# changelog

author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-564.el9]
changelog:
  - tg3: Disable tg3 PCIe AER on system reboot (Lenny Szubowicz) [RHEL-63747]
  - of: Add for_each_reserved_child_of_node() (Radu Rendec) [RHEL-77190]
  - of: Add of_get_next_status_child() and makes more generic of_get_next (Radu Rendec) [RHEL-77190]
  - of: Add __of_device_is_status() and makes more generic status check (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: Fix 'soc' node handling in cpg_mssr_reserved_init() (Radu Rendec) [RHEL-77190]
  - clk: Use of_property_present() (Radu Rendec) [RHEL-77190]
  - clk: renesas: mstp: Remove obsolete clkdev registration (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: Ignore all clocks assigned to non-Linux system (Radu Rendec) [RHEL-77190]
  - clk: renesas: mstp: Convert to readl_poll_timeout_atomic() (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: Convert to readl_poll_timeout_atomic() (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: Remove superfluous check in resume code (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Remove unused default PLL2/3/4/6 configs (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Remove unused fixed PLL clock types (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Remove unused variable PLL2 clock type (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779f0: Model PLL1/2/3/6 as fractional PLLs (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: Use defines for PLL control registers (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Add support for fractional 9.24 PLLs (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Add support for fixed variable PLLs (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Add support for variable fractional PLLs (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Add support for fractional multiplication (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Use defines for common CPG registers (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: Add the DSI clocks (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: Add the DU clock (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779f0: cpg_pll_configs should be __initconst (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: cpg_pll_configs should be __initconst (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: Fix CANFD parent clock (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: Add PWM clock (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779a0: Tidy up DMAC name on SYS-DMAC (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Use FIELD_GET() (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Clarify custom PLL clock support (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Removed unused SSMODE_* definitions (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Restore PLL enum sort order (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen2: Use DEFINE_SPINLOCK() for static spinlock (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-lib: Use DEFINE_SPINLOCK() for global spinlock (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a77970: Use common cpg_lock (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Add support for FRQCRC1 (Radu Rendec) [RHEL-77190]
  - clk: renesas: r8a779g0: Add custom clock for PLL2 (Radu Rendec) [RHEL-77190]
  - clk: renesas: rcar-gen4: Fix initconst confusion for cpg_pll_config (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: propagate return value of_genpd_add_provider_simple() (Radu Rendec) [RHEL-77190]
  - clk: renesas: cpg-mssr: Check return value of pm_genpd_init() (Radu Rendec) [RHEL-77190]
  - nfp: use irq_update_affinity_hint() (Mohammad Heib) [RHEL-40873]
  - PCI: imx6: Fix suspend/resume support on i.MX6QDL (Myron Stowe) [RHEL-73709] {CVE-2024-57809}
  - PCI: dwc: Rename 'dw_pcie::link_gen' to 'dw_pcie::max_link_speed' (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Add i.MX8Q PCIe Root Complex (RC) support (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Call common PHY API to set mode, speed, and submode (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Consolidate redundant if-checks (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Improve comment for workaround ERR010728 (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Simplify switch-case logic by involve core_reset callback (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Introduce SoC specific callbacks for controlling REFCLK (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Rename imx6_* with imx_* (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Fix missing call to phy_power_off() in error handling (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Fix i.MX8MP PCIe EP's occasional failure to trigger MSI (Myron Stowe) [RHEL-73709]
  - PCI: imx6: Fix establish link failure in EP mode for i.MX8MM and i.MX8MP (Myron Stowe) [RHEL-73709]
  - PCI/MSI: Handle lack of irqdomain gracefully (Myron Stowe) [RHEL-72850] {CVE-2024-56760}
  - PCI: Fix use-after-free of slot->bus on hot remove (Myron Stowe) [RHEL-72370] {CVE-2024-53194}
  - PCI: tegra194: Move controller cleanups to pex_ep_event_pex_rst_deassert() (Myron Stowe) [RHEL-72122] {CVE-2024-53152}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-565.el9]
changelog:
  - net: renesas: rswitch: add mdio C22 support (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: use generic MPSM operation for mdio C45 (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: align mdio C45 operations with datasheet (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: use FIELD_PREP for remaining MPIC register fields (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: do not write to MPSM register at init time (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: remove speed from gwca structure (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: do not deinit disabled ports (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: rework ts tags management (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: fix initial MPIC register setting (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: enable only used MFWD features (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: handle stop vs interrupt race (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: avoid use-after-put for a device tree node (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: fix leaked pointer on error path (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: fix race window between tx start and complete (Radu Rendec) [RHEL-78074]
  - net: renesas: rswitch: fix possible early skb release (Radu Rendec) [RHEL-78074]
  - net: mdiobus: fix an OF node reference leak (Jared Kangas) [RHEL-78049]
  - net: mdiobus: Debug print fwnode handle instead of raw pointer (Jared Kangas) [RHEL-78049]
  - net: mdiobus: Convert to use fwnode_device_is_compatible() (Jared Kangas) [RHEL-78049]
  - Revert "kbuild: use $(src) instead of $(srctree)/$(src) for source directory" (Jocelyn Falempe) [RHEL-76500]
  - PM: hibernate: Use kernel_can_power_off() (Maxim Levitsky) [RHEL-63107]
  - Bluetooth: btmtk: avoid UAF in btmtk_process_coredump (CKI Backport Bot) [RHEL-75872] {CVE-2024-56653}
  - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (CKI Backport Bot) [RHEL-75848] {CVE-2024-53208}
  - Bluetooth: fix use-after-free in device_for_each_child() (CKI Backport Bot) [RHEL-75844] {CVE-2024-53237}
  - KVM: arm64: Fix set_id_regs selftest for ASIDBITS becoming unwritable (Eric Auger) [RHEL-75792]
  - KVM: arm64: selftests: Add tests for MMIO external abort injection (Eric Auger) [RHEL-75792]
  - KVM: arm64: selftests: Convert to kernel's ESR terminology (Eric Auger) [RHEL-75792]
  - tools: arm64: Grab a copy of esr.h from kernel (Eric Auger) [RHEL-75792]
  - KVM: arm64: vgic-its: Add error handling in vgic_its_cache_translation (Eric Auger) [RHEL-75792]
  - KVM: arm64: Do not allow ID_AA64MMFR0_EL1.ASIDbits to be overridden (Eric Auger) [RHEL-75792]
  - KVM: arm64: vgic: Don't check for vgic_ready() when setting NR_IRQS (Eric Auger) [RHEL-75792]
  - KVM: selftests: aarch64: Add writable test for ID_AA64PFR1_EL1 (Eric Auger) [RHEL-75792]
  - KVM: arm64: Allow userspace to change ID_AA64PFR1_EL1 (Eric Auger) [RHEL-75792]
  - KVM: arm64: Use kvm_has_feat() to check if FEAT_SSBS is advertised to the guest (Eric Auger) [RHEL-75792]
  - KVM: arm64: Disable fields that KVM doesn't know how to handle in ID_AA64PFR1_EL1 (Eric Auger) [RHEL-75792]
  - KVM: arm64: Make the exposed feature bits in AA64DFR0_EL1 writable from userspace (Eric Auger) [RHEL-75792]
  - KVM: arm64: Honor trap routing for TCR2_EL1 (Eric Auger) [RHEL-75792]
  - KVM: arm64: Initialize the hypervisor's VM state at EL2 (Eric Auger) [RHEL-75792]
  - KVM: arm64: Refactor kvm_vcpu_enable_ptrauth() for hyp use (Eric Auger) [RHEL-75792]
  - Bluetooth: iso: Always release hdev at the end of iso_listen_bis (CKI Backport Bot) [RHEL-73635] {CVE-2024-57879}
  - xfrm: Export symbol xfrm_dev_state_delete. (Felix Maurer) [RHEL-68939]
  - xfrm: Fix unregister netdevice hang on hardware offload. (Felix Maurer) [RHEL-68939]
  - kasan: make report_lock a raw spinlock (Jared Kangas) [RHEL-70564]
  - config: wifi: enable ath12k driver (Jose Ignacio Tornos Martinez) [RHEL-37773]
  - wifi: ath12k: fix crash when unbinding (Jose Ignacio Tornos Martinez) [RHEL-37773]
  - wifi: ath12k: fix warning when unbinding (Jose Ignacio Tornos Martinez) [RHEL-37773]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-566.el9]
changelog:
  - redhat/configs: add CONFIG_CIFS_COMPRESSION (Paulo Alcantara) [RHEL-76046]
  - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-76046]
  - cifs: support reconnect with alternate password for SMB1 (Paulo Alcantara) [RHEL-76046]
  - smb: client: sync the root session and superblock context passwords before automounting (Paulo Alcantara) [RHEL-76046]
  - cifs: Remove unused is_server_using_iface() (Paulo Alcantara) [RHEL-76046]
  - smb: enable reuse of deferred file handles for write operations (Paulo Alcantara) [RHEL-76046]
  - smb: use macros instead of constants for leasekey size and default cifsattrs value (Paulo Alcantara) [RHEL-76046]
  - smb: client: destroy cfid_put_wq on module exit (Paulo Alcantara) [RHEL-76046]
  - cifs: Use str_yes_no() helper in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-76046]
  - smb3: fix compiler warning in reparse code (Paulo Alcantara) [RHEL-76046]
  - smb3.1.1: fix posix mounts to older servers (Paulo Alcantara) [RHEL-76046]
  - fs/smb/client: cifs_prime_dcache() for SMB3 POSIX reparse points (Paulo Alcantara) [RHEL-76046]
  - fs/smb/client: Implement new SMB3 POSIX type (Paulo Alcantara) [RHEL-76046]
  - fs/smb/client: avoid querying SMB2_OP_QUERY_WSL_EA for SMB3 POSIX (Paulo Alcantara) [RHEL-76046]
  - cifs: unlock on error in smb3_reconfigure() (Paulo Alcantara) [RHEL-76046]
  - cifs: during remount, make sure passwords are in sync (Paulo Alcantara) [RHEL-76046]
  - cifs: support mounting with alternate password to allow password rotation (Paulo Alcantara) [RHEL-76046]
  - smb: During unmount, ensure all cached dir instances drop their dentry (Paulo Alcantara) [RHEL-76046] {CVE-2024-53176}
  - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix parsing reparse point with native symlink in SMB1 non-UNICODE session (Paulo Alcantara) [RHEL-76046]
  - cifs: Validate content of WSL reparse point buffers (Paulo Alcantara) [RHEL-76046]
  - cifs: Improve guard for excluding $LXDEV xattr (Paulo Alcantara) [RHEL-76046]
  - cifs: Add support for parsing WSL-style symlinks (Paulo Alcantara) [RHEL-76046]
  - cifs: Validate content of native symlink (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix parsing native symlinks relative to the export (Paulo Alcantara) [RHEL-76046]
  - Update misleading comment in cifs_chan_update_iface (Paulo Alcantara) [RHEL-76046]
  - smb: client: change return value in open_cached_dir_by_dentry() if !cfids (Paulo Alcantara) [RHEL-76046]
  - smb: client: disable directory caching when dir_cache_timeout is zero (Paulo Alcantara) [RHEL-76046]
  - smb: client: remove unnecessary checks in open_cached_dir() (Paulo Alcantara) [RHEL-76046]
  - smb: prevent use-after-free due to open_cached_dir error paths (Paulo Alcantara) [RHEL-76046] {CVE-2024-53177}
  - smb: Don't leak cfid when reconnect races with open_cached_dir (Paulo Alcantara) [RHEL-76046] {CVE-2024-53178}
  - smb: client: handle max length for SMB symlinks (Paulo Alcantara) [RHEL-76046]
  - smb: client: get rid of bounds check in SMB2_ioctl_init() (Paulo Alcantara) [RHEL-76046]
  - smb: client: improve compound padding in encryption (Paulo Alcantara) [RHEL-76046]
  - smb3: request handle caching when caching directories (Paulo Alcantara) [RHEL-76046]
  - cifs: Recognize SFU char/block devices created by Windows NFS server on Windows Server <<2012 (Paulo Alcantara) [RHEL-76046]
  - CIFS: New mount option for cifs.upcall namespace resolution (Paulo Alcantara) [RHEL-76046]
  - smb/client: Prevent error pointer dereference (Paulo Alcantara) [RHEL-76046]
  - fs/smb/client: implement chmod() for SMB3 POSIX Extensions (Paulo Alcantara) [RHEL-76046]
  - smb: cached directories can be more than root file handle (Paulo Alcantara) [RHEL-76046]
  - smb: client: Use str_yes_no() helper function (Paulo Alcantara) [RHEL-76046]
  - smb: client: memcpy() with surrounding object base address (Paulo Alcantara) [RHEL-76046]
  - cifs: Remove pre-historic unused CIFSSMBCopy (Paulo Alcantara) [RHEL-76046]
  - cifs: Remove unused functions (Paulo Alcantara) [RHEL-76046]
  - smb/client: Fix logically dead code (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix creating native symlinks pointing to current or parent directory (Paulo Alcantara) [RHEL-76046]
  - cifs: Improve creating native symlinks pointing to directory (Paulo Alcantara) [RHEL-76046]
  - cifs: Do not convert delimiter when parsing NFS-style symlinks (Paulo Alcantara) [RHEL-76046]
  - cifs: Validate content of NFS reparse point buffer (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix buffer overflow when parsing NFS reparse points (Paulo Alcantara) [RHEL-76046] {CVE-2024-49996}
  - smb: client: Correct typos in multiple comments across various files (Paulo Alcantara) [RHEL-76046]
  - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-76046]
  - cifs: Remove intermediate object of failed create reparse call (Paulo Alcantara) [RHEL-76046]
  - Revert "smb: client: make SHA-512 TFM ephemeral" (Paulo Alcantara) [RHEL-76046]
  - smb: Update comments about some reparse point tags (Paulo Alcantara) [RHEL-76046]
  - cifs: Check for UTF-16 null codepoint in SFU symlink target location (Paulo Alcantara) [RHEL-76046]
  - smb: client: make SHA-512 TFM ephemeral (Paulo Alcantara) [RHEL-76046]
  - smb: client: make HMAC-MD5 TFM ephemeral (Paulo Alcantara) [RHEL-76046]
  - smb: client: allocate crypto only for primary server (Paulo Alcantara) [RHEL-76046]
  - ksmbd: Correct typos in multiple comments across various files (Paulo Alcantara) [RHEL-76046]
  - smb3: fix incorrect mode displayed for read-only files (Paulo Alcantara) [RHEL-76046]
  - smb: client: fix parsing of device numbers (Paulo Alcantara) [RHEL-76046]
  - smb: client: set correct device number on nfs reparse points (Paulo Alcantara) [RHEL-76046]
  - smb: client: fix compression heuristic functions (Paulo Alcantara) [RHEL-76046]
  - cifs: Update SFU comments about fifos and sockets (Paulo Alcantara) [RHEL-76046]
  - cifs: Add support for creating SFU symlinks (Paulo Alcantara) [RHEL-76046]
  - cifs: Recognize SFU socket type (Paulo Alcantara) [RHEL-76046]
  - cifs: Show debug message when SFU Fifo type was detected (Paulo Alcantara) [RHEL-76046]
  - cifs: Put explicit zero byte into SFU block/char types (Paulo Alcantara) [RHEL-76046]
  - cifs: Add support for reading SFU symlink location (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix recognizing SFU symlinks (Paulo Alcantara) [RHEL-76046]
  - smb: client: compress: fix an "illegal accesses" issue (Paulo Alcantara) [RHEL-76046]
  - smb: client: compress: fix a potential issue of freeing an invalid pointer (Paulo Alcantara) [RHEL-76046]
  - smb: client: compress: LZ77 code improvements cleanup (Paulo Alcantara) [RHEL-76046]
  - smb: client: insert compression check/call on write requests (Paulo Alcantara) [RHEL-76046]
  - smb3: mark compression as CONFIG_EXPERIMENTAL and fix missing compression operation (Paulo Alcantara) [RHEL-76046]
  - cifs: Remove obsoleted declaration for cifs_dir_open (Paulo Alcantara) [RHEL-76046]
  - smb: client: Use min() macro (Paulo Alcantara) [RHEL-76046]
  - smb: add comment to STATUS_MCA_OCCURED (Paulo Alcantara) [RHEL-76046]
  - smb: move SMB2 Status code to common header file (Paulo Alcantara) [RHEL-76046]
  - smb: move some duplicate definitions to common/smbacl.h (Paulo Alcantara) [RHEL-76046]
  - smb/client: rename cifs_ace to smb_ace (Paulo Alcantara) [RHEL-76046]
  - smb/client: rename cifs_acl to smb_acl (Paulo Alcantara) [RHEL-76046]
  - smb/client: rename cifs_sid to smb_sid (Paulo Alcantara) [RHEL-76046]
  - smb/client: rename cifs_ntsd to smb_ntsd (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix FALLOC_FL_PUNCH_HOLE support (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix missing set of remote_i_size (Paulo Alcantara) [RHEL-76046]
  - cifs: Share server EOF pos with netfslib (Paulo Alcantara) [RHEL-76046]
  - ALSA: change configuration CONFIG_SND_HDA_SCODEC_TAS2781_SPI (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/realtek: fixup ASUS H7606W (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/realtek: fixup ASUS GA605W (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA (Jaroslav Kysela) [RHEL-76110]
  - ASoC: rt722: add delay time to wait for the calibration procedure (Jaroslav Kysela) [RHEL-76110]
  - ALSA: seq: oss: Send fragmented SysEx messages immediately (Jaroslav Kysela) [RHEL-76110]
  - ALSA: seq: oss: Fix races at processing SysEx messages (Jaroslav Kysela) [RHEL-76110] {CVE-2024-57893}
  - ALSA: seq: Check UMP support for midi_version change (Jaroslav Kysela) [RHEL-76110]
  - sound: usb: format: don't warn that raw DSD is unsupported (Jaroslav Kysela) [RHEL-76110]
  - ASoC: audio-graph-card: Call of_node_put() on correct node (Jaroslav Kysela) [RHEL-76110]
  - sound: usb: enable DSD output for ddHiFi TC44C (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/ca0132: Use standard HD-audio quirk matching helpers (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio (Jaroslav Kysela) [RHEL-76110]
  - ALSA: usb-audio: US16x08: Initialize array before use (Jaroslav Kysela) [RHEL-76110]
  - ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 83JX, 83MC and 83NM (Jaroslav Kysela) [RHEL-76110]
  - ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 83LC (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda: tas2781-spi: Delete some dead code (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda: tas2781-spi: Fix bogus error handling in tas2781_hda_spi_probe() (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda: tas2781-spi: Fix error code in tas2781_read_acpi() (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda: tas2781-spi: Fix -Wsometimes-uninitialized in tasdevice_spi_switch_book() (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda: tas2781-spi: select CRC32 instead of CRC32_SARWATE (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/tas2781: Add tas2781 hda SPI driver (Jaroslav Kysela) [RHEL-76110]
  - wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one (CKI Backport Bot) [RHEL-75898] {CVE-2024-56663}
  - perf/x86/intel: Add Arrow Lake U support (Michael Petlan) [RHEL-33309]
  - wifi: cfg80211: clear link ID from bitmap during link delete after clean up (Jose Ignacio Tornos Martinez) [RHEL-73817 RHEL-74089] {CVE-2024-57898}
  - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Jose Ignacio Tornos Martinez) [RHEL-72282 RHEL-73817] {CVE-2024-56602}
  - wifi: rtw89: coex: initialize local .dbcc_2g_phy in _set_btg_ctrl() (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: rtw89: check return value of ieee80211_probereq_get() for RNR (Jose Ignacio Tornos Martinez) [RHEL-73669 RHEL-73817] {CVE-2024-48873}
  - wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures (Jose Ignacio Tornos Martinez) [RHEL-72421 RHEL-73817] {CVE-2024-53190}
  - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (Jose Ignacio Tornos Martinez) [RHEL-72111 RHEL-73817] {CVE-2024-53156}
  - wifi: iwlwifi: fix CRF name for Bz (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: cfg80211: sme: init n_channels before channels[] access (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: mac80211: init cnt before accessing elem in ieee80211_copy_mbssid_beacon (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: mac80211: wake the queues in case of failure in resume (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: mac80211: fix a queue stall in certain cases of CSA (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: mac80211: fix station NSS capability initialization order (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: cfg80211: tests: Fix potential NULL dereference in test_cfg80211_parse_colocated_ap() (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: rtlwifi: rtl8821ae: phy: restore removed code to fix infinite loop (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: cfg80211: Remove the Medium Synchronization Delay validity check (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: rtw89: coex: check NULL return of kmalloc in btc_fw_set_monreg() (Jose Ignacio Tornos Martinez) [RHEL-72322 RHEL-73817] {CVE-2024-56535}
  - wifi: nl80211: fix bounds checker error in nl80211_parse_sched_scan (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: iwlwifi: mvm: tell iwlmei when we finished suspending (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: iwlwifi: allow fast resume on ax200 (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: rtw89: Fix TX fail with A2DP after scanning (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: ath12k: remove msdu_end structure for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - bus: mhi: host: Switch trace_mhi_gen_tre fields to native endian (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: ath12k: fix one more memcpy size error (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: ath12k: fix use-after-free in ath12k_dp_cc_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: rtl8xxxu: Perform update_beacon_work when beaconing is enabled (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: ath11k: Fix CE offset address calculation for WCN6750 in SSR (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: cfg80211: check radio iface combination for multi radio per wiphy (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: ath12k: Skip Rx TID cleanup for self peer (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: iwlwifi: mvm: Fix __counted_by usage in cfg80211_wowlan_nd_* (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - perf test: Remove cpu-list BPF cgroup counter test (Michael Petlan) [RHEL-33006]
  - loop: fix queue freeze vs limits lock order (Ming Lei) [RHEL-71345]
  - loop: refactor queue limits updates (Ming Lei) [RHEL-71345]
  - usb-storage: fix queue freeze vs limits lock order (Ming Lei) [RHEL-71345]
  - nbd: fix queue freeze vs limits lock order (Ming Lei) [RHEL-71345]
  - nvme: fix queue freeze vs limits lock order (Ming Lei) [RHEL-71345]
  - block: fix queue freeze vs limits lock order in sysfs store methods (Ming Lei) [RHEL-71345]
  - block: add a store_limit operations for sysfs entries (Ming Lei) [RHEL-71345]
  - block: don't update BLK_FEAT_POLL in __blk_mq_update_nr_hw_queues (Ming Lei) [RHEL-71345]
  - block: check BLK_FEAT_POLL under q_usage_count (Ming Lei) [RHEL-71345]
  - block: add a queue_limits_commit_update_frozen helper (Ming Lei) [RHEL-71345]
  - block: fix docs for freezing of queue limits updates (Ming Lei) [RHEL-71345]
  - block: return void from the queue_sysfs_entry load_module method (Ming Lei) [RHEL-71345]
  - loop: Fix ABBA locking race (Ming Lei) [RHEL-71345]
  - loop: Simplify discard granularity calc (Ming Lei) [RHEL-71345]
  - loop: Use bdev limit helpers for configuring discard (Ming Lei) [RHEL-71345]
  - nvme-rdma: unquiesce admin_q before destroy it (CKI Backport Bot) [RHEL-73644] {CVE-2024-49569}
  - tls: Fix tls_sw_sendmsg error handling (Benjamin Coddington) [RHEL-60028]
  - SUNRPC: Fix a hang in TLS sock_close if sk_write_pending (Benjamin Coddington) [RHEL-60028]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-567.el9]
changelog:
  - spi: pxa2xx: Add MTP-S, ARL-H, LNL-M support (David Arcari) [RHEL-78311]
  - erofs: promote to full support (Ian Kent) [RHEL-78339]
  - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-78016] {CVE-2024-43871}
  - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75825]
  - RDMA/mlx5: Move events notifier registration to be after device registration (CKI Backport Bot) [RHEL-72349] {CVE-2024-53224}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-568.el9]
changelog:
  - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-78655]
  - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-78655]
  - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix parsing native symlinks directory/file type (Paulo Alcantara) [RHEL-78655]
  - cifs: Add support for creating WSL-style symlinks (Paulo Alcantara) [RHEL-78655]
  - smb3: add support for IAKerb (Paulo Alcantara) [RHEL-78655]
  - oid_registry: Add OIDs for missing Spnego auth mechanisms to Macs (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix struct FILE_ALL_INFO (Paulo Alcantara) [RHEL-78655]
  - cifs: Add support for creating NFS-style symlinks (Paulo Alcantara) [RHEL-78655]
  - cifs: Add support for creating native Windows sockets (Paulo Alcantara) [RHEL-78655]
  - cifs: Add mount option -o reparse=none (Paulo Alcantara) [RHEL-78655]
  - cifs: Add mount option -o symlink= for choosing symlink create type (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix creating and resolving absolute NT-style symlinks (Paulo Alcantara) [RHEL-78655]
  - cifs: Simplify reparse point check in cifs_query_path_info() function (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove symlink member from cifs_open_info_data union (Paulo Alcantara) [RHEL-78655]
  - cifs: Update description about ACL permissions (Paulo Alcantara) [RHEL-78655]
  - cifs: Rename struct reparse_posix_data to reparse_nfs_data_buffer and move to common/smb2pdu.h (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove struct reparse_posix_data from struct cifs_open_info_data (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove unicode parameter from parse_reparse_point() function (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix getting and setting SACLs over SMB1 (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove intermediate object of failed create SFU call (Paulo Alcantara) [RHEL-78655]
  - cifs: Validate EAs for WSL reparse points (Paulo Alcantara) [RHEL-78655]
  - cifs: Change translation of STATUS_PRIVILEGE_NOT_HELD to -EPERM (Paulo Alcantara) [RHEL-78655]
  - cifs: Change translation of STATUS_NOT_A_REPARSE_POINT to -ENODATA (Paulo Alcantara) [RHEL-78655]
  - smb: client: handle lack of EA support in smb2_query_path_info() (Paulo Alcantara) [RHEL-78655]
  - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-78655]
  - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove duplicate struct reparse_symlink_data and SYMLINK_FLAG_RELATIVE (Paulo Alcantara) [RHEL-78655]
  - cifs: Do not attempt to call CIFSGetSrvInodeNumber() without CAP_INFOLEVEL_PASSTHRU (Paulo Alcantara) [RHEL-78655]
  - cifs: Do not attempt to call CIFSSMBRenameOpenFile() without CAP_INFOLEVEL_PASSTHRU (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove declaration of dead CIFSSMBQuerySymLink function (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix printing Status code into dmesg (Paulo Alcantara) [RHEL-78655]
  - cifs: Add missing NT_STATUS_* codes from nterr.h to nterr.c (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix endian types in struct rfc1002_session_packet (Paulo Alcantara) [RHEL-78655]
  - cifs: Use cifs_autodisable_serverino() for disabling CIFS_MOUNT_SERVER_INUM in readdir.c (Paulo Alcantara) [RHEL-78655]
  - smb3: add missing tracepoint for querying wsl EAs (Paulo Alcantara) [RHEL-78655]
  - smb: client: fix order of arguments of tracepoints (Paulo Alcantara) [RHEL-78655]
  - smb: client: correctly handle ErrorContextData as a flexible array (Paulo Alcantara) [RHEL-78655]
  - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-78655]
  - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-78655]
  - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-78655]
  - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-78655]
  - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-78655]
  - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-78655]
  - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-78655]
  - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-78655]
  - thermal/drivers/rcar_gen3: Update temperature approximation calculation (Radu Rendec) [RHEL-78506]
  - thermal/drivers/rcar_gen3: Move Tj_T storage to shared private data (Radu Rendec) [RHEL-78506]
  - pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources() (Radu Rendec) [RHEL-78506]
  - pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources() (Radu Rendec) [RHEL-78506]
  - pinctrl: renesas: checker: Rework drive and bias pin iteration (Radu Rendec) [RHEL-78506]
  - pinctrl: renesas: checker: Fix miscalculation of number of states (Radu Rendec) [RHEL-78506]
  - i2c: rcar: fix NACK handling when being a target (Radu Rendec) [RHEL-78506]
  - i2c: rcar: ensure Gen3+ reset does not disturb local targets (Radu Rendec) [RHEL-78506]
  - i2c: rcar: clear NO_RXDMA flag after resetting (Radu Rendec) [RHEL-78506]
  - i2c: rcar: bring hardware to known state when probing (Radu Rendec) [RHEL-78506]
  - i2c: rcar: add FastMode+ support for Gen4 (Radu Rendec) [RHEL-78506]
  - i2c: rcar: introduce Gen4 devices (Radu Rendec) [RHEL-78506]
  - gpio: rcar: drop of_match_ptr for ID table (Radu Rendec) [RHEL-78506]
  - clocksource/drivers/sh_tmu: Mark driver as non-removable (Radu Rendec) [RHEL-78506]
  - clocksource/drivers/sh_cmt: Address race condition for clock events (Radu Rendec) [RHEL-78506]
  - clocksource/drivers/sh_cmt: Mark driver as non-removable (Radu Rendec) [RHEL-78506]
  - serial: sh-sci: Increment the runtime usage counter for the earlycon device (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: Clean sci_ports[0] after at earlycon exit (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: Move runtime PM enable to sci_probe_single() (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: Drop __initdata macro for port_cfg (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: Use plain struct copy in early_console_setup() (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: simplify locking when re-issuing RXDMA fails (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: let timeout timer only run when DMA is scheduled (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: describe locking requirements for invalidating RXDMA (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: protect invalidating RXDMA on shutdown (Jared Kangas) [RHEL-78246]
  - rxrpc: Don't need barrier for ->tx_bottom and ->acks_hard_ack (Marc Dionne) [RHEL-78217]
  - rxrpc, afs: Fix peer hash locking vs RCU callback (Marc Dionne) [RHEL-78217]
  - afs: Add more tracepoints to do with tracking validity (Marc Dionne) [RHEL-78217]
  - netfs: Remove some extraneous directory invalidations (Marc Dionne) [RHEL-78217]
  - afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call (Marc Dionne) [RHEL-78217]
  - afs: Add rootcell checks (Marc Dionne) [RHEL-78217]
  - afs: Make /afs/.<cell> as well as /afs/<cell> mountpoints (Marc Dionne) [RHEL-78217]
  - afs: Fix the maximum cell name length (Marc Dionne) [RHEL-78217] {CVE-2025-21646}
  - afs: Fix cleanup of immediately failed async calls (Marc Dionne) [RHEL-78217]
  - afs: Fix directory format encoding struct (Marc Dionne) [RHEL-78217]
  - afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY (Marc Dionne) [RHEL-78217]
  - afs: Don't use mutex for I/O operation lock (Marc Dionne) [RHEL-78217]
  - rxrpc: Use a large kvec[] in rxrpc_local rather than every rxrpc_txbuf (Marc Dionne) [RHEL-78217]
  - rxrpc: Request an ACK on impending Tx stall (Marc Dionne) [RHEL-78217]
  - rxrpc: Show stats counter for received reason-0 ACKs (Marc Dionne) [RHEL-78217]
  - rxrpc: Don't set the MORE-PACKETS rxrpc wire header flag (Marc Dionne) [RHEL-78217]
  - rxrpc: Clean up Tx header flags generation handling (Marc Dionne) [RHEL-78217]
  - rxrpc: Fix handling of received connection abort (Marc Dionne) [RHEL-78217]
  - rxrpc: Add a tracepoint for aborts being proposed (Marc Dionne) [RHEL-78217]
  - afs: Fix missing subdir edit when renamed between parent dirs (Marc Dionne) [RHEL-78217]
  - rxrpc: Fix uninitialised variable in rxrpc_send_data() (Marc Dionne) [RHEL-78217]
  - afs: Fix the setting of the server responding flag (Marc Dionne) [RHEL-64506 RHEL-78217] {CVE-2024-49999}
  - afs: Remove unused struct and function prototype (Marc Dionne) [RHEL-78217]
  - afs: Fix possible infinite loop with unresponsive servers (Marc Dionne) [RHEL-78217]
  - rxrpc: Remove unused function declarations (Marc Dionne) [RHEL-78217]
  - afs: drop usage of folio_file_pos (Marc Dionne) [RHEL-78217]
  - afs: Convert comma to semicolon (Marc Dionne) [RHEL-78217]
  - afs: Add __counted_by for struct afs_acl and use struct_size() (Marc Dionne) [RHEL-78217]
  - afs: move afs_xattr_handlers to .rodata (Marc Dionne) [RHEL-78217]
  - afs: Annotate struct afs_permits with __counted_by (Marc Dionne) [RHEL-78217]
  - afs: convert to ctime accessor functions (Marc Dionne) [RHEL-78217]
  - afs: Don't use folio->private to record partial modification (Marc Dionne) [RHEL-78217]
  - afs: Remove whitespace before most ')' from the trace header (Marc Dionne) [RHEL-78217]
  - firmware: psci: Fix return value from psci_system_suspend() (Jared Kangas) [RHEL-78060]
  - libperf cpumap: Grow array of read CPUs in smaller increments (Michael Petlan) [RHEL-71187]
  - libperf cpumap: Remove perf_cpu_map__read() (Michael Petlan) [RHEL-71187]
  - libperf cpumap: Remove use of perf_cpu_map__read() (Michael Petlan) [RHEL-71187]
  - perf pmu: Remove use of perf_cpu_map__read() (Michael Petlan) [RHEL-71187]
  - libperf cpumap: Be tolerant of newline at the end of a cpumask (Michael Petlan) [RHEL-71187]
  - libperf cpumap: Hide/reduce scope of MAX_NR_CPUS (Michael Petlan) [RHEL-71187]
  - perf cpumap: Reduce transitive dependencies on libperf MAX_NR_CPUS (Michael Petlan) [RHEL-71187]
  - perf: Increase MAX_NR_CPUS to 4096 (Michael Petlan) [RHEL-71187]
  - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-74147]
  - dev: Acquire netdev_rename_lock before restoring dev->name in dev_change_name(). (Toke Høiland-Jørgensen) [RHEL-77329]
  - Enable CONFIG_INTEL_MEI_PXP and CONFIG_DRM_I915_PXP on rhel (David Arcari) [RHEL-77170]
  - redhat/configs: disable CONFIG_INTEL_MEI_VSC_HW (David Arcari) [RHEL-77170]
  - mei: vsc: Fix typo "maintstepping" -> "mainstepping" (David Arcari) [RHEL-77170]
  - mei: vsc: Improve error logging in vsc_identify_silicon() (David Arcari) [RHEL-77170]
  - mei: vsc: Do not re-enable interrupt from vsc_tp_reset() (David Arcari) [RHEL-77170]
  - mei: clean pending read with vtag on bus (David Arcari) [RHEL-77170]
  - mei: use kvmalloc for read buffer (David Arcari) [RHEL-77170]
  - mei: bus: Reorganize kerneldoc parameter names (David Arcari) [RHEL-77170]
  - finally take no_llseek out [partial] (David Arcari) [RHEL-77170]
  - mei: vsc: Fix spelling error (David Arcari) [RHEL-77170]
  - mei: vsc: Enhance SPI transfer of IVSC ROM (David Arcari) [RHEL-77170]
  - mei: vsc: Utilize the appropriate byte order swap function (David Arcari) [RHEL-77170]
  - mei: vsc: Prevent timeout error with added delay post-firmware download (David Arcari) [RHEL-77170]
  - mei: vsc: Enhance IVSC chipset stability during warm reboot (David Arcari) [RHEL-77170]
  - mei: bus-fixup: set timeout for MKHI send operations (David Arcari) [RHEL-77170]
  - mei: vsc: Fix wrong invocation of ACPI SID method (David Arcari) [RHEL-77170]
  - mei: vsc: Don't stop/restart mei device during system suspend/resume (David Arcari) [RHEL-77170]
  - mei: me: release irq in mei_me_pci_resume error path (David Arcari) [RHEL-77170]
  - mei: demote client disconnect warning on suspend to debug (David Arcari) [RHEL-77170]
  - mei: pxp: match against PCI_CLASS_DISPLAY_OTHER (David Arcari) [RHEL-77170]
  - mei: bus: constify the struct mei_cl_bus_type usage (David Arcari) [RHEL-77170]
  - mei: vsc: Unregister interrupt handler for system suspend (David Arcari) [RHEL-77170]
  - Revert "mei: vsc: Call wake_up() in the threaded IRQ handler" (David Arcari) [RHEL-77170]
  - mei: Avoid a bunch of -Wflex-array-member-not-at-end warnings (David Arcari) [RHEL-77170]
  - mei: gsc_proxy: match component when GSC is on different bus (David Arcari) [RHEL-77170]
  - mei: vsc: Convert to platform remove callback returning void (David Arcari) [RHEL-77170]
  - mei: vsc: Assign pinfo fields in variable declaration (David Arcari) [RHEL-77170]
  - mei: vsc: Don't use sleeping condition in wait_event_timeout() (David Arcari) [RHEL-77170]
  - mei: vsc: Call wake_up() in the threaded IRQ handler (David Arcari) [RHEL-77170]
  - mei: me: remove unnecessary NULL pointer checks (David Arcari) [RHEL-77170]
  - mei: txe: remove unnecessary NULL pointer checks (David Arcari) [RHEL-77170]
  - mei: gsc: remove unnecessary NULL pointer checks (David Arcari) [RHEL-77170]
  - mei: Add Meteor Lake support for IVSC device (David Arcari) [RHEL-77170]
  - mei: pxp: add dependency on Xe driver (David Arcari) [RHEL-77170]
  - mei: hdcp: add dependency on Xe driver (David Arcari) [RHEL-77170]
  - mei: pxp: match without driver name (David Arcari) [RHEL-77170]
  - mei: hdcp: match without driver name (David Arcari) [RHEL-77170]
  - mei: gsc: add support for auxiliary device created by Xe driver (David Arcari) [RHEL-77170]
  - mei: rework Kconfig dependencies (David Arcari) [RHEL-77170]
  - mei: fix vsc dependency (David Arcari) [RHEL-77170]
  - mei: vsc: Rework firmware image names (David Arcari) [RHEL-77170]
  - mei: pxp: spdx should be at first line (David Arcari) [RHEL-77170]
  - mei: Add MEI hardware support for IVSC device (David Arcari) [RHEL-77170]
  - mei: Add transport driver for IVSC device (David Arcari) [RHEL-77170]
  - misc: mei: client.c: fix problem of return '-EOVERFLOW' in mei_cl_write (David Arcari) [RHEL-77170]
  - misc: mei: client.c: return negative error code in mei_cl_write (David Arcari) [RHEL-77170]
  - mei: pxp: fix mei_pxp_send_message return value (David Arcari) [RHEL-77170]
  - mei: me: emit error only if reset was unexpected (David Arcari) [RHEL-77170]
  - misc: mei: main.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: interrupt.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: hw-me.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: hbm.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: dma-ring.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: client.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: hw.h: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - mei: update mei-pxp's component interface with timeouts [partial] (David Arcari) [RHEL-77170]
  - mei: pxp: re-enable client on errors (David Arcari) [RHEL-77170]
  - mei: pxp: recover from recv fail under memory pressure (David Arcari) [RHEL-77170]
  - mei: bus: add send and recv api with timeout (David Arcari) [RHEL-77170]
  - mei: docs: fix spelling errors (David Arcari) [RHEL-77170]
  - mei: docs: add missing entries to kdoc in struct mei_cfg_idx (David Arcari) [RHEL-77170]
  - mei: docs: use correct structures name in kdoc (David Arcari) [RHEL-77170]
  - mei: make mei_class a static const structure (David Arcari) [RHEL-77170]
  - mei: gsc: add module description (David Arcari) [RHEL-77170]
  - mei: pxp: Keep a const qualifier when calling mei_cldev_send() (David Arcari) [RHEL-77170]
  - mei: obtain firmware version only on gsc. (David Arcari) [RHEL-77170]
  - mei: bus: enable asynchronous suspend. (David Arcari) [RHEL-77170]
  - mei: log firmware status on hw_start failure. (David Arcari) [RHEL-77170]
  - drm/i915/hdcp: Move away from master naming to arbiter [partial] (David Arcari) [RHEL-77170]
  - mei: bus-fixup: fix buffer type (David Arcari) [RHEL-77170]
  - mei: bus: drop useless cldev null check (David Arcari) [RHEL-77170]
  - virt: acrn: Mark the uuid field as unused (David Arcari) [RHEL-77170]
  - mei: Move uuid.h to the MEI namespace (David Arcari) [RHEL-77170]
  - drm/i915/hdcp: Refactor HDCP API structures [partial] (David Arcari) [RHEL-77170]
  - uuid: remove licence boilerplate text from the header (David Arcari) [RHEL-77170]
  - drm/i915/hdcp: Use generic names for HDCP helpers and structs [partial] (David Arcari) [RHEL-77170]
  - mei: lower the log level for non-fatal failed messages (David Arcari) [RHEL-77170]
  - mei: bus: disallow driver match while dismantling device (David Arcari) [RHEL-77170]
  - mei: Move uuid_le_cmp() to its only user (David Arcari) [RHEL-77170]
  - uuid: Decouple guid_t and uuid_le types and respective macros (David Arcari) [RHEL-77170]
  - uuid: discourage people from using UAPI header in new code (David Arcari) [RHEL-77170]
  - mei: mei-me: resume device in prepare (David Arcari) [RHEL-77170]
  - mei: gsc: Remove redundant dev_err call (David Arcari) [RHEL-77170]
  - mei: fix repeated words in comments (David Arcari) [RHEL-77170]
  - misc: move from strlcpy with unused retval to strscpy [partial] (David Arcari) [RHEL-77170]
  - sunrpc: simplify one-level sysctl registration for xs_tunables_table (Benjamin Coddington) [RHEL-73723]
  - sunrpc: simplify one-level sysctl registration for xr_tunables_table (Benjamin Coddington) [RHEL-73723]
  - sunrpc: move sunrpc_table and proc routines above (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: Silence compiler complaints about tautological comparisons (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: Revert e0a912e8ddba (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: Remove unused declarations (Benjamin Coddington) [RHEL-73723]
  - sunrpc: Remove unused extern declarations (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: change svc_xprt::xpt_flags bits to enum (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: Remove unused declaration rpc_modcount() (Benjamin Coddington) [RHEL-73723]
  - lockd: define nlm_port_min,max with CONFIG_SYSCTL (Benjamin Coddington) [RHEL-73723]
  - nfs/blocklayout: Limit repeat device registration on failure (Benjamin Coddington) [RHEL-73723]
  - nfs/blocklayout: Don't attempt unregister for invalid block device (Benjamin Coddington) [RHEL-73723]
  - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (Benjamin Coddington) [RHEL-73723]
  - nfsd: fix refcount leak when file is unhashed after being found (Benjamin Coddington) [RHEL-73723]
  - net: initialize net->notrefcnt_tracker earlier (Benjamin Coddington) [RHEL-73723]
  - mptcp: fix tracking issue in mptcp_subflow_create_socket() (Benjamin Coddington) [RHEL-73723]
  - net: add a refcount tracker for kernel sockets (Benjamin Coddington) [RHEL-73723]
  - NFSD: Fix nfsd4_shutdown_copy() (Benjamin Coddington) [RHEL-73723]
  - svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() (Benjamin Coddington) [RHEL-73723]
  - nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work" (Benjamin Coddington) [RHEL-73723]
  - nfsd: release svc_expkey/svc_export with rcu_work (Benjamin Coddington) [RHEL-73723]
  - NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (Benjamin Coddington) [RHEL-73723]
  - nfsd: restore callback functionality for NFSv4.0 (Benjamin Coddington) [RHEL-73723]
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (Benjamin Coddington) [RHEL-73723]
  - NFSD: Remove a never-true comparison (Benjamin Coddington) [RHEL-73723]
  - Revert "nfs: don't reuse partially completed requests in nfs_lock_and_join_requests" (Benjamin Coddington) [RHEL-73723]
  - nfsd: drop inode parameter from nfsd4_change_attribute() (Benjamin Coddington) [RHEL-73723]
  - svcrdma: Address an integer overflow (Benjamin Coddington) [RHEL-73723]
  - nfs: avoid i_lock contention in nfs_clear_invalid_mapping (Benjamin Coddington) [RHEL-73723]
  - nfs: Fix KMSAN warning in decode_getfattr_attrs() (Benjamin Coddington) [RHEL-73723]
  - NFSv3: only use NFS timeout for MOUNT when protocols are compatible (Benjamin Coddington) [RHEL-73723]
  - sunrpc: handle -ENOTCONN in xs_tcp_setup_socket() (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: Fix integer overflow in decode_rc_list() (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: clnt.c: Remove misleading comment (Benjamin Coddington) [RHEL-73723]
  - nfs: fix memory leak in error path of nfs4_do_reclaim (Benjamin Coddington) [RHEL-73723]
  - nfsd: nfsd_destroy_serv() must call svc_destroy() even if nfsd_startup_net() failed (Benjamin Coddington) [RHEL-73723]
  - NFSD: Mark filecache "down" if init fails (Benjamin Coddington) [RHEL-73723]
  - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Benjamin Coddington) [RHEL-73723]
  - NFSD: Fix NFSv4's PUTPUBFH operation (Benjamin Coddington) [RHEL-73723]
  - nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire (Benjamin Coddington) [RHEL-73723]
  - Revert "net/tls: fix tls_sk_proto_close executed repeatedly" (Benjamin Coddington) [RHEL-73723]
  - net/tls: fix tls_sk_proto_close executed repeatedly (Benjamin Coddington) [RHEL-73723]
  - hugetlb: prioritize surplus allocation from current node (Aristeu Rozanski) [RHEL-68966]
  - net: tun: call napi_schedule_prep() to ensure we own a napi (Jared Kangas) [RHEL-76236]
  - net: tun: Fix memory leaks of napi_get_frags (Jared Kangas) [RHEL-76236]
  - virtio-net: fix overflow inside virtnet_rq_alloc (Jon Maloy) [RHEL-73638] {CVE-2024-57843}
  - RDMA/uverbs: Prevent integer overflow issue (CKI Backport Bot) [RHEL-74224] {CVE-2024-57890}
  - EDAC/igen6: Add Intel Arrow Lake-U/H SoCs support (Joel Savitz) [RHEL-33317 RHEL-52289]
  - EDAC/bluefield: Fix potential integer overflow (Aristeu Rozanski) [RHEL-72108] {CVE-2024-53161}
  - virtio/vsock: Improve MSG_ZEROCOPY error handling (Jon Maloy) [RHEL-69661] {CVE-2024-53117}
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68028] {CVE-2024-50264}
  - powerpc/boot: Fix incorrect version calculation issue in ld_version (Waiman Long) [RHEL-68367]
  - powerpc: suppress some linker warnings in recent linker versions (Waiman Long) [RHEL-68367]
  - Makefile: link with -z noexecstack --no-warn-rwx-segments (Waiman Long) [RHEL-68367]
  - fs: Fix file_set_fowner LSM hook inconsistencies (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add layout1.refer_mount_root (Ryan Sullivan) [RHEL-8810]
  - fs/ioctl: Add a comment to keep the logic in sync with LSM policies (Ryan Sullivan) [RHEL-8810]
  - landlock: Document IOCTL support (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Add support for LANDLOCK_ACCESS_FS_IOCTL_DEV (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Exhaustive test for the IOCTL allow-list (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Check IOCTL restrictions for named UNIX domain sockets (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test IOCTLs on named pipes (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test ioctl(2) and ftruncate(2) with open(O_PATH) (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test IOCTL with memfds (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test IOCTL support (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add cred_transfer test (Ryan Sullivan) [RHEL-8810]
  - landlock: Don't lose track of restrictions on cred_transfer (Ryan Sullivan) [RHEL-8810]
  - Enable CONFIG_SECURITY_LANDLOCK for RHEL (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Handle TEST_F()'s explicit exit codes (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Fix tests timeout and race condition (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Fix vfork() side effects (Ryan Sullivan) [RHEL-8810]
  - selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Fix port parsing in sandboxer (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix d_parent walk (Ryan Sullivan) [RHEL-8810]
  - hostfs: fix dev_t handling (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Fix fixture teardown (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Fix interleaved scheduling leading to race conditions (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Prevent infinite loop due to Assert in FIXTURE_TEARDOWN (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Share _metadata between forked processes (Ryan Sullivan) [RHEL-8810]
  - landlock: Add IOCTL access right for character and block devices (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Fix incorrect free in populate_ruleset_net (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Do not allocate memory in fixture data (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix FS tests when run on a private mount point (Ryan Sullivan) [RHEL-8810]
  - fs: Return ENOTTY directly if FS_IOC_GETUUID or FS_IOC_GETFSSYSFSPATH fail (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Don't error out if a file path cannot be opened (Ryan Sullivan) [RHEL-8810]
  - landlock: Use f_cred in security_file_open() hook (Ryan Sullivan) [RHEL-8810]
  - landlock: Rename "ptrace" files to "task" (Ryan Sullivan) [RHEL-8810]
  - landlock: Simplify current_check_access_socket() (Ryan Sullivan) [RHEL-8810]
  - landlock: Warn once if a Landlock action is requested while disabled (Ryan Sullivan) [RHEL-8810]
  - landlock: Extend documentation for kernel support (Ryan Sullivan) [RHEL-8810]
  - landlock: Add support for KUnit tests (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Clean up error logs related to capabilities (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Fix TEST_F()'s vfork handling (Ryan Sullivan) [RHEL-8810]
  - selftests: kselftest_harness: use exit code to store skip (Ryan Sullivan) [RHEL-8810]
  - selftests: kselftest_harness: save full exit code in metadata (Jakub Kicinski) [RHEL-8810]
  - selftests/harness: Merge TEST_F_FORK() into TEST_F() (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Redefine TEST_F() as TEST_F_FORK() (Ryan Sullivan) [RHEL-8810]
  - fs: add FS_IOC_GETFSSYSFSPATH (Ryan Sullivan) [RHEL-8810]
  - fs: super_set_uuid() (Ryan Sullivan) [RHEL-8810]
  - kernfs: attach uuid for every kernfs and report it in fsid (Ryan Sullivan) [RHEL-8810]
  - fs: FS_IOC_GETUUID (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix asymmetric private inodes referring (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix fs_test build with old libc (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix net_test build with old libc (Ryan Sullivan) [RHEL-8810]
  - landlock: Optimize the number of calls to get_access_mask slightly (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Rename "permitted" to "allowed" in ftruncate tests (Ryan Sullivan) [RHEL-8810]
  - landlock: Remove remaining "inline" modifiers in .c files [v6.6] (Ryan Sullivan) [RHEL-8810]
  - landlock: Remove remaining "inline" modifiers in .c files [v6.1] (Ryan Sullivan) [RHEL-8810]
  - landlock: Remove remaining "inline" modifiers in .c files [v5.15] (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests to check unhandled rule's access rights (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests to check unknown rule's access rights (Ryan Sullivan) [RHEL-8810]
  - lsm: new security_file_ioctl_compat() hook (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix capability for net_test (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests for FS topology changes with network rules (Ryan Sullivan) [RHEL-8810]
  - landlock: Document network support (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Support TCP restrictions (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add network tests (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Share enforce_ruleset() helper (Ryan Sullivan) [RHEL-8810]
  - landlock: Support network rules with TCP bind and connect (Ryan Sullivan) [RHEL-8810]
  - hostfs: Fix ephemeral inodes (Ryan Sullivan) [RHEL-8810]
  - landlock: Refactor landlock_add_rule() syscall (Ryan Sullivan) [RHEL-8810]
  - landlock: Refactor layer helpers (Ryan Sullivan) [RHEL-8810]
  - landlock: Move and rename layer helpers (Ryan Sullivan) [RHEL-8810]
  - landlock: Refactor merge/inherit_ruleset helpers (Ryan Sullivan) [RHEL-8810]
  - landlock: Refactor landlock_find_rule/insert_rule helpers (Ryan Sullivan) [RHEL-8810]
  - landlock: Allow FS topology changes for domains without such rule type (Ryan Sullivan) [RHEL-8810]
  - landlock: Make ruleset's access masks more generic (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix a resource leak (Ryan Sullivan) [RHEL-8810]
  - landlock: Annotate struct landlock_rule with __counted_by (Ryan Sullivan) [RHEL-8810]
  - security: Create file_truncate hook from path_truncate hook (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add hostfs tests (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests for pseudo filesystems (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Make mounts configurable (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add supports_filesystem() helper (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Don't create useless file layouts (Ryan Sullivan) [RHEL-8810]
  - landlock: Clarify documentation for the LANDLOCK_ACCESS_FS_REFER right (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test ptrace as much as possible with Yama (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Skip overlayfs tests when not supported (Ryan Sullivan) [RHEL-8810]
  - landlock: Explain file descriptor access rights (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Document best-effort approach for LANDLOCK_ACCESS_FS_REFER (Ryan Sullivan) [RHEL-8810]
  - landlock: Document Landlock's file truncation support (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Extend sample tool to support LANDLOCK_ACCESS_FS_TRUNCATE (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test ftruncate on FDs created by memfd_create(2) (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test FD passing from restricted to unrestricted processes (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Locally define __maybe_unused (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test open() and ftruncate() in multiple scenarios (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test file truncation support (Ryan Sullivan) [RHEL-8810]
  - landlock: Support file truncation (Ryan Sullivan) [RHEL-8810]
  - landlock: Document init_layer_masks() helper (Ryan Sullivan) [RHEL-8810]
  - landlock: Refactor check_access_path_dual() into is_access_to_paths_allowed() (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix documentation style (Ryan Sullivan) [RHEL-8810]
  - landlock: Slightly improve documentation and fix spelling (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Print hints about ABI versions (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix out-of-tree builds (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix file reparenting without explicit LANDLOCK_ACCESS_FS_REFER (Ryan Sullivan) [RHEL-8810]
  - landlock: Explain how to support Landlock (Ryan Sullivan) [RHEL-8810]
  - landlock: Add design choices documentation for filesystem access rights (Ryan Sullivan) [RHEL-8810]
  - landlock: Document good practices about filesystem policies (Ryan Sullivan) [RHEL-8810]
  - landlock: Document LANDLOCK_ACCESS_FS_REFER and ABI versioning (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Add support for file reparenting (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add 11 new test suites dedicated to file reparenting (Ryan Sullivan) [RHEL-8810]
  - landlock: Add support for file reparenting with LANDLOCK_ACCESS_FS_REFER (Ryan Sullivan) [RHEL-8810]
  - landlock: Move filesystem helpers and add a new one (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix same-layer rule unions (Ryan Sullivan) [RHEL-8810]
  - landlock: Create find_rule() from unmask_layers() (Ryan Sullivan) [RHEL-8810]
  - landlock: Reduce the maximum number of layers to 16 (Ryan Sullivan) [RHEL-8810]
  - landlock: Define access_mask_t to enforce a consistent access mask size (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test landlock_create_ruleset(2) argument check ordering (Ryan Sullivan) [RHEL-8810]
  - landlock: Change landlock_restrict_self(2) check ordering (Ryan Sullivan) [RHEL-8810]
  - landlock: Change landlock_add_rule(2) argument check ordering (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests for O_PATH (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fully test file rename with "remove" access (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Extend access right tests to directories (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests for unknown access rights (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Extend tests for minimal valid attribute size (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Make tests build with old libc (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix landlock_add_rule(2) documentation (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Format with clang-format (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Add clang-format exceptions (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Format with clang-format (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Normalize array assignment (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add clang-format exceptions (Ryan Sullivan) [RHEL-8810]
  - landlock: Add clang-format exceptions (Ryan Sullivan) [RHEL-8810]
  - fs: fix an infinite loop in iomap_fiemap (Ryan Sullivan) [RHEL-8810]
  - landlock: Use square brackets around "landlock-ruleset" (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Fix path_list memory leak (Ryan Sullivan) [RHEL-8810]
  - fs/ioctl: remove unnecessary __user annotation (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: remove ARRAY_SIZE define from common.h (Ryan Sullivan) [RHEL-8810]
  - fs: forbid invalid project ID (Ryan Sullivan) [RHEL-8810]
  - fs: remove generic_block_fiemap (Ryan Sullivan) [RHEL-8810]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-569.el9]
changelog:
  - scsi: ufs: core: Store min and max clk freq from OPP table (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Cancel RTC work during ufshcd_remove() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Fix the build for the old ARM OABI (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Improve ufshcd_mcq_sq_cleanup() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Start the RTC update work later (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix another deadlock during RTC update (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Requeue aborted request (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix the issue of ICU failure (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove ufshcd_urgent_bkops() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Move UFS trace events to private header (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Add HCI capabilities sysfs group (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Prepare to add HCI capabilities sysfs (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Support Updating UIC Command Timeout (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add a quirk for handling broken LSDBS field in controller capabilities register (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Do not set link to OFF state while waking up from hibernation (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix deadlock during RTC update (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Bypass quick recovery if force reset is needed (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Check LSDBS cap when !mcq (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add UFSHCD_QUIRK_KEYS_IN_PRDT (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add fill_crypto_prdt variant op (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add UFSHCD_QUIRK_BROKEN_CRYPTO_ENABLE (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: fold ufshcd_clear_keyslot() into its caller (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add UFSHCD_QUIRK_CUSTOM_CRYPTO_PROFILE (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Make .get_hba_mac() optional (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Inline ufshcd_mcq_vops_get_hba_mac() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Move the ufshcd_mcq_enable() call (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Move the "hba->mcq_enabled = true" assignment (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Inline is_mcq_enabled() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Initialize hba->reserved_slot earlier (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Rename the MASK_TRANSFER_REQUESTS_SLOTS constant (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove two constants (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Initialize struct uic_command once (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Declare functions once (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove SCSI host only if added (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Suspend clk scaling on no request (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Prevent no I/O queue case for MCQ (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Convert MCQ_CFG_n to an inline function (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Fix missing argument 'hba' in MCQ_OPR_OFFSET_n (Radu Rendec) [RHEL-79078]
  - scsi: ufs: sysfs: Make max_number_of_rtt read-write (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Maximum RTT supported by the host driver (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Allow RTT negotiation (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix ufshcd_abort_one racing issue (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix ufshcd_clear_cmd racing issue (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Free memory allocated for model before reinit (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Quiesce request queues before checking pending cmds (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Fix error output and clean up ufshcd_mcq_abort() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: mcq: Fix ufshcd_mcq_sqe_search() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Changing the status to check inflight (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Remove support for old UFSHCI versions (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove unnecessary wmb() prior to writing run/stop regs (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove unnecessary wmb() after ringing doorbell (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Perform read back after disabling interrupts (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Perform read back after writing UTP_TASK_REQ_LIST_BASE_H (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Drop driver owner initialization (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Reuse compose_devman_upiu (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Reuse compose_dev_cmd (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Reuse exec_dev_cmd (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Reuse device management locking code (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix MCQ mode dev command timeout (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: WLUN suspend dev/link state error recovery (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix MCQ MAC configuration (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Remove unused parameters (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Use ufshcd_mcq_req_to_hwq() to simplify updating hwq (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Add definition for REG_UFS_MEM_CFG register (Radu Rendec) [RHEL-79078]
  - scsi: ufs: ufs-mediatek: Migrate to UFSHCD generic CPU latency PM QoS support (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add CPU latency QoS support for UFS driver (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Uninitialized variable in ufshcd_devfreq_target() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove the ufshcd_release() in ufshcd_err_handling_prepare() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix shift issue in ufshcd_clear_cmd() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove the ufshcd_hba_exit() call from ufshcd_async_scan() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Simplify power management during async scan (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Simplify ufshcd_auto_hibern8_update() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Rename ufshcd_auto_hibern8_enable() and make it static (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add sysfs node for UFS RTC update (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add UFS RTC support (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add ufshcd_is_ufs_dev_busy() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Warn if the request tag is truncated (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Make fault injection dynamically configurable per HBA (Radu Rendec) [RHEL-79078]
  - scsi: ufs: ufs-sysfs: Expose UFS power info (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Let the sq_lock protect sq_tail_slot access (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Clear cmd if abort succeeds in MCQ mode (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix racing issue between ufshcd_mcq_abort() and ISR (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Expand MCQ queue slot to DeviceQueueDepth + 1 (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Leave space for '\0' in utf8 desc string (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Conversion to bool not necessary (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix race between force complete and ISR (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove dev cmd clock scaling busy (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: WLUN send SSU timeout recovery (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Set the Command Priority (CP) flag for RT requests (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Simplify ufshcd_comp_scsi_upiu() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove request tag range checks (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Include the SCSI ID in UFS command tracing output (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Correct clear TM error log (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: No need to update UPIU.header.flags and lun in advanced RPMB handler (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add advanced RPMB support where UFSHCI 4.0 does not support EHS length in UTRD (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix the build for gcc 9 and before (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Simplify response header parsing (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Simplify transfer request header initialization (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Remove a member variable (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Simplify ufshcd_abort_all() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Remove a local variable from ufshcd_abort_all() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Improve type safety (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Simplify zero-initialization (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Minimize #include directives (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Rename a function argument (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Fix kernel-doc headers (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Document all return values (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Follow the kernel-doc syntax for documenting return values (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Fix residual handling (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove HPB support (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix some kernel-doc comments (Radu Rendec) [RHEL-79078]
  - scsi: ufs: ufs-mediatek: Add MCQ support for MTK platform (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Export symbols for MTK driver module (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Convert UPIU_HEADER_DWORD() into a function (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Fix the search/wrap around logic (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add support for qTimestamp attribute (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove unused function declaration (Radu Rendec) [RHEL-79078]
  - scsi: ufs: wb: Add explicit flush_threshold sysfs attribute (Radu Rendec) [RHEL-79078]
  - scsi: ufs: ufs-mediatek: Set UFSHCD_QUIRK_MCQ_BROKEN_RTC quirk (Radu Rendec) [RHEL-79078]
  - scsi: ufs: ufs-mediatek: Set UFSHCD_QUIRK_MCQ_BROKEN_INTR quirk (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add host quirk UFSHCD_QUIRK_MCQ_BROKEN_RTC (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add host quirk UFSHCD_QUIRK_MCQ_BROKEN_INTR (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove dedicated hwq for dev command (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: mcq: Fix the incorrect OCS value for the device command (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Combine ufshcd_mq_poll_cqe functions (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix ufshcd_inc_sq_tail() function bug (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove a ufshcd_add_command_trace() call (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Simplify driver shutdown (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Move ufshcd_wl_shutdown() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix handling of lrbp->cmd (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Increase the START STOP UNIT timeout from one to ten seconds (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add error handling for MCQ mode (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Use ufshcd_mcq_poll_cqe_lock() in MCQ mode (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Added ufshcd_mcq_abort() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Add support for cleaning up MCQ resources (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Add supporting functions for MCQ abort (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Update the ufshcd_clear_cmds() functionality (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Combine 32-bit command_desc_base_addr_lo/hi (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Replace all non-returning strlcpy() with strscpy() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Do not open code SZ_x (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Ungate the clock synchronously (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Declare ufshcd_{hold,release}() once (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Conditionally enable the BLK_MQ_F_BLOCKING flag (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Return earlier if ufshcd_hba_init_crypto_capabilities() fails (Radu Rendec) [RHEL-79078]
  - scsi: ufs: hwmon: Constify pointers to hwmon_channel_info (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Change the module parameter macro of use_mcq_mode (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix MCQ nr_hw_queues (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Rename symbol sizeof_utp_transfer_cmd_desc() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix MCQ tag calculation (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Use pointer arithmetic in ufshcd_send_command() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Annotate ufshcd_inc_sq_tail() appropriately (Radu Rendec) [RHEL-79078]
  - scsi: core: Clean up struct ufs_saved_pwr_info (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add trace event for MCQ (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Print trs for pending requests in MCQ mode (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Set the residual byte count (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Disable the reset settle delay (Radu Rendec) [RHEL-79078]
  - scsi: mpi3mr: Avoid reply queue full condition (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Fix possible crash when setting up bsg fails (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Update driver version to 8.12.0.3.50 (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Handling of fault code for insufficient power (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Start controller indexing from 0 (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (Chandrakanth Patil) [RHEL-49780] {CVE-2024-57804}
  - scsi: mpi3mr: Synchronize access to ioctl data buffer (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Validate SAS port assignments (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Improve wait logic while controller transitions to READY state (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Update MPI Headers to revision 34 (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Use firmware-provided timestamp update interval (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Enhance the Enable Controller retry logic (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: A performance fix (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Update consumer index of reply queues after every 100 replies (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Return complete ioc_status for ioctl commands (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Avoid MAX_PAGE_ORDER WARNING for buffer allocations (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Add missing spin_lock_init() for mrioc->trigger_lock (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Prevent PCI writes from driver during PCI error recovery (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Support PCI Error Recovery callback handlers (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Correct a test in mpi3mr_sas_port_add() (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Add ioctl support for HDB (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Trigger support (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: HDB allocation and posting for hardware and firmware buffers (Chandrakanth Patil) [RHEL-49780]
  - rpmsg: virtio: Free driver_override when rpmsg_remove() (Jared Kangas) [RHEL-78824]
  - rpmsg: virtio: Replace deprecated strncpy with strscpy/_pad (Jared Kangas) [RHEL-78824]
  - rpmsg: Replace deprecated strncpy with strscpy_pad (Jared Kangas) [RHEL-78824]
  - rpmsg: core: Replace deprecated strncpy with strscpy (Jared Kangas) [RHEL-78824]
  - rpmsg: glink: Release driver_override (Jared Kangas) [RHEL-78824]
  - rpmsg: ctrl: Add lock to rpmsg_ctrldev_remove (Jared Kangas) [RHEL-78824]
  - rpmsg: char: Add lock to avoid race when rpmsg device is released (Jared Kangas) [RHEL-78824]
  - rpmsg: char: Avoid double destroy of default endpoint (Jared Kangas) [RHEL-78824]
  - rpmsg: Fix possible refcount leak in rpmsg_register_device_override() (Jared Kangas) [RHEL-78824]
  - rpmsg: Strcpy is not safe, use strscpy_pad() instead (Jared Kangas) [RHEL-78824]
  - rpmsg: mtk_rpmsg: Fix circular locking dependency (Jared Kangas) [RHEL-78824]
  - rpmsg: char: Add mutex protection for rpmsg_eptdev_open() (Jared Kangas) [RHEL-78824]
  - rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge (Jared Kangas) [RHEL-78824]
  - rpmsg: use local 'dev' variable (Jared Kangas) [RHEL-78824]
  - rpmsg: Fix calling device_lock() on non-initialized device (Jared Kangas) [RHEL-78824]
  - rpmsg: virtio: Fix the unregistration of the device rpmsg_ctrl (Jared Kangas) [RHEL-78824]
  - rpmsg: virtio: Fix possible double free in rpmsg_virtio_add_ctrl_dev() (Jared Kangas) [RHEL-78824]
  - rpmsg: virtio: Fix possible double free in rpmsg_probe() (Jared Kangas) [RHEL-78824]
  - rpmsg: Fix parameter naming for announce_create/destroy ops (Jared Kangas) [RHEL-78824]
  - rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails (Jared Kangas) [RHEL-78824]
  - rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value (Jared Kangas) [RHEL-78824]
  - rpmsg: Fix kfree() of static memory on setting driver_override (Jared Kangas) [RHEL-78824]
  - rpmsg: Constify local variable in field store macro (Jared Kangas) [RHEL-78824]
  - clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context (Waiman Long) [RHEL-76143]
  - clocksource: Use pr_info() for "Checking clocksource synchronization" message (Waiman Long) [RHEL-76143]
  - clocksource: Make watchdog and suspend-timing multiplication overflow safe (Waiman Long) [RHEL-76143]
  - clocksource: Scale the watchdog read retries automatically (Waiman Long) [RHEL-76143]
  - clocksource: Skip watchdog check for large watchdog intervals (Waiman Long) [RHEL-76143]
  - torture: Enable clocksource watchdog with "tsc=watchdog" (Waiman Long) [RHEL-76143]
  - clocksource: Suspend the watchdog temporarily when high read latency detected (Waiman Long) [RHEL-76143]
  - clocksource: Loosen clocksource watchdog constraints (Waiman Long) [RHEL-76143]
  - clocksource: Replace cpumask_weight() with cpumask_empty() (Waiman Long) [RHEL-76143]
  - clocksource: Add a Kconfig option for WATCHDOG_MAX_SKEW (Waiman Long) [RHEL-76143]
  - vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (CKI Backport Bot) [RHEL-77211] {CVE-2025-21666}
  - net: atlantic: use irq_update_affinity_hint() (Izabela Bakollari) [RHEL-73855 RHEL-76480]
  - net: atlantic: convert comma to semicolon (Izabela Bakollari) [RHEL-73855]
  - net: atlantic: Avoid warning about potential string truncation (Izabela Bakollari) [RHEL-73855]
  - net: atlantic: use ethtool_sprintf (Izabela Bakollari) [RHEL-73855]
  - x86: bring back rep movsq for user access on CPUs without ERMS (Herton R. Krzesinski) [RHEL-74389]
  - x86/retpolines: Enable the default thunk warning only on relevant configs (Waiman Long) [RHEL-71467]
  - x86/vdso: Fix rethunk patching for vdso-image-{32,64}.o (Waiman Long) [RHEL-71467]
  - x86/retpoline: Ensure default return thunk isn't used at runtime (Waiman Long) [RHEL-71467]
  - objtool: Revert "skip non-text sections when adding return-thunk sites" (Waiman Long) [RHEL-71467]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-570.el9]
changelog:
  - rhel-9: gate on kernel-qe tests results not cki ones (Bruno Goncalves)
  - USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (CKI Backport Bot) [RHEL-78682] {CVE-2025-21689}
  - af_packet: do not call packet_read_pending() from tpacket_destruct_skb() (CKI Backport Bot) [RHEL-78307]
  - pmdomain: imx8mp-blk-ctrl: add missing loop break condition (CKI Backport Bot) [RHEL-77237] {CVE-2025-21668}
  - vsock/virtio: discard packets if the transport changes (CKI Backport Bot) [RHEL-77228] {CVE-2025-21669}
  - s390/mm/hugetlbfs: Add missing includes (Aristeu Rozanski) [RHEL-74362]
  - s390/mm: Add PTE_MARKER support for hugetlbfs mappings (Aristeu Rozanski) [RHEL-74362]
  - s390/mm: Introduce region-third and segment table swap entries (Aristeu Rozanski) [RHEL-74362]
  - s390/mm: Introduce region-third and segment table entry present bits (Aristeu Rozanski) [RHEL-74362]
  - s390/mm: Rearrange region-third and segment table entry SW bits (Aristeu Rozanski) [RHEL-74362]
  - s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception() (Aristeu Rozanski) [RHEL-74362]
  - s390/pgtable: Switch read and write softbits for puds (Aristeu Rozanski) [RHEL-74362]
  - mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM (CKI Backport Bot) [RHEL-75840] {CVE-2024-56611}
  - workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker (Waiman Long) [RHEL-74107] {CVE-2024-57888}
  - ovl: Filter invalid inodes with missing lookup function (Miklos Szeredi) [RHEL-72307] {CVE-2024-56570}
  - pmdomain: imx93-blk-ctrl: correct remove path (CKI Backport Bot) [RHEL-70045] {CVE-2024-53134}
  - i2c: tegra: Do not mark ACPI devices as irq safe (Mark Salter) [RHEL-50601]
  - i2c: tegra: allow VI support to be compiled out (Mark Salter) [RHEL-50601]
  - i2c: tegra: allow DVC support to be compiled out (Mark Salter) [RHEL-50601]
  - i40e: fix race condition by adding filter's intermediate sync state (CKI Backport Bot) [RHEL-68274] {CVE-2024-53088}


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-571.el9]
changelog:
  - KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state (Eric Auger) [RHEL-68997]
  - PCI: qcom: Update ICC and OPP values after Link Up event (Myron Stowe) [RHEL-67693]
  - PCI: endpoint: Fix PCI domain ID release in pci_epc_destroy() (Myron Stowe) [RHEL-67693]
  - PCI: j721e: Deassert PERST# after a delay of PCIE_T_PVPERL_MS milliseconds (Myron Stowe) [RHEL-67693]
  - PCI: qcom: Enable MSI interrupts together with Link up if 'Global IRQ' is supported (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: mediatek-gen3: Allow exact number of clocks only (Myron Stowe) [RHEL-67693]
  - PCI: Fix pci_enable_acs() support for the ACS quirks (Myron Stowe) [RHEL-67693]
  - PCI: Hold rescan lock while adding devices during host probe (Myron Stowe) [RHEL-67693]
  - tools: PCI: Remove unused BILLION macro (Myron Stowe) [RHEL-67693]
  - tools: PCI: Remove .*.cmd files with make clean (Myron Stowe) [RHEL-67693]
  - PCI: Fix typos (Myron Stowe) [RHEL-67693]
  - PCI/VPD: Remove pci_vpd_release() unused declarations (Myron Stowe) [RHEL-67693]
  - PCI/PM: Remove __pci_pme_wakeup() unused declarations (Myron Stowe) [RHEL-67693]
  - PCI: Make pci_bus_type constant (Myron Stowe) [RHEL-67693]
  - x86/PCI: Check pcie_find_root_port() return for NULL (Myron Stowe) [RHEL-67693]
  - PCI: Mark Creative Labs EMU20k2 INTx masking as broken (Myron Stowe) [RHEL-67693]
  - PCI: Add ACS quirk for Qualcomm SA8775P (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: xilinx-xdma: Add schemas for Xilinx QDMA PCIe Root Port Bridge (Myron Stowe) [RHEL-67693]
  - arm64: zynqmp: Add PCIe phys property for ZCU102 (Myron Stowe) [RHEL-67693]
  - PCI: xilinx-nwl: Add PHY support (Myron Stowe) [RHEL-67693]
  - dt-bindings: pci: xilinx-nwl: Add phys property (Myron Stowe) [RHEL-67693]
  - PCI: xilinx-nwl: Clean up clock on probe failure/removal (Myron Stowe) [RHEL-67693]
  - PCI: xilinx-nwl: Rate-limit misc interrupt messages (Myron Stowe) [RHEL-67693]
  - PCI: xilinx-nwl: Fix register misspelling (Myron Stowe) [RHEL-67693]
  - PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler (Myron Stowe) [RHEL-67693]
  - PCI: vmd: Fix indentation issue in vmd_shutdown() (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: rcar-gen4-pci-ep: Add R-Car V4M compatible (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: rcar-gen4-pci-host: Add R-Car V4M compatible (Myron Stowe) [RHEL-67693]
  - PCI: rcar-gen4: Make read-only const array check_addr static (Myron Stowe) [RHEL-67693]
  - PCI: Pass domain number to pci_bus_release_domain_nr() explicitly (Myron Stowe) [RHEL-67693]
  - PCI: qcom: Add RX lane margining settings for 16.0 GT/s (Myron Stowe) [RHEL-67693]
  - PCI: qcom: Add equalization settings for 16.0 GT/s (Myron Stowe) [RHEL-67693]
  - PCI: dwc: Always cache the maximum link speed value in dw_pcie::max_link_speed (Myron Stowe) [RHEL-67693]
  - PCI: qcom-ep: Enable controller resources like PHY only after refclk is available (Myron Stowe) [RHEL-67693]
  - PCI: qcom: Disable mirroring of DBI and iATU register space in BAR region (Myron Stowe) [RHEL-67693]
  - PCI: qcom: Enumerate endpoints based on Link up event in 'global_irq' interrupt (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: qcom,pcie-sm8450: Add 'global' interrupt (Myron Stowe) [RHEL-67693]
  - PCI: qcom-ep: Modify 'global_irq' and 'perst_irq' IRQ device names (Myron Stowe) [RHEL-67693]
  - PCI: endpoint: Assign PCI domain number for endpoint controllers (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: pci-ep: Document 'linux,pci-domain' property (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: pci-ep: Update Maintainers (Myron Stowe) [RHEL-67693]
  - PCI: qcom-ep: Reword the error message for receiving unknown global IRQ event (Myron Stowe) [RHEL-67693]
  - PCI: qcom-ep: Drop the redundant masking of global IRQ events (Myron Stowe) [RHEL-67693]
  - PCI: mediatek-gen3: Add Airoha EN7581 support (Myron Stowe) [RHEL-67693]
  - PCI: mediatek-gen3: Rely on reset_bulk APIs for PHY reset lines (Myron Stowe) [RHEL-67693]
  - PCI: mediatek-gen3: Add mtk_gen3_pcie_pdata data structure (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: mediatek-gen3: Add support for Airoha EN7581 (Myron Stowe) [RHEL-67693]
  - PCI: mediatek: Drop excess mtk_pcie.mem kerneldoc description (Myron Stowe) [RHEL-67693]
  - PCI/ACPI: Increase Loongson max PCI hosts to 8 (Myron Stowe) [RHEL-67693]
  - PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port() (Myron Stowe) [RHEL-67693]
  - PCI: j721e: Add suspend and resume support (Myron Stowe) [RHEL-67693]
  - PCI: j721e: Use T_PERST_CLK_US macro (Myron Stowe) [RHEL-67693]
  - PCI: Add T_PERST_CLK_US macro (Myron Stowe) [RHEL-67693]
  - PCI: j721e: Add reset GPIO to struct j721e_pcie (Myron Stowe) [RHEL-67693]
  - PCI: j721e: Use dev_err_probe() in the probe() function (Myron Stowe) [RHEL-67693]
  - PCI: cadence: Set cdns_pcie_host_init() global (Myron Stowe) [RHEL-67693]
  - PCI: cadence: Extract link setup sequence from cdns_pcie_host_setup() (Myron Stowe) [RHEL-67693]
  - PCI: j721e: Enable ACSPCIE Refclk if "ti,syscon-acspcie-proxy-ctrl" exists (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: ti,j721e-pci-host: Add ACSPCIE proxy control property (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: imx6q-pcie: Add i.MX8Q PCIe compatible string (Myron Stowe) [RHEL-67693]
  - PCI: dra7xx: Fix error handling when IRQ request fails in probe (Myron Stowe) [RHEL-67693]
  - PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ (Myron Stowe) [RHEL-67693]
  - PCI: cadence: Drop excess cdns_pcie_rc.dev kerneldoc description (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Sort enums, pcie_offsets[], pcie_cfg_data, .compatible strings (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Enable 7712 SoCs (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Change field name from 'type' to 'soc_base' (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Check return value of all reset_control_* calls (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Refactor for chips with many regular inbound windows (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Don't conflate the reset rescal with PHY ctrl (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Remove two unused constants from driver (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: PCI: brcmstb: Make HARD_DEBUG, INTR2_CPU_BASE offsets SoC-specific (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Use swinit reset if available (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Use bridge reset if available (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Use common error handling code in brcm_pcie_probe() (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: brcm,stb-pcie: Add 7712 SoC description (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: brcm,stb-pcie: Use maxItems for reset controllers (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: brcm,stb-pcie: Change brcmstb maintainer and cleanup (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: brcmstb: compatible is required (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: Add compatible string for Brcmstb 74[23]5 MIPs SOCs (Myron Stowe) [RHEL-67693]
  - PCI: altera: Replace TLP_REQ_ID() with macro PCI_DEVID() (Myron Stowe) [RHEL-67693]
  - PCI: xilinx: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: xilinx-nwl: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: vmd: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: tegra: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: rcar-host: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: mobiveil: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: mediatek: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: mediatek-gen3: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: dwc: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: brcmstb: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: altera-msi: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: aardvark: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - genirq/msi: Silence 'set affinity failed' warning (Myron Stowe) [RHEL-67693]
  - PCI: endpoint: Fix enum pci_epc_bar_type kerneldoc (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: qcom: Allow 'vddpe-3v3-supply' again (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: imx6q-pcie: Add reg-name "dbi2" and "atu" for i.MX8M PCIe Endpoint (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: altera: msi: Convert to YAML (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: altera: Convert to YAML (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: qcom,pcie-sc7280: Update bindings adding eight interrupts (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: layerscape-pci: Change property 'fsl,pcie-scfg' type (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: layerscape-pci: Add deprecated property 'num-viewport' (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: layerscape-pci: Replace fsl,lx2160a-pcie with fsl,lx2160ar2-pcie (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: socionext,uniphier-pcie-ep: Add top-level constraints (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: renesas,pci-rcar-gen2: Add top-level constraints (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: hisilicon,kirin-pcie: Add top-level constraints (Myron Stowe) [RHEL-67693]
  - dt-bindings: PCI: host-generic-pci: Drop minItems and maxItems of ranges (Myron Stowe) [RHEL-67693]
  - s390/pci: Stop usurping pdev->dev.groups (Myron Stowe) [RHEL-67693]
  - PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads (Myron Stowe) [RHEL-67693]
  - PCI: shpchp: Remove hpc_ops (Myron Stowe) [RHEL-67693]
  - drm/ast: Request PCI BAR with devres (Myron Stowe) [RHEL-67693]
  - PCI: Deprecate pcim_iomap_regions() in favor of pcim_iomap_region() (Myron Stowe) [RHEL-67693]
  - PCI: Make pcim_request_region() a public function (Myron Stowe) [RHEL-67693]
  - PCI: Rename CRS Completion Status to RRS (Myron Stowe) [RHEL-67693]
  - PCI: aardvark: Correct Configuration RRS checking (Myron Stowe) [RHEL-67693]
  - PCI/AER: Use PCI_DEVID() macro in aer_inject() (Myron Stowe) [RHEL-67693]
  - s390/pci: Drop unneeded reference to CONFIG_DMI (Myron Stowe) [RHEL-67693]
  - cpufreq/amd-pstate: Fix cpufreq_policy ref counting (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Fix max_perf updation with schedutil (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Remove the goto label in amd_pstate_update_limits (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Fix per-policy boost flag incorrect when fail (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Refactor max frequency calculation (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Fix prefcore rankings (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Drop boost_state variable (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Set different default EPP policy for Epyc and Ryzen (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Drop ret variable from amd_pstate_set_energy_pref_index() (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Always write EPP value when updating perf (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Cache EPP value and use that everywhere (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Move limit updating code (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Change amd_pstate_update_perf() to return an int (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: store all values in cpudata struct in khz (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Only update the cached value in msr_set_epp() on success (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Use FIELD_PREP and FIELD_GET macros (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Drop cached epp_policy variable (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: convert mutex use to guard() (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Merge amd_pstate_epp_cpu_offline() and amd_pstate_epp_offline() (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Add trace event for EPP perf updates (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Remove the cppc_state check in offline/online functions (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Refactor amd_pstate_epp_reenable() and amd_pstate_epp_offline() (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Move the invocation of amd_pstate_update_perf() (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Convert the amd_pstate_get/set_epp() to static calls (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Use boost numerator for upper bound of frequencies (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Store the boost numerator as highest perf again (David Arcari) [RHEL-75923]
  - amd-pstate: Add missing documentation for `amd_pstate_prefcore_ranking` (David Arcari) [RHEL-75923]
  - cpufreq: amd-pstate: Add documentation for `amd_pstate_hw_prefcore` (David Arcari) [RHEL-75923]
  - Documentation: cpufreq: amd-pstate: update doc for Per CPU boost control method (David Arcari) [RHEL-75923]
  - Documentation: PM: amd-pstate: add guided mode to the Operation mode (David Arcari) [RHEL-75923]
  - Documentation: PM: amd-pstate: Fix section title underline (David Arcari) [RHEL-75923]
  - Documentation: amd-pstate: introduce amd-pstate preferred core (David Arcari) [RHEL-75923]
  - Documentation: admin-guide: PM: Fix two typos (David Arcari) [RHEL-75923]
  - Documentation: cpufreq: amd-pstate: Update amd_pstate status sysfs for guided (David Arcari) [RHEL-75923]
  - Documentation: amd-pstate: disambiguate user space sections (David Arcari) [RHEL-75923]
  - Documentation: amd-pstate: introduce new global sysfs attributes (David Arcari) [RHEL-75923]
  - Documentation: amd-pstate: add amd pstate driver mode introduction (David Arcari) [RHEL-75923]
  - Documentation: amd-pstate: add EPP profiles introduction (David Arcari) [RHEL-75923]
  - Documentation: amd-pstate: Add tbench and gitsource test introduction (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Detect preferred core support before driver registration (David Arcari) [RHEL-75923]
  - ACPI: processor: Move arch_init_invariance_cppc() call later (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Move registration after static function call update (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Push adjust_perf vfunc init into cpu_init (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Align offline flow of shared memory and MSR based systems (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Call cppc_set_epp_perf in the reenable function (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Do not attempt to clear MSR_AMD_CPPC_ENABLE (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Rename functions that enable CPPC (David Arcari) [RHEL-75923]
  - amd-pstate: Switch to amd-pstate by default on some Server platforms (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate-ut: Add fix for min freq unit test (David Arcari) [RHEL-75923]
  - amd-pstate: Set min_perf to nominal_perf for active mode performance gov (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Remove the redundant amd_pstate_set_driver() call (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Remove the switch case in amd_pstate_init() (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Call amd_pstate_set_driver() in amd_pstate_register_driver() (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Call amd_pstate_register() in amd_pstate_init() (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Set the initial min_freq to lowest_nonlinear_freq (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Remove the redundant verify() function (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Drop needless EPP initialization (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Use amd_pstate_update_min_max_limit() for EPP limits (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Don't update CPPC request in amd_pstate_cpu_boost_update() (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Rename MSR and shared memory specific functions (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Fix non kerneldoc comment (David Arcari) [RHEL-75923]
  - x86/cpufeatures: Rename X86_FEATURE_FAST_CPPC to have AMD prefix (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Use nominal perf for limits when boost is disabled (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate-ut: Fix an "Uninitialized variables" issue (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate-ut: Add test case for mode switches (David Arcari) [RHEL-75923]
  - cpufreq/amd-pstate: Export symbols for changing modes (David Arcari) [RHEL-75923]
  - cpufreq: amd-pstate: Optimize amd_pstate_update_limits() (David Arcari) [RHEL-75923]
  - cpufreq: amd-pstate: Merge amd_pstate_highest_perf_set() into amd_get_boost_ratio_numerator() (David Arcari) [RHEL-75923]
  - x86/amd: Detect preferred cores in amd_get_boost_ratio_numerator() (David Arcari) [RHEL-75923]
  - x86/amd: Move amd_get_highest_perf() out of amd-pstate (David Arcari) [RHEL-75923]
  - x86/amd: Rename amd_get_highest_perf() to amd_get_boost_ratio_numerator() (David Arcari) [RHEL-75923]
  - x86/amd: Move amd_get_highest_perf() from amd.c to cppc.c (David Arcari) [RHEL-75923]
  - MAINTAINERS: adjust file entry in INTEL TPMI DRIVER (David Arcari) [RHEL-79669]
  - redhat: handle rename of intel_vsec.ko and intel_vsec_tpmi.ko (David Arcari) [RHEL-79669]
  - tools/power/x86/intel-speed-select: v1.21 release (David Arcari) [RHEL-79669]
  - tools/power/x86/intel-speed-select: Fix TRL restore after SST-TF disable (David Arcari) [RHEL-79669]
  - platform/x86/intel: power-domains: Add Diamond Rapids support (David Arcari) [RHEL-79669]
  - platform/x86/intel/tpmi/plr: Make char[] longer to silence warning (David Arcari) [RHEL-79669]
  - platform/x86: intel: Add 'intel' prefix to the modules automatically (David Arcari) [RHEL-79669]
  - platform/x86/intel/Makefile: cleanup (David Arcari) [RHEL-79669]
  - platform/x86/intel: power-domains: Add Clearwater Forest support (David Arcari) [RHEL-74191]
  - platform/x86: ISST: Add Clearwater Forest to support list (David Arcari) [RHEL-74191]
  - platform/x86: ISST: Use in_range() to check package ID validity (David Arcari) [RHEL-79669]
  - platform/x86/intel: pmt: Use y instead of objs in Makefile (David Arcari) [RHEL-79553]
  - platform/x86/intel/pmt: Correct the typo 'ACCCESS_LOCAL' (David Arcari) [RHEL-79553]
  - platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show() (David Arcari) [RHEL-79553]
  - platform/x86: intel/pmc: Fix ioremap() of bad address (David Arcari) [RHEL-79553]
  - x86/tsc: Move away from TSC leaf magic numbers (David Arcari) [RHEL-79553]
  - x86/cpu: Move TSC CPUID leaf definition (David Arcari) [RHEL-79553]
  - platform/x86/intel/pmt: allow user offset for PMT callbacks (David Arcari) [RHEL-79553]
  - redhat: fix build/install targets in netfilter kselftest (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_flowtable.sh: make first pass deterministic (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: conntrack_vrf.sh: add fib test case (Florian Westphal) [RHEL-21061]
  - selftests: add regression test for br_netfilter panic (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: Avoid hanging ipvs.sh (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_tproxy.sh: add tcp tests (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: add test for br_netfilter+conntrack+queue combination (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_queue.sh: add test for disappearing listener (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_flowtable.sh: bump socat timeout to 1m (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: conntrack_tcp_unreplied.sh: wait for initial connection attempt (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_concat_range.sh: reduce debug kernel run time (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: avoid test timeouts on debug kernels (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_zones_many.sh: set ct sysctl after ruleset load (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: conntrack_vrf.sh: prefer socat, not iperf3 (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_flowtable.sh: shellcheck cleanups (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_flowtable.sh: re-run with random mtu sizes (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_concat_range.sh: shellcheck cleanups (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_concat_range.sh: drop netcat support (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_concat_range.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: update makefiles and kernel config (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_meta.sh: small shellcheck cleanup (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_fib.sh: shellcheck cleanups (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: conntrack_ipip_mtu.sh: shellcheck cleanups (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_nat_zones.sh: shellcheck cleanups (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_zones_many.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_synproxy.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_queue.sh: shellcheck cleanups (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_queue.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_nat.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_flowtable.sh: move test to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_fib.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nft_conntrack_helper.sh: test to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: nf_nat_edemux.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: ipvs.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: place checktool helper in lib.sh (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: conntrack_ipip_mtu.sh" move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: conntrack_vrf.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: conntrack_sctp_collision.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: conntrack_tcp_unreplied.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: conntrack_icmp_related.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: br_netfilter.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: bridge_brouter.sh: move to lib.sh infra (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: move to net subdir (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: synproxy test requires nf_conntrack (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: add bridge conntrack + multicast test case (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: test for sctp collision processing in nf_conntrack (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: fix libmnl pkg-config usage (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: fix a build error on openSUSE (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: add synproxy test (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: reduce zone stress test running time (Florian Westphal) [RHEL-21061]
  - selftests: nft_flowtable.sh: check ingress/egress chain too (Florian Westphal) [RHEL-21061]
  - selftests: nft_flowtable.sh: monitor result file sizes (Florian Westphal) [RHEL-21061]
  - selftests: nft_flowtable.sh: wait for specific nc pids (Florian Westphal) [RHEL-21061]
  - selftests: nft_flowtable.sh: no need for ps -x option (Florian Westphal) [RHEL-21061]
  - selftests: nft_flowtable.sh: use /proc for pid checking (Florian Westphal) [RHEL-21061]
  - testing: selftests: nft_flowtable.sh: rework test to detect offload failure (Florian Westphal) [RHEL-21061]
  - testing: selftests: nft_flowtable.sh: use random netns names (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: add fib expression forward test case (Florian Westphal) [RHEL-21061]
  - selftests: nft_concat_range: add socat support (Florian Westphal) [RHEL-21061]
  - selftests: netfilter: extend nfqueue tests to cover vrf device (Florian Westphal) [RHEL-21061]
  - thermal: Drop spaces before TABs (David Arcari) [RHEL-61357]
  - thermal/debugfs: Fix the NULL vs IS_ERR() confusion in debugfs_create_dir() (David Arcari) [RHEL-61357]
  - thermal: core: Drop thermal_zone_device_is_enabled() (David Arcari) [RHEL-61357]
  - thermal: core: Check passive delay in monitor_thermal_zone() (David Arcari) [RHEL-61357]
  - thermal: core: Drop dead code from monitor_thermal_zone() (David Arcari) [RHEL-61357]
  - thermal: core: Drop redundant lockdep_assert_held() (David Arcari) [RHEL-61357]
  - thermal: sysfs: Add sanity checks for trip temperature and hysteresis (David Arcari) [RHEL-61357]
  - thermal/of: Use the .should_bind() thermal zone callback (David Arcari) [RHEL-61357]
  - thermal: core: Fix rounding of delay jiffies (David Arcari) [RHEL-61357]
  - thermal: core: Drop tz field from struct thermal_instance (David Arcari) [RHEL-61357]
  - thermal: core: Drop redundant checks from thermal_bind_cdev_to_trip() (David Arcari) [RHEL-61357]
  - thermal: core: Rename cdev-to-thermal-zone bind/unbind functions (David Arcari) [RHEL-61357]
  - thermal: core: Clean up trip bind/unbind functions (David Arcari) [RHEL-61357]
  - thermal: core: Drop unused bind/unbind functions and callbacks (David Arcari) [RHEL-61357]
  - mlxsw: core_thermal: Use the .should_bind() thermal zone callback (David Arcari) [RHEL-61357]
  - thermal: core: Unexport thermal_bind_cdev_to_trip() and thermal_unbind_cdev_from_trip() (David Arcari) [RHEL-61357]
  - thermal: ACPI: Use the .should_bind() thermal zone callback (David Arcari) [RHEL-61357]
  - thermal: core: Introduce .should_bind() thermal zone callback (David Arcari) [RHEL-61357]
  - thermal: core: Move thermal zone locking out of bind/unbind functions (David Arcari) [RHEL-61357]
  - thermal: sysfs: Use the dev argument in instance-related show/store (David Arcari) [RHEL-61357]
  - thermal: core: Drop redundant thermal instance checks (David Arcari) [RHEL-61357]
  - thermal: core: Rearrange checks in thermal_bind_cdev_to_trip() (David Arcari) [RHEL-61357]
  - thermal: core: Fold two functions into their respective callers (David Arcari) [RHEL-61357]
  - thermal/core: Compute low and high boundaries in thermal_zone_device_update() (David Arcari) [RHEL-61357]
  - thermal: of: Fix OF node leak in of_thermal_zone_find() error paths (David Arcari) [RHEL-61357]
  - thermal: of: Fix OF node leak in thermal_of_zone_register() (David Arcari) [RHEL-61357]
  - thermal: of: Fix OF node leak in thermal_of_trips_init() error path (David Arcari) [RHEL-61357]
  - thermal: gov_bang_bang: Use governor_data to reduce overhead (David Arcari) [RHEL-61357]
  - thermal: helpers: Drop get_thermal_instance() (David Arcari) [RHEL-61357]
  - thermal: trip: Avoid skipping trips in thermal_zone_set_trips() (David Arcari) [RHEL-61357]
  - thermal: sysfs: Refine the handling of trip hysteresis changes (David Arcari) [RHEL-61357]
  - thermal: sysfs: Get to trips via attribute pointers (David Arcari) [RHEL-61357]
  - thermal: core: Store trip sysfs attributes in thermal_trip_desc (David Arcari) [RHEL-61357]
  - thermal: trip: Drop thermal_zone_get_trip() (David Arcari) [RHEL-61357]
  - thermal: qcom: Use thermal_zone_get_crit_temp() in qpnp_tm_init() (David Arcari) [RHEL-61357]
  - thermal: trip: Get rid of thermal_zone_get_num_trips() (David Arcari) [RHEL-61357]
  - thermal: tegra: Use thermal_zone_for_each_trip() for walking trip points (David Arcari) [RHEL-61357]
  - thermal: core: Back off when polling thermal zones on errors (David Arcari) [RHEL-61357]
  - thermal: trip: Split thermal_zone_device_set_mode() (David Arcari) [RHEL-61357]
  - thermal: core: Allow thermal zones to tell the core to ignore them (David Arcari) [RHEL-61357]
  - thermal: core: Add sanity checks for polling_delay and passive_delay (David Arcari) [RHEL-61357]
  - thermal: core: Fix list sorting in __thermal_zone_device_update() (David Arcari) [RHEL-61357]
  - thermal: core: Change passive_delay and polling_delay data type (David Arcari) [RHEL-61357]
  - thermal: core: constify 'type' in devm_thermal_of_cooling_device_register() (David Arcari) [RHEL-61357]
  - thermal: trip: Fold __thermal_zone_get_trip() into its caller (David Arcari) [RHEL-61357]
  - thermal: core: Call monitor_thermal_zone() if zone temperature is invalid (David Arcari) [RHEL-61357]
  - thermal: gov_step_wise: Go straight to instance->lower when mitigation is over (David Arcari) [RHEL-61357]
  - thermal: core: Change PM notifier priority to the minimum (David Arcari) [RHEL-61357]
  - thermal: core: Synchronize suspend-prepare and post-suspend actions (David Arcari) [RHEL-61357]
  - thermal: gov_step_wise: Restore passive polling management (David Arcari) [RHEL-61357]
  - thermal: ACPI: Invalidate trip points with temperature of 0 or below (David Arcari) [RHEL-61357]
  - thermal: core: Do not fail cdev registration because of invalid initial state (David Arcari) [RHEL-61357]
  - thermal: core: Avoid calling .trip_crossed() for critical and hot trips (David Arcari) [RHEL-61357]
  - thermal: trip: Use READ_ONCE() for lockless access to trip properties (David Arcari) [RHEL-61357]
  - thermal: trip: Make thermal_zone_set_trips() use trip thresholds (David Arcari) [RHEL-61357]
  - thermal: trip: Rename __thermal_zone_set_trips() to thermal_zone_set_trips() (David Arcari) [RHEL-61357]
  - thermal: trip: Use common set of trip type names (David Arcari) [RHEL-61357]
  - thermal/debugfs: Move some statements from under thermal_dbg->lock (David Arcari) [RHEL-61357]
  - thermal/debugfs: Compute maximum temperature for mitigation episode as a whole (David Arcari) [RHEL-61357]
  - thermal/debugfs: Adjust check for trips without statistics in tze_seq_show() (David Arcari) [RHEL-61357]
  - thermal/debugfs: Fix up units in "mitigations" files (David Arcari) [RHEL-61357]
  - thermal/debugfs: Print mitigation timestamp value in milliseconds (David Arcari) [RHEL-61357]
  - thermal/debugfs: Do not extend mitigation episodes beyond system resume (David Arcari) [RHEL-61357]
  - thermal/debugfs: Use helper to update trip point overstepping duration (David Arcari) [RHEL-61357]
  - thermal: trip: Trigger trip down notifications when trips involved in mitigation become invalid (David Arcari) [RHEL-61357]
  - thermal: core: Introduce thermal_trip_crossed() (David Arcari) [RHEL-61357]
  - thermal/debugfs: Allow tze_seq_show() to print statistics for invalid trips (David Arcari) [RHEL-61357]
  - thermal/debugfs: Print initial trip temperature and hysteresis in tze_seq_show() (David Arcari) [RHEL-61357]
  - thermal: core: Fix the handling of invalid trip points (David Arcari) [RHEL-61357]
  - thermal: core: Move passive polling management to the core (David Arcari) [RHEL-61357]
  - thermal: core: Do not call handle_thermal_trip() if zone temperature is invalid (David Arcari) [RHEL-61357]
  - thermal: trip: Add missing empty code line (David Arcari) [RHEL-61357]
  - thermal/debugfs: Pass cooling device state to thermal_debug_cdev_add() (David Arcari) [RHEL-61357]
  - thermal/debugfs: Create records for cdev states as they get used (David Arcari) [RHEL-61357]
  - thermal/debugfs: Avoid printing zero duration for mitigation events in progress (David Arcari) [RHEL-61357]
  - thermal: core: Introduce thermal_governor_trip_crossed() (David Arcari) [RHEL-61357]
  - thermal/debugfs: Make tze_seq_show() skip invalid trips and trips with no stats (David Arcari) [RHEL-61357]
  - thermal/debugfs: Rename thermal_debug_update_temp() to thermal_debug_update_trip_stats() (David Arcari) [RHEL-61357]
  - thermal/debugfs: Clean up thermal_debug_update_temp() (David Arcari) [RHEL-61357]
  - thermal/debugfs: Avoid excessive updates of trip point statistics (David Arcari) [RHEL-61357]
  - thermal/debugfs: Add missing count increment to thermal_debug_tz_trip_up() (David Arcari) [RHEL-61357]
  - thermal: core: Relocate critical and hot trip handling (David Arcari) [RHEL-61357]
  - thermal: core: Drop the .throttle() governor callback (David Arcari) [RHEL-61357]
  - thermal: gov_user_space: Use .trip_crossed() instead of .throttle() (David Arcari) [RHEL-61357]
  - thermal: gov_fair_share: Eliminate unnecessary integer divisions (David Arcari) [RHEL-61357]
  - thermal: gov_fair_share: Use trip thresholds instead of trip temperatures (David Arcari) [RHEL-61357]
  - thermal: gov_fair_share: Use .manage() callback instead of .throttle() (David Arcari) [RHEL-61357]
  - thermal: gov_step_wise: Clean up thermal_zone_trip_update() (David Arcari) [RHEL-61357]
  - thermal: gov_step_wise: Use trip thresholds instead of trip temperatures (David Arcari) [RHEL-61357]
  - thermal: gov_step_wise: Use .manage() callback instead of .throttle() (David Arcari) [RHEL-61357]
  - thermal: core: Introduce .manage() callback for thermal governors (David Arcari) [RHEL-61357]
  - thermal: core: Introduce .trip_crossed() callback for thermal governors (David Arcari) [RHEL-61357]
  - thermal: core: Relocate the struct thermal_governor definition (David Arcari) [RHEL-61357]
  - thermal: gov_step_wise: Simplify checks related to passive trips (David Arcari) [RHEL-61357]
  - thermal: gov_step_wise: Simplify get_target_state() (David Arcari) [RHEL-61357]
  - thermal: core: Sort trip point crossing notifications by temperature (David Arcari) [RHEL-61357]
  - thermal: core: Send trip crossing notifications at init time if needed (David Arcari) [RHEL-61357]
  - thermal: core: Rewrite comments in handle_thermal_trip() (David Arcari) [RHEL-61357]
  - thermal: core: Make struct thermal_zone_device definition internal (David Arcari) [RHEL-61357]
  - thermal: core: Move threshold out of struct thermal_trip (David Arcari) [RHEL-61357]
  - thermal: netlink: Rename thermal_gnl_family (David Arcari) [RHEL-61357]
  - thermal/of: Assume polling-delay(-passive) 0 when absent (David Arcari) [RHEL-61357]
  - thermal: core: Eliminate writable trip points masks (David Arcari) [RHEL-61357]
  - thermal: of: Set THERMAL_TRIP_FLAG_RW_TEMP directly (David Arcari) [RHEL-61357]
  - thermal: ACPI: Discard trips table after zone registration (David Arcari) [RHEL-61357]
  - thermal: ACPI: Constify acpi_thermal_zone_ops (David Arcari) [RHEL-61357]
  - wifi: iwlwifi: mvm: Set THERMAL_TRIP_FLAG_RW_TEMP directly (David Arcari) [RHEL-61357]
  - thermal: core: Change governor name to const char pointer (David Arcari) [RHEL-61357]
  - thermal: gov_fair_share: Fix dependency on trip points ordering (David Arcari) [RHEL-61357]
  - thermal/hwmon: Add error information printing for devm_thermal_add_hwmon_sysfs() (David Arcari) [RHEL-61357]
  - thermal: gov_step_wise: Fold update_passive_instance() into its caller (David Arcari) [RHEL-61357]
  - thermal: gov_fair_share: Rearrange get_trip_level() (David Arcari) [RHEL-61357]
  - thermal: core: Drop thermal_zone_device_register() (David Arcari) [RHEL-61357]
  - thermal: Allow selecting the bang-bang governor as default (David Arcari) [RHEL-61357]
  - thermal: helpers: Use for_each_trip() in __thermal_zone_get_temp() (David Arcari) [RHEL-61357]
  - thermal: trip: Drop redundant __thermal_zone_get_trip() header (David Arcari) [RHEL-61357]
  - thermal/hwmon: Use the thermal_core.h header (David Arcari) [RHEL-61357]
  - thermal/hwmon: Use the right device for devm_thermal_add_hwmon_sysfs() (David Arcari) [RHEL-61357]
  - thermal/core: Use the thermal zone 'devdata' accessor in hwmon located drivers (David Arcari) [RHEL-61357]
  - thermal/drivers/rcar: Use generic thermal_zone_get_trip() function (David Arcari) [RHEL-61357]
  - thermal/drivers/rcar_thermal: Constify static thermal_zone_device_ops (David Arcari) [RHEL-61357]
  - thermal: hisi: Use thermal_zone_for_each_trip() in hisi_thermal_register_sensor() (David Arcari) [RHEL-61357]
  - thermal/core: Use the thermal zone 'devdata' accessor in thermal located drivers [partial] (David Arcari) [RHEL-61357]
  - x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client (Jon Maloy) [RHEL-67470] {CVE-2024-53114}
  - powerpc/xics: fix refcount leak in icp_opal_init() (Mamatha Inamdar) [RHEL-80861] {CVE-2022-49432}
  - powerpc/papr_scm: don't requests stats with '0' sized stats buffer (Mamatha Inamdar) [RHEL-81000] {CVE-2022-49353}
  - powerpc/papr_scm: Fix leaking nvdimm_events_map elements (Mamatha Inamdar) [RHEL-81000] {CVE-2022-49353}
  - powerpc/xive: Fix refcount leak in xive_spapr_init (Mamatha Inamdar) [RHEL-80849] {CVE-2022-49437}
  - powerpc/xive: Add some error handling code to 'xive_spapr_init()' (Mamatha Inamdar) [RHEL-80849] {CVE-2022-49437}
  - zram: fix potential UAF of zram table (Ming Lei) [RHEL-77216] {CVE-2025-21671}
  - zram: fix uninitialized ZRAM not releasing backing device (Ming Lei) [RHEL-77216]
  - block: fix uaf for flush rq while iterating tags (Ming Lei) [RHEL-75854] {CVE-2024-53170}
  - blk-cgroup: Fix UAF in blkcg_unpin_online() (Ming Lei) [RHEL-75869] {CVE-2024-56672}
  - block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (Ming Lei) [RHEL-77310] {CVE-2025-21631}
  - bonding: Correctly support GSO ESP offload (CKI Backport Bot) [RHEL-75544]
  - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CKI Backport Bot) [RHEL-77915] {CVE-2024-53680}
  - netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CKI Backport Bot) [RHEL-77891] {CVE-2025-21648}
  - rxrpc: Fix a race between socket set up and I/O thread creation (Marc Dionne) [RHEL-63629] {CVE-2024-49864}
  - afs: Fix merge preference rule failure condition (Marc Dionne) [RHEL-77202] {CVE-2025-21672}
  - afs: Fix lock recursion (Marc Dionne) [RHEL-68562] {CVE-2024-53090}
  - rxrpc: Fix missing locking causing hanging calls (Marc Dionne) [RHEL-67999] {CVE-2024-50294}
  - SUNRPC: Handle -ETIMEDOUT return from tlshd (Benjamin Coddington) [RHEL-73706]
  - redhat: bump RHEL_MINOR for 9.7 (Augusto Caringi)
  - ice: Add correct PHY lane assignment (Petr Oros) [RHEL-62750]
  - ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-62750]
  - ice: Fix quad registers read on E825 (Petr Oros) [RHEL-62750]
  - ice: Fix E825 initialization (Petr Oros) [RHEL-62750]
  - powerpc/pseries/dlpar: Add device tree nodes for DLPAR IO add (Mamatha Inamdar) [RHEL-77266]
  - powerpc/pseries/dlpar: Remove device tree node for DLPAR IO remove (Mamatha Inamdar) [RHEL-77266]
  - powerpc/pseries: Use correct data types from pseries_hp_errorlog struct (Mamatha Inamdar) [RHEL-77266]
  - posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() (David Arcari) [RHEL-66942] {CVE-2024-50195}
  - posix-clock: Fix missing timespec64 check in pc_clock_settime() (David Arcari) [RHEL-66942] {CVE-2024-50195}
  - powerpc/64s/radix/kfence: map __kfence_pool at page granularity (Mamatha Inamdar) [RHEL-73626]
  - net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-72325] {CVE-2024-56603}
  - can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-72261] {CVE-2024-56645}
  - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-72057] {CVE-2023-52922}
  - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79811]
  - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79813]
  - s390/pai: export number of sysfs attribute files (Mete Durlu) [RHEL-79808]
  - s390/pai: fix attr_event_free upper limit for pai device drivers (Mete Durlu) [RHEL-79808]
  - smb: client: fix chmod(2) regression with ATTR_READONLY (Paulo Alcantara) [RHEL-78507]
  - s390/topology: Improve topology detection (Mete Durlu) [RHEL-76350]
  - ice: Fix signedness bug in ice_init_interrupt_scheme() (Petr Oros) [RHEL-63642]
  - ice: init flow director before RDMA (Petr Oros) [RHEL-63642]
  - ice: simplify VF MSI-X managing (Petr Oros) [RHEL-63642]
  - ice: enable_rdma devlink param (Petr Oros) [RHEL-63642]
  - ice: treat dyn_allowed only as suggestion (Petr Oros) [RHEL-63642]
  - ice, irdma: move interrupts code to irdma (Petr Oros) [RHEL-63642]
  - ice: get rid of num_lan_msix field (Petr Oros) [RHEL-63642]
  - ice: remove splitting MSI-X between features (Petr Oros) [RHEL-63642]
  - ice: devlink PF MSI-X max and min parameter (Petr Oros) [RHEL-63642]
  - ice: ice_probe: init ice_adapter after HW init (Petr Oros) [RHEL-63642]
  - ice: minor: rename goto labels from err to unroll (Petr Oros) [RHEL-63642]
  - ice: split ice_init_hw() out from ice_init_dev() (Petr Oros) [RHEL-63642]
  - ice: c827: move wait for FW to ice_init_hw() (Petr Oros) [RHEL-63642]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-572.el9]
changelog:
  - sched: Don't define sched_clock_irqtime as static key (Phil Auld) [RHEL-78821]
  - sched/fair: Do not compute overloaded status unnecessarily during lb (Phil Auld) [RHEL-78821]
  - sched/fair: Do not compute NUMA Balancing stats unnecessarily during lb (Phil Auld) [RHEL-78821]
  - sched, psi: Don't account irq time if sched_clock_irqtime is disabled (Phil Auld) [RHEL-78821]
  - sched: Don't account irq time if sched_clock_irqtime is disabled (Phil Auld) [RHEL-78821]
  - sched: Define sched_clock_irqtime as static key (Phil Auld) [RHEL-78821]
  - sched/debug: Change need_resched warnings to pr_err (Phil Auld) [RHEL-78821]
  - sched: Fix race between yield_to() and try_to_wake_up() (Phil Auld) [RHEL-78821]
  - topology: Keep the cpumask unchanged when printing cpumap (Phil Auld) [RHEL-78821]
  - sched/fair: Update comments after sched_tick() rename. (Phil Auld) [RHEL-78821]
  - cpufreq: schedutil: Fix superfluous updates caused by need_freq_update (Phil Auld) [RHEL-78821]
  - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-78821]
  - sched: deadline: Cleanup goto label in pick_earliest_pushable_dl_task (Phil Auld) [RHEL-78821]
  - sched/fair: Mark m*_vruntime() with __maybe_unused (Phil Auld) [RHEL-78821]
  - sched: Unify HK_TYPE_{TIMER|TICK|MISC} to HK_TYPE_KERNEL_NOISE (Phil Auld) [RHEL-78821]
  - sched/isolation: Consolidate housekeeping cpumasks that are always identical (Phil Auld) [RHEL-78821]
  - sched/isolation: Make "isolcpus=nohz" equivalent to "nohz_full" (Phil Auld) [RHEL-78821]
  - sched/core: Remove HK_TYPE_SCHED (Phil Auld) [RHEL-78821]
  - sched/deadline: Consolidate Timer Cancellation (Phil Auld) [RHEL-78821]
  - sched/fair: Remove CONFIG_CFS_BANDWIDTH=n definition of cfs_bandwidth_used() (Phil Auld) [RHEL-78821]
  - sched: Don't try to catch up excess steal time. (Phil Auld) [RHEL-78821]
  - sched: add READ_ONCE to task_on_rq_queued (Phil Auld) [RHEL-78821]
  - sched/cpufreq: Ensure sd is rebuilt for EAS check (Phil Auld) [RHEL-78821]
  - sched: Initialize idle tasks only once (Phil Auld) [RHEL-78821]
  - sched/uclamp: Fix unnused variable warning (Phil Auld) [RHEL-78821]
  - sched_getattr: port to copy_struct_to_user (Phil Auld) [RHEL-78821]
  - uaccess: add copy_struct_to_user helper (Phil Auld) [RHEL-78821]
  - sched: Consolidate pick_*_task to task_is_pushable helper (Phil Auld) [RHEL-78821]
  - sched: Add move_queued_task_locked helper (Phil Auld) [RHEL-78821]
  - sched: idle: Optimize the generic idle loop by removing needless memory barrier (Phil Auld) [RHEL-78821]
  - sched/wait: Remove unused bit_wait_io_timeout (Phil Auld) [RHEL-78821]
  - sched/deadline: Fix schedstats vs deadline servers (Phil Auld) [RHEL-78821]
  - timekeeping: Fix bogus clock_was_set() invocation in do_adjtimex() (Phil Auld) [RHEL-78821]
  - sched/deadline: Comment sched_dl_entity::dl_server variable (Phil Auld) [RHEL-78821]
  - sched/core: Add clearing of ->dl_server in put_prev_task_balance() (Phil Auld) [RHEL-78821]
  - sched/core: Clear prev->dl_server in CFS pick fast path (Phil Auld) [RHEL-78821]
  - sched/fair: Make SCHED_IDLE entity be preempted in strict hierarchy (Phil Auld) [RHEL-78821]
  - sched: remove HZ_BW feature hedge (Phil Auld) [RHEL-78821]
  - lib: bitmap: fix many kernel-doc warnings (Phil Auld) [RHEL-78821]
  - docs/scheduler: fix typo and warning in sched-bwc (Phil Auld) [RHEL-78821]
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-81666] {CVE-2025-21785}
  - irqchip/gic-v3: Fix rk3399 workaround when secure interrupts are enabled (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly (Charles Mirabile) [RHEL-62922]
  - irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Fix irq_complete_ack() comment (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Rely on genpool alignment (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Fix over allocation in itt_alloc_pool() (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Share ITS tables with a non-trusted hypervisor (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Force propagation of the active state with a read-back (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v4.1: Replace bare number with ID_AA64PFR0_EL1_GIC_V4P1 (Charles Mirabile) [RHEL-62922]
  - irqchip: Remove asmlinkage for handlers registered with set_handle_irq() (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init() (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Pass #redistributor-regions to gic_of_setup_kvm_info() (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v4: Make sure a VPE is locked when VMAPP is issued (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v4: Fix ordering between vmapp and vpe locks (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v4: Substitute vmovp_lock for a per-VM lock (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v4: Always configure affinity on VPE activation (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Enable non-coherent redistributors/ITSes ACPI probing (Charles Mirabile) [RHEL-62922]
  - ACPICA: MADT: Add new MADT GICC/GICR/ITS non-coherent flags handling (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Fix 'broken_rdists' unused warning when !SMP and !ACPI (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Add support for ACPI's disabled but 'online capable' CPUs (Charles Mirabile) [RHEL-62922]
  - ACPICA: MADT: Add GICC online capable bit handling (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Don't return errors from gic_acpi_match_gicc() (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Work around insecure GIC integrations (Charles Mirabile) [RHEL-62922]
  - arm64: irqchip/gic-v3: Select priorities at boot time (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Init SRE before poking sysregs (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Detect GICD_CTRL.DS and SCR_EL3.FIQ earlier (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Make distributor priorities variables (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-common: Remove sync_access callback (Charles Mirabile) [RHEL-62922]
  - wordpart.h: Add REPEAT_BYTE_U32() (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity() (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Fix potential race condition in its_vlpi_prop_update() (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Avoid explicit cpumask allocation on stack (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1 (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Remove usage of the deprecated ida_simple_xx() API (Charles Mirabile) [RHEL-62922]
  - irqchip/gic(v3): Replace gic_irq() with irqd_to_hwirq() (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Use readl_relaxed_poll_timeout_atomic() (Charles Mirabile) [RHEL-62922]
  - iopoll: Do not use timekeeping in read_poll_timeout_atomic() (Charles Mirabile) [RHEL-62922]
  - iopoll: Call cpu_relax() in busy loops (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Make gic_irq_domain_select() robust for zero parameter count (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Do not assume vPE tables are preallocated (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Flush ITS tables correctly in non-coherent GIC designs (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Handle non-coherent GICv4 redistributors (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3: Enable non-coherent redistributors/ITSes DT probing (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Restore quirk probing for ACPI-based systems (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Don't override quirk settings with default values (Charles Mirabile) [RHEL-62922]
  - irqchip/gic-v3-its: Split allocation from initialisation of its_node (Charles Mirabile) [RHEL-62922]
  - block: Add common atomic writes enable flag (Nigel Croxon) [RHEL-73514]
  - block: Ensure start sector is aligned for stacking atomic writes (Nigel Croxon) [RHEL-73514]
  - block: Support atomic writes limits for stacked devices (Nigel Croxon) [RHEL-73514]
  - md/raid*: Fix the set_queue_limits implementations (Nigel Croxon) [RHEL-73514]
  - md: Fix linear_set_limits() (Nigel Croxon) [RHEL-73514]
  - md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime (Nigel Croxon) [RHEL-73514]
  - md/md-linear: Fix a NULL vs IS_ERR() bug in linear_add() (Nigel Croxon) [RHEL-73514]
  - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-73514]
  - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-73514]
  - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-73514]
  - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-73514]
  - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-73514]
  - md: Replace deprecated kmap_atomic() with kmap_local_page() (Nigel Croxon) [RHEL-73514]
  - md/raid10: Atomic write support (Nigel Croxon) [RHEL-73514]
  - md/raid1: Atomic write support (Nigel Croxon) [RHEL-73514]
  - md/raid0: Atomic write support (Nigel Croxon) [RHEL-73514]
  - md/raid5: Increase r5conf.cache_name size (Nigel Croxon) [RHEL-73514]
  - md/raid10: Handle bio_split() errors (Nigel Croxon) [RHEL-73514]
  - md/raid1: Handle bio_split() errors (Nigel Croxon) [RHEL-73514]
  - md/raid0: Handle bio_split() errors (Nigel Croxon) [RHEL-73514]
  - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-73514]
  - md/md-bitmap: Add missing destroy_work_on_stack() (Nigel Croxon) [RHEL-73514]
  - md/raid5: don't set Faulty rdev for blocked_rdev (Nigel Croxon) [RHEL-73514]
  - md/raid10: don't wait for Faulty rdev in wait_blocked_rdev() (Nigel Croxon) [RHEL-73514]
  - md/raid1: don't wait for Faulty rdev in wait_blocked_rdev() (Nigel Croxon) [RHEL-73514]
  - md/raid1: factor out helper to handle blocked rdev from raid1_write_request() (Nigel Croxon) [RHEL-73514]
  - md: don't record new badblocks for faulty rdev (Nigel Croxon) [RHEL-73514]
  - md: don't wait faulty rdev in md_wait_for_blocked_rdev() (Nigel Croxon) [RHEL-73514]
  - md: add a new helper rdev_blocked() (Nigel Croxon) [RHEL-73514]
  - md/raid5-ppl: Use atomic64_inc_return() in ppl_new_iounit() (Nigel Croxon) [RHEL-73514]
  - md: ensure child flush IO does not affect origin bio->bi_status (Nigel Croxon) [RHEL-73514]
  - mm/mm_init: use node's number of cpus in deferred_page_init_max_threads (Eric Chanudet) [RHEL-77271]
  - selftests/net: convert test_vxlan_mdb.sh to run it in unique namespace (CKI Backport Bot) [RHEL-77173]
  - powerpc/xive/spapr: correct bitmap allocation size (Mamatha Inamdar) [RHEL-80803] {CVE-2022-49623}
  - RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-80098]
  - RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page (Maxim Levitsky) [RHEL-80098]
  - RDMA/mana_ib: use the correct page table index based on hardware page size (Maxim Levitsky) [RHEL-80098]
  - net: mana: Cleanup "mana" debugfs dir after cleanup of all children (Maxim Levitsky) [RHEL-80098]
  - net: mana: Fix irq_contexts memory leak in mana_gd_setup_irqs (Maxim Levitsky) [RHEL-80098]
  - net: mana: Fix memory leak in mana_gd_setup_irqs (Maxim Levitsky) [RHEL-80098]
  - net :mana :Request a V2 response version for MANA_QUERY_GF_STAT (Maxim Levitsky) [RHEL-80098]
  - net: mana: use ethtool string helpers (Maxim Levitsky) [RHEL-80098]
  - net: mana: Enable debugfs files for MANA device (Maxim Levitsky) [RHEL-80098]
  - net: mana: Add get_link and get_link_ksettings in ethtool (Maxim Levitsky) [RHEL-80098]
  - net: mana: Increase the DEF_RX_BUFFERS_PER_QUEUE to 1024 (Maxim Levitsky) [RHEL-80098]
  - net: mana: Improve mana_set_channels() in low mem conditions (Maxim Levitsky) [RHEL-80098]
  - net: mana: Implement get_ringparam/set_ringparam for mana (Maxim Levitsky) [RHEL-80098]
  - net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup (Maxim Levitsky) [RHEL-80098]
  - net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response (Maxim Levitsky) [RHEL-80098]
  - net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings (Maxim Levitsky) [RHEL-80098]
  - net: mana: Fix RX buf alloc_size alignment and atomic op panic (Maxim Levitsky) [RHEL-80098]
  - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81935]
  - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81935]
  - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81935]
  - io_uring: check if iowq is killed before queuing (Jeff Moyer) [RHEL-72430] {CVE-2024-56709}
  - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (Jeff Moyer) [RHEL-68164] {CVE-2024-53052}
  - io_uring: check if we need to reschedule during overflow flush (Jeff Moyer) [RHEL-63824] {CVE-2024-50060}
  - crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (Herbert Xu) [RHEL-78983] {CVE-2024-56690}
  - soc: qcom: cmd-db: Map shared memory as WC, not WB (CKI Backport Bot) [RHEL-58876] {CVE-2024-46689}


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-573.el9]
changelog:
  - rhel_files: ensure all qdiscs are in modules-core (Davide Caratti) [RHEL-79818]
  - Revert "mm: add vma_has_recency()" (Luiz Capitulino) [RHEL-80655]
  - Revert "mm: support POSIX_FADV_NOREUSE" (Luiz Capitulino) [RHEL-80655]
  - phy: tegra: xusb: reset VBUS & ID OVERRIDE (Rupinderjit Singh) [RHEL-80628]
  - smb: client: fix chmod(2) regression with ATTR_READONLY (Jay Shin) [RHEL-80527 RHEL-78507]
  - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21980] {CVE-2024-57807}
  - scsi: core: Fix command pass through retry regression (Ewan D. Milne) [RHEL-77122]
  - fs/proc: fix softlockup in __read_vmcore (part 2) (Baoquan He) [RHEL-79112] {CVE-2025-21694}
  - RDMA/mlx5: Fix a WARN during dereg_mr for DM type (Benjamin Poirier) [RHEL-49958 RHEL-6641 RHEL-77115]
  - CVE-2025-1272: security: Re-enable lockdown LSM in some setup_arch() (Lenny Szubowicz) [RHEL-78974] {CVE-2025-1272}
  - redhat/self-test: Remove --all from git query (Prarit Bhargava)
  - redhat: fix selftest git command so it picks the right commit (Patrick Talbert)
  - arm64: mm: Fix zone_dma_limit calculation (Luiz Capitulino) [RHEL-71914]
  - Documentation/powerpc/fadump: add additional parameter feature details (Mamatha Inamdar) [RHEL-74219]
  - powerpc: increase MIN RMA size for CAS negotiation (Mamatha Inamdar) [RHEL-74219]
  - powerpc/fadump: fix additional param memory reservation for HASH MMU (Mamatha Inamdar) [RHEL-74219]
  - powerpc: export MIN RMA size (Mamatha Inamdar) [RHEL-74219]
  - cxgb4: use port number to set mac addr (Michal Schmidt) [RHEL-75514]
  - pps: Fix a use-after-free (Michal Schmidt) [RHEL-9309]
  - gitlab-ci: add jobs for rhel9 automotive pipelines (Michael Hofmann)
  - gitlab-ci: clean up trigger job naming and template inheritance (Michael Hofmann)
  - can: bcm: Fix UAF in bcm_proc_show() (Michal Schmidt) [RHEL-80748] {CVE-2023-52922}
  - Revert "x86/kvm: Override default caching mode for SEV-SNP and TDX" (Vitaly Kuznetsov) [RHEL-75512]
  - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-68688]
  - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78429]
  - scsi: sg: Fix slab-use-after-free read in sg_release() (Ewan D. Milne) [RHEL-75864] {CVE-2024-56631}
  - RAS/AMD/ATL: Translate normalized to system physical addresses using PRM (Aristeu Rozanski) [RHEL-22695]
  - ACPI: PRM: Add PRM handler direct call support (Aristeu Rozanski) [RHEL-22695]
  - efi/runtime-wrappers: Clean up white space and add __init annotation (Aristeu Rozanski) [RHEL-22695]
  - acpi/prmt: Use EFI runtime sandbox to invoke PRM handlers (Aristeu Rozanski) [RHEL-22695]
  - efi/runtime-wrappers: Don't duplicate setup/teardown code (Aristeu Rozanski) [RHEL-22695]
  - efi/runtime-wrapper: Move workqueue manipulation out of line (Aristeu Rozanski) [RHEL-22695]
  - efi/runtime-wrappers: Use type safe encapsulation of call arguments (Aristeu Rozanski) [RHEL-22695]
  - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-82537]
  - tcp: fix excessive TLP and RACK timeouts from HZ rounding (CKI Backport Bot) [RHEL-83546]
  - pm: cpupower: Add missing residency header changes in cpuidle.h to SWIG (David Arcari) [RHEL-80660]
  - pm: cpupower: Add header changes for cpufreq.h to SWIG bindings (David Arcari) [RHEL-80660]
  - pm: cpupower: Add install and uninstall options to bindings makefile (David Arcari) [RHEL-80660]
  - cpupower: Adjust whitespace for amd-pstate specific prints (David Arcari) [RHEL-80660]
  - cpupower: Don't fetch maximum latency when EPP is enabled (David Arcari) [RHEL-80660]
  - cpupower: Add support for showing energy performance preference (David Arcari) [RHEL-80660]
  - cpupower: Don't try to read frequency from hardware when kernel uses aperfmperf (David Arcari) [RHEL-80660]
  - cpupower: Add support for amd-pstate preferred core rankings (David Arcari) [RHEL-80660]
  - cpupower: Add support for parsing 'enabled' or 'disabled' strings from table (David Arcari) [RHEL-80660]
  - cpupower: Remove spurious return statement (David Arcari) [RHEL-80660]
  - cpupower: fix TSC MHz calculation (David Arcari) [RHEL-80660]
  - cpupower: revise is_valid flag handling for idle_monitor (David Arcari) [RHEL-80660]
  - pm: cpupower: Makefile: Fix cross compilation (David Arcari) [RHEL-80660]
  - cpupower: add checks for xgettext and msgfmt (David Arcari) [RHEL-80660]
  - cpupower: Add Chinese Simplified translation (David Arcari) [RHEL-80660]
  - pm: cpupower: bindings: Add test to confirm cpu state is disabled (David Arcari) [RHEL-80660]
  - pm: cpupower: bindings: Improve disable c_state block (David Arcari) [RHEL-80660]
  - pm: cpupower: gitignore: Add compile_commands.json (David Arcari) [RHEL-80660]
  - pm: cpupower: Makefile: Allow overriding cross-compiling env params (David Arcari) [RHEL-80660]
  - pm: cpupower: bench: print config file path when open cpufreq-bench.conf fails (David Arcari) [RHEL-80660]
  - tools/power/cpupower: Add documentation for some recently introduced options (David Arcari) [RHEL-80660]
  - pm: cpupower: Clean up bindings gitignore (David Arcari) [RHEL-80660]
  - pm: cpupower: rename raw_pylibcpupower.i (David Arcari) [RHEL-80660]
  - pm:cpupower: Add error warning when SWIG is not installed (David Arcari) [RHEL-80660]
  - pm:cpupower: Include test_raw_pylibcpupower.py (David Arcari) [RHEL-80660]
  - pm:cpupower: Add SWIG bindings files for libcpupower (David Arcari) [RHEL-80660]
  - pm:cpupower: Add missing powercap_set_enabled() stub function (David Arcari) [RHEL-80660]
  - cpupower: fix lib default installation path (David Arcari) [RHEL-80660]
  - cpupower: Disable direct build of the 'bench' subproject (David Arcari) [RHEL-80660]
  - cpupower: Remove absent 'v' parameter from monitor man page (David Arcari) [RHEL-80660]
  - cpupower: Improve cpupower build process description (David Arcari) [RHEL-80660]
  - cpupower: Add 'help' target to the main Makefile (David Arcari) [RHEL-80660]
  - cpupower: Replace a dead reference link with working ones (David Arcari) [RHEL-80660]
  - Fix cpupower-frequency-info.1 man page typo (David Arcari) [RHEL-80660]
  - tools cpupower bench: Override CFLAGS assignments (David Arcari) [RHEL-80660]
  - cpupower: fix reference to nonexistent document (David Arcari) [RHEL-80660]
  - EDAC/amd64: Simplify ECC check on unified memory controllers (Aristeu Rozanski) [RHEL-73049]
  - PCI: vmd: Set devices to D0 before enabling PM L1 Substates (Myron Stowe) [RHEL-47438]
  - PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs (Myron Stowe) [RHEL-47438]
  - can: isotp: fix support for transmission of SF without flow control (Radu Rendec) [RHEL-80832]
  - can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag (Radu Rendec) [RHEL-80832]
  - can: isotp: restore accidentally removed MSG_PEEK feature (Radu Rendec) [RHEL-80832]
  - can: isotp: fix race between isotp_sendsmg() and isotp_release() (Radu Rendec) [RHEL-80832]
  - can: isotp: handle wait_event_interruptible() return values (Radu Rendec) [RHEL-80832]
  - can: isotp: split tx timer into transmission and timeout (Radu Rendec) [RHEL-80832]
  - can: isotp: fix potential CAN frame reception race in isotp_rcv() (Radu Rendec) [RHEL-80832]
  - can: isotp: fix tx state handling for echo tx processing (Radu Rendec) [RHEL-80832]
  - can: isotp: isotp_bind(): do not validate unused address information (Radu Rendec) [RHEL-80832]
  - can: isotp: add support for transmission without flow control (Radu Rendec) [RHEL-80832]
  - can: isotp: remove re-binding of bound socket (Radu Rendec) [RHEL-80832]
  - can: isotp: stop timeout monitoring when no first frame was sent (Radu Rendec) [RHEL-80832]
  - can: isotp: support MSG_TRUNC flag when reading from socket (Radu Rendec) [RHEL-80832]
  - can: isotp: return -EADDRNOTAVAIL when reading from unbound socket (Radu Rendec) [RHEL-80832]
  - can: isotp: isotp_bind(): return -EINVAL on incorrect CAN ID formatting (Radu Rendec) [RHEL-80832]
  - can: isotp: sanitize CAN ID checks in isotp_bind() (Radu Rendec) [RHEL-80832] {CVE-2022-49269}
  - can: isotp: set max PDU size to 64 kByte (Radu Rendec) [RHEL-80832]
  - can: isotp: set default value for N_As to 50 micro seconds (Radu Rendec) [RHEL-80832]
  - can: isotp: add local echo tx processing for consecutive frames (Radu Rendec) [RHEL-80832]
  - selftests: livepatch: test livepatching a kprobed function (Denis Aleksandrov) [RHEL-80215]
  - selftests: livepatch: save and restore kprobe state (Denis Aleksandrov) [RHEL-80215]
  - selftests: livepatch: rename KLP_SYSFS_DIR to SYSFS_KLP_DIR (Denis Aleksandrov) [RHEL-80215]
  - Documentation: livepatch: Correct release locks antonym (Denis Aleksandrov) [RHEL-80215]
  - EDAC/mce_amd: Add support for FRU text in MCA (Aristeu Rozanski) [RHEL-52657]
  - x86/mce/apei: Handle variable SMCA BERT record size (Aristeu Rozanski) [RHEL-52657]
  - x86/MCE/AMD: Add support for new MCA_SYND{1,2} registers (Aristeu Rozanski) [RHEL-52657]
  - tracing: Add __print_dynamic_array() helper (Aristeu Rozanski) [RHEL-52657]
  - x86/mce: Add wrapper for struct mce to export vendor specific info (Aristeu Rozanski) [RHEL-52657]
  - x86/mce: Use mce_prep_record() helpers for apei_smca_report_x86_error() (Aristeu Rozanski) [RHEL-52657]
  - x86/mce: Define mce_prep_record() helpers for common and per-CPU fields (Aristeu Rozanski) [RHEL-52657]
  - x86/mce: Rename mce_setup() to mce_prep_record() (Aristeu Rozanski) [RHEL-52657]
  - workqueue: Put the pwq after detaching the rescuer from the pool (CKI Backport Bot) [RHEL-81472] {CVE-2025-21786}
  - EDAC/{i10nm,skx,skx_common}: Support UV systems (Aristeu Rozanski) [RHEL-73892]
  - x86/xen: add FRAME_END to xen_hypercall_hvm() (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/xen: fix xen_hypercall_hvm() to not clobber %rbx (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/asm: Make serialize() always_inline (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/static-call: fix 32-bit build (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/xen: add central hypercall functions (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/xen: don't do PV iret hypercall through hypercall page (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/static-call: provide a way to do very early static-call updates (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - objtool/x86: allow syscall instruction (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86: make get_cpu_vendor() accessible from Xen code (Vitaly Kuznetsov) [RHEL-70669] {CVE-2024-53241}
  - x86/xen: Avoid relocatable quantities in Xen ELF notes (Vitaly Kuznetsov) [RHEL-70669]
  - tracing: Fix bad hist from corrupting named_triggers list (Tomas Glozar) [RHEL-81911]
  - tracing/histograms: Return an error if we fail to add histogram to hist_vars list (Tomas Glozar) [RHEL-81911]
  - tracing/histograms: Add histograms to hist_vars if they have referenced variables (Tomas Glozar) [RHEL-81911]
  - Documentation/sysctl: Add timer_migration to kernel.rst (Phil Auld) [RHEL-11707]
  - netfilter: nfnetlink_queue: drop bogus WARN_ON (Florian Westphal) [RHEL-80104]


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-10
changelog:
  - Add conflicts of kernel-srpm-macros with kernel-rpm-macros < 185-9
    as macros.kmp, kmodtool, and rpmsort were moved from the latter
    to the former.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-11
changelog:
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x
  - Resolves: #2055464


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-13
changelog:
  - Handle symvers.xz in kabi.attr (#2209253).
  - Fix indirect __crc_* sumbols parsing in find-provides.ksyms
    and find-requires.ksyms to avoid matching multiple sections
    producing bogus duplicate provides for kmods that have both __kcrctab
    and __kcrctab_gpl sections (#2115811, #2178935).
  - Call "readelf -R" on a correct section in find-requires.ksyms.
  - Rewrite section data extraction in find-provides.ksyms and find-requires.ksyms
    to avoid garbage at the end of extracted sections, causing unnecessary awk
    complaints (#2115811).
  - Perform section parsing inside the awk script in find-provides.ksyms
    and find-requires.ksyms to avoid hitting command line argument limit
    when handling large .rodata sections (#2178935).


author: Tomas Halman <thalman@redhat.com> - 1.3-1
changelog:
  - Rebase to version 1.3
  - Resolves: RHEL-3336 - khci won't work with Quarkus-based Keycloak due to missing /auth path


author: Sergio Correia <scorreia@redhat.com> - 7.3.0-3
changelog:
  - Fix Keylime configuration upgrades issues introduced in last rebase
    Resolves: RHEL-475
  - Handle session close using a session manager
    Resolves: RHEL-1252
  - Add ignores for EV_PLATFORM_CONFIG_FLAGS
    Resolves: RHEL-947


author: Sergio Correia <scorreia@redhat.com> - 7.3.0-4
changelog:
  - Update spec file to use %verify(not md5 size mode mtime) for files updated in %post scriptlets
    Resolves: RHEL-475


author: Sergio Correia <scorreia@redhat.com> - 7.3.0-15
changelog:
  - Use TLS on revocation notification webhook
  - Include system installed CA certificates when verifying webhook
     server certificate
  - Include the CA certificates added via configuration file option
    'trusted_server_ca'
    Resolves: RHEL-78057
    Resolves: RHEL-78313
    Resolves: RHEL-78316


author: Sergio Correia <scorreia@redhat.com> - 6.5.2-4
changelog:
  - Backport upstream PR#1240 - logging: remove option to log into separate file
    Resolves: rhbz#2154584 - keylime verifier is not logging to /var/log/keylime


author: Patrik Koncity <pkoncity@redhat.com> - 7.3.0-2
changelog:
  - Keylime SELinux policy provides more restricted ports.
  - New SELinux label for ports used by keylime.
  - Adding tabrmd interfaces allow unix stream socket communication and dbus communication.
  - Allow the keylime_server_t domain to get the attributes of all filesystems.
    Resolves: RHEL-595
    Resolves: RHEL-390
    Resolves: RHEL-948


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Set supplementary groups when dropping privileges
  - Show more descriptive error messages on missing files errors
  - Create /usr/libexec/keylime directory


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Use classic release instead of autorelease macro
  - Use classic changelog instead of autochangelog macro


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
    Resolves: rhbz#2151513
  - Remove invalid password expiry warning
    Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
    Resolves: rhbz#2063838
  - New upstream version (1.20.1)
    Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
    Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.0~BETA-1
changelog:
  - new upstream release
  - remove upstreamed patches
  - update CCFLAGS (https://github.com/ksh93/ksh/commit/98f989afcc7)
    Resolves: #1986897


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.6-1
changelog:
  - Rebase to non-beta version, because upstream says it should to be used
    https://github.com/ksh93/ksh/issues/667#issuecomment-1653665697
  - fix acl test case regression
    Resolves: #2034188


author: Steve Dickson <steved@redhat.com> 0.10-0
changelog:
  - Initial package
  - Upstream contributions by:
      - Chuck Lever <chuck.lever@oracle.com>
      - Hannes Reinecke <hare@suse.de>
      - Jeff Layton <jlayton@kernel.org>
      - Benjamin Coddington <bcodding@redhat.com>
      - David Härdeman <david@hardeman.nu>
      - Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
      - Moritz "WanzenBug" Wanzenböck <moritz.wanzenboeck@linbit.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.51-1
changelog:
  - Parse stuff in glibc locale names after @ which is not a script as a variant
  - Add ckb_IQ.UTF-8 locale


author: Mike FABIAN <mfabian@redhat.com> - 0.0.52-1
changelog:
  - Update to 0.0.52
  - add list_common_keyboards() to public api by Sundeep ANAND <suanand@redhat.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.53-1
changelog:
  - Update to 0.0.53
  - Capitalize the return values of language_name() and territory_name()
    (See: https://github.com/rhinstaller/anaconda/pull/2837).
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Mike FABIAN <mfabian@redhat.com> - 0.0.54-1
changelog:
  - Update to 0.0.54
  - add list_common_languages derived from gnome-control-center
    by Sundeep ANAND <suanand@redhat.com>


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-2
changelog:
  - Rebuild with openssl3, presumably in a buildroot with xmlsec1
    linked against openssl3
  - Resolves: rhbz#1962052 - lasso: Port to OpenSSL 3.0


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Petr Menšík <pemensik@redhat.com> - 1.7.1-2
changelog:
  - Use make_build and make_install macro instead of make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Lescak <rlescak@redhat.com> - 1.7.1-9
changelog:
  - Fix for CVE-2020-19860 ldns: heap overread vulnerability (#2051211)
  - Added also patch for deprecated distutils Python module used in build


author: Matej Matuska <mmatuska@redhat.com> - 0.18.0-4
changelog:
  - Bump leapp-framework to 6.0
  - Bump leapp-framework-dependencies to 6
  - Require python3-PyYAML
  - [Technical preview] Introduce configurability for leapp actors
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-1
changelog:
  - Rebase to new upstream version 0.19.0
  - Add possibility to use a specified execution context for snactor run in an existing leapp.db
  - Increase limits on the number of opened file descriptors and maximum size
    of manipulated files when running leapp
  - Resolves: RHEL-57042


author: Matej Matuska <mmatuska@redhat.com> - 0.21.0-4
changelog:
  - Require leapp-framework 6.0+
  - Update leapp-deps package to satisfy leapp-framework-dependencies 6
  - Add dependency on libdb-utils
  - Enable upgrade for systems with LUKS bound to Clevis with TPM 2.0 token
  - Adjust resource limitations for leapp to be able to perform the upgrade
  - Cap max size of the sparse files to 1TiB for storage with large amount of free space
  - Check that detected Intel CPU microarchitecture is supported on target system
  - Fix the report when handling broken parsing of kernel cmdline
  - Generate proper error message instead of ModelViolationError when parsing invalid repository definition
  - Handle default kernel cmdline when multiple boot entries for the default kernel are defined
  - Migrate Ruby IRB during the upgrade
  - Migrate pam_userdb backend during the upgrade
  - Skip checking of (PKI) `directory-hash` dir to speedup the upgrade process and clean logs
  - Update leapp upgrade data files
  - Resolves: RHEL-57043


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-5
changelog:
  - Obsolete RHEL9 GPG key signed with SHA1
  - Activate LVM VGs with `--sysinit` option to correct the use in the upgrade initramfs
  - Fix output of commands executed inside systemd-nspawn containers
  - Fix pes events scanner crashing when there are duplicate packages in the received instructions
  - Fix pes events scanner not respecting user’s transaction configuration
  - Fix remediation instructions for deprecated NM configuration
  - Fix storage scanner crashing when command outputs contain colon character
  - Minor improvements in preupgrade reports
  - Resolves: RHEL-57043, RHEL-31428, RHEL-33373, RHEL-69829, RHEL-71517


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-6
changelog:
  - Detect XFS file systems with problematic parameters
  - Raise an inhibitor if unsupported target version supplied instead of error
  - Prevent a possible crash with LiveMode when adding the upgrade boot entry on systems with LVM
  - Resolves: RHEL-57043, RHEL-52309, RHEL-60034


author: Petr Stodulka <pstodulk@redhat.com> - 0.22.0-1
changelog:
  - Rebase to new upstream 0.22.0
  - Minor updates in generated reports
  - Cover upgrades for MySQL and PostgreSQL databases
  - Detect OpenSSL engines configured in /etc/pki/tls/openssl.cnf
  - Detect deprecated network-scripts (ifcfg) files
  - Detect whether subscribed systems are using SCA
  - Inform user about Libdb removal if present
  - Check and handle upgrades with custom crypto policies
  - Update checks for SAP HANA
  - Resolves: RHEL-57043, RHEL-35618, RHEL-36661, RHEL-62689, RHEL-68309, RHEL-69831, RHEL-77169, RHEL-78396


author: José Expósito <jexposit@redhat.com> - 1.7.0-9
changelog:
  - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
  - Fix CVE-2023-43786: stack exhaustion from infinite recursion in
    PutSubImage()
  - Fix CVE-2023-43787: integer overflow in XCreateImage() leading to
    a heap overflow


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: José Expósito <jexposit@redhat.com> - 3.5.13-9
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Tom Stellard <tstellar@redhat.com> - 2.2.53-6
changelog:
  - Spec file cleanups and build fix
  - Add BuildRequires: perl-FileHandle to fix make check
  - Add BuildRequres: gcc [1]
  - Use make_build [2] and make_install[3] macros
  - [1] https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_buildrequires_and_requires
  - [2] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - [3] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.16-1
changelog:
  - Update to 0.7.15
  - Add UPL short name to SPDX conversion
  - Allow parsing desktop files using as_app_parse_data()
  - Do not preserve restrictive permissions when installing AppStream files
  - Modernize the validation requirements
  - Remove relative path from icon names
  - Support loading YAML from as_store_from_bytes()
  - Update list of allowed metadata licences
  - Update the SPDX license list to v3.5


author: Richard Hughes <richard@hughsie.com> 0.7.17-1
changelog:
  - New upstream release
  - Add "icon-theme" as recognised component type
  - Fix CI by moving 'future' back a bit
  - Make default content rating values match OARS semantics
  - Properly initialize unique_id_mutex


author: Richard Hughes <richard@hughsie.com> 0.7.18-1
changelog:
  - New upstream release
  - Add content rating system APIs from gnome-software
  - Add "validate-version" command
  - Allow timestamp in the future in validate-relax
  - Don't ignore localized strings that are the same as original
  - Fix crash with invalid children of <ul/>
  - Properly initialize mutexes
  - Test launchable tags in validation


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.3.0 base"


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-1
changelog:
  - Rebase to the latest upstream release 2.28
    Resolves: rhbz#2123346
  - Add dependency on device-mapper-multipath to libblockdev-mpath
    Resolves: rhbz#2121072
  - Fix spec issues found by rpminspect
    Resolves: rhbz#2116544


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-4
changelog:
  - nvme: Fix namespace identifiers
    Resolves: rhbz#2151535
  - nvme: Avoid sending NVME_IDENTIFY_CNS_NS_DESC_LIST on older devices
    Related: rhbz#2151535


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-5
changelog:
  - Allow resizing of inactive LVs with latest LVM
    Resolves: rhbz#2161181
  - Fix test_swapon_pagesize on systems with 64k pages
    Resolves: rhbz#2168220


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-14
changelog:
  - tests: Fix expected extended partition flags with new parted
    Related: rhbz#2109026
  - mdraid: Fix copy-paste error when checking return value
    Related: rhbz#2109026


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-15
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix bad local IPv6 connection reuse (CVE-2022-27775)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-19
changelog:
  - fix unpreserved file permissions (CVE-2022-32207)
  - fix HTTP compression denial of service (CVE-2022-32206)
  - fix FTP-KRB bad message verification (CVE-2022-32208)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-24
changelog:
  - fix SSH connection too eager reuse still (CVE-2023-27538)
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)
  - fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
  - fix TELNET option IAC injection (CVE-2023-27533)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-26
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix host name wildcard checking (CVE-2023-28321)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: José Expósito <jexposit@redhat.com> - 2.4.123-2
changelog:
  - Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches")
    libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x
    Resolves: https://issues.redhat.com/browse/RHEL-53869


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: Vishal Vijayraghavan <vvijayra AT redhat DOT com> - 1:2.1.3-1
changelog:
  - New release of liberation-fonts 2.1.3
  - Resolves:rh#1464310 : Tilded G not works with Liberation Sans and Serif


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040454


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Resolves: rhbz#1963838 restore missing functions
    Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libformula
    didn't use its built-in loaders so libreoffice's database
    report generator didn't show all categories in formula wizard


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-3
changelog:
  - Minor fixes for Python 3.12 compatibility
  - Fix Python unit tests to use the right assert methods
  - Explicitly BR python3-setuptools


author: Mohan Boddu <mboddu@redhat.com> - 0.2.10-24
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951286 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951284 replace apache-commons-logging with java.util.logging


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libloader
    didn't use its built-in loaders so libreoffice's database
    report generator didn't work


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Michal Ruprich <mruprich@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64
  - Fix for CVE-2020-28241


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.8.2-2
changelog:
  - Fix nbdcopy progress bar.
  - Add nbdinfo --map --totals and --can/--is options.
    resolves: rhbz#1950630


author: Richard W.M. Jones <rjones@redhat.com> - 1.10.5-1
changelog:
  - Rebase to new stable branch version 1.10.5
    resolves: rhbz#2011708
  - Map uint32_t to OCaml int64 to avoid signedness problems
    resolves: rhbz#2040610
  - CVE-2022-0485 nbdcopy destination image corruption
  - New upstream API to control initialization of pread buffer
    resolves: rhbz#2046194


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.6-1
changelog:
  - Rebase to new stable branch version 1.12.6
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660
  - Fix remote TLS failures
    resolves: rhbz#2111524
    (and 2111813)


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Adrian Reber <areber@redhat.com> - 1.2-5
changelog:
  - Repack tarball to remove problematic license from unused code
  - Apply fixes for warnings found by gcc -fanalyzer


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: Michel Normand <normand@linux.vnet.ibm.com> 1.1.0-5
changelog:
  - Add remove_2_backslashes_in_shell_call.patch
    Add remove_eng_inc_in_version_pl.patch
    to avoid f33 build failure


author: Adam Borowski <kilobyte@angband.pl> - 1.11-1
changelog:
  - Update to version 1.11.
  - Disable enumerable_thread_specific_access_0_drd
  - Fix internal find in radix_tree


author: Bryan Gurney <bgurney@redhat.com> - 1.12-8
changelog:
  - Apply patch to fix undefined behavior on realloc
  - Also add and apply patch to fix referencing empty array
  - Related: rhbz#2034641


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Remi Collet <remi@remirepo.net> - 0.11.0-1
changelog:
  - update to 0.11.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/665


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951282 replace apache-commons-logging with java.util.logging


author: Daiki Ueno <dueno@redhat.com> - 4.9-2
changelog:
  - Fix CVE-2023-23009: remote DoS via crafted TS payload with an
    incorrect selector length (rhbz#2173674)


author: Sahana Prasad <sahana@redhat.com> - 4.9-3
changelog:
  - Fix CVE-2023-30570:Malicious IKEv1 Aggressive Mode packets can crash
    libreswan
  - Resolves: rhbz#2187171


author: Sahana Prasad <sahana@redhat.com> - 4.9-5
changelog:
  - Just bumping up the version to include bugs for CVE-2023-2295. There is no
    code fix for it. Fix for it is including the code fix for CVE-2023-30570.
  - Fix CVE-2023-2295 Regression of CVE-2023-30570 fixes in the
    Red Hat Enterprise Linux
  - Resolves: rhbz#2189777, rhbz#2190148


author: Daiki Ueno <dueno@redhat.com> - 4.15-2
changelog:
  - Fix auto=ondemand connection initialization with TCP (RHEL-51879)
  - Make use of Netlink extack for additional error reporting (RHEL-51881)


author: Daiki Ueno <dueno@redhat.com> - 4.15-4
changelog:
  - pluto: fix refcounting of whack FD at CREATE_CHILD_SA request (RHEL-61461)
  - pluto: ignore CREATE_CHILD_SA request if crypto is in progress (RHEL-61461)


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.99.20-1
changelog:
  - 1900160 - sane-airscan-0.99.20 is available
  - 1897935 - Crash on libsane-airscan when trying to activate scanner


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Mohan Boddu <mboddu@redhat.com> - 1.1.2-29
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951281 replace apache-commons-logging with java.util.logging


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    Resolves: rhbz#1970826 rhbz#1970839 rhbz#1970857 rhbz#1970847


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.31-6
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985029)


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-9
changelog:
  - Add patches for CVE-2024-52530, CVE-2024-52531, and CVE-2024-52532
    Resolves: RHEL-67069
    Resolves: RHEL-67081


author: Kalev Lember <klember@redhat.com> - 2.72.0-2
changelog:
  - Tighten soname globs
  - Avoid automatic requires on sysprof-devel package
  - Update required glib2 version


author: Kalev Lember <klember@redhat.com> - 2.72.0-5
changelog:
  - Don't try to avoid sysprof dep any more now that sysprof-capture-devel is
    split out to a separate subpackage


author: Norbert pocs <npocs@redhat.com> - 0.10.4-1
changelog:
  - Rebase to version 0.10.4
  - Add pkcs11 support
  - Disallow ssh-rsa key in FIPS mode
  - Fix openssl KDF check at build
  - ChangeLog was renamed to CHANGELOG
  - Resolves: rhbz#2068475, rhbz#2026449, rhbz#2004021,
              rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Matej Mužila <mmuzila@redhat.com> 4.4.0-2
changelog:
  - Update to version 4.4.0
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354
    CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-8
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188916)
  - tests: Use stronger passphrases for LUKS tests (#2188750,#2188752)
  - integration-test: Fix scsi_debug cd drive read-only detection (#2211191)
  - lvm2: Improve uevent processing (#2031673)
  - tests: Mark test_job.UdisksJobTest.test_job as unstable (#2148844)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-4
changelog:
  - Fix a couple of issues found by Coverity (#1938890)
  - Ignore systemd "Extended Boot Loader" GPT partition


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-1
changelog:
  - Version 2.9.4 (#2010363)
  - CVE-2021-3802: Harden the default mount options for ext filesystems (#2004423)
  - Fix double free on daemon exit (unaligned fastbin chunk) (#2001549)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.5-1
changelog:
  - Update license to GPL-2.0 OR MIT
  - Add io_uring_prep_epoll_ctl()
  - Add io_uring_get_probe(), io_uring_get_probe_ring()
  - Add io_uring_register_probe()
  - Add io_uring_{register,unregister}_personality()
  - Add io_uring_prep_{recv,send}()
  - Add io_uring_prep_openat2()
  - Add io_uring_ring_dontfork()
  - Add io_uring_prep_read() and io_uring_prep_write()
  - Documentation fixes and improvements


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.6-1
changelog:
  - add io_uring_prep_splice()
  - add io_uring_prep_provide_buffers()
  - add io_uring_prep_remove_buffers()
  - add io_uring_register_eventfd_async()
  - reinstate io_uring_unregister_eventfd() (it was accidentally removed in 0.4)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.7-1
changelog:
  - Add io_uring_cq_eventfd_toggle() helper for new IORING_CQ_EVENTFD_DISABLED flag
  - Add IORING_OP_TEE
  - Documentation fixes and improvements


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-2
changelog:
  - vmx: Do not require all ID data for VMWare Distributed Switch (RHEL-46099)
  - tests: vhostuser: add virtiofsd json descriptor (RHEL-7108, RHEL-40135)
  - tests: qemuxmlconf: adjust test case to new virtiofsd (RHEL-7108, RHEL-40135)
  - qemu: fill capabilities for virtiofsd (RHEL-7108, RHEL-40135)
  - qemu: do not use deprecated options for new virtiofsd (RHEL-7108)
  - qemu: migration: allow migration for virtiofs (RHEL-40135)
  - virt-host-validate: Drop extra "PASS" (RHEL-46868)
  - qemu: Don't leave beingDestroyed=true on inactive domain (RHEL-43309)


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-5
changelog:
  - qemu: virtiofs: cache: use 'never' instead of 'none' (RHEL-50329)
  - qemu_domain: Strip <acpi/> from s390(x) definitions (RHEL-49516)
  - qemuxmlconftest: Add tests for the ACPI stripping hack on s390 (RHEL-49516)
  - vsh: Allow vshReadlineInit() to be called multiple times (RHEL-53560)


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-1
changelog:
  - Rebased to libvirt-10.8.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-688, RHEL-7122, RHEL-19379, RHEL-22166, RHEL-24746
      RHEL-28827, RHEL-45200, RHEL-45952, RHEL-53964, RHEL-54550
      RHEL-56611, RHEL-58446


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-2
changelog:
  - Revert "network: *un*set the firewalld zone while shutting down a network" (RHEL-61576)
  - Revert "network: support setting firewalld zone for bridge device of open networks" (RHEL-61576)
  - network: call network(Add|Remove)FirewallRules() for forward mode='open' (RHEL-61576)
  - network: a different way of supporting firewalld zone for mode='open' networks (RHEL-61576)
  - network: a different implementation of *un*setting firewalld zone when network is destroyed (RHEL-61576)


author: Jiri Denemark <jdenemar@redhat.com> - 10.9.0-1
changelog:
  - Rebased to libvirt-10.9.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-7036, RHEL-7122, RHEL-35752, RHEL-46870, RHEL-52314
      RHEL-60030, RHEL-60033, RHEL-64341


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-1
changelog:
  - Rebased to libvirt-10.10.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-23607, RHEL-24850, RHEL-29267, RHEL-30842, RHEL-53963
      RHEL-54325, RHEL-54326, RHEL-55240, RHEL-64341, RHEL-65372
      RHEL-65780, RHEL-65844, RHEL-67702, RHEL-67836, RHEL-68614
      RHEL-69417


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-2
changelog:
  - util: Fix typo in virNetDevOpenvswitchInterfaceSetQos (RHEL-69938)
  - qemu: tpm: do not update profile name for transient domains (RHEL-71072)
  - qemu: Enable I/O APIC if needed (RHEL-65844)
  - cpu_map: Sort data files in meson.build (RHEL-70052)
  - sync_qemu_models_i386: Update meson.build (RHEL-70052)
  - sync_qemu_models_i386: Generate missing -v1 variants (RHEL-70052)
  - cpu_map: Add 486-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium2-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium3-v1 CPU model (RHEL-70052)
  - cpu_map: Add coreduo-v1 CPU model (RHEL-70052)
  - cpu_map: Add n270-v1 CPU model (RHEL-70052)
  - cpu_map: Add core2duo-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu32-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm32-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu64-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm64-v1 CPU model (RHEL-70052)
  - cpu_map: Add Conroe-v1 CPU model (RHEL-70052)
  - cpu_map: Add Penryn-v1 CPU model (RHEL-70052)
  - cpu_map: Add KnightsMill-v1 CPU model (RHEL-70052)
  - cpu_map: Add athlon-v1 CPU model (RHEL-70052)
  - cpu_map: Add phenom-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G1-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G2-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G3-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G4-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G5-v1 CPU model (RHEL-70052)
  - cpu_map: Add EPYC-Genoa-v1 CPU model (RHEL-70052)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-4
changelog:
  - conf, docs: Add support for direct and extended tlbflush features (RHEL-7122)
  - qemu: Add support for direct and extended tlbflush features (RHEL-7122)
  - conf: refactor hyperv features formatting (RHEL-7122)
  - conf: Adjust hyperv tlbflush formatting (RHEL-7122)
  - qemu_migration: Do not consider post-copy active in postcopy-recover (RHEL-73085)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-5
changelog:
  - qemu: allow migration of guest with mdev vGPU to VF vGPU (RHEL-68064)
  - storage_file: Refuse qcow2 images with empty string as 'data_file' (RHEL-73504)
  - virstoragetest: Add case for qcow2 image with empty string as 'data_file' (RHEL-73504)
  - qemu: snapshot: delete disk image only if parent snapshot is external (RHEL-74041)
  - storage_file: de-modularize the local file backend (RHEL-73507)
  - libvirt.spec: Move ownership of 'storage-file' backends directory to gluster (RHEL-73507)
  - qemu: re-use existing ActualNetDef for more interface types during update-device (RHEL-7036)
  - tools: ssh-proxy: Check for domain status before parsing its CID (RHEL-75577)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-6
changelog:
  - build: Bump minimum glib2 version to 2.66.0 (RHEL-77884)
  - qemuProcessHandleIOError: Refactor to extract 'priv' instead of 'driver' (RHEL-77884)
  - qemu: Handle quirks of 'device' field of BLOCK_IO_ERROR event in monitor code (RHEL-77884)
  - qemu: Rename 'diskAlias' to 'device' in qemu IO error event handling (RHEL-77884)
  - qemuProcessHandleIOError: Rename local variables (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Do not munge 'reason' field of IO error event (RHEL-77884)
  - qemuProcessHandleIOError: Prefer lookup by node name (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Propagate new 'qom-path' field (RHEL-77884)
  - virStorageSource: Add fields for storing last I/O error message (RHEL-77884)
  - qemuProcessHandleIOError: Populate I/O error reason to virStorageSource (RHEL-77884)
  - qemuProcessHandleIOError: Log IO errors in the VM log file (RHEL-77884)
  - libxlDomainGetMessages: Add existing flags to 'virCheckFlags' (RHEL-77884)
  - virDomainObjGetMessages: Refactor using GPtrArray (RHEL-77884)
  - virDomainGetMessages: Introduce VIR_DOMAIN_MESSAGE_IOERRORS (RHEL-77884)
  - include: libvirt-domain: Reword documentation for @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - include: libvirt-domain: Add 'message' @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - qemuSnapshotForEachQcow2: Don't initialize 'nrollback' (RHEL-73315)
  - qemu: process: Export qemuPrepareNVRAM for use in snapshot code (RHEL-73315)
  - qemu: snapshot: Ensure that NVRAM image exists when taking inactive internal snapshot (RHEL-73315)
  - qemuxmlconftest: Allow testing of the 'writable' flag for passed FDs for disks (RHEL-37519)
  - qemuxmlconftest: Add testing of FDs with 'writable' flag in 'disk-source-fd' (RHEL-37519)
  - qemu: domain: Initialize FD passthrough for a virStorageSource before using it (RHEL-37519)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-7
changelog:
  - qemu_migration: Refactor qemuMigrationSrcRestoreDomainState (RHEL-79168)
  - qemu_migration: Do not automatically resume domain after I/O error (RHEL-79168)
  - qemucapabilitiestest: Add data for the qemu-10.0 dev cycle on x86_64 (RHEL-79095)
  - qemucapabilitiestest: Update 'caps_10.0.0_x86_64' to 'v9.2.0-1636-gffaf7f0376' (RHEL-79095)
  - qemu: capabilies: Introduce QEMU_CAPS_BLOCKDEV_SET_ACTIVE (RHEL-79095)
  - qemu: monitor: Add monitor backend for 'blockdev-set-active' (RHEL-79095)
  - qemu: migration: Reactivate block nodes after migration if VM is left paused (RHEL-79095)
  - conf: change virDomainHostdevInsert() to return void (RHEL-69455)
  - qemu: fix qemu validation to forbid guest-side IP address for type='vdpa' (RHEL-69455)
  - qemu: validate that model is virtio for vhostuser and vdpa interfaces in the same place (RHEL-69455)
  - qemu: automatically set model type='virtio' for interface type='vhostuser' (RHEL-69455)
  - qemu: do all vhostuser attribute validation in qemu driver (RHEL-69455)
  - conf/qemu: make <source> element *almost* optional for type=vhostuser (RHEL-69455)
  - qemu: use switch instead of if in qemuProcessPrepareDomainNetwork() (RHEL-69455)
  - qemu: make qemuPasstCreateSocketPath() public (RHEL-69455)
  - qemu: complete vhostuser + passt support (RHEL-69455)
  - qemu: fail validation if a domain def has vhostuser/passt but no shared mem (RHEL-69455)
  - docs: improve type='user' docs to higlight differences between SLIRP and passt (RHEL-69455)
  - docs: document using passt backend with <interface type='vhostuser'> (RHEL-69455)
  - utils: Canonicalize paths before comparing them (RHEL-79166)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-8
changelog:
  - remote: add sysusers file to create 'libvirt' group (RHEL-81749)
  - qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU (RHEL-81747)
  - qemu_snapshot: allow reverting to external disk only snapshot (RHEL-21549)
  - qemu: snapshot: error out early when reverting snapshot for VM with non-file disk (RHEL-30971)


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-2
changelog:
  - Drop libwacom-show-stylus, it's a debugging tool that requires extra
    dependencies that we shouldn't pull in everywhere (#2044710)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.8-17
changelog:
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update flags, enable LTO
  - Remove RANDFILE and increase default bits in ssleay.conf


author: David King <dking@redhat.com> - 2.9.10-12
changelog:
  - Fix CVE-2021-3516 (#1956969)
  - Fix CVE-2021-3517 (#1957002)
  - Fix CVE-2021-3518 (#1957029)
  - Fix CVE-2021-3537 (#1957285)


author: Jakub Jelen <jjelen@redhat.com> - 1.1.33-4
changelog:
  - Do not build python bindings even if the python is available
  - Fix CVE-2019-13117 (#1728547)
  - Fix CVE-2019-13118 (#1728542)


author: Simo Sorce <simo@redhat.com> - 1.1.34-3
changelog:
  - Drop crypto dependency.
  - The "cryptography" implemented in exslt is outdated and bad supporting only
    insecure algorithms (RC4, SHA1, MD5, MD4), and should not be used anyway.


author: Michal Ruprich <mruprich@redhat.com> - 1.0.225-3
changelog:
  - Resolves: #1965253 - CVE-2021-28902 libyang: NULL pointer dereference in read_yin_container()
  - Resolves: #1965255 - CVE-2021-28903 libyang: recursive call to lyxml_parse_mem() lead to crash


author: Remi Collet <remi@remirepo.net> - 1.7.2-1
changelog:
  - update to 1.7.2
  - fix installation layout using merged patch from
    https://github.com/nih-at/libzip/pull/190


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "ppc64le-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j20  
    cd -


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-1
changelog:
  - update to 3.1.1 (#1979954 CVE-2021-3570 CVE-2021-3571)
  - add read-only UDS port
  - add option to set clockClass threshold
  - don't repeat some log messages in multi-port configuration
  - increase default TX timestamp timeout to 10 ms
  - limit unicast message rate per address and grant duration


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-6
changelog:
  - add support for VLAN over bond (#2120521)
  - handle EINTR when waiting for transmit timestamp (#2128786)
  - check for unexpected changes in frequency offset (#2150815)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (RHEL-2026 RHEL-2342 RHEL-12182 RHEL-15929)
  - fix ts2phc to handle large NMEA delay (RHEL-23208)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-3
changelog:
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-39387)
  - fix ts2phc to correctly handle leap seconds (RHEL-40216)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-40947)
  - add options to configure multicast IP addresses (RHEL-31178)
  - add holdover support to ts2phc (RHEL-50216)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58213 RHEL-57040)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60027)
  - support static sink clocks in phc2sys automatic mode (RHEL-62864)
  - don't require -O option without -a and -w in phc2sys (RHEL-69138)


author: Vit Mojzis <vmojzis@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.
  - Updated to 1.0.18. [1568622]


author: Artem Egorenkov <aegorenk@redhat.com> - 3.6.0-7
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Sérgio Basto <sergio@serjux.com> - 2.14.1-1
changelog:
  - Update to 2.14.1
  - Disable javadoc (#1988896)
  - Build with jansi-2
  - Remove deps on slf4j-ext (no longer available in Fedora 35)


author: Frank Crawford <frank@crawford.emu.id.au> - 7.5.4-2
changelog:
  - Add requires for perl-diagnostics (#1893671) and perl-lib (#1893503)
  - Add other requires as nothing is now automatically supplied


author: Brian C. Lane <bcl@redhat.com> 34.9.15-1
changelog:
  - tito: Add the LoraxRHELTagger from rhel8-branch (bcl)
    Related: rhbz#2070910
  - runtime-postinstall: Remove machine specific nvme files (bcl)
    Resolves: rhbz#2070910


author: Brian C. Lane <bcl@redhat.com> 34.9.16-1
changelog:
  - Makefile: Add local-srpm target to create a .src.rpm from HEAD (bcl)
    Related: rhbz#2088631
  - mkksiso: Fix s390x support (bcl)
    Related: rhbz#2088631
  - mkksiso: Remove use of os.path.join (bcl)
    Related: rhbz#2088631
  - Makefile: Add mkksiso to coverage report (bcl)
    Related: rhbz#2088631
  - setup.py: Install mkksiso to /usr/bin (bcl)
    Related: rhbz#2088631
  - mkksiso: Fix grub2 editing error (bcl)
    Related: rhbz#2088631
  - mkksiso: Rewrite to use xorriso features (bcl)
    Resolves: rhbz#2088631


author: Brian C. Lane <bcl@redhat.com> 34.9.17-1
changelog:
  - minimal.ks: Add include for architecture specific packages (bcl)
    Related: rhbz#2051548
  - livemedia.ks: Add include for architecture specific packages (bcl)
    Resolves: rhbz#2051548
  - tests: Add tests for mkksiso (bcl)
    Related: rhbz#2037015
  - mkksiso: Add kernel cmdline customization support (bcl)
    Resolves: rhbz#2037015
  - mkksiso: Move kickstart to --ks KICKSTART (bcl)
    Related: rhbz#2037015
  - mkksiso: Add helper functions for kernel cmdline modifications (bcl)
    Related: rhbz#2037015
  - lorax.spec: Fix changelog order (bcl)
    Resolves: rhbz#1972099


author: Brian C. Lane <bcl@redhat.com> 34.9.18-1
changelog:
  - mkksiso: Set u+rw permission on extracted files and directories (bcl)
    Related: rhbz#2088631
  - lorax.spec: Fix changelog (bcl)
    Resolves: rhbz#1972099


author: Brian C. Lane <bcl@redhat.com> 34.9.19-1
changelog:
  - mkksiso: Optionally support 3 arguments or --ks (bcl)
    Resolves: rhbz#2037015
  - mkksiso: Add -U to xorriso on ppc64le (bcl)
    Resolves: rhbz#2109665
  - mkksiso: Fix passing -iso-level to xorriso (bcl)
    Related: rhbz#2109665


author: Brian C. Lane <bcl@redhat.com> 34.9.20-1
changelog:
  - templates: Update runtime-* templates (bcl)
    Resolves: rhbz#2042057
  - templates: Update path to license files (bcl)
    Related: rhbz#2042057
  - templates: Update boot timeout to 5s (bcl)
    Related: rhbz#2042057


author: Brian C. Lane <bcl@redhat.com> 34.9.23-1
changelog:
  - rsyslog.conf: Set WorkDirectory to /var/lib/rsyslog (bcl)
    Resolves: rhbz#2158731
  - lorax.spec: fix changelog entry for 2132511 (bcl)
    Related: rhbz#2132511


author: Brian C. Lane <bcl@redhat.com> 34.9.26-1
changelog:
  - monitor: Skip repo errors involving CDROM/file source (bcl) (bcl)
    Resolves: RHEL-4658
  - rsyslog.conf: Update to use current config syntax (bcl) (bcl)
    Resolves: RHEL-46857


author: Brian C. Lane <bcl@redhat.com> - 9.0-29
changelog:
  - Drop ia32 uefi package installation (bcl)
    Resolves: rhbz#2038397
  - Enable sftp when using inst.sshd (bcl)
    Resolves: rhbz#2035049


author: Brian C. Lane <bcl@redhat.com> - 9.0-30
changelog:
  - Add .discinfo on all arches (bcl)
    Resolves: rhbz#2030008
  - Add inst.rngd cmdline option (bcl)
    Resolves: rhbz#2028720


author: Brian C. Lane <bcl@redhat.com> - 9.0-31
changelog:
  - Do not install rng-tools (bcl)
    Resolves: rhbz#2028720
  - Revert "Add inst.rngd cmdline option" (bcl)
    Related: rhbz#2028720


author: Brian C. Lane <bcl@redhat.com> - 9.0-35
changelog:
  - Makefile: Making it easier to create releases (bcl)
    Related: rhbz#2071074
  - runtime-postinstall: Remove machine specific nvme files (bcl)
    Resolves: rhbz#2071074


author: Brian C. Lane <bcl@redhat.com> - 9.0-38
changelog:
  - tools: Add support for Jira RHEL-XXX issues (bcl)
    Related: RHEL-15122
  - Add setpriv as ostree containers dependency (bcl)
    Resolves: RHEL-15122


author: Brian C. Lane <bcl@redhat.com> - 9.6-1
changelog:
  - Bump release version to 9.6 (bcl)
    Related: RHEL-69011
  - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl)
    Resolves: RHEL-69011


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: Tom Callaway <spot@fedoraproject.org> - 33.3.1-17
changelog:
  - hack this ancient beastie to work with lua 5.4
  - maintainer, please update this to the current upstream release at your earliest convenience


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: Miro Hrončok <mhroncok@redhat.com> - 1-3
changelog:
  - Modify several conditionals to support RHEL 9+ and drop ancient Fedora 17
  - Add explicit conflict with older lua-devel
  - Require rpm, not redhat-rpm-config


author: Marian Csontos <mcsontos@redhat.com> - 2.03.21-3
changelog:
  - Fix lvresize fail in case of multiple mountpoints.
  - Fix allocator for RAID LVs allocating multiple legs on single device.
  - Fix device id handling of WWIDs with trailing spaces.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-2
changelog:
  - Fix SPDX License identifiers.
  - Fix input units for VDO LV's minimim_io_size.
  - Fix stripe count and validation for RAID LVs.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-5
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-5
changelog:
  - Revert the CMake change regarding the in-source builds for now
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug buildchnages to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers the CMAKE_INSTALL_PREFIX="%{_prefix}" option
  - Default to %cmake commands instead fo %make commands
  - Update the WITH_UNITTEST macro to the one upstream use now
  - Introduce macro to enable / disable testusite (and building of the *-test subpackage)


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: Ondrej Dubaj <odubaj@redhat.com> - 3.0.1-1
changelog:
  - Rebase to new major version 3.0.1 (it's Beta version)
  - Removed documentation/ folder, as it was removed by upstream


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.0.3-1
changelog:
  - Rebase to 3.0.3
  - Temporarily disable generation of -javadoc.rpm, due to missing feature in xmvn,
    which leads to build crash


author: Christopher Tubbs <ctubbsii@fedoraproject.org> - 1:3.6.3-6
changelog:
  - Remove unneeded commons-logging from runtime class path (rhbz#1883751)
  - Also remove redundant commons-codec


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1:3.6.3-22
changelog:
  - Implement new non-conflicting Java bindings
  - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072


author: Alex Williamson <alex.williamson@redhat.com> - 0.57-1
changelog:
  - 13f1322e576c ("Remove systemd support")
  - d84a2737e79c ("Fix device udev tagging")
  - 68c92c7beaca ("Tag before generating spec file")
  - c34c4f1ade60 ("Update mdevctl.spec.in for lsmdev.8")
  - ed86d345aae0 ("Fix systemd UUID escaping")
  - d4e83f08161d ("Merge pull request #13 from cpaelzer/fix-lsmdev-man-page")
  - 3c0d285b75ab ("lsmdev - add the alternative name to the man page")


author: Alex Williamson <alex.williamson@redhat.com> - 0.61-1
changelog:
  - d7dfac5f5bfb ("Merge pull request #15 from cohuck/attr_sanity")
  - 28a9fa17b51e ("validate attribute names")


author: Cornelia Huck <cohuck@redhat.com> - 0.69-1
changelog:
  - a2621934aa37 ("Merge pull request #18 from cohuck/validate")
  - ffbcef5a1c84 ("Merge pull request #25 from etrunko/master")
  - 5ec75a83bf30 ("Remove never used 'available' option")
  - d49b0f0db6b3 ("Merge pull request #23 from eskultety/man-fix")
  - 4cfe37eb2d99 ("man: Point --verbose to the 'list' command rather than 'types'")
  - a0ae49eb7178 ("Merge pull request #17 from cohuck/install_symlinks")
  - 504beba6e8f9 ("Force symlink cretion")
  - 522c5ded00ff ("Fix attribute validation")


author: Alex Williamson <alex.williamson@redhat.com> - 0.78-1
changelog:
  - e029640033d3 ("Automatic version commit for tag 0.78")
  - e32f506656fd ("use standard bash path")
  - 70690b64401f ("avoid other tags spilling into the .spec changelog")
  - 70b89c18cf5b ("Merge pull request #31 from awilliam/20201113.0")
  - 80187bc9ba03 ("Merge pull request #30 from fiuczy/fix-error-cleanup")
  - 97ea8bbeefb7 ("mdevctl: fix cleanup on error when creating and removing mdev")
  - b45d33dfd36c ("version support")
  - 2b1c16ce6fb0 ("Fix attributes getting applied via start-parent-mdevs")
  - 25d5e8d24d57 ("mdevctl: fix cleanup on error when writing to attribute")


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: José Expósito <jexposit@redhat.com> - 24.2.8-2
changelog:
  - AMD Navi4x support
    Backport fixes for radeonsi and disable GFX12 on radv
    Resolves: https://issues.redhat.com/browse/RHEL-53419


author: Konstantin Kostiuk <kkostiuk@redhat.com> 104.0.2
changelog:
  - Set version to 104.0.2
  - BZ#2084608 - Fix mismatched allocation function
  - BZ#2084613 - qga-win: race condition in build


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.1
changelog:
  - Set version to 105.0.1
  - Remove redundant package
  - BZ#2090333 - [mingw-qemu-ga-win] qga command 'guest-get-fsinfo' can't query bus-type of USB


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.2
changelog:
  - Set version to 105.0.2
  - Fix wrong requires
  - Fix missing patch0002
  - Remove extra Summary
  - BZ#2090333 - [mingw-qemu-ga-win] qga command 'guest-get-fsinfo' can't query bus-type of USB


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.3
changelog:
  - Set version to 105.0.3
  - BZ#2090250 - mingw-qemu-ga-win: Add Provides: bundled() to rpm packages [rhel-9]


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.0
changelog:
  - Set version to 106.0.0
  - RHEL-408 - Add provides, obsoletes for mingw-qemu-ga-win
  - RHEL-385 - Rebase mingw-qemu-ga-win to QEMU 8.0


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.1
changelog:
  - Set version to 106.0.1
  - RHELPLAN-147763 - [mingw-qemu-ga-win] VSS DLL: Add logging mechanism
  - RHEL-581 - Use the SPDX vocabulary to specify the license


author: Konstantin Kostiuk <kkostiuk@redhat.com> 109.1.0
changelog:
  - RHEL-57013 - Rebase qemu-ga to 9.1.0
  - RHEL-57012 - guest agent public ssh injection api support for Windows
  - Set version to 109.1.0


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Jakub Hrozek <jhrozek@redhat.com> - 0.17.0-6
changelog:
  - Related: rhbz#1986806 - CVE-2021-3639 mod_auth_mellon: Open Redirect
                            vulnerability in logout URLs


author: Tomas Halman <thalman@redhat.com> - 0.17.0-9
changelog:
  - Fixing mellon_create_metadata.sh script
    Resolves: RHEL-35898
  - Publishing diagnostic module in CRB repository
    Resolves: RHEL-33585


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-2
changelog:
  - Resolves: rhbz#2153656 - CVE-2022-23527 - Open Redirect in
    oidc_validate_redirect_url() using tab character


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-3
changelog:
  - Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference
    when OIDCStripCookies is set and a crafted Cookie header is supplied


author: Tomas Halman <thalman@redhat.com> - 2.4.10-1
changelog:
  Rebase to 2.4.10 version improves `state cookies piling up` problem
    Resolves: RHEL-32450 Race condition in mod_auth_openidc filecache
    Resolves: RHEL-25422 mod_auth_openidc: DoS when using
              `OIDCSessionType client-cookie` and manipulating cookies
              (CVE-2024-24814)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.4.9.1-1
changelog:
  - Resolves: rhbz#1987223 - CVE-2021-32792 mod_auth_openidc: XSS when using
                             OIDCPreservePost On [rhel-9.0]
  - Resolves: rhbz#1987217 - CVE-2021-32791 mod_auth_openidc: hardcoded
                             static IV and AAD with a reused key in AES GCM
                             encryption [rhel-9.0]
  - Resolves: rhbz#1987204 - CVE-2021-32786 mod_auth_openidc: open redirect in
                             oidc_validate_redirect_url() [rhel-9.0]


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-1
changelog:
  - Resolves: rhbz#2001852 - CVE-2021-39191 mod_auth_openidc: open redirect
                             by supplying a crafted URL in the target_link_uri
                             parameter


author: Paul Howarth <paul@city-fan.org> - 2.3.9-24
changelog:
  - Drop EL-6 support
    - Use %license unconditionally
    - _httpd_* macros always available
    - Run directory is always /run on tmpfs
    - Assume httpd ≥ 2.4 filesystem layout
    - systemd-units always provided by systemd


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-26
changelog:
  - Resolves: #1958882 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-3
changelog:
  - Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
    in forward proxy configurations


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-5
changelog:
  - Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with
    mod_rewrite and mod_proxy


author: Coty Sutherland <csutherl@redhat.com> - 1.2.48-20
changelog:
  - Cleanup spec file and remove .redhat-N suffix from release
  - Remove ap24 subpackage since we only need to build for one version of httpd


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-1
changelog:
  - Resolves: RHEL-25075 - new version 2.4.26
  - Resolves: RHEL-11838 - [RFE] add support of dns_01 challenge to mod_md
  - Resolves: RHEL-17462 - OCSP response rejected when nextUpdate field not set
  - Resolves: RHEL-17467 - mod_md should trigger the reissue of new pair
    key/certificate when OCSP reports a revoked status


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release


author: Fedora Release Engineering <releng@fedoraproject.org> - 2.9.3-10
changelog:
  - Resolves: #1930664 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules
  - rename mlogc to mod_security-mlogc


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-2
changelog:
  - Resolves: RHEL-16358 - A form data, "会社"(Company in Japanese) is forbade
    with REQUEST-941-APPLICATION-ATTACK-XSS.conf of mod_security_crs


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-3
changelog:
  - Resolves: #RHEL-22733 - mod_security_crs - The rule id:913100 in the
    REQUEST-913-SCANNER-DETECTION.conf blocks requests  with "User-agent:
    urlgrabber/3.10 yum/3.4.3"


author: Jakub Kadlcik <frostyx@email.cz> 0.5-1
changelog:
  - Release for epel8 as well (frostyx@email.cz)
  - Require createrepo_c for the createrepo_mod package (frostyx@email.cz)
  - modulemd-merge: improve README.md file (frostyx@email.cz)
  - repo2module: improve README.md file (frostyx@email.cz)
  - dir2module: improve README.md file (frostyx@email.cz)
  - Improve README.md file (frostyx@email.cz)
  - createrepo_mod: improve README.md file (frostyx@email.cz)
  - Loosen the python3-libmodulemd dependency to just libmodulemd
    (frostyx@email.cz)
  - createrepo_mod: use just createrepo_c if it has built-in module support
    (frostyx@email.cz)
  - Explicitly depend on python3-setuptools (frostyx@email.cz)
  - createrepo_mod: dump modules.yaml into the correct directory
    (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6-1
changelog:
  - Generate manpages for all tools in this repository 
  - modulemd-generate-macros: add a tool for generating module-build-macros
  - modulemd_tools: add the first pieces of a python library (for internal usage only)


author: Jakub Kadlcik <frostyx@email.cz> 0.7-1
changelog:
  - Generate manpages on the fly
  - Automated test builds incl. Docker/Travis
  - Fix PEP8 in all tools
  - modulemd_tools: temporarily skip some tests on EPEL8 or Fedora
  - Drop libmodulemd dependency in favor of python3-libmodulemd


author: Jakub Kadlcik <frostyx@email.cz> 0.8-1
changelog:
  - modulemd_tools: drop python3-parameterized dependency (frostyx@email.cz)
  - Package modulemd_tools helper lib (fvalder@redhat.com)
  - Add modulemd-merge tests (fvalder@redhat.com)
  - Add createrepo_mod tests (fvalder@redhat.com)
  - Replace master in fedora releaser to rawhide (frostyx@email.cz)


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-4
changelog:
  - Generate profiles section and modulemd-defaults file
    Related: rhbz#1801747
  - Use autosetup to automatically apply patches


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-5
changelog:
  - Don't traceback because of a modular SRPM in the repo
    Related: rhbz#2227436
  - Replace deprecated LooseVersion
  - Fix tests for new libmodulemd version 2.15.0


author: Adam Jackson <ajax@redhat.com> - 2.3.4-25
changelog:
  - Fix invoking autogen/configure so the default CFLAGS actually get applied
    Resolves: rhbz#2044881


author: José Expósito <jexposit@redhat.com> - 2.3.4-28
changelog:
  - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
  - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap


author: Jan Horak <jhorak@redhat.com> - 1.9-28
changelog:
  - Removed NPAPI from the description, since is no longer supported in Mozilla
    products
    Resolves: rhbz#2041339


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Honggang Li <honli@redhat.com> - 5.7-3
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960479


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2015392


author: Davide Caratti <dcaratti@redhat.com> - 0.7-2
changelog:
  - add a simple sanity test and enable gating. Related: rhbz#1962741
  - don't overwrite global build options. Related: rhbz#1967697
  - fix 'check_conflicts' on multilib. Related: rhbz#1967697


author: Davide Caratti <dcaratti@redhat.com> - 0.8-2
changelog:
  - fix mptcpize to work also when protocol number is 0 (upstream issue #159)
    and when command resides in another file system (upstream issue #161)
    Related: rhbz#2015623


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 0.5.13-6
changelog:
  - updating line in /usr/lib/tmpfiles.d/munge.conf: /var/run/munge → /run/munge
  - add license tag
  - add requires logrotate


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Ray Strode <rstrode@redhat.com> - 40.9-18
changelog:
  - Don't allow applications on other workspaces to steal
    focus, unless their timestamps are pristine
    Resolves: RHEL-29537


author: Jonas Ådahl <jadahl@redhat.com>) - 40.9-20
changelog:
  - Fix positioning when using always-on-top windows
    Resolves: RHEL-45998
  - Improve handling of always-on-visible-workspace windows
    Resolves: RHEL-45366


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-22
changelog:
  - Fix crash when moving window while switching workspace
    Resolves: RHEL-62997
  - Improve app discovery for workspace logic
    Resolves: RHEL-63000


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, OpenSSL 3, s390 and robin hood
  - Add a new plugin


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.34-1
changelog:
  - Update to MySQL 8.0.34
  - Add patch from upstream bug#110569
  - Add patch to fix binlog format issue
  - Use --skip-combinations over --binlog-format=mixed
  - Add alignment patch upstream bug#110752


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Michal Schorm <mschorm@redhat.com> - 1.0.1-1
changelog:
  - Rebase to 1.0.1 release
    This release is just a sync-up with upstream selinux-policy
  - URL changed to a new upstream repository


author: Richard W.M. Jones <rjones@redhat.com> - 1.28.5-1
changelog:
  - Rebase to new stable branch version 1.28.5
    resolves: rhbz#2011709
  - Move nbdkit-null-plugin to nbdkit-server package
    resolves: rhbz#2021154
  - Add asynchronous support in nbdkit-vddk-plugin
  - Drop obsolete documentation related to thread model in vddk plugin
    resolves: rhbz#2018463
  - Switch to xorriso (instead of genisoimage)
  - Distribute README.VDDK in nbdkit-vddk-plugin subpackage
  - Fix nbdkit-cow-filter cow-block-size=4096
  - file: Fix implementation of cache=none for writes
    resolves: rhbz#2029751
  - vddk: Implement VMDK creation


author: Richard W.M. Jones <rjones@redhat.com> - 1.30.8-1
changelog:
  - Rebase to new stable branch version 1.30.8
    resolves: rhbz#2059289
  - Add automatic provides generator and subpackage nbdkit-srpm-macros
    resolves: rhbz#2059291
  - New filters: blocksize-policy, protect, retry-request
  - Fix license of bash-completion subpackage
  - vddk: Fix use of uninitialized memory when computing block size
    resolves: rhbz#2066655
  - Skip vsock tests unless the vsock_loopback module is loaded
    resolves: rhbz#2069558
  - Add support for ssh create remote file.
  - Suppress excess messages from nbdkit-nbd-plugin
    resolves: rhbz#2083498
  - Suppress incorrect VDDK error when converting guests from vCenter
    resolves: rhbz#2083617
  - Backport new readahead filter from 1.32.
  - Backport new LUKS filter from 1.32.
  - Backport new scan filter from 1.32.
  - Add new Python binding for nbdkit_parse_size from 1.32
  - Add new rate filter burstiness setting from 1.32
  - vddk: Suppress new VDDK "phone home" messages
    resolves: rhbz#2104720
  - vddk: Clearer error message when thumbprint is wrong
    resolves: rhbz#1905772
  - Fix memory allocator=malloc,mlock=true
    resolves: rhbz#2044432
  - Fix multiple Coverity problems
  - Fix bounds error in nbdkit-checkwrite-filter
    resolves: rhbz#2108545


author: Richard W.M. Jones <rjones@redhat.com> - 1.32.5-4
changelog:
  - Rebase to new stable branch version 1.32.5
    resolves: rhbz#2135765
  - Move stats filter to new subpackage.
  - Improve error message when PasswordAuthentication is set to 'no'
    resolves: rhbz#2158300
  - luks: Avoid crash when image does not contain a LUKS header
    resolves: rhbz#2159581
  - curl: Enable multi-conn for read-only connections
    resolves: rhbz#2166686


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-9
changelog:
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141902) and (#2141906)
  - fix memory leak when ipv6 disable set to 1 (#2151540)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-14
changelog:
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26649)


author: Thomas Haller <thaller@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0 release
  - Drop NotShowIn=GNOME
  - Use wireless-security code from libnma
  - Add flatpak build configuration
  - applet: hide unmanaged ethernet devices in nm-applet
  - applet: fix Wi-Fi scan requests with appindicator
  - editor: fix drop down list for connection.secondaries


author: Steve Dickson <steved@redhat.com> 2.5.4-19
changelog:
  - Don't allow junction tests to trigger automounts (bz 2148353)
  - Fix typo in man page nfs.conf.man (bz 2203092)


author: Steve Dickson <steved@redhat.com> 2.5.4-21
changelog:
  - gssd: fix handling DNS lookup failure (RHEL-15035)
  - gssd: handle KRB5_AP_ERR_BAD_INTEGRITY errors (RHEL-15034)


author: Steve Dickson <steved@redhat.com> 2.5.4-22
changelog:
  - nfsmount.conf: Fix typo of the attribute name (RHEL-7904)
  - Update to support for the NFS RPC-with-TLS (RHEL-14754)


author: Steve Dickson <steved@redhat.com> 2.5.4-23
changelog:
  - Typos and documentation fixes (RHEL-22654)
  - blkmapd: fix coredump in bl_add_disk (RHEL-7941)
  - rpcdebug: avoid buffer underflow (RHEL-7931)


author: Steve Dickson <steved@redhat.com> 2.5.4-28
changelog:
  -  Makefile.am: allow mount.nfs to be writeable by owner (RHEL-68701)
  -  mount.nfs: retry NFSv3 mount after NFSv4 failure in auto negotiation (RHEL-68574)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-30
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-72823)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-64340)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-5
changelog:
  - Add -mod-devel subpackage for building external nginx modules
    Resolves: rhbz#1991720 (Neal Gompa)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-10
changelog:
  - Resolves: #1975747 - CVE-2021-3618 nginx: ALPACA: Application Layer Protocol
    Confusion - Analyzing and Mitigating Cracks in TLS Authentication


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-16
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-17
changelog:
  - bump package epoch to resolve RHEL-33939
  - Resolves: RHEL-33939 - Update path for nginx broken for existing CS
    installations


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1
changelog:
  - Resolves: #2096174 - RFE: add nginx:1.22 module stream
  - switch to pcre2
  - add stream_geoip_module and stream_realip_module
  - enable kTLS support


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-4
changelog:
  - Resolves: #2170808 - Running nginx with systemctl and entering ssl
    private key's pass phrase
  - added new ssl_pass_phrase_dialog directive which enables setting
    external program for entering password for encrypted private key


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-5
changelog:
  - Resolves: RHEL-12737 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Martin Osvald <mosvald@redhat.com> - 3:7.92-1
changelog:
  - New version 7.92
  - Resolves: #2180330 - Rebase nmap for TLS v1.3 support
  - Resolves: #2164833 - Remove duplicate tests


author: Ana Cabral <acabral@redhat.com> - 2.0.0-0.4.alpha3
changelog:
  - Upgrade to 2.0.0 alpha 3. Resolves: RHBZ#1996575
  - Remove connection renaming behaviour. Resolves: RHBZ#1998222
  - Add prefixes to OVS bridges and interfaces connections. Resolves: RHBZ#1998218
  - Improve OVS bridge start with nmstate. Resolves: RHBZ#1660250


author: Gris Ge <fge@redhat.com> - 2.2.27-1
changelog:
  - N/A

   - Support TCP congestion window(cwnd) in route. (59f99632)
   - Support query interface driver. (67817c23)
   - New API to generate changed state. (fe5327a2)

   - Include driver information for `persist-nic-names` subcommand. (1129e46b)
   - nm: Protect global DNS config in checkpoint. (881373ba)
   - route rule: Append rule instead of overriding when iface defined. (88d3d3ef)
  - Resolves RHEL-19409


author: Gris Ge <fge@redhat.com> - 2.2.33-1
changelog:
  - Upgrade to 2.2.33
  - Fix validation of controller overbook. RHEL-40683
  - Support DNS and route in kernel mode. RHEL-37665


author: Gris Ge <fge@redhat.com> - 2.2.35-1
changelog:
  - Upgrade to 2.2.35
  - Fix gen_diff on VLAN ID change. RHEL-38623
  - Fix Nmpolicy on mac-address identifier. RHEL-54292
  - Fix reapply. RHEL-50556


author: Gris Ge <fge@redhat.com> - 2.2.36-1
changelog:
  - Upgrade to 2.2.36
  - Support route source. RHEL-56258
  - Fix setting empty MPTCP flags. RHEL-38607
  - Fix gc mode on blackhole route. RHEL-56727
  - Support ipsec require-id-on-certificate. RHEL-50696
  - Reselect iface DNS if desired. RHEL-56557


author: Gris Ge <fge@redhat.com> - 2.2.38-1
changelog:
  - Upgrade to 2.2.38
  - Preserve current IP setting for multiconnect profile. RHEL-61890
  - Fix profile name changing. RHEL-59239
  - IPvlan support. RHEL-43438
  - Handle ipv6.method: ignore. RHEL-58406


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 2.2.40-1
changelog:
  - Upgrade to 2.2.40
  - Do not deactivate connection when removing routes. RHEL-70138
  - Use specific libnmstate logger. RHEL-72016
  - Do not deactivate connection if mptcp flags didn't change. RHEL-53211


author: Gris Ge <fge@redhat.com> - 2.2.41-1
changelog:
  - Upgrade to 2.2.41
  - Fix the lose of OVS DB system-id. RHEL-78652
  - Support overriding interface config. RHEL-59935


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.18.1-2
changelog:
  - Add back libs and v8-devel subpackages
  - Related: RHBZ#2121126
  - Record previously fixed CVE
  - Resolves: CVE-2021-44906


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.19.1-1
changelog:
  - Rebase to 16.19.1
  - Resolves: rhbz#2153714
  - Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-23920
  - Resolves: CVE-2022-25881 CVE-2022-4904


author: Jan Staněk <jstanek@redhat.com> - 1:16.19.1-2
changelog:
  - Update bundled c-ares to 1.19.1
    Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.1-1
changelog:
  - Rebase to 16.20.1
    Resolves: rhbz#2188291
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2177781


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.2-5
changelog:
  - Backport patches for several CVEs.
    Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.7.0-1
changelog:
  - Update to latest release
  - Resolves CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
  - Resolves CVE-2022-29244
  - Resolves: RHBZ#2111009


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.8.0-1
changelog:
  - Update to latest release
  - Resolves: RHBZ#2111009
  - Provide undici and cjs-module-lexer + wasi-sdk sources
  - Resolves: RBHZ#2111861


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.14.2-1
changelog:
  - Rebase to 18.14.2
  - Resolves: #2159389
  - Resolves: CVE-2022-25881, CVE-2022-4904, CVE-2023-23936, CVE-2023-24807
  - Resolves: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920


author: Jan Staněk <jstanek@redhat.com> - 1:18.16.1-1
changelog:
  - Rebase to 18.16.1
    Resolves: rhbz#2188292 rhbz#2187683
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2222285


author: Jan Staněk <jstanek@redhat.com> - 1:18.17.1-1
changelog:
  - Rebase to version 18.17.1
    Resolves: rhbz#2228940
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559
  - Specify proper OpenSSL configuration section build
    Related: rhbz#2226726


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:18.19.1-1
changelog:
  - Rebase to version 18.19.1
  - Fixes: CVE-2024-21892 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 (medium)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.8.1-1
changelog:
  - Update node and nghttp
  - Add fips patch
  - Fixes CVE-2023-44487 (nghttp)
  - Fixes CVE-2023-45143, CVE-2023-39331, CVE-2023-39332, CVE-2023-38552, CVE-2023-39333


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:20.11.1-1
changelog:
  - Rebase to version 20.11.1
  - Fixes: CVE-2024-21892 CVE-2024-21896 CVE-2024-22017 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 CVE-2024-21890 CVE-2024-21891 (medium)


author: Jan Staněk <jstanek@redhat.com> - 1:20.12.2-1
changelog:
  - Rebase to version 20.12.0
    Fixes CVE-2024-27983 CVE-2024-27982 CVE-2024-22025 (node)
    Fixes CVE-2024-25629 (c-ares)


author: Andrei Radchenko <aradchen@redhat.com>
changelog:
  - Update to version 20.18.2
    Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76363 RHEL-76554 RHEL-76540


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.5.0-1
changelog:
  - Update to v20.5.0
  - Remove dtrace support
  - bcond corepack, so we don't provide it by default
  - Decrease debuginfo verbosity for all arches
  - Resolves: #2186717
  - Resolves RHELPLAN-155639


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.5.1-1
changelog:
  - Rebase to new security release
  - Address CVE-2023-32002, CVE-2023-32004, CVE-2023-32558 (high)
  - Address CVE-2023-32006, CVE-2023-32559 (medium)
  - Address CVE-2023-32005, CVE-2023-32003 (low)
  - Resolves: #2186717
  - Resolves RHELPLAN-155639


author: Jan Staněk <jstanek@redhat.com> - 1:22.13.1-1
changelog:
  - Update to version 22.13.1
    Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76354


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-2
changelog:
  - Build with bootstrap by default due to old versions of dependencies available
  - Resolves: #2042995, #2042970, #2042981, #2042989
  - Resolves: #2029936, #2024890, #2014499, #2014135
  - Resolves: #2013834, #1945299


author: Jan Staněk <jstanek@redhat.com> - 16.16.0-1
changelog:
  - Rebase to version 16.16.0
    Resolves: RHBZ#2106290
    Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
    Resolves: CVE-2022-29244


author: Jan Staněk <jstanek@redhat.com> - 2.0.3-6
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469


author: Jan Staněk <jstanek@redhat.com> - 2.0.19-1
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469
    Resolves: CVE-2020-7788


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
changelog:
  - Resolves: RHBZ#2005419
  - Resolves CVE-2020-28469
  - Rebase to newest version
  - Change source to npmjs.com


author: Stephen Gallagher <sgallagh@redhat.com> - 2021.06-1
changelog:
  - Update to 2021.06-1
  - bundler: Handle archaic license metadata
  - bundler: Warn about bundled dependencies with no license metadata


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-4
changelog:
  - FIPS review changes
  -   add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
  -   update the indicators for this release
  -   allow hashing of longer than int32 values in a single PKCS #11 call.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-5
changelog:
  - Pick up validated constant time implementations of p256, p384, and p521
    from upsream
  - More Fips indicator changes


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-2
changelog:
  - Fix MD-5 decode issue in pkcs #12
  - turn off policy processing for pkcs12 and smime
  - restore the rhel9 pkcs12 defaults for pk12util


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-17
changelog:
  - fix consistency return errors. We shouldn't lock the FIPS
    token if the application asked for invalid DH parameters on
    on keygen.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-1
changelog:
  - Rebase to NSS-3.90
  - Rebase to NSPR-3.35
  - fix incorrect version values in the NSS spec file for FIPS


author: Andreas Schneider <asn@redhat.com> - 1.1.11-8
changelog:
  - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install
                             smaller footprint


author: Jan Macku <jamacku@redhat.com> - 1.15-1
changelog:
  - spec: sync specfile with Fedora
  - makefile: Use rpmdev-bumpspec's legacy date option
  - Add feature to generate specfile entry, commit and archive


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jerry James <loganjerry@gmail.com> - 8.0.1-1
changelog:
  - Version 8.0.1
  - Add 0002-Catch-CompileException-in-test.patch to fix compilation of a test
  - Make generate-tarball.sh actually compress the tarball


author: Jindrich Novy <jnovy@redhat.com> - 1.2.5-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.5
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.6-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.6
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.8-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.8
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1.2.9-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 1.2.10-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10
  - Related: RHEL-2112


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.5-1
changelog:
  - apply patch from Matthias Gerstner of the SUSE security team to fix a
    possible race condition in the mkhomedir helper (CVE-2020-10737)
  - only process SELinux contexts if SELinux is not disabled (Alexander Bokovoy)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.6-1
changelog:
  - update license on src/buffer.h
  - change /var/run -> /run in systemd service file (Orion Poplawski)


author: Zuzana Miklankova <zmiklank@redhat.com> - 1.9.0~beta1-1
changelog:
  - Rebase to 1.9-beta1
  - change of licences of ongres-scram and ongres-scram-javadoc to "BSD and MIT and ASL 2.0"


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Milan Crha <mcrha@redhat.com> - 2.3-38
changelog:
  - Related: #2013578 (Add patch to build against samba 4.15)
  - Avoid build time dependencies related to server, when it's not built


author: Karol Herbst <kherbst@redhat.com> - 3.0-0.20200512git5cc337c
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Bump CLHPP version to 2.0.11


author: Karol Herbst <kherbst@redhat.com> - 3.0-1.20200512gitd082d42
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Rework CLHPP handling as file is not downloadable anymore
  - Bump CLHPP version to 2.0.12


author: Than Ngo <than@redhat.com> - 3.21.0-3
changelog:
  - Resolves: #2110497, concurrent MK rotation for cca token
  - Resolves: #2110498, concurrent MK rotation for ep11 token
  - Resolves: #2110499, ep11 token: PKCS #11 3.0 - support AES_XTS
  - Resolves: #2111010, cca token: protected key support 
  - Resolves: #2160061, rebase to 3.21.0
  - Resolves: #2160105, pkcsslotd hardening
  - Resolves: #2160107, p11sak support Dilithium and Kyber keys
  - Resolves: #2160109, ica and soft tokens: PKCS #11 3.0 - support AES_XTS


author: Than Ngo <than@redhat.com> - 3.21.0-8
changelog:
  - Resolves: #2222592, p11sak tool: slot option does not accept argument 0 for slot index 0
  - Resolves: #2222596, p11sak fails as soon as there reside non-key objects


author: Than Ngo <than@redhat.com> - 3.22.0-2
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22792


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-50064, update to 3.24.0
  - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le
  - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-50056, openCryptoki cca token SHA3 support
  - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71053)
  - Avoid SSL context cleanup during library destruction (RHEL-56502)


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2109485)
  - Remove oscap-remediate service (rhbz#2111358)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159286)
  - Fix error when processing OVAL filters (rhbz#2126883)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2138884)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217442)
  - Fix systemd* probes unit enumeration (rhbz#2219532)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.11-1
changelog:
  - Upgrade to the latest upstream release (RHEL-76355)
  - Introduce "oscap-im", a tool for building hardened bootable container images
  - Fix RPM probes in bootable container images build environment (RHEL-55251)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-11
changelog:
  - Initialize crypto API only once (rhbz#2020044)
  - Add support for Blueprint remediations (rhbz#2020052)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-12
changelog:
  - Allow using local files instead of remote resources (rhbz#2015518)
  - Add an alternative source of hostname (rhbz#2021509)
  - Lower memory limits and improve their checking (rhbz#2022362)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041782)
  - Select and exclude groups of rules on the command line (rhbz#2020580, rhbz#2020581)
  - The boot-time remediation service for systemd's Offline Update mode


author: Norbert Pocs <npocs@redhat.com> - 8.7p1-32
changelog:
  - Fix pkcs11 issue with the recent changes
  - Delete unnecessary log messages from previous compl-dh patch
  - Add ssh_config man page explanation on rhbz#2068423
  - Resolves: rhbz#2207793, rhbz#2209096


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-35
changelog:
  - Relax OpenSSH checks for OpenSSL version
    Resolves: RHEL-4734
  - Limit artificial delays in sshd while login using AD user
    Resolves: RHEL-2469
  - Move users/groups creation logic to sysusers.d fragments
    Resolves: RHEL-5222


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-45
changelog:
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465).
    Resolves: RHEL-78700


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-25
changelog:
  - Provide relevant diagnostics when FIPS checksum is corrupted
    Resolves: RHEL-5317
  - Don't limit using SHA1 in KDFs in non-FIPS mode.
    Resolves: RHEL-5295
  - Provide empty evp_properties section in main OpenSSL configuration file
    Resolves: RHEL-11439
  - Avoid implicit function declaration when building openssl
    Resolves: RHEL-1780
  - Forbid explicit curves when created via EVP_PKEY_fromdata
    Resolves: RHEL-5304
  - AES-SIV cipher implementation contains a bug that causes it to ignore empty
    associated data entries (CVE-2023-2975)
    Resolves: RHEL-5302
  - Excessive time spent checking DH keys and parameters (CVE-2023-3446)
    Resolves: RHEL-5306
  - Excessive time spent checking DH q parameter value (CVE-2023-3817)
    Resolves: RHEL-5308
  - Fix incorrect cipher key and IV length processing (CVE-2023-5363)
    Resolves: RHEL-13251
  - Switch explicit FIPS indicator for RSA-OAEP to approved following
    clarification with CMVP
    Resolves: RHEL-14083
  - Backport the check required by SP800-56Br2 6.4.1.2.1 (3.c)
    Resolves: RHEL-14083
  - Add missing ECDH Public Key Check in FIPS mode
    Resolves: RHEL-15990
  - Excessive time spent in DH check/generation with large Q parameter value (CVE-2023-5678)
    Resolves: RHEL-15954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-26
changelog:
  - Avoid implicit function declaration when building openssl
    Related: RHEL-1780
  - In FIPS mode, prevent any other operations when rsa_keygen_pairwise_test fails
    Resolves: RHEL-17104
  - Add a directory for OpenSSL providers configuration
    Resolves: RHEL-17193
  - Eliminate memory leak in OpenSSL when setting elliptic curves on SSL context
    Resolves: RHEL-19515
  - POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)
    Resolves: RHEL-21151
  - Excessive time spent checking invalid RSA public keys (CVE-2023-6237)
    Resolves: RHEL-21654
  - SSL ECDHE Kex fails when pkcs11 engine is set in config file
    Resolves: RHEL-20249
  - Denial of service via null dereference in PKCS#12
    Resolves: RHEL-22486
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Resolves: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-27
changelog:
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Related: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-1
changelog:
  - Rebase to OpenSSL 3.2.2. Fixes CVE-2024-2511, CVE-2024-4603, CVE-2024-4741,
    and Minerva attack.
    Resolves: RHEL-32148
    Resolves: RHEL-36792
    Resolves: RHEL-38514
    Resolves: RHEL-39111


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-7
changelog:
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76756


author: Benedikt Bongartz <bongartz@redhat.com> - 0.95.0
changelog:
  - add observability user that is part of the systemd-journal group
  - add opentelemetry collector config folder (`/etc/opentelemetry-collector/configs`)
  - add opentelemetry collector default config
  - add microshift manifests


author: Felix Kolwa <fkolwa@redhat.com> - 0.102.1-4
changelog:
  - Fix SELinux policy resource names
  - Use sources for SELinux resources in spec file
  - Bump revision


author: Felix Kolwa <fkolwa@redhat.com> - 0.107.0-1
changelog:
  - Version bump to 0.107.0
  - Reset release to 1
  - Update addresses the following CVEs:
  - CVE-2024-34155
  - CVE-2024-34156
  - CVE-2024-42368


author: Kseniia Nivnia <knivnia@redhat.com> - 0.107.0-2
changelog:
  - Bump revision
  - Update tarball name to match upstream
  - Upgrade the following tarball dependencies:
  - x/sys v0.23.0 to v0.29.0
  - x/crypto v0.26.0 to v0.32.0
  - x/net v0.28.0 to v0.33.0
  - x/sync v0.8.0 to v0.10.0
  - x/term v0.23.0 to v0.28.0
  - x/text v0.17.0 to v0.21.0
  - Update addresses the following CVEs:
  - CVE-2024-45338
  - CVE-2024-45337


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-3
changelog:
  - Bump revision
  - Update tarball golang from 1.21.0 to 1.22.11
  - Update addresses CVE-2024-45336
    Resolves: RHEL-79113


author: Matej Tyc <matyc@redhat.com> - 2.0.0-5
changelog:
  - Fix handling of content archives
    Resolves: rhbz#1996129
  - Fix handling of content fingerprint
    Resolves: rhbz#1993065
  - Fix crash when a previously selected hardening has been cancelled
    Resolves: rhbz#2014108
  - Pull latest translations


author: Matej Tyc <matyc@redhat.com> - 2.0.0-8
changelog:
  - Introduce unified help support
    Resolves: rhbz#2043512
  - Update translations
    Resolves: rhbz#2017374


author: Matej Tyc <matyc@redhat.com> - 2.0.0-9
changelog:
  - Introduce the firstboot remediation
    Resolves: rhbz#1999587
  - Add better error handling of installation using unsupported installation sources
    Resolves: rhbz#2042334


author: Matej Tyc <matyc@redhat.com> - 2.0.0-12
changelog:
  - Remove the firstboot remediation feature completely.
    We can't have it, while maintaining the standard UX.
    Resolves: rhbz#2065751


author: Matej Tyc <matyc@redhat.com> - 2.0.0-13
changelog:
  - Fix problems with handling multi-datastream archives
    Resolves: rhbz#2129846
  - Fix a crash when compulsively clicking in the GUI
    Resolves: rhbz#2127502


author: Jan Černý <jcerny@redhat.com> - 2.0.0-17
changelog:
  - Update translations (rhbz#2189526)
  - Fix tar file extraction (rhbz#2218875)
  - Fix conflict of tftp package with "network servers" group (rhbz#2172264)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210809-1
changelog:
  - Update for new release (v20210809) [bz#1970881]
  - Resolves: bz#1970881
    ([RHEL-9] virt-install --location fails with Could not find an installable distribution at URL '/var/lib/libvirt/images/boot.iso')


author: Victor Toso <victortoso@redhat.com> - 20221130-1
changelog:
  - Update for new release (v20221130)
    Resolves: rhbz#2135751
  - Add rhel-8.8 and rhel-9.2 prereleases
    Related: rhbz#2135751


author: Colin Walters <walters@verbum.org> - 2024.4-3
changelog:
  - Backport
    https://github.com/ostreedev/ostree/pull/3205/commits/e47b37096343efa3bea8295f3f44c4dc90cc04e2


author: Alex Macdonald <almacdon@redhat.com> - 1.2.2-3
changelog:
  - Remove osgi metadata patch0 that previously added a manifest
  - Include patch (courtesy of jkang) to package as a bundle instead of a jar
  - Update maven-compiler-plugin source/target version for builds in f33


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.2-1
changelog:
  - Update to new upstream release 0.25.2
    Resolves: RHEL-14834
  - Add IBM specific mechanisms and attributes
    Resolves: RHEL-10570


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.3-3
changelog:
  - Fix regression in trust where file creation fails for long cert labels
    Resolves: RHEL-58899
  - Fix usage message in p11-kit list-tokens command
    Resolves: RHEL-31810


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-14
changelog:
  - pam_lastlog: check localtime_r() return value. Resolves: #2130124
  - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2126632
  - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2126648


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-16
changelog:
  - libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
  - fix formatting of audit messages. Resolves: RHEL-5100


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.3.1-18
changelog:
  - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
  - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.3.1-19
changelog:
  - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
    situations. CVE-2024-22365. Resolves: RHEL-21244


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-22
changelog:
  - pam_unix: always run the helper to obtain shadow password file entries.
    CVE-2024-10041. Resolves: RHEL-62879
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-23631 and RHEL-39943


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.11-1
changelog:
  - Update to v6.11 release
  - Resolves: rhbz#1876400 - CVE-2020-14342 - cifs-utils: shell command injection


author: Jonathan Lebon <jonathan@jlebon.com> - 6.11-2
changelog:
  - Split out -info subpackage for smb2-quota and smbinfo
    https://bugzilla.redhat.com/show_bug.cgi?id=1909288


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: Peng Wu <pwu@redhat.com> - 1.48.7-3
changelog:
  - Update pango-emoji-table.h for emoji 14 support
  - Add pango-update-emoji.patch
  - Resolves: #2119674


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.42.2-3
changelog:
  - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use
    cairomm1.0, which may be a virtual Provides, in the manual lib Requires


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230222.g4ddbcb9-3
changelog:
  - Refresh SELinux labels in scriptlets, require -selinux package (rhbz#2183089)
  - Don't install useless SELinux interface file for pasta (rhbz#2183106)


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230222.g4ddbcb9-4
changelog:
  - Drop (pointless) patches 20, 21, 22, actually apply changes to the spec file!
  - Refresh SELinux labels in scriptlets, require -selinux package (rhbz#2183089)
  - Don't install useless SELinux interface file for pasta (rhbz#2183106)


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-2
changelog:
  - Drop user_namespace create allow rule, incompatible with current el9 kernel
  - Resolves: RHELPLAN-155811


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-3
changelog:
  - Explicit restorecon in scriptlet as rpm(8) mix up contexts with hard links
  - Resolves: RHELPLAN-155811


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-4
changelog:
  - Switch to copies instead of links for pasta: previous workaround unreliable
  - Resolves: RHELPLAN-155811


author: Nathan Scott <nathans@redhat.com> - 6.2.1-1
changelog:
  - Rebase to latest stable version of PCP (RHEL-30198)
  - Disable pmproxy(1) RESP proxying by default (RHEL-30720)
  - Add pmcheck(1) utility to check installation (RHEL-25497)


author: Nathan Scott <nathans@redhat.com> - 6.2.2-1
changelog:
  - Rebase to latest stable version of PCP (RHEL-30198)
  - Fix pcp2openmetrics on s390x reading from an archive (RHEL-32407)
  - Fix pcp2openmetrics -F output file option (RHEL-32674)
  - Fix pmlogdump version reporting (RHEL-32381)
  - Add timestamps for pcp2openmetrics archive option (RHEL-32369)
  - Add new metrics to monitor VMware balloon usage (RHEL-32198)


author: Lauren Chilton <lchilton@redhat.com> - 6.2.2-4
changelog:
  - Removed excess headers for pcp2openmetrics tool (RHEL-39159)
  - Fix pcp2openmetrics '-s' option (RHEL-39132)
  - Fix pcp2openmetrics timestamps in archive mode (RHEL-32983)
  - Fix pcp2openmetrics output to adhere to prometheus parser (RHEL-39293)


author: Nathan Scott <nathans@redhat.com> - 6.2.2-5
changelog:
  - Add rpm dependency on package providing ps(1) tool (RHEL-39491)
  - Update Java bytecode in pcp-testasuite package (RHEL-40718)


author: Nathan Scott <nathans@redhat.com> - 6.3.1-1
changelog:
  - New pcp-xsos utility for rapid system summaries (RHEL-30590)
  - Fix Upgrade scripts to not rewrite pmcd.conf (RHEL-40631)
  - Add new Hyper-V balloon usage metrics (RHEL-45715)
  - Auto-load pmdaproc in local context (RHEL-50941)
  - Fix a benign potential libpcp buffer overflow (RHEL-58914)
  - Fix pcp-zeroconf pmie.config write permission (RHEL-59366)
  - Rebase to latest stable version of PCP (RHEL-58953)


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Add proc PMDA access control for IO metrics (RHEL-60891)
  - Fix pmdastatsd segfaults within pmdaRehash (RHEL-57717)
  - Multiple hugepage size NUMA metric support (RHEL-45876)
  - Improve pcp-xsos command line diagnostics (RHEL-61597, RHEL-61598)
  - Add pmlogger_farm_check service selinux policy (RHEL-61885)
  - Fix v3 archive replay on big endian machines (RHEL-61501)
  - Rebase to latest stable version of PCP (RHEL-58953)


author: Nathan Scott <nathans@redhat.com> - 5.3.0-1
changelog:
  - Added conditional lockdown policy access by pmdakvm (BZ 1940971)
  - Added spec file dependency on cyrus-sasl-scram (BZ 1942879)
  - Update to latest PCP sources (BZ 1957575)


author: Nathan Scott <nathans@redhat.com> - 5.3.0-2
changelog:
  - Improve pmchart duplicate archive diagnostics (BZ 1615718)
  - Save pmchart users prefered archive locations (BZ 1615742)
  - Remove libvarlink dependency from podman PMDA (BZ 1956608)
  - Correct pcp-testsuite file permissions (BZ 1922040)
  - Resolve pcp-testsuite linkage problems (BZ 1950263)


author: Nathan Scott <nathans@redhat.com> - 5.3.1-3
changelog:
  - Fix pmproxy parallel TLS requests bug (BZ 1947989)
  - Backport pmrep archive creation fix (BZ 1974266)
  - Related: rhbz#1957575


author: Mark Goodwin <mgoodwin@redhat.com> - 5.3.1-4
changelog:
  - Improve pmproxy and libpcp_web scalability (BZ 1975069)
  - Provide a pcp-ss(1) tool in pcp-system-tools (BZ 1879350)


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Petr Pisar <ppisar@redhat.com> - 10.36-4
changelog:
  - Fix a mismatch if \K was involved in a recursion
  - Restore single character repetition optimization in JIT (upstream bug #2698)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-1
changelog:
  - Rebase to the 10.37
  - libpcre2-posix.so.2* SONAME bump to libpcre2-posix.so.3*
  - Enable JIT for s390x arch
  - Patches upstreamed: Patch 1,2,3,4
  - Resolves: rhbz#1970765, BZ#1965025


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-28
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951271 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1:0.9.4-23
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951270 replace apache-commons-logging with java.util.logging


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-471
changelog:
  - Make accessing environment by DynaLoader thread-safe
  - Use duplocale() if available
  - Fix fc() in Turkish locale
  - Fix croaking on "my $_" when "use utf8" is in effect (GH#18449)
  - Fix PERL_UNUSED_ARG() definition in XSUB.h
  - Add missing entries to perldiag (GH#18276)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-472
changelog:
  - Protect locale tests from LANGUAGE environment variable
  - Prevent the number of buckets in a hash from getting too large
  - Fix a memory leak when compiling a regular expression (GH#18604)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-474
changelog:
  - Fix dumping a hash entry of PL_strtab type
  - Fix an arithmetic left shift of a minimal integer value (GH#18639)


author: Paul Howarth <paul@city-fan.org> - 1.2000-1
changelog:
  - Update to 1.200
    - New release with no new features, just preparing for a series of bugfix
      releases
  - Specify all build dependencies
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.014-14
changelog:
  - Spec clean-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Use %{make_build} and %{make_install}
    - Fix permissions of installed files


author: Tom Callaway <spot@fedoraproject.org> - 0.44-1
changelog:
  - Update to 0.44
    - Support Perls with COW disabled
    - Bump B::COW requirement for testing
  - Disable tests until B::COW is packaged


author: Tom Stellard <tstellar@redhat.com> - 1.64-4
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Petr Pisar <ppisar@redhat.com> - 1.66-2
changelog:
  - Update DBD-SQLite-1.60-Unbundle-Test-NoWarnings.patch
  - Do not build-require unused Test::FailWarnings
  - Update the description


author: Tom Stellard <tstellar@redhat.com> - 1.642-7
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Paul Howarth <paul@city-fan.org> - 1:0.17029-1
changelog:
  - Update to 0.17029
    - Rebuild for order of 'NAME' and 'VERSION' sections in the generated POD
      documentation (VERSION used to appear before NAME)


author: Paul Howarth <paul@city-fan.org> - 1.002002-1
changelog:
  - Update to 1.002002
    - Fix bug in handling regexps in import lists; Exporter::Tiny allowed regexps
      like /foo/i but not /foo/; having trailing flags is now optional! (GH#6)
    - Tests would fail if 'PERL5OPT=-Mfeature=:5.18' environment variable was set;
      this is because bareword '-default' was being interpreted as the Perl
      'default' keyword (GH#5)
  - Unbundle newly-bundled test modules


author: Paul Howarth <paul@city-fan.org> - 1.16-18
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.72-21
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - IO::Socket::Utils CERT_asHash and CERT_create now support subject and
      issuer with multiple same parts (like multiple OU); in this case an array
      ref instead of a scalar is used as hash value (GH#95)


author: Michal Josef Špaček <mspacek@redhat.com> - 2.070-4
changelog:
  - Remove failing tests in openssl 3.0.0-alpha16. Related: rhbz#1968046
    - Provisional for mass rebuild of openssl3.


author: Paul Howarth <paul@city-fan.org> - 1.26-1
changelog:
  - Update to 1.26
    - BUILD: Update FAIL_POSIX warning message (GH#28)
    - TEST: t/07_taint.t: Use executable name as source of taintedness (GH#21)
    - OTHER: Typographic corrections (CPAN RT#60211, CPAN RT#86403)
    - Add Travis configuration


author: Paul Howarth <paul@city-fan.org> - 1.29-1
changelog:
  - Update to 1.29
    - Improved handling of shell commands on Windows, which should get us closer
      to resolving Win32-related issues; there should be no change of
      functionality on Unix-like platforms
    - Better workaround for bug in perl-5.8.9 (GH#23)
    - Add t/args.t
    - Modify t/win32.t
    - Added Travis and AppVeyor configuration files
    - Eliminated use of Dist::Zilla for build, using older, but more reliable and
      better understood (by maintainer) ExtUtils::MakeMaker-based configuration
    - Move author testing to xt/ directory


author: Emmanuel Seyman <emmanuel@seyman.fr> - 4.03-1
changelog:
  - Update to 4.03
  - Use %{make_install} instead of "make pure_install"
  - Use %{make_build} instead of make
  - Replace calls to %{__perl} with /usr/bin/perl
  - Pass NO_PACKLIST and NO_PERLLOCAL to Makefile.PL


author: Petr Pisar <ppisar@redhat.com> - 1:0.68-3
changelog:
  - Fix resolving localhost on loopback-only machines
    (https://github.com/perl-ldap/perl-ldap/pull/60)


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix failing installation in parallel make (GH#38)
    - Infrastructure improvements and tooling updates, lots of author tests with
      corresponding fixes added
    - Added slide and slideatatime functions
    - Documentation fixes (GH#21, GH#33, GH#34, CPAN RT#126029, CPAN RT#132043,
      CPAN RT#132940)
    - Bump List::MoreUtils::XS requirement to 0.430
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix parts of CPAN RT#123989: more $a/$b/$_ refcounting bugs
      - Since some bugs are simply reported wrong, dealing with them breaks more
        (including running code) than it solves - way too heavy to feel better...
    - Introduce functions slide and slideatatime
    - Toolchain fixes
    - Fix LANG=nb_NO.utf8 related str tests fails (CPAN RT#133128)
    - Fix typo (GH#7)
    - Fix parts of CPAN RT#132043: listcmp misbehave in XS implementation
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.70-1
changelog:
  - Update to 0.70
    - Protect ourselves from Module::Metadata parsing problems (CPAN RT#130939)
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.86-1
changelog:
  - Update to 0.86
    - Update PAUSE and ANDK keys to 2020
    - Update documentation pertaining to SHA1
    - Fix compatibility with Crypt::OpenPGP
  - Use mktemp to create temporary GPG directory


author: Paul Howarth <paul@city-fan.org> - 0.21-26
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.90-1
changelog:
  - Update to 1.90
    - Formalised libssl version support policy: all stable versions of OpenSSL
      in the 0.9.8-1.1.1 branches (with the exception of 0.9.8-0.9.8b) and all
      stable releases of LibreSSL in the 2.0-3.1 series are supported
    - The LibreSSL 3.2 series is not yet fully supported because its TLSv1.3
      implementation is not currently libssl-compatible
    - Added support for LibreSSL on Windows when built with Visual C++
    - Exposed P_X509_CRL_add_extensions, several SSL_CIPHER functions, and
      several stack functions
    - Fixed crashes in the callback functions CTX_set_next_proto_select_cb and
      CTX_set_alpn_select_cb
    - The test suite is now compatible with OpenSSL 1.1.1e onwards, as well as
      OpenSSL security level 2 (the default on many Linux distributions)


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-4
changelog:
  - Fix tests for openssl 3.0.0-alpha16. rhbz#1964854
    - Fix check across alpha1 vs alpha17
    - Change default alg for PEM_get_string_PrivateKey()
    - Different order in CA chain in some versions
    - Changed API of CTX_set_ciphersuites() and set_ciphersuites(), ignore
      unknown ciphers
    - Disable TLSv1 and TLSv1_1 usage in test


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-6
changelog:
  - Fix tests for openssl 3.0.0-beta1. rhbz#1964854
    - Add fix for t/05_passwd_cb.t
    - Update Net-SSLeay-1.90-openssl3.0.0-43_misc_functions.patch to accept beta version
  - Fix tab vs space in spec file
  - Update Net-SSLeay-1.90-openssl3.0.0-39_pkcs12.patch patch to upstream version


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-8
changelog:
  - Fix tests for openssl 3.0.0-beta2. rhbz#1992571
    - Add another fix for t/05_passwd_cb.t, because change in passphrase caching
  - Remove XXX in spec file


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-1
changelog:
  - Resolves: RHEL-40758
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list
  - Package tests


author: Paul Howarth <paul@city-fan.org> - 1.106-20
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build requirements
    - Drop support for building with Test::More < 0.88
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license macro


author: Paul Howarth <paul@city-fan.org> - 1:0.38-458
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Tom Stellard <tstellar@redhat.com> - 3:1.54-441
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.29-6
changelog:
  - Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.36-3
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Petr Pisar <ppisar@redhat.com> - 3:1.302177-1
changelog:
  - Update to 1.302177
    - Minor fix to author downstream test
    - No significant changes since the last trial
    - Fix Test::More's $TODO inside intercept (#862)


author: Paul Howarth <paul@city-fan.org> - 3:1.302180-1
changelog:
  - Update to 1.302180
    - Move try_sig_mask to the only module that uses it
    - Inherit warnings bitmask in cmp_ok string eval
    - Update copyright date
    - Improved API for intercept {} and what it returns
    - Bump minimum List::Util version (for uniq)


author: Paul Howarth <paul@city-fan.org> - 3:1.302181-1
changelog:
  - Update to 1.302181
    - Put try_sig_mask back where it goes (and add test to prevent this in the
      future)
    - Drop new List::Util requirement back down


author: Tom Stellard <tstellar@redhat.com> - 1.1-36
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Paul Howarth <paul@city-fan.org> - 1.30-1
changelog:
  - Update to 1.30
    - Breaking Change: Set $YAML::LoadBlessed default to false to make it more
      secure


author: Paul Howarth <paul@city-fan.org> - 1:0.238-1
changelog:
  - Update to 0.238
    - Move the prerequisite Test::More from being a runtime prerequisite to a
      test time / build time prerequisite (GH#11)


author: Filip Janus <fjanus@redhat.com> - 1.7.0-1
changelog:
  - Initial import for postgresql 15 module
  - Update to 1.7.0
  - Support postgresql 15
  - Related: #2128410


author: Remi Collet <rcollet@redhat.com> - 8.0.10-1
changelog:
  - rebase to 8.0.10 #1992513
  - compatibility with OpenSSL 3.0 #1992492
  - snmp:  add sha256 / sha512 security protocol #1936635
  - phar: implement openssl_256 and openssl_512 for phar signatures
  - phar: use sha256 signature by default


author: Remi Collet <rcollet@redhat.com> - 8.0.20-1
changelog:
  - rebase to 8.0.20 #2095752
  - clean unneeded dependency on useradd command #2095447
  - add upstream patch to initialize pcre before mbstring
  - retrieve tzdata version from /usr/share/zoneinfo/tzdata.zi


author: Remi Collet <rcollet@redhat.com> - 8.0.30-2
changelog:
  - Fix Leak partial content of the heap through heap buffer over-read
    CVE-2024-8929
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233
  - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
    CVE-2024-8927
  - Fix Logs from childrens may be altered
    CVE-2024-9026
  - Fix Erroneous parsing of multipart form data
    CVE-2024-8925
  - Fix filter bypass in filter_var FILTER_VALIDATE_URL
    CVE-2024-5458
  - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
    CVE-2024-2756
  - Fix password_verify can erroneously return true opening ATO risk
    CVE-2024-3096


author: Remi Collet <rcollet@redhat.com> - 8.1.6-2
changelog:
  - add upstream patch to initialize pcre before mbstring
  - add upstream patch to use more sha256 in openssl tests


author: Remi Collet <rcollet@redhat.com> - 8.2.13-1
changelog:
  - rebase to 8.2.13 RHEL-14699
  - add %__phpize and %__phpconfig macros
  - move httpd/nginx wants directives to config files in /etc
  - php-fpm.conf: move include directive after [global] section
    following upstream example, allowing overriding
  - use SPDX license IDs


author: Remi Collet <rcollet@redhat.com> - 8.3.12-1
changelog:
  - rebase to 8.3.12 RHEL-62189
  - enable command history in phpdbg
  - backport Argon2 password hashing in OpenSSL ext
  - build sockets extension statically
  - switch to nikic/php-parser version 5
  - openssl: always warn about missing curve_name


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Jakub Jelen <jjelen@redhat.com> - 1.1.1-2
changelog:
  - Move pinentry-tty to separate subpackage (#1782442)
  - Update the wrapper selecting the appropriate version (#1918969)


author: Neal Gompa <ngompa@centosproject.org> - 0.3.40-1
changelog:
  - Update to version 0.3.40 which drops media-session service for WirePlumber
    Resolves: rhbz#2022694


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 2.11.4-6
changelog:
  - Drop jackson-module-afterburner, jackson-module-guice, jackson-module-mrbean,
    jackson-module-osgi, jackson-module-paranamer, and jackson-module-javadoc


author: Alexander Scheel <ascheel@redhat.com> - 3.0.26-6
changelog:
  - CVE-2020-1695: Improper validation of response header in MediaTypeHeaderDelegate.java class
    Resolves: rh-bz#1845547


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 3.0.26-13
changelog:
  - Replace jboss-annotations-1.2-api with jakarta-annotations
  - Drop log4j dependency
  - Add jakarta-activation dependency


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.30-1
changelog:
  - Resolves: rhbz#1721684 Rebase pki-servlet-engine to 9.0.30
  - Update to JWS 5.3.0 distribution
  - Remove new dependencies that PKI doesn't need (and are not provided by RHEL 8)


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.43-1
changelog:
  - Update to JWS 5.5, and drop jakarta-saaj dependency
  - Updates to javapackages-local removed %add_maven_depmap which broke the build,
    so I removed most of the maven artifacts as they aren't very useful anyway
  - Cleaned up a few unnecessary patches


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.43-2
changelog:
  - Related: rhbz#1977948 Cleanup unused tomcat-juli.jar copy now that the maven artifacts have been removed


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-13.20200306git58a7289
changelog:
  - Add patches fixing crash on monitor hot(un)plug (rhbz#1809681)
  - Add patches fixing delay between gdm telling us to deactivate and
    us telling gdm it is ok to continue
  - Drop plymouth-plugin-throbgress sub-package, the spinfinity theme now
    uses the two-step plugin


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-14.20200306git58a7289
changelog:
  - New upstream git snapshot
  - Add RemainAfterExit=yes to plymouth's systemd service files (rhbz#1807771)
  - Fix the spinner / animation missing on shutdown and reboot


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-1.20210323git8a3c9bb
changelog:
  - Update to 0.9.5 + a bunch of extra fixes from git (new upstream git snapshot)
  - Fixes 1896929 - systemd complains about Unit configured to use KillMode=none


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2.20210331git1ea1020
changelog:
  - New git snapshot
  - Fixes 1933378 - Bootsplash doesn't always fully clear on boot to console
  - Fixes 1941329 - Flickering plymouth on shutdown/reboot
  - Prune spec-file changelog a bit


author: Jindrich Novy <jnovy@redhat.com> - 5:5.2.2-1
changelog:
  - stick with the v5.2-rhel branch for RHEL
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/458f9b4)
  - Resolves: RHEL-60965


author: Jindrich Novy <jnovy@redhat.com> - 5:5.2.2-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/e40738b)
  - Resolves: RHEL-61858


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/5e3accd)
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/45c2d1f)
  - fixes "CVE-2025-27144 podman: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-9.7]"
  - Resolves: RHEL-80615


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9d2e54f)
  - fixes "Excessive memory leak due to uncontrolled accumulation of health.log entries in Podman 5.x"
  - Resolves: RHEL-83262


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.1.1-rhel
    (https://github.com/containers/podman/commit/fa692a6)
  - Related: #2097694


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-6
changelog:
  - convert catatonit dependency to soft dep as catatonit is
    no longer in Appstream but in CRB
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.2.0
    (https://github.com/containers/podman/commit/7fe5a419cfd2880df2028ad3d7fd9378a88a04f4)
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 2:4.5.1-3
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175074
  - Resolves: #2179966
  - Resolves: #2187322
  - Resolves: #2187383
  - Resolves: #2203702
  - Resolves: #2207522


author: Jindrich Novy <jnovy@redhat.com> - 2:4.5.1-5
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175071
  - Resolves: #2179950
  - Resolves: #2187318
  - Resolves: #2187366
  - Resolves: #2203681
  - Resolves: #2207512


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.0
    (https://github.com/containers/podman/commit/38e6fab9664c6e59b66e73523b307a56130316ae)


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/1b2fadd)
  - Resolves: #2232127


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/8bb0204)
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/ea33dce)
  - Related: #2176063


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-2
changelog:
  - gettext: handle unsupported languages properly (#2100378)
  - semodule: rename --rebuild-if-modules-changed to --refresh
  - python: Split "semanage import" into two transactions (#2063353)
  - selinux-autorelabel: Do not force reboot (#2093133)


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-3
changelog:
  - Run autorelabel in parallel by default
    https://fedoraproject.org/wiki/Changes/SELinux_Parallel_Autorelabel


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Jan Rybar <jrybar@redhat.com> - 0.117-13
changelog:
  - session-monitor: watch sessions only
  - PolkitPermission: react on really changed sessions
  - allow polkit-pkla-compat to be uninstalled if no .pkla rules
  - Resolves: RHEL-39063


author: Marek Kasik <mkasik@redhat.com> - 21.01.0-11
changelog:
  - Backport fixes for issues found by Coverity Scan
  - and fix some of the new issues
  - Resolves: #1967967


author: Tomas Korbar <tkorbar@redhat.com> - 2:3.5.9-20
changelog:
  - Backport dns SRV record resolution feature (RFC6186)
    Resolves: rhbz#2134789
  - Fix building in ZUUL CI
    Resolves: rhbz#2193363


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.5.9-14
changelog:
  - Fixed cleanup crash when processing messages with whitespace only fullname
    Resolves: rhbz#1978901


author: Honza Horak <hhorak@redhat.com> - 13.3-6
changelog:
  - Do not provide pkgconfig(libpq) to not trick packages that actually require
    libpq-devel
    Resolves: #1980992


author: Filip Januš <fjanus@redhat.com> - 13.3-9
changelog:
  - Remove tests failing with openssl3, now pgp is tested only with
    supported ciphers
    Add postgresql-pgcrypto-openssl3-init.patch - Correctly init ciphers
    Add postgresql-pgcrypto-openssl3-tests.patch - disable unsupported
    ciphers in the test suite
    Related discussion: #2008773
    Resolves: #1964848


author: Marek Kulik <mkulik@redhat.com> - 13.5-1
changelog:
  - Update to 13.5 (#2023301)
    Remove patch postgresql-pgcrypto-openssl3-init.patch - Already in upstream


author: Masahiro Matsuya <mmatsuya@redhat.com> - 13.13-1
changelog:
  - Update to 13.13
  - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, and CVE-2023-39417
  - Resolves: RHEL-5567


author: Masahiro Matsuya <mmatsuya@redhat.com> - 15.5-1
changelog:
  - update to 15.5
  - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, CVE-2023-39417, and CVE-2023-39418


author: Filip Januš <fjanus@redhat.com> - 15.0-1
changelog:
  - Initial import for postgresql 15
  - Specfile is based on version locate in centos stream
    It reflects changes with libpq. This version of databse server
    will use private libpq library.
  - Resolves: #2128241


author: Filip Januš <fjanus@redhat.com> - 15.2-1
changelog:
  - Update to upstream version 15.2
  - Update postgresql-setup to 8.8
  - PostgreSQL systemd unit waits for the network to be up
  - Resolves: #2128241


author: Filip Janus <fjanus@redhat.com> - 16.0-1
changelog:
  - New postgresql stream - 16
  - Remove pdf documentation
  - Update postgresql-setup to 8.9
  - postmaster binary no more shipped
  - Resolves: RHEL-3636


author: Bastien Nocera <bnocera@redhat.com> - 0.8.1-2
changelog:
  + power-profiles-daemon-0.8.1-2
  - Remove linter, as apparently unwanted in check section
  - Resolves: rhbz#1947950


author: Kate Hsuan <hpa@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Support multi-drivers mode and amdgpu
  - Support dynamically adjusts amd-pstate EPP values between battery and AC modes.
  - Resolves: RHEL-23395


author: Than Ngo <than@redhat.com> - 1.3.10-1
changelog:
  - Resolves: #1920964, P10 Power Mode Reporting
  - Resolves: #2050893, Linux Hybrid Network Virtualizatio
  - Resolves: #2065169, bootloader fails to update boot order after OS install
  - Resolves: #2071862, Fix NM HNV setting primary slave
  - Resolves: #2089106, smtstate --save command failed


author: Than Ngo <than@redhat.com> - 1.3.10-3
changelog:
  - Resolves: #2111991, Add udev rule for the nx-gzip in to the core subpackage
  - Resolves: #2121470, Fix lsslot -c mem output when using 4GB LMB size
  - Resolves: #2110129, Add NVMf-FC boot support for Power


author: Than Ngo <than@redhat.com> - 1.3.10-4
changelog:
  - Resolves: #2150698, handle nsid of nvmf device as hexadecimal number
  - Resolves: #2150697, setup multiple device path for a nvmf boot device


author: Than Ngo <than@redhat.com> - 1.3.10-6
changelog:
  - Resolves: #2166870, lparstat: Fix display of mode for dedicated-donating partition
  - Resolves: #2169269, lparstat: Fix negative values seen while running lparstat with -E option


author: Than Ngo <than@redhat.com> - 1.3.10-7
changelog:
  - Fix negative values seen while running lpar
  - Fix lparstat error with mixed SMT state
  Resolves: #2225371


author: Than Ngo <than@redhat.com> - 1.3.10-8
changelog:
  - Resolves: RHEL-16045, Support partial SMT level through SYS FS smt/control files
  - Resolves: RHEL-11456, LPM hooks


author: Than Ngo <than@redhat.com> - 1.3.10-9
changelog:
  - Resolves: RHEL-20350, getting larger Negative value while running rtas_dbg -l
  - Resolves: RHEL-19076, installation fails if nsid of nvme device is greater than 10
  - Resolves: RHEL-11456, add new /etc/drmgr.d/pmig hierarchy


author: Than Ngo <than@redhat.com> - 1.3.10-11
changelog:
  - Resolves: RHEL-23620, nvram help page and man page are not in sync
  - Resolves: RHEL-23619, segault when running nvram --nvram-size 268435456
  - Resolves: RHEL-23624, segault when running nvram --print-config


author: Than Ngo <than@redhat.com> - 1.3.13-1
changelog:
  - Resolves: RHEL-30880, multipath - drmgr support
  - Resolces: RHEL-61089, lparstat -E Fails to Display Correct Values for %Busy and %Idle States


author: Than Ngo <than@redhat.com> - 2.7.9-5
changelog:
  - man and help of diag_nvme are not in sync
  - compiler warnings
  - diag_nvme: call_home command fails on nvmf drive
  - rtas_errd: Fix core dump with large filename passed to -f option
  Resolves: RHEL-55398


author: Adrian Reber <adrian@lisas.de> - 3.14.0-6
changelog:
  - Reintroduce the emacs subpackage to avoid file conflicts between
    protobuf-compiler.x86_64 and protobuf-compiler.i686
  - Disable LTO to fix annobin errors


author: Adrian Reber <areber@redhat.com> - 3.14.0-14
changelog:
  - Applied patch for CVE-2022-1941 (#RHEL-40872)
  - Applied patch to make emacs dependency optional (#RHEL-40572)


author: Jan Rybar <jrybar@redhat.com> - 3.6-16
changelog:
  - output is not redirected when ps_mem is killed
  - cmdline unwanted blank spaces fixed
  - Resolves: rhbz#2033997
  - Resolves: rhbz#2049743


author: Wim Taymans <wtaymans@redhat.com> - 15.0-1
changelog:
  - Update to 15.0
  - convert to meson build
  - esound, gconf, oss are no longer supported
  - Resolves: rhbz#1961581


author: Brian C. Lane <bcl@redhat.com> - 3.32.1-1
changelog:
  - Use .z version for new builds, start with 3.32.0 (bcl)
    Related: rhbz#1968762
  - tests: Use pykickstart/commands relative to the import (bcl)
    Related: rhbz#1968762


author: Brian C. Lane <bcl@redhat.com> - 3.32.2-1
changelog:
  - Add RHEL 9 handler (mkolman)
    Resolves: rhbz#1966730
  - Add RHEL 9 version for commands that had a RHEL version in the past (mkolman)
    Related: rhbz#1966730
  - Add RHEL 9 version for BTRFS related commands (mkolman)
    Related: rhbz#1966730


author: Brian C. Lane <bcl@redhat.com> - 3.32.4-1
changelog:
  - github: Add rhel9-branch to the list of branches (bcl)
    Related: rhbz#2054906
  - Fix validation of packages arguments (bcl)
    Resolves: rhbz#2054906


author: Brian C. Lane <bcl@redhat.com> - 3.32.5-1
changelog:
  - Tools should default to RHEL9 not DEVEL (bcl)
    Resolves: rhbz#2060779
  - Default to RHEL9 for docs and ksshell test. (bcl)
    Related: rhbz#2060779
  - Set default version to RHEL9 (bcl)
    Related: rhbz#2060779
  - Remove the --ignorebroken option from RHEL handlers (vponcova)
    Related: rhbz#2060779
  - Add the isRHEL function (vponcova)
    Related: rhbz#2060779


author: Brian C. Lane <bcl@redhat.com> - 3.32.6-1
changelog:
  - tests: Update ksvalidator tests to allow new wording for help output (bcl)
    Related: rhbz#2083269
  - rootpw: Use RHEL9 instead of F37 for new rootpw feature (bcl)
    Related: rhbz#2083269
  - rootpw: Add an --allow-ssh argument (bcl)
    Resolves: rhbz#2083269
  - github: Fix workflow to only send coverage for python 3.9 (bcl)
    Related: rhbz#2083269


author: Brian C. Lane <bcl@redhat.com> - 3.32.10-1
changelog:
  - Add DNS handling options to the network command (vslavik)
    Resolves: rhbz#2172531
  - whitelist_externals has changed to allowlist_externals (bcl)
    Related: rhbz#2172531


author: Brian C. Lane <bcl@redhat.com> - 3.32.11-1
changelog:
  - tox: Only run unit tests for python 3.6 (bcl)
    Related: RHEL-17662
  - Add conflict test between ostree sources (#2125655) (jkonecny)
    Related: RHEL-17662
  - Fix missing seen check for output generation (#2125655) (jkonecny)
    Related: RHEL-17662
  - Add new ostreecontainer command (#2125655) (jkonecny)
    Resolves: RHEL-17662
  - Check the conflicting commands automatically (vponcova)
    Related: RHEL-17662
  - Fix tests for conflicting commands (vponcova)
    Related: RHEL-17662
  - Add conflicting commands support (bcl)
    Related: RHEL-17662


author: Brian C. Lane <bcl@redhat.com> - 3.32.12-1
changelog:
  - Add support for inline certificates with `%certificate` section (k.koukiou)
    Resolves: RHEL-61432


author: Brian C. Lane <bcl@redhat.com> - 3.32.14-1
changelog:
  - Update %certificate section documentation (rvykydal)
    Related: RHEL-61432
  - Make %certificate section option --dir mandatory. (rvykydal)
    Resolves: RHEL-76501


author: Lumír Balhar <lbalhar@redhat.com> - 1.6.3-1
changelog:
  - Remove .dist-info directory at the end of %pyproject_buildrequires
  - An incomplete .dist-info directory in $PWD can confuse tests in %check


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.0-1
changelog:
  - %pyproject_buildrequires: Redirect stdout to stderr via Shell
  - Dependencies are recorded to a text file that is catted at the end


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.0-1
changelog:
  - %pyproject_buildrequires: Add support for self-referential extras requirements
  - Deprecate the provisional %{pyproject_build_lib} macro
    See https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/HMLOPAU3RZLXD4BOJHTIPKI3I4U6U7OE/


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.1-1
changelog:
  - On Python older than 3.11, use tomli instead of deprecated toml
  - Fix literal % handling in %{pyproject_files} on RPM 4.19


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.1-1
changelog:
  - Add a temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Related: rhbz#2284187


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-1
changelog:
  - Properly escape weird characters from paths in %{pyproject_files} (RPM 4.19+ only)
  - Revert the temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Fixes: rhbz#1990879


author: Python Maint <python-maint@redhat.com> - 1.15.0-1
changelog:
  - Add a possibility to read runtime requirements from pyproject.toml [project] table
  - Fixes: rhbz#2261939
  - Don't generate a dependency on pip when %pyproject_buildrequires -N is used
  - Fixes: rhbz#2294510
  - Even when %_auto_set_build_flags is disabled, set all compiler flags when building wheels
  - Fixes: rhbz#2293616


author: Miro Hrončok <mhroncok@redhat.com> - 1.16.0-1
changelog:
  - %pyproject_buildrequires: Add support for dependency groups (PEP 735), via the -g flag
  - This is implied when used tox testenvs depend on dependency groups (requires tox 4.22+)
  - Fixes: rhbz#2318849


author: Miro Hrončok <miro@hroncok.cz> - 1.16.1-1
changelog:
  - Support for setuptools 70+
  - wheel is no longer generated as a dependency of the default build system


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.2-1
changelog:
  - Update %pyproject_build_lib to support setuptools 62.1.0 and later
  - %pyproject_buildrequires: When extension modules are built,
    support https://fedoraproject.org/wiki/Changes/Package_information_on_ELF_objects


author: Python Maint <python-maint@redhat.com> - 1.4.0-1
changelog:
  - %pyproject_save_files: Support License-Files installed into the *Root License Directory* from PEP 369
  - %pyproject_check_import: Import only the modules whose top-level names
    match any of the globs provided to %pyproject_save_files


author: Miro Hrončok <mhroncok@redhat.com> - 3.9-44
changelog:
  - Set $RPM_BUILD_ROOT in %{python3_...} macros
    to allow selecting alternate sysconfig install scheme based on that variable


author: Karolina Surma <ksurma@redhat.com> - 3.9-45
changelog:
  - Introduce -f (read from file) option to %py{3}_check_import
  - Introduce -t (filter top-level modules) option to %py{3}_check_import
  - Introduce -e (exclude module globs) option to %py{3}_check_import


author: Karolina Surma <ksurma@redhat.com> - 3.9-46
changelog:
  - Fix multiline arguments processing for %py_check_import
  - Fix %py_shebang_flags handling within %py_check_import
  - Process .pth files in buildroot's sitedirs in %py_check_import
  - Move import_all_modules.py from python-srpm-macros to python-rpm-macros


author: Miro Hrončok <mhroncok@redhat.com> - 3.9-47
changelog:
  - Set %__python3 value according to %python3_pkgversion
    I.e. when %python3_pkgversion is 3.12, %__python3 is /usr/bin/python3.12


author: Tomas Orsava <torsava@redhat.com> - 3.9-49
changelog:
  - Add lua helper functions to make it possible to automatically generate
    Obsoletes tags
  - Modify the %py_provides macro to also generate Obsoletes tags on CentOS/RHEL
  - Resolves: rhbz#1990421


author: Tomas Orsava <torsava@redhat.com> - 3.9-51
changelog:
  - Add Obsoletes tags with the python39- prefix for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.19-1
changelog:
  - Update to 3.9.19
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix tests for XMLPullParser with Expat with fixed CVE
  Resolves: RHEL-33679, RHEL-33691


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.21-1
changelog:
  - Update to 3.9.21
  - Security fix for CVE-2024-11168 and CVE-2024-9287
  Resolves: RHEL-64889
  Resolves: RHEL-69942


author: Tomas Orsava <torsava@redhat.com> - 0.10.1-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 1.4.3-12
changelog:
  - Subpackage python2-appdirs has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.5.0-18
changelog:
  - Subpackage python2-augeas has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Pino Toscano <ptoscano@redhat.com> - 0.5.0-20
changelog:
  - Backport upstream commit d93e1563add8c40450556b7d74520439ee792bd9 to fix
    the discovery of location in the test
  - Execute the tests at build time
  - Add a simple gating test to execute the test script, and make it gating for
    the python-augeas source


author: Packit <hello@packit.dev> - 0.19.6-1
changelog:
  - [packit] 0.19.6 upstream release
  - Resolves rhbz#2211521 Upstream tag: v0.19.6 Upstream commit: b83949d0


author: Tomas Popela <tpopela@redhat.com> - 1.20.1-1
changelog:
  - Update to 1.20.1
  - Resolves: rhbz#2016905
  - Ship python3-cairo-devel in CRB
  - Resolves: rhbz#2053665


author: Miro Hrončok <mhroncok@redhat.com> - 5.0.6-19
changelog:
  - Subpackage python2-configobj has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 3.4.7-1
changelog:
  - Update to 3.4.7
  - Remove dependency on python-cryptography-vectors package and use vectors
    directly from Github source tar ball. Related: rhbz#1952343


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-6
changelog:
  - Rebase to 36.0.1, related: rhbz#2059630, rhbz#2060787
  - OpenSSL 3.0 FIPS mode is now detected correctly, related: rhbz#2054785
  - Fix error check from EVP_PKEY_CTX_set_signature_md, related: rhbz#2060343
  - Block 3DES in FIPS mode, related: rhbz#2055209
  - Disable DSA tests in FIPS mode
  - Enable SHA1 signatures in test suite
  - Fix serialization of keyusage ext with no bits
  - Re-enable tests that are passing again


author: Vendula Poncova <vponcova@redhat.com> - 0.4-1
changelog:
  - Replace the error register with the error mapper (vponcova)
  - Propagate additional arguments for the client handler factory (vponcova)
  - Propagate additional arguments in the class AddressedMessageBus (vponcova)
  - Generate the documentation (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.0-1
changelog:
  - Fix the documentation (vponcova)
  - Fix minor typos (yurchor)
  - Enable Codecov (vponcova)
  - Test the documentation build (vponcova)
  - Extend the documentation (vponcova)
  - Add configuration files for Read the Docs and Conda (vponcova)
  - Fix all warnings from the generated documentation (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.1-1
changelog:
  - Include tests and examples in the source distribution (vponcova)
  - Fix the pylint warning signature-differs (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.2-1
changelog:
  - Replace ABC with ABCMeta (vponcova)
  - Fix typing tests (vponcova)
  - Run tests on the latest CentOS (vponcova)
  - Install sphinx from PyPI (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.3-1
changelog:
  - Document differences between dasbus and pydbus (vponcova)
  - Improve the support for interface proxies in the service identifier (vponcova)
  - Improve the support for interface proxies in the message bus (vponcova)
  - Test the interface proxies (vponcova)
  - Make the message bus of a service identifier accessible (vponcova)
  - Fix the testing environment for Fedora Rawhide (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.4-1
changelog:
  - Handle all errors of the DBus call (vponcova)
  - Fix tests for handling DBus errors on the server side (vponcova)
  - Run packit smoke tests for all Fedora (jkonecny)
  - Fix packit archive creation (jkonecny)
  - Add possibility to change setup.py arguments (jkonecny)


author: Bryan Gurney <bgurney@redhat.com> - 0.8-4
changelog:
  - Remove check test
  - Remove BuildRequires for python3-dbus and python3-into-dbus-python
  - Resolves: rhbz#1986608


author: Bryan Gurney <bgurney@redhat.com> - 0.04-4
changelog:
  - Remove check test
  - Remove Requires and BuildRequires for python3-pyparsing
  - Resolves: rhbz#1986574


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-2
changelog:
  - Fix Python configuration for ELN/RHEL 9
  - Rework bconds for Python now that there are no Fedoras left that should
    use Python2


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-6
changelog:
  - Fix boot time derivation for systems with no rtc (RhBug:2166444,2182157)
  - system-upgrade: Add --poweroff option to reboot subcommand (RhBug:2157844)
  - Doc update for reposync (RhBug:2132383,2182004)
  - reposync: Implement --safe-write-path option (RhBug:1898089,2203766)
  - Enable the leaves and show-leaves DNF plugins (RhBug:2134638)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-7
changelog:
  - Remove patch: "reposync: Implement --safe-write-path option (RhBug:1898089,2203766)" (RhBug:2207946)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-12
changelog:
  - Fix incorrect spanish translation file (RHEL-6394)
  - Fix for strange issue with binary garbage in smaps files (RHEL-6420, RhBug:2231923)


author: Petr Pisar <ppisar@redhat.com> - 4.3.0-14
changelog:
  - needs-restarting prefers to obtain a boot time from systemd to deal with
    RTCs running in local time (RHEL-14900)


author: Petr Pisar <ppisar@redhat.com> - 4.3.0-16
changelog:
  - Revert needs-restarting prefers to obtain a boot time from systemd to deal
    with RTCs running in local time (RHEL-39775)


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Bryan Gurney <bgurney@redhat.com> - 0.08-4
changelog:
  - Remove check test
  - Remove BuildRequires for python3-dbus-signature-pyparsing and python3-dbus
  - Resolves: rhbz#1986609


author: Christian Glombek <cglombek@redhat.com> - 6.2.1.2-0.git802688d
changelog:
  - Update to upstream v2.1.2
  - Remove systemctl enable calls, as this is now handled by Fedora presets
  - per the guidelines
  - Remove initiator name generation, as this is now handled by an init service
  - Install ghost lockfile and dir to /run instead of /var
  - Rebased/fixed up patches
  - Fixed macros in comments and comments after macros
  - Merged service-file-tweaks.patch and
  - improve-systemd-service-files-for-boot-session-handl.patch
  - into unit-file-tweaks.patch 
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1493296
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1729740
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1834509


author: Chris Leech <cleech@redhat.com> - 6.2.1.2-1.git13e7f58
changelog:
  - iscsiadm overflow regression when discovering many targets at once
  - check for invalid session id during stop connection
  - add ability to attempt target logins asynchronously


author: Chris Leech <cleech@redhat.com> - 6.2.1.9-18.gita65a472
changelog:
  - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
  - new meson build system, sync with fedora packaging


author: Miro Hrončok <mhroncok@redhat.com> - 1.10-18
changelog:
  - Subpackage python2-jsonpointer has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Bryan Gurney <bgurney@redhat.com> - 0.15-5
changelog:
  - Remove check test
  - Remove BuildRequires and Requires for python3-justbases
  - Resolves: rhbz#1986913


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-1
changelog:
  - Rebased to libvirt-python-8.5.0 (rhbz#2060316)
  - The rebase also fixes the following bugs:
      rhbz#2092752


author: Miro Hrončok <mhroncok@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.2
  - Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
  - Fixes: rhbz#1855415
  - Fixes: rhbz#1901634


author: Petr Viktorin <pviktori@redhat.com> - 1.1.4-1
changelog:
  - Update to version 1.1.4
  - Avoids test warnings on Python 3.10
    Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1907474


author: Martin Kolman <mkolman@redhat.com> - 0.48-1
changelog:
  - Merge pull request #23 from poncovka/master-decode_bytes (mkolman)
  - Handle bytes and strings from RPM (#1764642) (vponcova)


author: Martin Kolman <mkolman@redhat.com> - 0.49-1
changelog:
  - Merge pull request #31 from jkonecny12/master-fix-make-archive (mkolman)
  - Fix make archive command after pot file removal (jkonecny)
  - Merge pull request #29 from jkonecny12/master-weblate-support (jkonecny)
  - Add Readme with description and translation badge (jkonecny)
  - Add pot file to the git ignore (jkonecny)
  - Pause release when making bumpver to check and solve translations (jkonecny)
  - Remove unused PREFIX from Makefile (jkonecny)
  - Remove Zanata (jkonecny)
  - Push translations to our translation repository (jkonecny)
  - Download translations from Weblate (jkonecny)
  - Remove pot file (jkonecny)
  - Merge pull request #24 from M4rtinK/master-fix_zanata_client_detection_in_makefile (mkolman)
  - Fix Zanata client detection in Makefile (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.50-1
changelog:
  - Merge pull request #33 from mzidek-gh/master (mkolman)
  - dump: Use exception's type and value when calculating hash (mzidek)


author: Tomas Orsava <torsava@redhat.com> - 4.7.1-9
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Use the modern way of filtering Provides not to interfere with modern Python
    RPM generators
  - Related: rhbz#1990421


author: Tom Stellard <tstellar@redhat.com> - 4.6.8-3
changelog:
  - Use make_build macro instead of just make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Miro Hrončok <mhroncok@redhat.com> - 0.10.6-9
changelog:
  - Subpackage python2-netifaces has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-2
changelog:
  - Limit BuildRequires to necessary minimum in Red Hat Enterprise Linux
  - Skip pytest in Red Hat Enterprise Linux
  - Do not build -doc subpackage for Red Hat Enterprise Linux


author: Jakub Hrozek <jhrozek@redhat.com> - 3.1.0-1
changelog:
  - Resolves: rhbz#1922352 - python-oauthlib requires python-mock
  - Update to upstream 3.1.0
  - Gets rid of obsolete python-nose dependency
  - Nuke the python2/python3 conditionals, let's only support python3


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.0-2
changelog:
  - Remove the python3-oauthlib+signedtoken package
  - When building, skip tests that require jwt
  - Resolves: rhbz#1966407 - Drop python-jwt dependency from python-oauthlib


author: Jakub Hrozek <jhrozek@redhat.com> - 3.1.1-1
changelog:
  - Resolves: rhbz#1935433 - python-oauthlib implements and/or uses the
                             deprecated SHA1 algorithm by default


author: TomasHalman <thalman@redhat.com> - 3.1.1-3
changelog:
  - Remove RSA support
  - Remove build dependency on blinker
    Resolves: rhbz#1984046 - python-oauthlib depends on jwt for RSA


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-4
changelog:
  - Make the python-pip-wheel subpackage versioned (python3-pip-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-5
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Miro Hrončok <mhroncok@redhat.com> - 3.11-6
changelog:
  - Subpackage python2-ply has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Lokesh Mandvekar <lsm5@redhat.com> - 3:4.8.0.post1-1
changelog:
  - update to https://github.com/containers/podman-py/releases/tag/v4.8.0.post1
  - Related: Jira:RHEL-2112


author: Miro Hrončok <mhroncok@redhat.com> - 0.7.2-21
changelog:
  - Subpackage python2-prettytable has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomas Orsava <torsava@redhat.com> - 5.8.0-5
changelog:
  - Remove unnecessary test dependency on python3-mock
  - Remove unnecessary macro __provides_exclude_from


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.8.6-6
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Add manual Obsoletes for python39-psycopg2-doc
  - Related: rhbz#1990421


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Dominik Mierzejewski <rpm@greysector.net> - 0.26-1
changelog:
  - update to 0.26 (#1780153)
  - make main package archful to run tests on all arches
    (pythonN-pyelftools subpackages are still noarch)
  - run readelf tests on x86_64 only for now
  - rename binaries to conform to Python packaging guidelines
  - enable python3 subpackage for EPEL7
  - declare bundled old construct module instead of needlessly requiring it


author: Pavel Cahyna <pcahyna@redhat.com> - 1.5.29-1
changelog:
  - Updated to 1.5.29.
  - Avoid dependency on python-pbr, conditionalize docs build, to allow building in RHEL.
    Inspired by python-sushy.


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.4-1
changelog:
  - Use Decimal for Device.getSize() operations, return a
    float (#1801355)
  - Update the 'twine upload' line in the Makefile
  - Don't intentionally prohibit Python 2 usage (#67)
  - mips64 support


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.5-1
changelog:
  - Require at least libparted 3.3 and python 3.7 (dcantrell)
  - pedmodule.c: Fix partition enum flag handling (bcl)
  - Add support for chromeos_kernel and bls_boot partition flags (bcl)
  - Move exception declarations to _pedmodule.c (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.7-1
changelog:
  - Upgrade to pyparted-3.11.7 (BZ#1890443)
  - Set PY_SSIZE_T_CLEAN for the build (bcl)
  - add nvme support
  - Update RELEASE file to make last step be "make pypi" (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.12.0-1
changelog:
  - Patch pyparted to handle PED_DISK_TYPE_PARTITION_TYPE_ID for the
    msdos disk type and PED_DISK_TYPE_PARTITION_TYPE_UUID for the gpt
    label
    Resolves: rhbz#2103243


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.3-3
changelog:
  - Replace pypi_name macro with srcname
  - Update BR’s
  - Run the doctests
  - Build documentation in a new -doc subpackage


author: Miro Hrončok <mhroncok@redhat.com> - 0.17.3-7
changelog:
  - Don't BuildRequire python3-hypothesis and exclude affected tests from %check
  - Resolves: rhbz#1928125


author: Miro Hrončok <mhroncok@redhat.com> - 3.4-6
changelog:
  - Subpackage python2-pyserial has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Charalampos Stratakis <cstratak@redhat.com> - 6.2.2-2
changelog:
  - Disable tests and documentation generation on RHEL9 to avoid pulling in dependencies
  - Drop redundant build dependency on wcwidth (unused since 6.0.0rc1)


author: Tony Asleson <tasleson@redhat.com> - 0.14.6-6
changelog:
  - Fix build failure
    Bad source: /builddir/build/SOURCES/pywbem-0.14.6.tar.gz: No such file or directory


author: Miro Hrončok <mhroncok@redhat.com> - 0.26-8
changelog:
  - Subpackage python2-pyxdg has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 6.1-10
changelog:
  - Resolves: #1935839 Remove python-imaging build requirements for RHEL
  - Run unit tests during build


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.0-11
changelog:
  - Don't use SIGNATURE_RSA
  - Related: #1935433 - python-oauthlib implements and/or uses the deprecated
                        SHA1 algorithm by default


author: Paul Belanger <pabelanger@redhat.com> - 0.5.4-1
changelog:
  - Initial package.
  - Forked from https://fedora.pkgs.org/rawhide/fedora-x86_64/python3-resolvelib-0.5.5-2.fc35.noarch.rpm.html however
    downgraded to 0.5.4 due to 0.5.5 being yanked from pypi.


author: Miro Hrončok <mhroncok@redhat.com> - 12-1
changelog:
  - Disable the dist generators for Python 2
  - https://fedoraproject.org/wiki/Changes/Disable_Python_2_Dist_RPM_Generators_and_Freeze_Python_2_Macros


author: Tomas Orsava <torsava@redhat.com> - 12-2
changelog:
  - scripts/pythondistdeps: Switch from using pkg_resources to importlib.metadata
    for reading the egg/dist-info metadata
  - The script no longer requires setuptools but instead requires packaging


author: Tomas Orsava <torsava@redhat.com> - 12-4
changelog:
  - scripts/pythondistdeps: Treat extras names case-insensitively and always
    output them in lower case (#1936875)


author: Miro Hrončok <mhroncok@redhat.com> - 12-5.1
changelog:
  - Do not generate setuptools requirement for console_scripts on Python 3.10+
  - See https://fedoraproject.org/wiki/Changes/Reduce_dependencies_on_python3-setuptools


author: Miro Hrončok <mhroncok@redhat.com> - 12-6
changelog:
  - Get rid of distutils deprecation warning (by not using it)
  - The distutils module is deprecated in Python 3.10+
  - https://www.python.org/dev/peps/pep-0632/


author: Tomas Orsava <torsava@redhat.com> - 12-8
changelog:
  - From `python3-foo` packages automatically generate `python3.X-foo` Obsoletes
    tags on CentOS/RHEL
  - Resolves: rhbz#1990421


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Andrea Claudi <aclaudi@redhat.com> - [2.4.4-4.el9]
changelog:
  - Don't build scapy-doc package on rhel (Andrea Claudi) [1973720]
  - Enable gating test on RHEL9 (Jianwen Ji) [1974642]


author: Andrea Claudi <aclaudi@redhat.com> - 2.5.0-1.el9
changelog:
  - Don't package scapy tests (Andrea Claudi)
  - Fix scapy compliance with pep-0440 (Andrea Claudi) [2162667]
  - New version 2.5.0 (Andrea Claudi) [RHEL-657]


author: Packit Service <user-cont-team+packit-service@redhat.com> - 1.8-1
changelog:
  - New version - 1.8 (Jiri Konecny)
  - Add missing make command to spec file (Jiri Konecny)
  - Don't translate the prompt keys (Vendula Poncova)
  - Enable daily build for Anaconda-devel COPR repository (Jiri Konecny)
  - Use Fedora container registry instead of Dockerhub (Jiri Konecny)
  - Migrate COPR daily COPR builds to Packit (Jiri Konecny)
  - Test build on Fedora ELN (Jiri Konecny)
  - Remove packit get-current-action (Jiri Konecny)
  - Run tests in GitHub workflow (Martin Pitt)
  - Fix raise-missing-from (W0707) pylint warnings (Martin Pitt)
  - Fix pylint to check test code correctly (Jiri Konecny)
  - Use script to run unit tests (Jiri Konecny)
  - Use relative imports in tests (Jiri Konecny)
  - Change directory structure of unit tests (Jiri Konecny)
  - Fix documentation of _process_screen method (Jiri Konecny)
  - Fix pylint issues (Jiri Konecny)
  - Use pylint instead of pocketlint (Jiri Konecny)
  - Add coverage support (Jiri Konecny)
  - Make link to exmples directory in Readme (Jiri Konecny)
  - Fix homepage of the project in setup.py (Jiri Konecny)
  - Fix classifiers in setup.py (Jiri Konecny)
  - Add pypi-upload to Makefile (Jiri Konecny)
  - Use correct variant of the field (Jiri Konecny)
  - Propose Fedora update only to Fedora in development (Jiri Konecny)
  - Add upstream tag template to packit for releasing (Jiri Konecny)
  - Packit will download archive from Source0 if needed (Jiri Konecny)


author: Jiri Konecny <jkonecny@redhat.com> - 1.8.3-1
changelog:
  - Fix bumpver Makefile target (Jiri Konecny)
  - Add tests for UIScreen wide disabling of concurrency check (Jiri Konecny)
    Related: rhbz#2134889
  - Abstract registering signal handler in the InputHandler constructor (Jiri Konecny)
    Related: rhbz#2134889
  - Allow to disable concurrency check for all UIScreen inputs (Jiri Konecny)
    Resolves: rhbz#2134889
  - Add Makefile target for local container tests (Jiri Konecny)
  - Use localization from rhel-9 weblate translation component (Jiri Konecny)
  - Remove changelog from the upstream spec file (Jiri Konecny)
  - Fix spec file archive link (Jiri Konecny)
  - Include also documentation to the tarball (Jiri Konecny)
  - Rename doc directory to docs (Jiri Konecny)
  - Add explanations of what is included in the MANIFEST.in file (Jiri Konecny)
  - Update packit config to reflect new tag naming (Jiri Konecny)
  - Change tag name to just version (Jiri Konecny)
  - Fix GitHub workflow checkout (Jiri Konecny)
  - Switch to packit new fedora-latest alias (Jiri Konecny)
  - Disable duplicate-code in pylint test (Jiri Konecny)
  - Remove duplicate of code between event loops (Jiri Konecny)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Nils Philippsen <nils@tiptoe.de> - 1.4.32-1
changelog:
  - version 1.4.32
  - don't BR: python3-pytest-xdist on EL9
  - remove obsolete (no-op) tweak of setup.cfg


author: Sergio Correia <scorreia@redhat.com> - 1.4.37-3
changelog:
  - Remove obsolete cruft from the specfile, follow the packaging guidelines
  - Remove also extra packages we have no runtime dependencies for
    Related: rhbz#2084556


author: Jerry James <loganjerry@gmail.com> - 2020.3-4
changelog:
  - Fix cmake file installation (bz 1930389)
  - Allow use of RTM instructions when available
  - At upstream's suggestion, do not force ITT_NOTIFY support
  - Drop -fetchadd64 patch, only needed for forced ITT_NOTIFY support


author: Miro Hrončok <mhroncok@redhat.com> - 2.0.1-5
changelog:
  - Initial package for RHEL 9
  - Resolves: rhbz#2175213
  - Fedora+EPEL contributions by:
        Maxwell G <gotmax@e.email>
        Michel Alexandre Salim <salimma@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>


author: Jonathon Turel <jturel@gmail.com> 0.7.2-1
changelog:
  - Use DNF on RHEL (jturel@gmail.com)
  - Use PackageManager to determine kernel version (jturel@gmail.com)
  - Use subprocess to check process path arguments (jturel@gmail.com)
  - Find the right lxml version for Python 3.4 (jturel@gmail.com)
  - Update Vagrantfile to use Fedora 30 (jturel@gmail.com)
  - Ignore debug kernels when checking if kernel has been updated
    (jturel@gmail.com)
  - Add build dependency for nosetests (frostyx@email.cz)
  - Run tests within the %check phase (frostyx@email.cz)
  - Update fedora branches (frostyx@email.cz)


author: Jonathon Turel <jturel@gmail.com> 0.7.2-3
changelog:
  - Update tito releaser branches (frostyx@email.cz)
  - Not build for python2 package for Fedora anymore (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.4-1
changelog:
  - Fix list index out of range for ssh process names (frostyx@email.cz)
  - When there is no helper, it doesn't contain anything (frostyx@email.cz)
  - Fix wrong parameters number when upating an application objects
    (frostyx@email.cz)
  - Remove unnecessary string decoding (frostyx@email.cz)
  - Fix the missing dist in release (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.5-1
changelog:
  - Depend on python3-six instead of python3-future (frostyx@email.cz)
  - Drop beautifulsoup4 in favor of built-in xml.dom (frostyx@email.cz)
  - Drop nosetests dependency, use pytest instead (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.9-1
changelog:
  - Create /var/run/reboot-required file (frostyx@email.cz)
  - Recommend the correct command for restarting auditd (frostyx@email.cz)
  - Add python3-setuptools dependency (frostyx@email.cz)
  - Fix argument passed to print_helper() (ferdnyc@gmail.com)
  - Add similar software to the readme (frostyx@email.cz)
  - Update url references to point to tracer.readthedocs.io (dcampano@gmail.com)
  - Oracle Linux 8 uses dnf, too (suttner@atix.de)
  - Drop python-setuptools runtime dependency (frostyx@email.cz)
  - Fix Python DeprecationWarning: invalid escape sequence
    (jvanderwaa@redhat.com)
  - Add readthedocs configuration file (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 1.0-1
changelog:
  - Fix querying RPM files on EPEL7 (frostyx@email.cz)
  - Use backported lru_cache on EPEL7 (frostyx@email.cz)
  - Don't hang forever when executed via SSH (frostyx@email.cz)
  - Don't check if package is installed before listing its files
    (frostyx@email.cz)
  - Replace regexes where they are not needed (frostyx@email.cz)
  - Query all packages at once, its faster than one by one (frostyx@email.cz)
  - Cache some properties for a massive performance boost (frostyx@email.cz)
  - Refactor unnecessary condition (frostyx@email.cz)
  - Fix weird indentation (frostyx@email.cz)
  - Pass the whole application to the provided_by function, not just its name
    (frostyx@email.cz)
  - Stop using deprecated rpm.fi (frostyx@email.cz)
  - Attempt to fix readthedocs deprecation error (frostyx@email.cz)
  - More reliable check if /usr/lib/sysimage/dnf/ database should be used
    (frostyx@email.cz)


author: Tomas Korbar <tkorbar@redhat.com> - 1.16.2-6
changelog:
  - Fix KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387
  - Fix Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868
  - Resolves: RHEL-25671
  - Resolves: RHEL-25643


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.9-1
changelog:
  - Rebase to 3.11.9
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix expat tests for the latest expat security release
  Resolves: RHEL-33677, RHEL-33689


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.5-1
changelog:
  - Rebase to 3.11.5
  - Security fixes for CVE-2023-40217 and CVE-2023-41105
  Resolves: RHEL-3045, RHEL-3269


author: Charalampos Stratakis <cstratak@redhat.com> - 1.0.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Carl George <carl@george.computer>
        Damien Ciabrini <dciabrin@redhat.com>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Itamar Reis Peixoto <itamar@ispbrasil.com.br>
        Julien Enselme <jujens@jujens.eu>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.15.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Joel Capitao <jcapitao@redhat.com>
        John Dulaney <jdulaney@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Parag Nemade <pnemade@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.1.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Gwyn Ciesla <limb@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 37.0.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Paul Wouters <pwouters@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Tom Prince <tom.prince@ualberta.net>


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <fale@redhat.com>
        Igor Raits <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jcollie@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomas Orsava <torsava@redhat.com> - 4.9.2-4
changelog:
  - Bring back the isoschematron submodule,
    but without the validation of the schema file itself
  - Resolves: RHEL-5570


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.23.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <sharkcz@fedoraproject.org>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <limburgher@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 22.3.1-1
changelog:
  - Initial package
  - Fedora contributions by:
      Bill Nottingham <notting@fedoraproject.org>
      Charalampos Stratakis <cstratak@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Jon Ciesla <limburgher@gmail.com>
      Karolina Surma <ksurma@redhat.com>
      Kevin Fenzi <kevin@fedoraproject.org>
      Kevin Kofler <Kevin@tigcc.ticalc.org>
      Luke Macken <lmacken@redhat.com>
      Lumir Balhar <lbalhar@redhat.com>
      Marcel Plch <mplch@redhat.com>
      Matej Stuchlik <mstuchli@redhat.com>
      Michal Cyprian <m.cyprian@gmail.com>
      Miro Hrončok <miro@hroncok.cz>
      Orion Poplawski <orion@cora.nwra.com>
      Pádraig Brady <P@draigBrady.com>
      Peter Halliday <hoangelos@fedoraproject.org>
      Petr Viktorin <pviktori@redhat.com>
      Robert Kuska <rkuska@redhat.com>
      Slavek Kabrda <bkabrda@redhat.com>
      Tim Flink <tflink@fedoraproject.org>
      Tomáš Hrnčiar <thrnciar@redhat.com>
      Tomas Orsava <torsava@redhat.com>
      Toshio Kuratomi <toshio@fedoraproject.org>
      Ville Skyttä <ville.skytta@iki.fi>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tom spot Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim GÜNDÜZ <devrim@fedoraproject.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.20-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.7.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Carl George <carl@george.computer>
        Charalampos Stratakis <cstratak@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Raphael Groner <raphgro@fedoraproject.org>
        Tim Orling <timothy.t.orling@linux.intel.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 6.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <ausil@fedoraproject.org>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.28.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Arun SAG <sagarun@gmail.com>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Rex Dieter <rdieter@math.unl.edu>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        yatinkarel <ykarel@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.8.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 65.5.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Haikel Guemar <hguemar@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Konstantin Ryabitsev <icon@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Petr Viktorin <pviktori@redhat.com>
        Pierre-Yves Chibon <pingou@pingoured.fr>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.16.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@nwra.com>
        Pádraig Brady <P@draigBrady.com>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        yatin <ykarel@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.26.12-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Anna Khaitovich <akhaitov@redhat.com>
        Arun S A G <sagarun@gmail.com>
        Carl George <carl@george.computer>
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lukas Slebodnik <lslebodn@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ralph Bean <rbean@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hoger <thoger@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        yatinkarel <ykarel@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 0.38.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.2-3
changelog:
  - Move all test modules to the python3-test package, namely:
     - __phello__
     - _xxsubinterpreters
     - xxlimited
     - xxlimited_35
     - xxsubtype


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64886, RHEL-70320


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.1.0-4
changelog:
  - Initial package
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Carl George <carl@george.computer>
        Damien Ciabrini <dciabrin@redhat.com>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Itamar Reis Peixoto <itamar@ispbrasil.com.br>
        Julien Enselme <jujens@jujens.eu>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.3.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Lumír Balhar <lbalhar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 41.0.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Paul Wouters <pwouters@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Tom Prince <tom.prince@twistedmatrix.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <me@fale.io>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jeff@ocjtech.us>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.24.4-2
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowitz@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 23.2.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Jon Ciesla <limburgher@gmail.com>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@fedoraproject.org>
        Kevin Kofler <Kevin@tigcc.ticalc.org>
        Luke Macken <lmacken@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <m.cyprian@gmail.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Pádraig Brady <P@draigBrady.com>
        Peter Halliday <hoangelos@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tim Flink <tflink@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <tomas.n@orsava.cz>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Ville Skyttä <ville.skytta@iki.fi>


author: Miro Hrončok <mhroncok@redhat.com> - 23.2.1-3
changelog:
  - Don't RPM Provide pip
  - Remove a superfluous RPM Conflict with python-pip
  - Allows to install python3.12-pip together with python3-pip


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11-22
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Rob Crittenden <rcritten@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tom spot Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.6-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim Gündüz <devrim@gunduz.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.20-13
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Rob Crittenden <rcritten@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 6.0.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.28.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Arun SAG <sagarun@gmail.com>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Rex Dieter <rdieter@math.unl.edu>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        yatinkarel <ykarel@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 68.2.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Konstantin Ryabitsev <icon@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Petr Viktorin <pviktori@redhat.com>
        Pierre-Yves Chibon <pingou@pingoured.fr>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.26.18-1
changelog:
  - Initial package
  - Fedora contributions by
        Adam Williamson <awilliam@redhat.com>
        Anna Khaitovich <akhaitov@redhat.com>
        Arun S A G <sagarun@gmail.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Carl George <carl@george.computer>
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lukas Slebodnik <lslebodn@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Ralph Bean <rbean@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hoger <thoger@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        yatinkarel <ykarel@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 0.41.2-1
changelog:
  - Initial package.
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>


author: Yan Vugenfirer <yvugenfi@redhat.com> 102.5.0
changelog:
  - Set version to 102.5.0
  - Bug 1972070 - RFE: Add Windows Server 2022 version support for mingw-qemu-ga


author: Yan Vugenfirer <yvugenfi@redhat.com> 102.6.0
changelog:
  - Set version to 102.6.0
  - BZ#1978859 - The qemu-ga-win build version in MSI is different between checking inside guest and qga command
  - BZ#1981302 - QGA version can't be upgrade directly without uninstalling old version


author: Yan Vugenfirer <yvugenfi@redhat.com> 102.9.0
changelog:
  - Set version to 102.9.0
  - BZ#2026167 - Add Windows11 version support for mingw-qemu-ga
  - Use mingw-glib2-2.70.1


author: Yan Vugenfirer <yvugenfi@redhat.com> 102.10.0
changelog:
  - Set version to 102.10.0
  - BZ#2026167 - Add Windows11 version support for mingw-qemu-ga
  - Dynamically link mingw-glib2 library


author: Konstantin Kostiuk <kkostiuk@redhat.com> 103.0.0
changelog:
  - Set version to 103.0.0
  - BZ#1992643 - Add mingw-qemu-ga-win package to CentOS stream
  - Rebase to qemu-6.2.0


author: Konstantin Kostiuk <kkostiuk@redhat.com> 104.0.0
changelog:
  - Set version to 104.0.0
  - BZ#2078384 - Rebase QEMU Guest Agent Windows to 7.0.0
  - Rebase to qemu-7.0.0


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-3
changelog:
  - kvm-pc-q35-Bump-max_cpus-to-4096-vcpus.patch [RHEL-11043]
  - kvm-kvm-replace-fprintf-with-error_report-printf-in-kvm_.patch [RHEL-57682]
  - kvm-kvm-refactor-core-virtual-machine-creation-into-its-.patch [RHEL-57682]
  - kvm-accel-kvm-refactor-dirty-ring-setup.patch [RHEL-57682]
  - kvm-KVM-Dynamic-sized-kvm-memslots-array.patch [RHEL-57682]
  - kvm-KVM-Define-KVM_MEMSLOTS_NUM_MAX_DEFAULT.patch [RHEL-57682]
  - kvm-KVM-Rename-KVMMemoryListener.nr_used_slots-to-nr_slo.patch [RHEL-57682]
  - kvm-KVM-Rename-KVMState-nr_slots-to-nr_slots_max.patch [RHEL-57682]
  - kvm-Require-new-dtrace-package.patch [RHEL-67900]
  - Resolves: RHEL-11043
    ([RFE] [HPEMC] [RHEL-9.6] qemu-kvm: support up to 4096 VCPUs)
  - Resolves: RHEL-57682
    (Bad migration performance when performing vGPU VM live migration )
  - Resolves: RHEL-67900
    (Failed to build qemu-kvm due to missing dtrace [rhel-9.6])


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-4
changelog:
  - kvm-migration-Ensure-vmstate_save-sets-errp.patch [RHEL-67844]
  - Resolves: RHEL-67844
    (qemu crashed after killed virtiofsd during migration)


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-5
changelog:
  - kvm-vfio-container-Fix-container-object-destruction.patch [RHEL-67935]
  - kvm-hostmem-Apply-merge-property-after-the-memory-region.patch [RHEL-68289]
  - Resolves: RHEL-67935
    (QEMU should fail gracefully with passthrough devices in SEV-SNP guests)
  - Resolves: RHEL-68289
    ([RHEL-9.6] QEMU core dump on applying merge property to memory backend)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-6
changelog:
  - kvm-virtio-net-Add-queues-before-loading-them.patch [RHEL-69477]
  - kvm-docs-system-s390x-bootdevices-Update-loadparm-docume.patch [RHEL-68440]
  - kvm-docs-system-bootindex-Make-it-clear-that-s390x-can-a.patch [RHEL-68440]
  - kvm-hw-s390x-Restrict-loadparm-property-to-devices-that-.patch [RHEL-68440]
  - kvm-hw-Add-loadparm-property-to-scsi-disk-devices-for-bo.patch [RHEL-68440]
  - kvm-scsi-fix-allocation-for-s390x-loadparm.patch [RHEL-68440]
  - kvm-pc-bios-s390x-Initialize-cdrom-type-to-false-for-eac.patch [RHEL-68440]
  - kvm-pc-bios-s390x-Initialize-machine-loadparm-before-pro.patch [RHEL-68440]
  - kvm-pc-bios-s390-ccw-Re-initialize-receive-queue-index-b.patch [RHEL-68440]
  - kvm-vnc-fix-crash-when-no-console-attached.patch [RHEL-61633]
  - Resolves: RHEL-69477
    (qemu crashed when migrate vm with multiqueue from rhel9.4 to rhel9.6)
  - Resolves: RHEL-68440
    (The new "boot order" feature is sometimes not working as expected [RHEL 9])
  - Resolves: RHEL-61633
    (Qemu-kvm  crashed  if  no display device setting and switching display by remote-viewer [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-7
changelog:
  - kvm-migration-Allow-pipes-to-keep-working-for-fd-migrati.patch [RHEL-66089]
  - Resolves: RHEL-66089
    (warning: fd: migration to a file is deprecated when create or revert a snapshot)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-8
changelog:
  - kvm-linux-headers-Update-to-Linux-v6.12-rc5.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-msa10-subfunctions.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-msa11-subfunctions.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-msa12-changes.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-msa13-subfunctions.patch [RHEL-50212]
  - kvm-s390x-cpumodel-Add-ptff-Query-Time-Stamp-Event-QTSE-.patch [RHEL-50212]
  - kvm-linux-headers-Update-to-Linux-6.13-rc1.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-Concurrent-functions-facility-sup.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-Vector-Enhancements-facility-3.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-Miscellaneous-Instruction-Extensi.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-Vector-Packed-Decimal-Enhancement.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-Ineffective-nonconstrained-transa.patch [RHEL-50212]
  - kvm-s390x-cpumodel-Add-Sequential-Instruction-Fetching-f.patch [RHEL-50212]
  - kvm-s390x-cpumodel-correct-PLO-feature-wording.patch [RHEL-50212]
  - kvm-s390x-cpumodel-Add-PLO-extension-facility.patch [RHEL-50212]
  - kvm-s390x-cpumodel-gen17-model.patch [RHEL-50212]
  - kvm-qga-skip-bind-mounts-in-fs-list.patch [RHEL-71940]
  - kvm-vhost-fail-device-start-if-iotlb-update-fails.patch [RHEL-27832]
  - kvm-hw-char-pl011-Use-correct-masks-for-IBRD-and-FBRD.patch [RHEL-67107]
  - Resolves: RHEL-50212
    ([IBM 9.6 FEAT] KVM: CPU model for new IBM Z HW - qemu part)
  - Resolves: RHEL-71940
    (qemu-ga cannot freeze filesystems with sentinelone)
  - Resolves: RHEL-27832
    (The post-copy migration of RT-VM leads to race while accessing vhost-user device and hung/stalled target VM)
  - Resolves: RHEL-67107
    ([aarch64] [rhel-9.6] Backport some important post 9.1 qemu fixes)


