Notable fixes:

• possible EPOLLRDHUP event storms with half-closed TCP connections, leading to periods of high CPU load: https://github.com/containers/podman/issues/23686, https://bugs.passt.top/show_bug.cgi?id=94

• possible EPOLLERR event storms with UDP flows: https://bugs.passt.top/show_bug.cgi?id=95

• occasional hang on TCP loopback path after the receiving buffer fills up: https://github.com/containers/podman/issues/24219

• by default, don't expose loopback-only services in container: https://github.com/containers/podman/issues/24045

• send periodic unsolicited router advertisements to avoid losing SLAAC routes after ~18 hours: https://github.com/kubevirt/kubevirt/issues/13191

• properly handle TCP keep-alive segments: https://github.com/containers/podman/discussions/24572

• update SELinux rules to use auth_read_passwd() interface in order to reliably cover access to passwd(5) files with sssd labels: https://issues.redhat.com/browse/RHEL-65502

• introduce "local mode" for disconnected setups: https://github.com/containers/podman/issues/24614

• Set PSH flag at end of TCP batches: https://bugs.passt.top/show_bug.cgi?id=107