xiangceliu@redhat.com)
- chore(spec): remove SELinuxDisable depdencies from ansible_telemetry (#4731)
  (xiangceliu@redhat.com)
- chore: remove unused lines from PR template (#4725) (xiangceliu@redhat.com)
- chore(test): don't pass context when root is passed to initialize_broker
  (#4720) (xiangceliu@redhat.com)
- chore: update PR template and remove RPM/Egg delivery guide (#4723)
  (xiangceliu@redhat.com)
- feat: New spec "strings /boot/efi/EFI/redhat/shimx64.efi" and its parser
  (#4705) (44796653+huali027@users.noreply.github.com)
- feat: New spec "/bin/mokutil --db --short" and the parser (#4704)
  (44796653+huali027@users.noreply.github.com)
- fix(ci/cd): enable CI/CD for release branch (xiangceliu@redhat.com)
- feat: add CoreEgg/CoreRpm to identify current collector (#4724)
  (xiangceliu@redhat.com)

Thu, 26 Feb 2026 GMT - Xiangce Liu &amp;lt;xiangceliu@redhat.com&amp;gt; 3.7.4-1
- Revert "fix: handle no account_number in response data (#4687)" (#4736)
  (xiangceliu@redhat.com)

Fri, 20 Feb 2026 GMT - Xiangce Liu &amp;lt;xiangceliu@redhat.com&amp;gt; 3.7.3-1
- fix: don't collect teamd specs when SELinux is enabled (#4734)
  (xiangceliu@redhat.com)
- chore(build): add build_client_egg script back to master (#4722)
  (xiangceliu@redhat.com)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>insights-core-3.7.5-1.el10.noarch</title>
      <pubDate>Fri, 20 Mar 2026 05:33:52 AM GMT</pubDate>
      <guid isPermaLink="false">e60335cff0505cefb713a0ffd3df78067a5f91b8eeddd61d39ed06dc3cd9c111</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/insights-core-3.7.5-1.el10.noarch.rpm</link>
      <description><p><strong>insights-core</strong> - Insights Core is a data collection and analysis framework.&lt;br /&gt;</p>

<p>Insights Core is a data collection and analysis framework.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 19 Mar 2026 GMT - Xiangce Liu &amp;lt;xiangceliu@redhat.com&amp;gt; 3.7.5-1
- Fix: Update ls to handle special lines (#4750) (986222045@qq.com)
- feat: Malware Detection wildcards support and fix concurrent scan false
  positives (#4746) (63891960+mtclinton@users.noreply.github.com)
- chore(pre-commit): update and add new hook conventional-pre-commit
  (xiangceliu@redhat.com)
- chore(build): enable packit building for release branch
  (xiangceliu@redhat.com)
- feat: add all rules scanned to malware detection upload (#4735)
  (63891960+mtclinton@users.noreply.github.com)
- fix(data-processing): fix unpredictable behavior of --context (#4740)
  (71874510+jholecek-rh@users.noreply.github.com)
- chore: remove planned deprecations for v3.7.0 (xiangceliu@redhat.com)
- fix(rpm-build): add 'BuildRequires: pkgconfig(systemd)' back for insights-
  core-selinux (xiangceliu@redhat.com)
- feat: New spec "/etc/modules-load.d/*.conf" and its parser (shlao@redhat.com)
- chore(spec): New spec "podman system info --json" for data analysis
  (huali@redhat.com)
- chore(manifests): remove/merge remained useless components (#4747)
  (xiangceliu@redhat.com)
- chore(manifests): use the base module instead of component (#4730)
  (xiangceliu@redhat.com)
- chore: add egg_release back to collection with a condition (#4729)
  (xiangceliu@redhat.com)
- fix(build): prepare the filters.yaml before setting up  (#4745)
  (xiangceliu@redhat.com)
- chore(spec): update SELinux relevant specs (#4728) (xiangceliu@redhat.com)
- chore(spec): remove SELinuxDisable depdencies from ansible_telemetry (#4731)
  (xiangceliu@redhat.com)
- chore: remove unused lines from PR template (#4725) (xiangceliu@redhat.com)
- chore(test): don't pass context when root is passed to initialize_broker
  (#4720) (xiangceliu@redhat.com)
- chore: update PR template and remove RPM/Egg delivery guide (#4723)
  (xiangceliu@redhat.com)
- feat: New spec "strings /boot/efi/EFI/redhat/shimx64.efi" and its parser
  (#4705) (44796653+huali027@users.noreply.github.com)
- feat: New spec "/bin/mokutil --db --short" and the parser (#4704)
  (44796653+huali027@users.noreply.github.com)
- fix(ci/cd): enable CI/CD for release branch (xiangceliu@redhat.com)
- feat: add CoreEgg/CoreRpm to identify current collector (#4724)
  (xiangceliu@redhat.com)

Thu, 26 Feb 2026 GMT - Xiangce Liu &amp;lt;xiangceliu@redhat.com&amp;gt; 3.7.4-1
- Revert "fix: handle no account_number in response data (#4687)" (#4736)
  (xiangceliu@redhat.com)

Fri, 20 Feb 2026 GMT - Xiangce Liu &amp;lt;xiangceliu@redhat.com&amp;gt; 3.7.3-1
- fix: don't collect teamd specs when SELinux is enabled (#4734)
  (xiangceliu@redhat.com)
- chore(build): add build_client_egg script back to master (#4722)
  (xiangceliu@redhat.com)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>bootc-1.14.1-1.el10.x86_64</title>
      <pubDate>Fri, 20 Mar 2026 12:13:26 AM GMT</pubDate>
      <guid isPermaLink="false">5e7ba099307b21994b22edd82d297f32302471b9b174ddf8f86c21765923b3ef</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/bootc-1.14.1-1.el10.x86_64.rpm</link>
      <description><p><strong>bootc</strong> - Bootable container system&lt;br /&gt;</p>

<p>Bootable container system</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 20 Mar 2026 GMT - Colin Walters &amp;lt;walters@verbum.org&amp;gt; - 1.14.1-1
- Update to 1.14.1

Tue, 24 Feb 2026 GMT - Colin Walters &amp;lt;walters@verbum.org&amp;gt; - 1.13.0-1
- Release 1.13.0
- Update to bootc 1.13.0
- Pass CARGO_FEATURES explicitly to make install to prevent auto-detection
  rebuild in install environment (workaround for upstream Makefile issue)
- Package shell completions (bash, zsh, fish)

Mon, 19 Jan 2026 GMT - Xiaofeng Wang &amp;lt;xiaofwan@redhat.com&amp;gt; - 1.12.1-2
- Skip rpminspect checking for symbolic link /usr/lib/bootc/storage

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>system-reinstall-bootc-1.14.1-1.el10.x86_64</title>
      <pubDate>Fri, 20 Mar 2026 12:13:26 AM GMT</pubDate>
      <guid isPermaLink="false">3299ad3349e621458b2f4a880a49d61dfe0c6355302e4a698e1f2efc80cbb7e2</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/system-reinstall-bootc-1.14.1-1.el10.x86_64.rpm</link>
      <description><p><strong>system-reinstall-bootc</strong> - Utility to reinstall the current system using bootc&lt;br /&gt;</p>

<p>This package provides a utility to simplify reinstalling the current system to a given bootc image.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 20 Mar 2026 GMT - Colin Walters &amp;lt;walters@verbum.org&amp;gt; - 1.14.1-1
- Update to 1.14.1

Tue, 24 Feb 2026 GMT - Colin Walters &amp;lt;walters@verbum.org&amp;gt; - 1.13.0-1
- Release 1.13.0
- Update to bootc 1.13.0
- Pass CARGO_FEATURES explicitly to make install to prevent auto-detection
  rebuild in install environment (workaround for upstream Makefile issue)
- Package shell completions (bash, zsh, fish)

Mon, 19 Jan 2026 GMT - Xiaofeng Wang &amp;lt;xiaofwan@redhat.com&amp;gt; - 1.12.1-2
- Skip rpminspect checking for symbolic link /usr/lib/bootc/storage

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>nfsv4-client-utils-1:2.8.3-6.el10.x86_64</title>
      <pubDate>Thu, 19 Mar 2026 06:20:21 PM GMT</pubDate>
      <guid isPermaLink="false">0a693134d5fcfce03783457d3c0dc113b23553a821bebc0a45207c8f50b8bef3</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/nfsv4-client-utils-2.8.3-6.el10.x86_64.rpm</link>
      <description><p><strong>nfsv4-client-utils</strong> - NFSv4 utilities for supporting client&lt;br /&gt;</p>

<p>The nfsv4-client-utils packages provided NFSv4 client support</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 19 Mar 2026 GMT - Scott Mayhew &amp;lt;smayhew@redhat.com&amp;gt; 2.8.3-6
- nfsdctl: ignore ipv6 listener creation error (RHEL-71352)
- nfsdclnts: fix display of stateids where the kernel doesn't provide the superblock (RHEL-151444)

Fri, 06 Mar 2026 GMT - Scott Mayhew &amp;lt;smayhew@redhat.com&amp;gt; 2.8.3-5
- mountd: Minor refactor of get_rootfh() (RHEL-127093)
- mountd: Separate lookup of the exported directory and the mount path (RHEL-127093)
- support: Add a mini-library to extract and apply RPC credentials (RHEL-127093)
- Fix access checks when mounting subdirectories in NFSv3 (RHEL-127093)
- Add requires for selinux-policy (RHEL-127093)
  Resolves: CVE-2025-12801

Thu, 05 Feb 2026 GMT - Scott Mayhew &amp;lt;smayhew@redhat.com&amp;gt; 2.8.3-4
- nfsiostat: normalize the mountpoints passed in from the command line (RHEL-90562)
- Remove /var/lib/nfs/v4recovery (RHEL-137935)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>nfs-utils-coreos-1:2.8.3-6.el10.x86_64</title>
      <pubDate>Thu, 19 Mar 2026 06:20:21 PM GMT</pubDate>
      <guid isPermaLink="false">ad87583eb0b85b9d6a7fb90525fd1d9f714b577061bd9c1fde2c0296157bbc1c</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/nfs-utils-coreos-2.8.3-6.el10.x86_64.rpm</link>
      <description><p><strong>nfs-utils-coreos</strong> - Minimal NFS utilities for supporting clients&lt;br /&gt;</p>

<p>Minimal NFS utilities for supporting clients</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 19 Mar 2026 GMT - Scott Mayhew &amp;lt;smayhew@redhat.com&amp;gt; 2.8.3-6
- nfsdctl: ignore ipv6 listener creation error (RHEL-71352)
- nfsdclnts: fix display of stateids where the kernel doesn't provide the superblock (RHEL-151444)

Fri, 06 Mar 2026 GMT - Scott Mayhew &amp;lt;smayhew@redhat.com&amp;gt; 2.8.3-5
- mountd: Minor refactor of get_rootfh() (RHEL-127093)
- mountd: Separate lookup of the exported directory and the mount path (RHEL-127093)
- support: Add a mini-library to extract and apply RPC credentials (RHEL-127093)
- Fix access checks when mounting subdirectories in NFSv3 (RHEL-127093)
- Add requires for selinux-policy (RHEL-127093)
  Resolves: CVE-2025-12801

Thu, 05 Feb 2026 GMT - Scott Mayhew &amp;lt;smayhew@redhat.com&amp;gt; 2.8.3-4
- nfsiostat: normalize the mountpoints passed in from the command line (RHEL-90562)
- Remove /var/lib/nfs/v4recovery (RHEL-137935)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>vim-enhanced-2:9.1.083-9.el10.x86_64</title>
      <pubDate>Thu, 19 Mar 2026 09:00:10 AM GMT</pubDate>
      <guid isPermaLink="false">89dae2ac367fb9f6487e5526c84ee65ae02270b73988f66e43a2856c73f5bdef</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/vim-enhanced-9.1.083-9.el10.x86_64.rpm</link>
      <description><p><strong>vim-enhanced</strong> - A version of the VIM editor which includes recent enhancements&lt;br /&gt;</p>

<p>VIM (VIsual editor iMproved) is an updated and improved version of the&lt;br /&gt;
vi editor.  Vi was the first real screen-based editor for UNIX, and is&lt;br /&gt;
still very popular.  VIM improves on vi by adding new features:&lt;br /&gt;
multiple windows, multi-level undo, block highlighting and more.  The&lt;br /&gt;
vim-enhanced package contains a version of VIM with extra, recently&lt;br /&gt;
introduced features like Python and Perl interpreters.&lt;br /&gt;
&lt;br /&gt;
Install the vim-enhanced package if you'd like to use a version of the&lt;br /&gt;
VIM editor which includes recently added enhancements like&lt;br /&gt;
interpreters for the Python and Perl scripting languages.  You'll also&lt;br /&gt;
need to install the vim-common package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Mar 2026 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 2:9.1.083-9
- RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file

Tue, 17 Mar 2026 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 2:9.1.083-9
- RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin

Tue, 10 Feb 2026 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 2:9.1.083-8
- RHEL-147924 CVE-2026-25749 vim: Heap Overflow in Vim

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>vim-common-2:9.1.083-9.el10.x86_64</title>
      <pubDate>Thu, 19 Mar 2026 09:00:10 AM GMT</pubDate>
      <guid isPermaLink="false">b1458037eef147e333bec6fd7dd3893748a27b261f54ec72e12ca684e9ba3b1d</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/vim-common-9.1.083-9.el10.x86_64.rpm</link>
      <description><p><strong>vim-common</strong> - The common files needed by any version of the VIM editor&lt;br /&gt;</p>

<p>VIM (VIsual editor iMproved) is an updated and improved version of the&lt;br /&gt;
vi editor.  Vi was the first real screen-based editor for UNIX, and is&lt;br /&gt;
still very popular.  VIM improves on vi by adding new features:&lt;br /&gt;
multiple windows, multi-level undo, block highlighting and more.  The&lt;br /&gt;
vim-common package contains files which every VIM binary will need in&lt;br /&gt;
order to run.&lt;br /&gt;
&lt;br /&gt;
If you are installing vim-enhanced or vim-X11, you'll also need&lt;br /&gt;
to install the vim-common package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Mar 2026 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 2:9.1.083-9
- RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file

Tue, 17 Mar 2026 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 2:9.1.083-9
- RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin

Tue, 10 Feb 2026 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 2:9.1.083-8
- RHEL-147924 CVE-2026-25749 vim: Heap Overflow in Vim

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>vim-X11-2:9.1.083-9.el10.x86_64</title>
      <pubDate>Thu, 19 Mar 2026 09:00:10 AM GMT</pubDate>
      <guid isPermaLink="false">8653cf8c299db95f93d1b751ece2b9709f778698eaf56818b666da9c12cfebca</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/vim-X11-9.1.083-9.el10.x86_64.rpm</link>
      <description><p><strong>vim-X11</strong> - The VIM version of the vi editor for the X Window System - GVim&lt;br /&gt;</p>

<p>VIM (VIsual editor iMproved) is an updated and improved version of the&lt;br /&gt;
vi editor.  Vi was the first real screen-based editor for UNIX, and is&lt;br /&gt;
still very popular.  VIM improves on vi by adding new features:&lt;br /&gt;
multiple windows, multi-level undo, block highlighting and&lt;br /&gt;
more. VIM-X11 is a version of the VIM editor which will run within the&lt;br /&gt;
X Window System.  If you install this package, you can run VIM as an X&lt;br /&gt;
application with a full GUI interface and mouse support by command gvim.&lt;br /&gt;
&lt;br /&gt;
Install the vim-X11 package if you'd like to try out a version of vi&lt;br /&gt;
with graphics and mouse capabilities.  You'll also need to install the&lt;br /&gt;
vim-common package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Mar 2026 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 2:9.1.083-9
- RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file

Tue, 17 Mar 2026 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 2:9.1.083-9
- RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin

Tue, 10 Feb 2026 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 2:9.1.083-8
- RHEL-147924 CVE-2026-25749 vim: Heap Overflow in Vim

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>xxd-2:9.1.083-9.el10.x86_64</title>
      <pubDate>Thu, 19 Mar 2026 09:00:10 AM GMT</pubDate>
      <guid isPermaLink="false">1f8e67d0ef0e2786f8a7ba1cdfb016b887d442e99a990446583029229dcd2197</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/xxd-9.1.083-9.el10.x86_64.rpm</link>
      <description><p><strong>xxd</strong> - A hex dump utility&lt;br /&gt;</p>

<p>xxd creates a hex dump of a given file or standard input.  It can also convert&lt;br /&gt;
a hex dump back to its original binary form.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Mar 2026 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 2:9.1.083-9
- RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file

Tue, 17 Mar 2026 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 2:9.1.083-9
- RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin

Tue, 10 Feb 2026 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 2:9.1.083-8
- RHEL-147924 CVE-2026-25749 vim: Heap Overflow in Vim

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>awscli2-2.33.0-1.el10.noarch</title>
      <pubDate>Wed, 18 Mar 2026 04:29:11 PM GMT</pubDate>
      <guid isPermaLink="false">3b7fbd1dc619142d43624806bd0ff565ff41c7b2ef85f1aa9c6d4bd4f6eeee67</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/awscli2-2.33.0-1.el10.noarch.rpm</link>
      <description><p><strong>awscli2</strong> - Universal Command Line Environment for AWS, version 2&lt;br /&gt;</p>

<p>This package provides version 2 of the unified command line&lt;br /&gt;
interface to Amazon Web Services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 13 Mar 2026 GMT - Kseniia Nivnia &amp;lt;knivnia@redhat.com&amp;gt; - 2.33.0-1
- Update to v2.33.0

Thu, 24 Jul 2025 GMT - Kseniia Nivnia &amp;lt;knivnia@redhat.com&amp;gt; - 2.27.0-1
- Update to 2.27.0

Mon, 23 Dec 2024 GMT - ccowman &amp;lt;ccowman@redhat.com&amp;gt; - 2.22.9-1
- Revise patches and update to 2.22.9

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>radii-1:1.0.0-1.el10.x86_64</title>
      <pubDate>Wed, 18 Mar 2026 02:55:02 PM GMT</pubDate>
      <guid isPermaLink="false">a4f0d014b452ed4a24b6ae54a56c945a8a33797db8a782fe2af72e2dc4157a43</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/radii-1.0.0-1.el10.x86_64.rpm</link>
      <description><p><strong>radii</strong> - GPU and AI accelerator driver manager&lt;br /&gt;</p>

<p>The radii tool is a command-line utility that provides a consistent&lt;br /&gt;
interface for installing and maintaining third-party AI-accelerator&lt;br /&gt;
and GPU driver stacks. It detects compatible accelerator hardware,&lt;br /&gt;
enables the appropriate package repositories, and installs the&lt;br /&gt;
required kernel and user-mode components from distribution&lt;br /&gt;
packages. The tool manages multi-component driver stacks end-to-end&lt;br /&gt;
and integrates with the standard dnf workflow so that installed&lt;br /&gt;
drivers are updated through normal system package management.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Mar 2026 GMT - Mikolaj Izdebski &amp;lt;mizdebsk@redhat.com&amp;gt; - 1:1.0.0-1
- Initial packaging

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libreswan-minimal-5.3-8.el10.x86_64</title>
      <pubDate>Wed, 18 Mar 2026 02:14:33 PM GMT</pubDate>
      <guid isPermaLink="false">49328baca9a5d81762d3511179aee35ae491d6cbd09e7bbfca6728ea5bb570d9</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/libreswan-minimal-5.3-8.el10.x86_64.rpm</link>
      <description><p><strong>libreswan-minimal</strong> - Internet Key Exchange (IKEv1 and IKEv2) implementation for IPsec (minimal version)&lt;br /&gt;</p>

<p>Libreswan is a free implementation of IPsec &amp; IKE for Linux.  IPsec is&lt;br /&gt;
the Internet Protocol Security and uses strong cryptography to provide&lt;br /&gt;
both authentication and encryption services.  These services allow you&lt;br /&gt;
to build secure tunnels through untrusted networks.  Everything passing&lt;br /&gt;
through the untrusted net is encrypted by the ipsec gateway machine and&lt;br /&gt;
decrypted by the gateway at the other end of the tunnel.  The resulting&lt;br /&gt;
tunnel is a virtual private network or VPN.&lt;br /&gt;
&lt;br /&gt;
This package contains the minimal set of daemons and userland tools&lt;br /&gt;
for setting up Libreswan.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Mar 2026 GMT - Daiki Ueno &amp;lt;dueno@redhat.com&amp;gt; - 5.3-8
- Bump release number

Tue, 17 Mar 2026 GMT - Ondrej Moris &amp;lt;omoris@redhat.com&amp;gt; - 5.3-7
- ikev2: use nonces to tie-break simultaneous IKE

Tue, 17 Mar 2026 GMT - Ondrej Moris &amp;lt;omoris@redhat.com&amp;gt; - 5.3-6
- CI: Update CI plan url

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libreswan-5.3-8.el10.x86_64</title>
      <pubDate>Wed, 18 Mar 2026 02:14:33 PM GMT</pubDate>
      <guid isPermaLink="false">2ab00534b59772354424e647b64123fa4bda49c0a413a2a848bea2041f06b922</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/libreswan-5.3-8.el10.x86_64.rpm</link>
      <description><p><strong>libreswan</strong> - Internet Key Exchange (IKEv1 and IKEv2) implementation for IPsec&lt;br /&gt;</p>

<p>Libreswan is a free implementation of IPsec &amp; IKE for Linux.  IPsec is&lt;br /&gt;
the Internet Protocol Security and uses strong cryptography to provide&lt;br /&gt;
both authentication and encryption services.  These services allow you&lt;br /&gt;
to build secure tunnels through untrusted networks.  Everything passing&lt;br /&gt;
through the untrusted net is encrypted by the ipsec gateway machine and&lt;br /&gt;
decrypted by the gateway at the other end of the tunnel.  The resulting&lt;br /&gt;
tunnel is a virtual private network or VPN.&lt;br /&gt;
&lt;br /&gt;
This package contains the daemons and userland tools for setting up&lt;br /&gt;
Libreswan.&lt;br /&gt;
&lt;br /&gt;
Libreswan also supports IKEv2 (RFC7296) and Secure Labeling&lt;br /&gt;
&lt;br /&gt;
Libreswan is based on Openswan-2.6.38 which in turn is based on FreeS/WAN-2.04</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Mar 2026 GMT - Daiki Ueno &amp;lt;dueno@redhat.com&amp;gt; - 5.3-8
- Bump release number

Tue, 17 Mar 2026 GMT - Ondrej Moris &amp;lt;omoris@redhat.com&amp;gt; - 5.3-7
- ikev2: use nonces to tie-break simultaneous IKE

Tue, 17 Mar 2026 GMT - Ondrej Moris &amp;lt;omoris@redhat.com&amp;gt; - 5.3-6
- CI: Update CI plan url

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>radii-hwdata-nv-0.23.48.01-1.el10.noarch</title>
      <pubDate>Wed, 18 Mar 2026 01:32:03 PM GMT</pubDate>
      <guid isPermaLink="false">bed8e4d49d835d3cac1258d0cc467bdc1b6ea21ab86eab27a2fd80e3a7f6fd6f</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/radii-hwdata-nv-0.23.48.01-1.el10.noarch.rpm</link>
      <description><p><strong>radii-hwdata-nv</strong> - Hardware database for NVIDIA GPU chips&lt;br /&gt;</p>

<p>Hardware database for NVIDIA GPU chips.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Mar 2026 GMT - Mikolaj Izdebski &amp;lt;mizdebsk@redhat.com&amp;gt; - 0.23.48.01-1
- Initial packaging

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3-awscrt-0.31.1-1.el10.x86_64</title>
      <pubDate>Wed, 18 Mar 2026 09:32:31 AM GMT</pubDate>
      <guid isPermaLink="false">639a22b9e1c7453b28a7bb7d525d40727cbc2d8e6732013e962d2adb1d71fc83</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/python3-awscrt-0.31.1-1.el10.x86_64.rpm</link>
      <description><p><strong>python3-awscrt</strong> - Python bindings for the AWS Common Runtime&lt;br /&gt;</p>

<p>&lt;br /&gt;
Python bindings for the AWS Common Runtime</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Mar 2026 GMT - Kseniia Nivnia &amp;lt;knivnia@redhat.com&amp;gt; - 0.31.1-1
- Update to v0.31.1

Tue, 15 Jul 2025 GMT - Kseniia Nivnia &amp;lt;knivnia@redhat.com&amp;gt; - 0.27.2-1
- Update to version 0.27.2 and revise existing patches Resolves:
  RHEL-103640

Mon, 24 Feb 2025 GMT - Kseniia Nivnia &amp;lt;knivnia@redhat.com&amp;gt; - 0.23.8-1
- Update to 0.23.8 and add skip-testing-sha1.patch

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-upgrade-devel-16.13-2.el10.x86_64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:43 PM GMT</pubDate>
      <guid isPermaLink="false">1288cab7f29a4cf5a9ab610ab90aab4ddda9aea5c4a9c65b236139df7f5a98d3</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/postgresql-upgrade-devel-16.13-2.el10.x86_64.rpm</link>
      <description><p><strong>postgresql-upgrade-devel</strong> - Support for build of extensions required for upgrade process&lt;br /&gt;</p>

<p>The postgresql-devel package contains the header files and libraries&lt;br /&gt;
needed to compile C or C++ applications which are necessary in upgrade&lt;br /&gt;
process.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-upgrade-16.13-2.el10.x86_64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:43 PM GMT</pubDate>
      <guid isPermaLink="false">226356606012bdfb288ceac2354afeaa9e33ccb7f0ef78d86be71c3b50f99129</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/postgresql-upgrade-16.13-2.el10.x86_64.rpm</link>
      <description><p><strong>postgresql-upgrade</strong> - Support for upgrading from the previous major release of PostgreSQL&lt;br /&gt;</p>

<p>The postgresql-upgrade package contains the pg_upgrade utility and supporting&lt;br /&gt;
files needed for upgrading a PostgreSQL database from the previous major&lt;br /&gt;
version of PostgreSQL.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-test-16.13-2.el10.x86_64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:43 PM GMT</pubDate>
      <guid isPermaLink="false">ba89bfd759af0f07ebc13b95ba25701470373c43eae0b5161a6c8cd50eff4a3e</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/postgresql-test-16.13-2.el10.x86_64.rpm</link>
      <description><p><strong>postgresql-test</strong> - The test suite distributed with PostgreSQL&lt;br /&gt;</p>

<p>The postgresql-test package contains files needed for various tests for the&lt;br /&gt;
PostgreSQL database management system, including regression tests and&lt;br /&gt;
benchmarks.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-static-16.13-2.el10.x86_64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:43 PM GMT</pubDate>
      <guid isPermaLink="false">4f03c71dffacf4cf1ba7cb14f275b1b0a8c1892a7f713993f852b53f1fc51df7</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/postgresql-static-16.13-2.el10.x86_64.rpm</link>
      <description><p><strong>postgresql-static</strong> - Statically linked PostgreSQL libraries&lt;br /&gt;</p>

<p>Statically linked PostgreSQL libraries that do not have dynamically linked&lt;br /&gt;
counterparts.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-private-libs-16.13-2.el10.x86_64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:43 PM GMT</pubDate>
      <guid isPermaLink="false">ce7cbe2e41b45002c662926bff76d6540e2c290fc96f2c25a9f4973c2317bc77</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/postgresql-private-libs-16.13-2.el10.x86_64.rpm</link>
      <description><p><strong>postgresql-private-libs</strong> - The shared libraries required only for this build of PostgreSQL server&lt;br /&gt;</p>

<p>The postgresql-private-libs package provides the shared libraries for this&lt;br /&gt;
build of PostgreSQL server and plugins build with this version of server.&lt;br /&gt;
For shared libraries used by client packages that need to connect to a&lt;br /&gt;
PostgreSQL server, install libpq package instead.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-private-devel-16.13-2.el10.x86_64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:43 PM GMT</pubDate>
      <guid isPermaLink="false">5ed578a6ebe2df39bf44bb93828f3ea63f72d457b926a22a852f02db2031aa1d</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/postgresql-private-devel-16.13-2.el10.x86_64.rpm</link>
      <description><p><strong>postgresql-private-devel</strong> - PostgreSQL development header files for this build of PostgreSQL server&lt;br /&gt;</p>

<p>The postgresql-private-devel package contains the header files and libraries&lt;br /&gt;
needed to compile C or C++ applications which will directly interact&lt;br /&gt;
with a PostgreSQL database management server.&lt;br /&gt;
You need to install this package if you want to develop applications which&lt;br /&gt;
will interact with a PostgreSQL server.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-pltcl-16.13-2.el10.x86_64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:43 PM GMT</pubDate>
      <guid isPermaLink="false">17f147ca345d55e84f0f651611e3a94b9976a96f16c548e9a43637f4d440ef85</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/postgresql-pltcl-16.13-2.el10.x86_64.rpm</link>
      <description><p><strong>postgresql-pltcl</strong> - The Tcl procedural language for PostgreSQL&lt;br /&gt;</p>

<p>The postgresql-pltcl package contains the PL/Tcl procedural language,&lt;br /&gt;
which is an extension to the PostgreSQL database server.&lt;br /&gt;
Install this if you want to write database functions in Tcl.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-plpython3-16.13-2.el10.x86_64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:43 PM GMT</pubDate>
      <guid isPermaLink="false">1065b59b00855fe2cf18b519ef8aeb0ea3729cb4edb94ce92c1b600ce9f3e283</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/postgresql-plpython3-16.13-2.el10.x86_64.rpm</link>
      <description><p><strong>postgresql-plpython3</strong> - The Python3 procedural language for PostgreSQL&lt;br /&gt;</p>

<p>The postgresql-plpython3 package contains the PL/Python3 procedural language,&lt;br /&gt;
which is an extension to the PostgreSQL database server.&lt;br /&gt;
Install this if you want to write database functions in Python 3.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-plperl-16.13-2.el10.x86_64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:43 PM GMT</pubDate>
      <guid isPermaLink="false">de867805883f125e89775eb5b00a02a10224bf2207195f86ecae921485d51ab3</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/postgresql-plperl-16.13-2.el10.x86_64.rpm</link>
      <description><p><strong>postgresql-plperl</strong> - The Perl procedural language for PostgreSQL&lt;br /&gt;</p>

<p>The postgresql-plperl package contains the PL/Perl procedural language,&lt;br /&gt;
which is an extension to the PostgreSQL database server.&lt;br /&gt;
Install this if you want to write database functions in Perl.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-docs-16.13-2.el10.x86_64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:43 PM GMT</pubDate>
      <guid isPermaLink="false">8e21dcfc54f5e3d3e4db02103a479fe86fc65c5c7b248bb1b940fc769c45d723</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/postgresql-docs-16.13-2.el10.x86_64.rpm</link>
      <description><p><strong>postgresql-docs</strong> - Extra documentation for PostgreSQL&lt;br /&gt;</p>

<p>The postgresql-docs package contains some additional documentation for&lt;br /&gt;
PostgreSQL.  Currently, this includes the main documentation in PDF format&lt;br /&gt;
and source files for the PostgreSQL tutorial.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-contrib-16.13-2.el10.x86_64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:43 PM GMT</pubDate>
      <guid isPermaLink="false">3b3bdd1326b46ab669f82797e16b5e13f4751b07a27fbcdbbcd3fff45c9b4d2f</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/postgresql-contrib-16.13-2.el10.x86_64.rpm</link>
      <description><p><strong>postgresql-contrib</strong> - Extension modules distributed with PostgreSQL&lt;br /&gt;</p>

<p>The postgresql-contrib package contains various extension modules that are&lt;br /&gt;
included in the PostgreSQL distribution.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-16.13-2.el10.x86_64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:43 PM GMT</pubDate>
      <guid isPermaLink="false">d8d31f5a07ca997ff263525264a09861802aa6a5a0affca8ba80596ecd379038</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/postgresql-16.13-2.el10.x86_64.rpm</link>
      <description><p><strong>postgresql</strong> - PostgreSQL client programs&lt;br /&gt;</p>

<p>PostgreSQL is an advanced Object-Relational database management system (DBMS).&lt;br /&gt;
The base postgresql package contains the client programs that you'll need to&lt;br /&gt;
access a PostgreSQL DBMS server, as well as HTML documentation for the whole&lt;br /&gt;
system.  These client programs can be located on the same machine as the&lt;br /&gt;
PostgreSQL server, or on a remote machine that accesses a PostgreSQL server&lt;br /&gt;
over a network connection.  The PostgreSQL server can be found in the&lt;br /&gt;
postgresql-server sub-package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-server-devel-16.13-2.el10.x86_64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:43 PM GMT</pubDate>
      <guid isPermaLink="false">50e878fb7f6ca2158a0c8d2705108f9a28314b8a1511409074d7652705f4b71d</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/postgresql-server-devel-16.13-2.el10.x86_64.rpm</link>
      <description><p><strong>postgresql-server-devel</strong> - PostgreSQL development header files and libraries&lt;br /&gt;</p>

<p>The postgresql-server-devel package contains the header files and configuration&lt;br /&gt;
needed to compile PostgreSQL server extension.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-server-16.13-2.el10.x86_64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:43 PM GMT</pubDate>
      <guid isPermaLink="false">51a5aac772111e484c603148fe0a298d2fccec022d2e40f6ae599454b4874617</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/postgresql-server-16.13-2.el10.x86_64.rpm</link>
      <description><p><strong>postgresql-server</strong> - The programs needed to create and run a PostgreSQL server&lt;br /&gt;</p>

<p>PostgreSQL is an advanced Object-Relational database management system (DBMS).&lt;br /&gt;
The postgresql-server package contains the programs needed to create&lt;br /&gt;
and run a PostgreSQL server, which will in turn allow you to create&lt;br /&gt;
and maintain PostgreSQL databases.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gnome-kiosk-search-appliance-49.0-11.el10.noarch</title>
      <pubDate>Tue, 17 Mar 2026 01:25:26 PM GMT</pubDate>
      <guid isPermaLink="false">de3cc2ede89dc0f2f8e093d59297660d5b0d17c2345186d036f448aeb8b5ceb5</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/gnome-kiosk-search-appliance-49.0-11.el10.noarch.rpm</link>
      <description><p><strong>gnome-kiosk-search-appliance</strong> - Example search application application that uses GNOME Kiosk&lt;br /&gt;</p>

<p>This package provides a full screen firefox window pointed to google.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Olivier Fourdan &amp;lt;ofourdan@redhat.com&amp;gt; - 49.0-11
- Backport the lock-on-monitor feature

Thu, 05 Mar 2026 GMT - Olivier Fourdan &amp;lt;ofourdan@redhat.com&amp;gt; - 49.0-10
- Backport fixes for compiler warnings

Thu, 05 Mar 2026 GMT - Olivier Fourdan &amp;lt;ofourdan@redhat.com&amp;gt; - 49.0-9
- Backport fix for initial window state, size and position

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gnome-kiosk-script-session-49.0-11.el10.noarch</title>
      <pubDate>Tue, 17 Mar 2026 01:25:26 PM GMT</pubDate>
      <guid isPermaLink="false">66d255cc2b65e2fee1db4f957a568b6cc7907755b4635153dfdc2d31c4b595a9</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/gnome-kiosk-script-session-49.0-11.el10.noarch.rpm</link>
      <description><p><strong>gnome-kiosk-script-session</strong> - Basic session used for running kiosk application from shell script&lt;br /&gt;</p>

<p>This package generates a shell script and the necessary scaffolding to start that shell script within a kiosk session.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Olivier Fourdan &amp;lt;ofourdan@redhat.com&amp;gt; - 49.0-11
- Backport the lock-on-monitor feature

Thu, 05 Mar 2026 GMT - Olivier Fourdan &amp;lt;ofourdan@redhat.com&amp;gt; - 49.0-10
- Backport fixes for compiler warnings

Thu, 05 Mar 2026 GMT - Olivier Fourdan &amp;lt;ofourdan@redhat.com&amp;gt; - 49.0-9
- Backport fix for initial window state, size and position

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gnome-kiosk-49.0-11.el10.x86_64</title>
      <pubDate>Tue, 17 Mar 2026 01:25:12 PM GMT</pubDate>
      <guid isPermaLink="false">a01b36b669040717ea79f8d5f8111da0df20fb75daba2d5b09f9390c7625bec4</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/gnome-kiosk-49.0-11.el10.x86_64.rpm</link>
      <description><p><strong>gnome-kiosk</strong> - Window management and application launching for GNOME&lt;br /&gt;</p>

<p>GNOME Kiosk provides a desktop enviroment suitable for fixed purpose, or&lt;br /&gt;
single application deployments like wall displays and point-of-sale systems.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Olivier Fourdan &amp;lt;ofourdan@redhat.com&amp;gt; - 49.0-11
- Backport the lock-on-monitor feature

Thu, 05 Mar 2026 GMT - Olivier Fourdan &amp;lt;ofourdan@redhat.com&amp;gt; - 49.0-10
- Backport fixes for compiler warnings

Thu, 05 Mar 2026 GMT - Olivier Fourdan &amp;lt;ofourdan@redhat.com&amp;gt; - 49.0-9
- Backport fix for initial window state, size and position

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>valkey-devel-8.1.6-1.el10.x86_64</title>
      <pubDate>Tue, 17 Mar 2026 11:49:55 AM GMT</pubDate>
      <guid isPermaLink="false">cdf8643a274a0b25d9c7421867fda8ee546e219fd9ab6fcaa7f28062b97e05ca</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/valkey-devel-8.1.6-1.el10.x86_64.rpm</link>
      <description><p><strong>valkey-devel</strong> - Development header for Valkey module development&lt;br /&gt;</p>

<p>Header file required for building loadable Valkey modules.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 04 Mar 2026 GMT - Lukas Javorsky &amp;lt;ljavorsk@redhat.com&amp;gt; - 8.1.6-1
- Rebase to version 8.1
- fix CONFIG REWRITE breaks configuration
  reported as https://github.com/valkey-io/valkey/issues/2678
  using patch from https://github.com/valkey-io/valkey/pull/2689
- add sub-package for rdma module
- use patch for configuration changes
- add /etc/valkey/modules drop-in directory for module configuration files
- add %valkey_version and %valkey_modules_cfg macros
- fix module linker flags using patch from
  https://github.com/valkey-io/valkey/pull/3344

Mon, 02 Mar 2026 GMT - Lukas Javorsky &amp;lt;ljavorsk@redhat.com&amp;gt; - 8.0.7-1
- Rebase to 8.0.7 for CVE-2026-21863 CVE-2025-67733

Fri, 17 Oct 2025 GMT - Remi Collet &amp;lt;remi@fedoraproject.org&amp;gt; - 8.0.6-2
- rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>valkey-8.1.6-1.el10.x86_64</title>
      <pubDate>Tue, 17 Mar 2026 11:49:55 AM GMT</pubDate>
      <guid isPermaLink="false">c64b3468fe4cce6a75415e5201806f2e4d3b0fd6edbf6f5f4e5cdff1afd66b1d</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/valkey-8.1.6-1.el10.x86_64.rpm</link>
      <description><p><strong>valkey</strong> - A persistent key-value database&lt;br /&gt;</p>

<p>Valkey is an advanced key-value store. It is often referred to as a data&lt;br /&gt;
structure server since keys can contain strings, hashes, lists, sets and&lt;br /&gt;
sorted sets.&lt;br /&gt;
&lt;br /&gt;
You can run atomic operations on these types, like appending to a string;&lt;br /&gt;
incrementing the value in a hash; pushing to a list; computing set&lt;br /&gt;
intersection, union and difference; or getting the member with highest&lt;br /&gt;
ranking in a sorted set.&lt;br /&gt;
&lt;br /&gt;
In order to achieve its outstanding performance, Valkey works with an&lt;br /&gt;
in-memory dataset. Depending on your use case, you can persist it either&lt;br /&gt;
by dumping the dataset to disk every once in a while, or by appending&lt;br /&gt;
each command to a log.&lt;br /&gt;
&lt;br /&gt;
Valkey also supports trivial-to-setup master-slave replication, with very&lt;br /&gt;
fast non-blocking first synchronization, auto-reconnection on net split&lt;br /&gt;
and so forth.&lt;br /&gt;
&lt;br /&gt;
Other features include Transactions, Pub/Sub, Lua scripting, Keys with a&lt;br /&gt;
limited time-to-live, and configuration settings to make Valkey behave like&lt;br /&gt;
a cache.&lt;br /&gt;
&lt;br /&gt;
You can use Valkey from most programming languages also.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 04 Mar 2026 GMT - Lukas Javorsky &amp;lt;ljavorsk@redhat.com&amp;gt; - 8.1.6-1
- Rebase to version 8.1
- fix CONFIG REWRITE breaks configuration
  reported as https://github.com/valkey-io/valkey/issues/2678
  using patch from https://github.com/valkey-io/valkey/pull/2689
- add sub-package for rdma module
- use patch for configuration changes
- add /etc/valkey/modules drop-in directory for module configuration files
- add %valkey_version and %valkey_modules_cfg macros
- fix module linker flags using patch from
  https://github.com/valkey-io/valkey/pull/3344

Mon, 02 Mar 2026 GMT - Lukas Javorsky &amp;lt;ljavorsk@redhat.com&amp;gt; - 8.0.7-1
- Rebase to 8.0.7 for CVE-2026-21863 CVE-2025-67733

Fri, 17 Oct 2025 GMT - Remi Collet &amp;lt;remi@fedoraproject.org&amp;gt; - 8.0.6-2
- rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>avahi-tools-0.9~rc2-3.el10.x86_64</title>
      <pubDate>Tue, 17 Mar 2026 11:49:06 AM GMT</pubDate>
      <guid isPermaLink="false">0e6a8032e368e072b0e5bbc24c60cbaa4ae951d8f5185c11b94473caed0bb585</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/avahi-tools-0.9~rc2-3.el10.x86_64.rpm</link>
      <description><p><strong>avahi-tools</strong> - Command line tools for mDNS browsing and publishing&lt;br /&gt;</p>

<p>Command line tools that use avahi to browse and publish mDNS services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 10 Mar 2026 GMT - Michal Sekletar &amp;lt;msekleta@redhat.com&amp;gt; - 0.9~rc2-3
- Add sysusers.d config files to create avahi and avahi-autoipd users/groups (RHEL-110179)

Wed, 09 Jul 2025 GMT - Michal Sekletar &amp;lt;msekleta@redhat.com&amp;gt; - 0.9~rc2-2
- Fix for CVE-2024-52615 (RHEL-67715)

Wed, 12 Feb 2025 GMT - Michal Sekletar &amp;lt;msekleta@redhat.com&amp;gt; - 0.9~rc2-1
- Rebase to 0.9-rc2 (RHEL-78770)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>avahi-glib-0.9~rc2-3.el10.x86_64</title>
      <pubDate>Tue, 17 Mar 2026 11:49:06 AM GMT</pubDate>
      <guid isPermaLink="false">185737d9bd4bd44aa52d1dd43047bdd17f1a411becd4b8f591b79c535d98e7cb</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/avahi-glib-0.9~rc2-3.el10.x86_64.rpm</link>
      <description><p><strong>avahi-glib</strong> - Glib libraries for avahi&lt;br /&gt;</p>

<p>Libraries for easy use of avahi from glib applications.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 10 Mar 2026 GMT - Michal Sekletar &amp;lt;msekleta@redhat.com&amp;gt; - 0.9~rc2-3
- Add sysusers.d config files to create avahi and avahi-autoipd users/groups (RHEL-110179)

Wed, 09 Jul 2025 GMT - Michal Sekletar &amp;lt;msekleta@redhat.com&amp;gt; - 0.9~rc2-2
- Fix for CVE-2024-52615 (RHEL-67715)

Wed, 12 Feb 2025 GMT - Michal Sekletar &amp;lt;msekleta@redhat.com&amp;gt; - 0.9~rc2-1
- Rebase to 0.9-rc2 (RHEL-78770)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>avahi-devel-0.9~rc2-3.el10.x86_64</title>
      <pubDate>Tue, 17 Mar 2026 11:49:06 AM GMT</pubDate>
      <guid isPermaLink="false">def5a097380bf35e1333f86057999e3fe3f759ecc0e5d7a9660ff4c83aec9406</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/avahi-devel-0.9~rc2-3.el10.x86_64.rpm</link>
      <description><p><strong>avahi-devel</strong> - Libraries and header files for avahi development&lt;br /&gt;</p>

<p>The avahi-devel package contains the header files and libraries&lt;br /&gt;
necessary for developing programs using avahi.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 10 Mar 2026 GMT - Michal Sekletar &amp;lt;msekleta@redhat.com&amp;gt; - 0.9~rc2-3
- Add sysusers.d config files to create avahi and avahi-autoipd users/groups (RHEL-110179)

Wed, 09 Jul 2025 GMT - Michal Sekletar &amp;lt;msekleta@redhat.com&amp;gt; - 0.9~rc2-2
- Fix for CVE-2024-52615 (RHEL-67715)

Wed, 12 Feb 2025 GMT - Michal Sekletar &amp;lt;msekleta@redhat.com&amp;gt; - 0.9~rc2-1
- Rebase to 0.9-rc2 (RHEL-78770)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ibus-anthy-python-1.5.17-2.el10.noarch</title>
      <pubDate>Tue, 17 Mar 2026 10:22:16 AM GMT</pubDate>
      <guid isPermaLink="false">4a2bc5050799db5eb8cfa7137d8af50080b62df2c959ddbffd0b455dfadacd13</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/ibus-anthy-python-1.5.17-2.el10.noarch.rpm</link>
      <description><p><strong>ibus-anthy-python</strong> - Anthy Python files for IBus&lt;br /&gt;</p>

<p>This package contains the Anthy Python files for IBus</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 17 Mar 2026 GMT - Takao Fujiwara &amp;lt;tfujiwar@redhat.com&amp;gt; - 1.5.17-2
- Resolves: RHEL-155996 ibus-anthy: Fails to build in 2026

Wed, 19 Mar 2025 GMT - Takao Fujiwara &amp;lt;tfujiwar@redhat.com&amp;gt; - 1.5.17-1
- Bump to 1.5.17

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 1.5.16-22
- Bump release for October 2024 mass rebuild:

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ibus-anthy-1.5.17-2.el10.x86_64</title>
      <pubDate>Tue, 17 Mar 2026 10:22:08 AM GMT</pubDate>
      <guid isPermaLink="false">cd41c6274f4f8caff4c2aa40e3f07386d83efe2bf83dcb6f09d1a44749cece46</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/ibus-anthy-1.5.17-2.el10.x86_64.rpm</link>
      <description><p><strong>ibus-anthy</strong> - The Anthy engine for IBus input platform&lt;br /&gt;</p>

<p>The Anthy engine for IBus platform. It provides Japanese input method from&lt;br /&gt;
a library of the Anthy.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 17 Mar 2026 GMT - Takao Fujiwara &amp;lt;tfujiwar@redhat.com&amp;gt; - 1.5.17-2
- Resolves: RHEL-155996 ibus-anthy: Fails to build in 2026

Wed, 19 Mar 2025 GMT - Takao Fujiwara &amp;lt;tfujiwar@redhat.com&amp;gt; - 1.5.17-1
- Bump to 1.5.17

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 1.5.16-22
- Bump release for October 2024 mass rebuild:

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>glibc-doc-2.39-117.el10.noarch</title>
      <pubDate>Tue, 17 Mar 2026 10:00:03 AM GMT</pubDate>
      <guid isPermaLink="false">b44719ca21664324cb7a0982a5e9af59e6b29f882a22409f2764655b04c6c14d</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/glibc-doc-2.39-117.el10.noarch.rpm</link>
      <description><p><strong>glibc-doc</strong> - Documentation for GNU libc&lt;br /&gt;</p>

<p>The glibc-doc package contains The GNU C Library Reference Manual in info&lt;br /&gt;
format.  Additional package documentation is also provided.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 17 Mar 2026 GMT - Arjun Shankar &amp;lt;arjun@redhat.com&amp;gt; - 2.39-117	
- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)

Tue, 03 Mar 2026 GMT - DJ Delorie &amp;lt;dj@redhat.com&amp;gt; - 2.39-116	
- Remove unneeded ld-linux .debug files (RHEL-136312)

Thu, 26 Feb 2026 GMT - Frédéric Bérat &amp;lt;fberat@redhat.com&amp;gt; - 2.39-115	
- Fix race condition in io/tst-stat (RHEL-151711)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>glibc-utils-2.39-117.el10.x86_64</title>
      <pubDate>Tue, 17 Mar 2026 09:59:56 AM GMT</pubDate>
      <guid isPermaLink="false">17056409d55b85393fb36db62c8ac6ffa64741bb80b4d5a28168c15853c4aed1</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/glibc-utils-2.39-117.el10.x86_64.rpm</link>
      <description><p><strong>glibc-utils</strong> - Development utilities from GNU C library&lt;br /&gt;</p>

<p>The glibc-utils package contains memusage, a memory usage profiler,&lt;br /&gt;
mtrace, a memory leak tracer and xtrace, a function call tracer&lt;br /&gt;
which can be helpful during program debugging.&lt;br /&gt;
&lt;br /&gt;
If unsure if you need this, don't install this package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 17 Mar 2026 GMT - Arjun Shankar &amp;lt;arjun@redhat.com&amp;gt; - 2.39-117	
- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)

Tue, 03 Mar 2026 GMT - DJ Delorie &amp;lt;dj@redhat.com&amp;gt; - 2.39-116	
- Remove unneeded ld-linux .debug files (RHEL-136312)

Thu, 26 Feb 2026 GMT - Frédéric Bérat &amp;lt;fberat@redhat.com&amp;gt; - 2.39-115	
- Fix race condition in io/tst-stat (RHEL-151711)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>glibc-locale-source-2.39-117.el10.x86_64</title>
      <pubDate>Tue, 17 Mar 2026 09:59:56 AM GMT</pubDate>
      <guid isPermaLink="false">2f635b09dc8d0b33c2ce169c33b6d4c8cbf5e8b02cd1be49d24679c74fc338fd</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/glibc-locale-source-2.39-117.el10.x86_64.rpm</link>
      <description><p><strong>glibc-locale-source</strong> - The sources for the locales&lt;br /&gt;</p>

<p>The sources for all locales provided in the language packs.&lt;br /&gt;
If you are building custom locales you will most likely use&lt;br /&gt;
these sources as the basis for your new locale.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 17 Mar 2026 GMT - Arjun Shankar &amp;lt;arjun@redhat.com&amp;gt; - 2.39-117	
- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)

Tue, 03 Mar 2026 GMT - DJ Delorie &amp;lt;dj@redhat.com&amp;gt; - 2.39-116	
- Remove unneeded ld-linux .debug files (RHEL-136312)

Thu, 26 Feb 2026 GMT - Frédéric Bérat &amp;lt;fberat@redhat.com&amp;gt; - 2.39-115	
- Fix race condition in io/tst-stat (RHEL-151711)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>glibc-devel-2.39-117.el10.x86_64</title>
      <pubDate>Tue, 17 Mar 2026 09:59:56 AM GMT</pubDate>
      <guid isPermaLink="false">dd4c4b6afa9666813aec67272a079d84842f07bc91030765b83df67f082787b7</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/glibc-devel-2.39-117.el10.x86_64.rpm</link>
      <description><p><strong>glibc-devel</strong> - Object files for development using standard C libraries.&lt;br /&gt;</p>

<p>The glibc-devel package contains the object files necessary&lt;br /&gt;
for developing programs which use the standard C libraries (which are&lt;br /&gt;
used by nearly all programs).  If you are developing programs which&lt;br /&gt;
will use the standard C libraries, your system needs to have these&lt;br /&gt;
standard object files available in order to create the&lt;br /&gt;
executables.&lt;br /&gt;
&lt;br /&gt;
Install glibc-devel if you are going to develop programs which will&lt;br /&gt;
use the standard C libraries.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 17 Mar 2026 GMT - Arjun Shankar &amp;lt;arjun@redhat.com&amp;gt; - 2.39-117	
- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)

Tue, 03 Mar 2026 GMT - DJ Delorie &amp;lt;dj@redhat.com&amp;gt; - 2.39-116	
- Remove unneeded ld-linux .debug files (RHEL-136312)

Thu, 26 Feb 2026 GMT - Frédéric Bérat &amp;lt;fberat@redhat.com&amp;gt; - 2.39-115	
- Fix race condition in io/tst-stat (RHEL-151711)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>binutils-gprofng-2.41-65.el10.x86_64</title>
      <pubDate>Mon, 16 Mar 2026 09:53:03 AM GMT</pubDate>
      <guid isPermaLink="false">9fe06db486740ec6b6ce64434ac69cea7c45e3fe31fef59e1a0cc032ec1e90aa</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/binutils-gprofng-2.41-65.el10.x86_64.rpm</link>
      <description><p><strong>binutils-gprofng</strong> - Next Generating code profiling tool&lt;br /&gt;</p>

<p>GprofNG is the GNU Next Generation Profiler for analyzing the performance&lt;br /&gt;
of Linux applications.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nick Clifton  &amp;lt;nickc@redhat.com&amp;gt; - 2.41-65
- Add missing tests of AArch64 instructions to the assembler testsuite.  (RHEL-155043)

Thu, 26 Feb 2026 GMT - Nick Clifton  &amp;lt;nickc@redhat.com&amp;gt; - 2.41-64
- Improve the linker testsuite's ability to run remote tests.  (RHEL-151495)

Mon, 26 Jan 2026 GMT - Nick Clifton  &amp;lt;nickc@redhat.com&amp;gt; - 2.41-63
- Run linker tests for cross binutils.  Compare the native and cross results.  (RHEL-117111)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>binutils-devel-2.41-65.el10.x86_64</title>
      <pubDate>Mon, 16 Mar 2026 09:53:03 AM GMT</pubDate>
      <guid isPermaLink="false">26d173c44a3a2daa6a755bb2582d2f6b2d1d1359dcfef20e903215e3c1e1d2be</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/binutils-devel-2.41-65.el10.x86_64.rpm</link>
      <description><p><strong>binutils-devel</strong> - BFD and opcodes static and dynamic libraries and header files&lt;br /&gt;</p>

<p>This package contains BFD and opcodes static and dynamic libraries.&lt;br /&gt;
&lt;br /&gt;
The dynamic libraries are in this package, rather than a separate&lt;br /&gt;
base package because they are actually linker scripts that force&lt;br /&gt;
the use of the static libraries.  This is because the API of the&lt;br /&gt;
BFD library is too unstable to be used dynamically.&lt;br /&gt;
&lt;br /&gt;
The static libraries are here because they are now needed by the&lt;br /&gt;
dynamic libraries.&lt;br /&gt;
&lt;br /&gt;
Developers starting new projects are strongly encouraged to consider&lt;br /&gt;
using libelf instead of BFD.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nick Clifton  &amp;lt;nickc@redhat.com&amp;gt; - 2.41-65
- Add missing tests of AArch64 instructions to the assembler testsuite.  (RHEL-155043)

Thu, 26 Feb 2026 GMT - Nick Clifton  &amp;lt;nickc@redhat.com&amp;gt; - 2.41-64
- Improve the linker testsuite's ability to run remote tests.  (RHEL-151495)

Mon, 26 Jan 2026 GMT - Nick Clifton  &amp;lt;nickc@redhat.com&amp;gt; - 2.41-63
- Run linker tests for cross binutils.  Compare the native and cross results.  (RHEL-117111)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mutter-common-49.4-4.el10.noarch</title>
      <pubDate>Fri, 13 Mar 2026 10:49:23 AM GMT</pubDate>
      <guid isPermaLink="false">0189c53be9b1130cb23157d53cb5943d10347f3ea211c2459de154db1c6ac0af</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/mutter-common-49.4-4.el10.noarch.rpm</link>
      <description><p><strong>mutter-common</strong> - Common files used by mutter and forks of mutter&lt;br /&gt;</p>

<p>Common files used by Mutter and soft forks of Mutter</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 13 Mar 2026 GMT - Olivier Fourdan &amp;lt;ofourdan@redhat.com&amp;gt; - 49.4-4
- Locking windows on monitor

Tue, 17 Feb 2026 GMT - Jonas Ådahl &amp;lt;jadahl@redhat.com&amp;gt; - 49.4-3
- Fix flaky popup test

Mon, 16 Feb 2026 GMT - Jonas Ådahl &amp;lt;jadahl@redhat.com&amp;gt; - 49.4-2
- Fix flaky test case

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mutter-49.4-4.el10.x86_64</title>
      <pubDate>Fri, 13 Mar 2026 10:49:20 AM GMT</pubDate>
      <guid isPermaLink="false">9d61e3ce5709ee7368136ad4e5b210f61d6c6548c96eca378df427536eb1738f</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/mutter-49.4-4.el10.x86_64.rpm</link>
      <description><p><strong>mutter</strong> - Window and compositing manager based on Clutter&lt;br /&gt;</p>

<p>Mutter is a window and compositing manager that displays and manages&lt;br /&gt;
your desktop via OpenGL. Mutter combines a sophisticated display engine&lt;br /&gt;
using the Clutter toolkit with solid window-management logic inherited&lt;br /&gt;
from the Metacity window manager.&lt;br /&gt;
&lt;br /&gt;
While Mutter can be used stand-alone, it is primarily intended to be&lt;br /&gt;
used as the display core of a larger system such as GNOME Shell. For&lt;br /&gt;
this reason, Mutter is very extensible via plugins, which are used both&lt;br /&gt;
to add fancy visual effects and to rework the window management&lt;br /&gt;
behaviors to meet the needs of the environment.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 13 Mar 2026 GMT - Olivier Fourdan &amp;lt;ofourdan@redhat.com&amp;gt; - 49.4-4
- Locking windows on monitor

Tue, 17 Feb 2026 GMT - Jonas Ådahl &amp;lt;jadahl@redhat.com&amp;gt; - 49.4-3
- Fix flaky popup test

Mon, 16 Feb 2026 GMT - Jonas Ådahl &amp;lt;jadahl@redhat.com&amp;gt; - 49.4-2
- Fix flaky test case

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>virt-v2v-bash-completion-1:2.10.0-8.el10.noarch</title>
      <pubDate>Thu, 12 Mar 2026 01:23:45 PM GMT</pubDate>
      <guid isPermaLink="false">e83edb209d2b99e2a4a2663da377bc2d90bc994b9153e0cace762a07dbecd03b</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/virt-v2v-bash-completion-2.10.0-8.el10.noarch.rpm</link>
      <description><p><strong>virt-v2v-bash-completion</strong> - Bash tab-completion for virt-v2v&lt;br /&gt;</p>

<p>Install this package if you want intelligent bash tab-completion&lt;br /&gt;
for virt-v2v.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 12 Mar 2026 GMT - Richard W.M. Jones &amp;lt;rjones@redhat.com&amp;gt; - 1::2.10.0-8
- Requires openssl (for finding thumbprint)
  resolves: RHEL-155204

Tue, 17 Feb 2026 GMT - Cole Robinson &amp;lt;crobinso@redhat.com&amp;gt; - 1:2.10.0-7
- Attempt 2 to fix sles12sp5 crypttab
  resolves: RHEL-93583

Thu, 12 Feb 2026 GMT - Cole Robinson &amp;lt;crobinso@redhat.com&amp;gt; - 1:2.10.0-6
- Install blnsvr.exe to \Windows\Drivers\VirtIO
  resolves: RHEL-148423

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>virt-v2v-1:2.10.0-8.el10.x86_64</title>
      <pubDate>Thu, 12 Mar 2026 01:23:45 PM GMT</pubDate>
      <guid isPermaLink="false">4b70944ee3172fb87b67707788affe28016cded5480a316bb808e1f579189ee2</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/virt-v2v-2.10.0-8.el10.x86_64.rpm</link>
      <description><p><strong>virt-v2v</strong> - Convert a virtual machine to run on KVM&lt;br /&gt;</p>

<p>Virt-v2v converts a single guest from a foreign hypervisor to run on&lt;br /&gt;
KVM.  It can read Linux and Windows guests running on VMware, Xen,&lt;br /&gt;
Hyper-V and some other hypervisors, and convert them to KVM managed by&lt;br /&gt;
libvirt, OpenStack or several other targets.  It can modify the guest&lt;br /&gt;
to make it bootable on KVM and install virtio drivers so it will run&lt;br /&gt;
quickly.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 12 Mar 2026 GMT - Richard W.M. Jones &amp;lt;rjones@redhat.com&amp;gt; - 1::2.10.0-8
- Requires openssl (for finding thumbprint)
  resolves: RHEL-155204

Tue, 17 Feb 2026 GMT - Cole Robinson &amp;lt;crobinso@redhat.com&amp;gt; - 1:2.10.0-7
- Attempt 2 to fix sles12sp5 crypttab
  resolves: RHEL-93583

Thu, 12 Feb 2026 GMT - Cole Robinson &amp;lt;crobinso@redhat.com&amp;gt; - 1:2.10.0-6
- Install blnsvr.exe to \Windows\Drivers\VirtIO
  resolves: RHEL-148423

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>osinfo-db-20250606-2.el10.noarch</title>
      <pubDate>Thu, 12 Mar 2026 10:41:16 AM GMT</pubDate>
      <guid isPermaLink="false">6af76d4696257961279e6c6443eb057c16355cdb1a97cd59559b22822f5ac289</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/osinfo-db-20250606-2.el10.noarch.rpm</link>
      <description><p><strong>osinfo-db</strong> - osinfo database files&lt;br /&gt;</p>

<p>The osinfo database provides information about operating systems and&lt;br /&gt;
hypervisor platforms to facilitate the automated configuration and&lt;br /&gt;
provisioning of new virtual machines</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 09 Mar 2026 GMT - Pavel Hrdina &amp;lt;phrdina@redhat.com&amp;gt; - 20250606-2
- Add rhel-10.2 and rhel-9.8 prerelease

Fri, 06 Jun 2025 GMT - Victor Toso &amp;lt;victortoso@redhat.com&amp;gt; - 20250606-1
- Update to v20250606

Mon, 27 Jan 2025 GMT - Victor Toso &amp;lt;victortoso@redhat.com&amp;gt; - 20250124-1
- Update to v20250124

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>edk2-ovmf-20260221-1.el10.noarch</title>
      <pubDate>Thu, 12 Mar 2026 09:05:20 AM GMT</pubDate>
      <guid isPermaLink="false">8900cc1d60d22d32bd28c4f2cdebdedeaf186a67e1bed07d6b5ca2951dca04cf</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/x86_64/os/Packages/edk2-ovmf-20260221-1.el10.noarch.rpm</link>
      <description><p><strong>edk2-ovmf</strong> - UEFI firmware for x86_64 virtual machines&lt;br /&gt;</p>

<p>OVMF (Open Virtual Machine Firmware) is a project to enable UEFI support for&lt;br /&gt;
Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU&lt;br /&gt;
and KVM.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 12 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 20260221-1
- Rebase to edk2-stable202602 [RHEL-151719]
- Resolves: RHEL-151719
  ([edk2,rhel-10] rebase to edk2-stable202602)

Mon, 09 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 20251114-5
- edk2-add-uefi-vars-firmware-json-files.patch [RHEL-150696]
- Resolves: RHEL-150696
  (edk2: Add JSON descriptors for uefi-vars builds)

Wed, 12 Nov 2025 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 20250822-4
- edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126085]
- edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126085]
- Resolves: RHEL-126085
  ([edk2,rhel-10] dbx update to 20251016 / v1.6.1)

...&lt;/pre&gt;</description>
    </item>
  </channel>
</rss>
