# changelog

author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-526.el9]
changelog:
  - powerpc64/bpf: jit support for signed division and modulo (Artem Savkov) [RHEL-33019]
  - powerpc64/bpf: jit support for sign extended mov (Artem Savkov) [RHEL-33019]
  - powerpc64/bpf: jit support for sign extended load (Artem Savkov) [RHEL-33019]
  - powerpc64/bpf: jit support for unconditional byte swap (Artem Savkov) [RHEL-33019]
  - powerpc64/bpf: jit support for 32bit offset jmp instruction (Artem Savkov) [RHEL-33019]
  - powerpc/bpf/32: Fix failing test_bpf tests (Artem Savkov) [RHEL-33019]
  - arm64: bpf: fix 32bit unconditional bswap (Artem Savkov) [RHEL-29141]
  - of: module: add buffer overflow check in of_modalias() (cki-backport-bot) [RHEL-44273] {CVE-2024-38541}
  - Documentation/ABI/configfs-tsm: Fix an unexpected indentation silly (Paolo Bonzini) [RHEL-49791]
  - x86/sev: Do RMP memory coverage check after max_pfn has been set (Paolo Bonzini) [RHEL-49791]
  - x86/sev: Move SEV compilation units (Paolo Bonzini) [RHEL-49791]
  - virt: sev-guest: Mark driver struct with __refdata to prevent section mismatch (Paolo Bonzini) [RHEL-49791]
  - x86/sev: Allow non-VMPL0 execution when an SVSM is present (Paolo Bonzini) [RHEL-49791]
  - x86/sev: Extend the config-fs attestation support for an SVSM (Paolo Bonzini) [RHEL-49791]
  - x86/sev: Take advantage of configfs visibility support in TSM (Paolo Bonzini) [RHEL-49791]
  - fs/configfs: Add a callback to determine attribute visibility (Paolo Bonzini) [RHEL-49791]
  - sev-guest: configfs-tsm: Allow the privlevel_floor attribute to be updated (Paolo Bonzini) [RHEL-49791]
  - virt: sev-guest: Choose the VMPCK key based on executing VMPL (Paolo Bonzini) [RHEL-49791]
  - x86/sev: Provide guest VMPL level to userspace (Paolo Bonzini) [RHEL-49791]
  - x86/sev: Provide SVSM discovery support (Paolo Bonzini) [RHEL-49791]
  - x86/sev: Use the SVSM to create a vCPU when not in VMPL0 (Paolo Bonzini) [RHEL-49791]
  - x86/sev: Perform PVALIDATE using the SVSM when not at VMPL0 (Paolo Bonzini) [RHEL-49791]
  - x86/sev: Fix __reserved field in sev_config (Paolo Bonzini) [RHEL-15585]
  - x86/sev: Use kernel provided SVSM Calling Areas (Paolo Bonzini) [RHEL-49791]
  - x86/sev: Check for the presence of an SVSM in the SNP secrets page (Paolo Bonzini) [RHEL-49791]
  - x86/irqflags: Provide native versions of the local_irq_save()/restore() (Paolo Bonzini) [RHEL-49791]
  - ACPI: tables: Print MULTIPROC_WAKEUP when MADT is parsed (Paolo Bonzini) [RHEL-15585]
  - x86/acpi: Add support for CPU offlining for ACPI MADT wakeup method (Paolo Bonzini) [RHEL-15585]
  - x86/mm: Introduce kernel_ident_mapping_free() (Paolo Bonzini) [RHEL-15585]
  - x86/smp: Add smp_ops.stop_this_cpu() callback (Paolo Bonzini) [RHEL-15585]
  - x86/acpi: Do not attempt to bring up secondary CPUs in the kexec case (Paolo Bonzini) [RHEL-15585]
  - x86/acpi: Rename fields in the acpi_madt_multiproc_wakeup structure (Paolo Bonzini) [RHEL-15585]
  - x86/mm: Do not zap page table entries mapping unaccepted memory table during kdump (Paolo Bonzini) [RHEL-15585]
  - x86/mm: Make e820__end_ram_pfn() cover E820_TYPE_ACPI ranges (Paolo Bonzini) [RHEL-15585]
  - x86/tdx: Convert shared memory back to private on kexec (Paolo Bonzini) [RHEL-15585]
  - x86/mm: Add callbacks to prepare encrypted memory for kexec (Paolo Bonzini) [RHEL-15585]
  - x86/tdx: Account shared memory (Paolo Bonzini) [RHEL-15585]
  - x86/mm: Return correct level from lookup_address() if pte is none (Paolo Bonzini) [RHEL-15585]
  - x86/mm: Make x86_platform.guest.enc_status_change_*() return an error (Paolo Bonzini) [RHEL-15585]
  - x86/kexec: Keep CR4.MCE set during kexec for TDX guest (Paolo Bonzini) [RHEL-15585]
  - x86/relocate_kernel: Use named labels for less confusion (Paolo Bonzini) [RHEL-15585]
  - cpu/hotplug, x86/acpi: Disable CPU offlining for ACPI MADT wakeup (Paolo Bonzini) [RHEL-15585]
  - cpu/hotplug: Add support for declaring CPU offlining not supported (Paolo Bonzini) [RHEL-15585]
  - x86/acpi: Remove __ro_after_init from acpi_mp_wake_mailbox (Paolo Bonzini) [RHEL-15585]
  - x86/apic: Mark acpi_mp_wake_* variables as __ro_after_init (Paolo Bonzini) [RHEL-15585]
  - x86/acpi: Extract ACPI MADT wakeup code into a separate file (Paolo Bonzini) [RHEL-15585]
  - x86/kexec: Remove spurious unconditional JMP from from identity_mapped() (Paolo Bonzini) [RHEL-15585]
  - cpu: Drop "extern" from function declarations in cpuhplock.h (Paolo Bonzini) [RHEL-15585]
  - x86/sev: Make the VMPL0 checking more straight forward (Paolo Bonzini) [RHEL-15585]
  - x86/sev: Rename snp_init() in boot/compressed/sev.c (Paolo Bonzini) [RHEL-15585]
  - x86/sev: Shorten struct name snp_secrets_page_layout to snp_secrets_page (Paolo Bonzini) [RHEL-15585]
  - x86/pat: Fix W^X violation false-positives when running as Xen PV guest (Paolo Bonzini) [RHEL-15585]
  - x86/pat: Restructure _lookup_address_cpa() (Paolo Bonzini) [RHEL-15585]
  - x86/mm: Use lookup_address_in_pgd_attr() in show_fault_oops() (Paolo Bonzini) [RHEL-15585]
  - x86/pat: Introduce lookup_address_in_pgd_attr() (Paolo Bonzini) [RHEL-15585]
  - x86/mm/cpa: Warn for set_memory_XXcrypted() VMM fails (Paolo Bonzini) [RHEL-15585]
  - dm-verity: introduce the options restart_on_error and panic_on_error (Benjamin Marzinski) [RHEL-59523]
  - Revert "dm: requeue IO if mapping table not yet available" (Benjamin Marzinski) [RHEL-59523]
  - dm integrity: fix gcc 5 warning (Benjamin Marzinski) [RHEL-59523]
  - dm: treat alloc_dax() -EOPNOTSUPP failure as non-fatal (Benjamin Marzinski) [RHEL-59523]
  - configs: dm: CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG_PLATFORM_KEYRING (Benjamin Marzinski) [RHEL-59523]
  - dm-integrity: fix a race condition when accessing recalc_sector (Benjamin Marzinski) [RHEL-59523]
  - dm persistent data: fix memory allocation failure (Benjamin Marzinski) [RHEL-59523]
  - Documentation: dm-crypt.rst warning + error fix (Benjamin Marzinski) [RHEL-59523]
  - dm resume: don't return EINVAL when signalled (Benjamin Marzinski) [RHEL-59523]
  - dm suspend: return -ERESTARTSYS instead of -EINTR (Benjamin Marzinski) [RHEL-59523]
  - dm: Constify struct dm_block_validator (Benjamin Marzinski) [RHEL-59523]
  - dm-integrity: introduce the Inline mode (Benjamin Marzinski) [RHEL-59523]
  - dm: introduce the target flag mempool_needs_integrity (Benjamin Marzinski) [RHEL-59523]
  - dm raid: fix stripes adding reshape size issues (Benjamin Marzinski) [RHEL-34750]
  - dm raid: move _get_reshape_sectors() as prerequisite to fixing reshape size issues (Benjamin Marzinski) [RHEL-34750]
  - dm-crypt: support for per-sector NVMe metadata (Benjamin Marzinski) [RHEL-59523]
  - dm mpath: don't call dm_get_device in multipath_message (Benjamin Marzinski) [RHEL-59523]
  - dm: factor out helper function from dm_get_device (Benjamin Marzinski) [RHEL-59523]
  - dm-verity: fix dm_is_verity_target() when dm-verity is builtin (Benjamin Marzinski) [RHEL-59523]
  - dm: Remove max_secure_erase_granularity (Benjamin Marzinski) [RHEL-59523]
  - dm: Remove max_write_zeroes_granularity (Benjamin Marzinski) [RHEL-59523]
  - dm: stop using blk_limits_io_{min,opt} (Benjamin Marzinski) [RHEL-59523]
  - dm verity: add support for signature verification with platform keyring (Benjamin Marzinski) [RHEL-59523]
  - dm-verity: hash blocks with shash import+finup when possible (Benjamin Marzinski) [RHEL-59523]
  - dm-verity: make verity_hash() take dm_verity_io instead of ahash_request (Benjamin Marzinski) [RHEL-59523]
  - dm-verity: always "map" the data blocks (Benjamin Marzinski) [RHEL-59523]
  - dm-verity: provide dma_alignment limit in io_hints (Benjamin Marzinski) [RHEL-59523]
  - dm-verity: make real_digest and want_digest fixed-length (Benjamin Marzinski) [RHEL-59523]
  - dm-verity: move data hash mismatch handling into its own function (Benjamin Marzinski) [RHEL-59523]
  - dm-verity: move hash algorithm setup into its own function (Benjamin Marzinski) [RHEL-59523]
  - dm init: Handle minors larger than 255 (Benjamin Marzinski) [RHEL-59523]
  - dm cache metadata: remove unused struct 'thunk' (Benjamin Marzinski) [RHEL-59523]
  - dm io: remove code duplication between sync_io and aysnc_io (Benjamin Marzinski) [RHEL-59523]
  - dm io: don't call the async_io notify.fn on invalid num_regions (Benjamin Marzinski) [RHEL-59523]
  - dm io: bump num_bvecs to handle offset memory (Benjamin Marzinski) [RHEL-59523]
  - dm: optimize flushes (Benjamin Marzinski) [RHEL-59523]
  - dm-integrity: set discard_granularity to logical block size (Benjamin Marzinski) [RHEL-59523]
  - dm-delay: remove timer_lock (Benjamin Marzinski) [RHEL-59523]
  - dm-delay: change locking to avoid contention (Benjamin Marzinski) [RHEL-59523]
  - dm-delay: fix max_delay calculations (Benjamin Marzinski) [RHEL-59523]
  - dm-delay: fix hung task introduced by kthread mode (Benjamin Marzinski) [RHEL-59523]
  - dm-delay: fix workqueue delay_timer race (Benjamin Marzinski) [RHEL-59523]
  - dm-crypt: don't set WQ_CPU_INTENSIVE for WQ_UNBOUND crypt_queue (Benjamin Marzinski) [RHEL-59523]
  - dm-crypt: export sysfs of all workqueues (Benjamin Marzinski) [RHEL-59523]
  - dm-crypt: add the optional "high_priority" flag (Benjamin Marzinski) [RHEL-59523]
  - MAINTAINERS: Remove incorrect M: tag for dm-devel@lists.linux.dev (Benjamin Marzinski) [RHEL-59523]
  - dm-verity: Convert from tasklet to BH workqueue (Benjamin Marzinski) [RHEL-59523]
  - dm-crypt: Convert from tasklet to BH workqueue (Benjamin Marzinski) [RHEL-59523]
  - dm: update relevant MODULE_AUTHOR entries to latest dm-devel mailing list (Benjamin Marzinski) [RHEL-59523]
  - dm ioctl: update DM_DRIVER_EMAIL to new dm-devel mailing list (Benjamin Marzinski) [RHEL-59523]
  - dm verity: set DM_TARGET_SINGLETON feature flag (Benjamin Marzinski) [RHEL-59523]
  - dm crypt: Fix IO priority lost when queuing write bios (Benjamin Marzinski) [RHEL-59523]
  - dm verity: Fix IO priority lost when reading FEC and hash (Benjamin Marzinski) [RHEL-59523]
  - dm bufio: Support IO priority (Benjamin Marzinski) [RHEL-59523]
  - dm io: Support IO priority (Benjamin Marzinski) [RHEL-59523]
  - dm crypt: remove redundant state settings after waking up (Benjamin Marzinski) [RHEL-59523]
  - dm thin: add braces around conditional code that spans lines (Benjamin Marzinski) [RHEL-59523]
  - timekeeping: Add function to convert realtime to base clock (Ivan Vecera) [RHEL-61639]
  - x86/tsc: Remove obsolete ART to TSC conversion functions (Ivan Vecera) [RHEL-61639]
  - ice/ptp: Remove convert_art_to_tsc() (Ivan Vecera) [RHEL-61639]
  - ALSA: hda: Remove convert_art_to_tsc() (Ivan Vecera) [RHEL-61639]
  - stmmac: intel: Remove convert_art_to_tsc() (Ivan Vecera) [RHEL-61639]
  - igc: Remove convert_art_ns_to_tsc() (Ivan Vecera) [RHEL-61639]
  - e1000e: Replace convert_art_to_tsc() (Ivan Vecera) [RHEL-61639]
  - x86/tsc: Provide ART base clock information for TSC (Ivan Vecera) [RHEL-61639]
  - timekeeping: Provide infrastructure for converting to/from a base clock (Ivan Vecera) [RHEL-61639]
  - kvmclock: Unexport kvmclock clocksource (Ivan Vecera) [RHEL-61639]
  - treewide: Remove system_counterval_t.cs, which is never read (Ivan Vecera) [RHEL-61639]
  - timekeeping: Evaluate system_counterval_t.cs_id instead of .cs (Ivan Vecera) [RHEL-61639]
  - ptp/kvm, arm_arch_timer: Set system_counterval_t.cs_id to constant (Ivan Vecera) [RHEL-61639]
  - x86/kvm, ptp/kvm: Add clocksource ID, set system_counterval_t.cs_id (Ivan Vecera) [RHEL-61639]
  - x86/tsc: Add clocksource ID, set system_counterval_t.cs_id (Ivan Vecera) [RHEL-61639]
  - timekeeping: Add clocksource ID to struct system_counterval_t (Ivan Vecera) [RHEL-61639]
  - x86/tsc: Correct kernel-doc notation (Ivan Vecera) [RHEL-61639]
  - add missing includes and forward declarations to networking includes under linux/ (Ivan Vecera) [RHEL-61639]
  - ipv4: ip_gre: Fix drops of small packets in ipgre_xmit (Guillaume Nault) [RHEL-61892]
  - ip6_tunnel: Fix broken GRO (Guillaume Nault) [RHEL-61892]
  - nvme: use helper nvme_ctrl_state in nvme_keep_alive_finish function (Maurizio Lombardi) [RHEL-51888]
  - nvme: make keep-alive synchronous operation (Maurizio Lombardi) [RHEL-51888]
  - nvme-loop: flush off pending I/O while shutting down loop controller (Maurizio Lombardi) [RHEL-51888]
  - nvme-pci: fix race condition between reset and nvme_dev_disable() (Maurizio Lombardi) [RHEL-51888]
  - nvme-multipath: defer partition scanning (Maurizio Lombardi) [RHEL-51888]
  - nvme: disable CC.CRIME (NVME_CC_CRIME) (Maurizio Lombardi) [RHEL-51888]
  - nvme: delete unnecessary fallthru comment (Maurizio Lombardi) [RHEL-51888]
  - nvmet-rdma: use sbitmap to replace rsp free list (Maurizio Lombardi) [RHEL-51888]
  - nvme: tcp: avoid race between queue_lock lock and destroy (Maurizio Lombardi) [RHEL-51888]
  - nvmet-passthru: clear EUID/NGUID/UUID while using loop target (Maurizio Lombardi) [RHEL-51888]
  - nvme: remove CC register read-back during enabling (Maurizio Lombardi) [RHEL-51888]
  - nvme: null terminate nvme_tls_attrs (Maurizio Lombardi) [RHEL-51888]
  - nvme-multipath: avoid hang on inaccessible namespaces (Maurizio Lombardi) [RHEL-51888]
  - nvme-multipath: system fails to create generic nvme device (Maurizio Lombardi) [RHEL-51888]
  - nvme-pci: qdepth 1 quirk (Maurizio Lombardi) [RHEL-51888]
  - nvme-tcp: fix link failure for TCP auth (Maurizio Lombardi) [RHEL-51888]
  - nvme: Convert comma to semicolon (Maurizio Lombardi) [RHEL-51888]
  - nvme: fix metadata handling in nvme-passthrough (Maurizio Lombardi) [RHEL-51888]
  - nvme: rename apptag and appmask to lbat and lbatm (Maurizio Lombardi) [RHEL-51888]
  - nvme-rdma: send cntlid in the RDMA_CM_REQUEST Private Data (Maurizio Lombardi) [RHEL-51888]
  - nvme-target: do not check authentication status for admin commands twice (Maurizio Lombardi) [RHEL-51888]
  - nvmet-auth: allow to clear DH-HMAC-CHAP keys (Maurizio Lombardi) [RHEL-51888]
  - nvme-sysfs: add 'tls_keyring' attribute (Maurizio Lombardi) [RHEL-51888]
  - nvme-sysfs: add 'tls_configured_key' sysfs attribute (Maurizio Lombardi) [RHEL-51888]
  - nvme: split off TLS sysfs attributes into a separate group (Maurizio Lombardi) [RHEL-51888]
  - nvme: add a newline to the 'tls_key' sysfs attribute (Maurizio Lombardi) [RHEL-51888]
  - nvme-tcp: check for invalidated or revoked key (Maurizio Lombardi) [RHEL-51888]
  - nvme-tcp: sanitize TLS key handling (Maurizio Lombardi) [RHEL-51888]
  - nvme-keyring: restrict match length for version '1' identifiers (Maurizio Lombardi) [RHEL-51888]
  - nvme_core: scan namespaces asynchronously (Maurizio Lombardi) [RHEL-51888]
  - nvmet: Identify-Active Namespace ID List command should reject invalid nsid (Maurizio Lombardi) [RHEL-51888]
  - nvme-pci: Add sleep quirk for Samsung 990 Evo (Maurizio Lombardi) [RHEL-51888]
  - nvme-pci: allocate tagset on reset if necessary (Maurizio Lombardi) [RHEL-51888]
  - nvmet-tcp: fix kernel crash if commands allocation fails (Maurizio Lombardi) [RHEL-51888]
  - nvme: use better description for async reset reason (Maurizio Lombardi) [RHEL-51888]
  - nvmet: Make nvmet_debugfs static (Maurizio Lombardi) [RHEL-51888]
  - nvme: Remove unused field (Maurizio Lombardi) [RHEL-51888]
  - nvme: move stopping keep-alive into nvme_uninit_ctrl() (Maurizio Lombardi) [RHEL-51888]
  - nvme: reorganize nvme_ns_head fields (Maurizio Lombardi) [RHEL-51888]
  - nvme: change data type of lba_shift (Maurizio Lombardi) [RHEL-51888]
  - nvme: remove a field from nvme_ns_head (Maurizio Lombardi) [RHEL-51888]
  - nvme: remove unused parameter (Maurizio Lombardi) [RHEL-51888]
  - nvme-core: choose PIF from QPIF if QPIFS supports and PIF is QTYPE (Maurizio Lombardi) [RHEL-51888]
  - nvme-pci: Fix the instructions for disabling power management (Maurizio Lombardi) [RHEL-51888]
  - nvme: remove redundant bdev local variable (Maurizio Lombardi) [RHEL-51888]
  - nvme-fabrics: Use seq_putc() in __nvmf_concat_opt_tokens() (Maurizio Lombardi) [RHEL-51888]
  - nvme/pci: Add APST quirk for Lenovo N60z laptop (Maurizio Lombardi) [RHEL-51888]
  - nvmet-auth: fix nvmet_auth hash error handling (Maurizio Lombardi) [RHEL-51888]
  - nvme: implement ->get_unique_id (Maurizio Lombardi) [RHEL-51888]
  - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-51888]
  - redhat: add CONFIG_NVME_TARGET_DEBUGFS file (Maurizio Lombardi) [RHEL-51888]
  - nvme-fcloop: implement 'host_traddr' (Maurizio Lombardi) [RHEL-51888]
  - nvmet-fc: implement host_traddr() (Maurizio Lombardi) [RHEL-51888]
  - nvmet-rdma: implement host_traddr() (Maurizio Lombardi) [RHEL-51888]
  - nvmet-tcp: implement host_traddr() (Maurizio Lombardi) [RHEL-51888]
  - nvmet: add 'host_traddr' callback for debugfs (Maurizio Lombardi) [RHEL-51888]
  - nvmet: add debugfs support (Maurizio Lombardi) [RHEL-51888]
  - nvme: rename CDR/MORE/DNR to NVME_STATUS_* (Maurizio Lombardi) [RHEL-51888]
  - nvme: fix status magic numbers (Maurizio Lombardi) [RHEL-51888]
  - nvme: rename nvme_sc_to_pr_err to nvme_status_to_pr_err (Maurizio Lombardi) [RHEL-51888]
  - nvme: split device add from initialization (Maurizio Lombardi) [RHEL-51888]
  - nvme: fc: split controller bringup handling (Maurizio Lombardi) [RHEL-51888]
  - nvme: rdma: split controller bringup handling (Maurizio Lombardi) [RHEL-51888]
  - nvme: tcp: split controller bringup handling (Maurizio Lombardi) [RHEL-51888]
  - nvme: apple: fix device reference counting (Maurizio Lombardi) [RHEL-51888]
  - nvmet-fc: Remove __counted_by from nvmet_fc_tgt_queue.fod[] (Maurizio Lombardi) [RHEL-51888]
  - nvmet: make 'tsas' attribute idempotent for RDMA (Maurizio Lombardi) [RHEL-51888]
  - nvme: fixup comment for nvme RDMA Provider Type (Maurizio Lombardi) [RHEL-51888]
  - nvme-apple: add missing MODULE_DESCRIPTION() (Maurizio Lombardi) [RHEL-51888]
  - nvmet: do not return 'reserved' for empty TSAS values (Maurizio Lombardi) [RHEL-51888]
  - nvme: fix NVME_NS_DEAC may incorrectly identifying the disk as EXT_LBA. (Maurizio Lombardi) [RHEL-51888]
  - nvmet-passthru: propagate status from id override functions (Maurizio Lombardi) [RHEL-51888]
  - nvme: fix nvme_pr_* status code parsing (Maurizio Lombardi) [RHEL-51888]
  - nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset (Maurizio Lombardi) [RHEL-51888]
  - nvme: remove sgs and sws (Maurizio Lombardi) [RHEL-51888]
  - nvme-rdma, nvme-tcp: include max reconnects for reconnect logging (Maurizio Lombardi) [RHEL-51888]
  - nvmet-rdma: Avoid o(n^2) loop in delete_ctrl (Maurizio Lombardi) [RHEL-51888]
  - nvme: do not retry authentication failures (Maurizio Lombardi) [RHEL-51888]
  - nvme-fabrics: short-circuit reconnect retries (Maurizio Lombardi) [RHEL-51888]
  - nvme: return kernel error codes for admin queue connect (Maurizio Lombardi) [RHEL-51888]
  - nvmet: return DHCHAP status codes from nvmet_setup_auth() (Maurizio Lombardi) [RHEL-51888]
  - nvmet: lock config semaphore when accessing DH-HMAC-CHAP key (Maurizio Lombardi) [RHEL-51888]
  - nvmet-rdma: fix possible bad dereference when freeing rsps (Maurizio Lombardi) [RHEL-51888]
  - nvmet: prevent sprintf() overflow in nvmet_subsys_nsid_exists() (Maurizio Lombardi) [RHEL-51888]
  - nvmet: make nvmet_wq unbound (Maurizio Lombardi) [RHEL-51888]
  - nvmet-auth: return the error code to the nvmet_auth_ctrl_hash() callers (Maurizio Lombardi) [RHEL-51888]
  - nvme-pci: Add quirk for broken MSIs (Maurizio Lombardi) [RHEL-51888]
  - nvmet: fix nvme status code when namespace is disabled (Maurizio Lombardi) [RHEL-51888]
  - nvmet-tcp: fix possible memory leak when tearing down a controller (Maurizio Lombardi) [RHEL-51888]
  - nvmet-auth: replace pr_debug() with pr_err() to report an error. (Maurizio Lombardi) [RHEL-51888]
  - nvmet-auth: return the error code to the nvmet_auth_host_hash() callers (Maurizio Lombardi) [RHEL-51888]
  - nvme-fc: rename free_ctrl callback to match name pattern (Maurizio Lombardi) [RHEL-51888]
  - nvmet-fc: move RCU read lock to nvmet_fc_assoc_exists (Maurizio Lombardi) [RHEL-51888]
  - nvmet: implement unique discovery NQN (Maurizio Lombardi) [RHEL-51888]
  - nvmet-rdma: remove NVMET_RDMA_REQ_INVALIDATE_RKEY flag (Maurizio Lombardi) [RHEL-51888]
  - nvme: remove redundant BUILD_BUG_ON check (Maurizio Lombardi) [RHEL-51888]
  - nvme/tcp: Add wq_unbound modparam for nvme_tcp_wq (Maurizio Lombardi) [RHEL-51888]
  - nvme-tcp: Export the nvme_tcp_wq to sysfs (Maurizio Lombardi) [RHEL-51888]
  - drivers/nvme: Add quirks for device 126f:2262 (Maurizio Lombardi) [RHEL-51888]
  - nvme: parse format command's lbafu when tracing (Maurizio Lombardi) [RHEL-51888]
  - nvme: add tracing of reservation commands (Maurizio Lombardi) [RHEL-51888]
  - nvme: parse zns command's zsa and zrasf to string (Maurizio Lombardi) [RHEL-51888]
  - nvme: use nvme_disk_is_ns_head helper (Maurizio Lombardi) [RHEL-51888]
  - nvmet: add tracing of zns commands (Maurizio Lombardi) [RHEL-51888]
  - nvmet: add tracing of authentication commands (Maurizio Lombardi) [RHEL-51888]
  - nvme-apple: Convert to platform remove callback returning void (Maurizio Lombardi) [RHEL-51888]
  - nvmet-tcp: do not continue for invalid icreq (Maurizio Lombardi) [RHEL-51888]
  - nvme: change shutdown timeout setting message (Maurizio Lombardi) [RHEL-51888]
  - static_call: Handle module init failure correctly in static_call_del_module() (CKI Backport Bot) [RHEL-64157] {CVE-2024-50002}
  - RDMA/nldev: Fix NULL pointer dereferences issue in rdma_nl_notify_event (Kamal Heib) [RHEL-56245]
  - RDMA/core: Provide rdma_user_mmap_disassociate() to disassociate mmap pages (Kamal Heib) [RHEL-56245]
  - RDMA/nldev: Add missing break in rdma_nl_notify_err_msg() (Kamal Heib) [RHEL-56245]
  - RDMA/nldev: Expose whether RDMA monitoring is supported (Kamal Heib) [RHEL-56245]
  - RDMA/nldev: Add support for RDMA monitoring (Kamal Heib) [RHEL-56245]
  - RDMA/device: Remove optimization in ib_device_get_netdev() (Kamal Heib) [RHEL-56245]
  - IB/iser: Remove unused declaration in header file (Kamal Heib) [RHEL-56245]
  - treewide: correct the typo 'retun' (Kamal Heib) [RHEL-56245]
  - IB/core: Fix ib_cache_setup_one error flow cleanup (Kamal Heib) [RHEL-56245]
  - RDMA/mad: Simplify an alloc_ordered_workqueue() invocation (Kamal Heib) [RHEL-56245]
  - RDMA/ipoib: Remove unused declarations (Kamal Heib) [RHEL-56245]
  - RDMA/core: Remove unused declaration rdma_resolve_ip_route() (Kamal Heib) [RHEL-56245]
  - RDMA: Pass uverbs_attr_bundle as part of '.reg_user_mr_dmabuf' API (Kamal Heib) [RHEL-56245]
  - RDMA/umem: Introduce an option to revoke DMABUF umem (Kamal Heib) [RHEL-56245]
  - RDMA/umem: Add support for creating pinned DMABUF umem with a given dma device (Kamal Heib) [RHEL-56245]
  - RDMA/nldev: Enhance netlink message parsing and validation (Kamal Heib) [RHEL-56245]
  - RDMA/mad: Improve handling of timed out WRs of mad agent (Kamal Heib) [RHEL-56245]
  - nvdimm: Fix devs leaks in scan_labels() (Jeff Moyer) [RHEL-52818]
  - device-dax: correct pgoff align in dax_set_mapping() (Jeff Moyer) [RHEL-52818 RHEL-63870] {CVE-2024-50022}
  - Documentation: probes: Add a new ret_ip callback parameter (Viktor Malik) [RHEL-64700]
  - fprobe: Add entry/exit callbacks types (Viktor Malik) [RHEL-64700]
  - fprobe: Pass return address to the handlers (Viktor Malik) [RHEL-64700]
  - fprobe: Fix to ensure the number of active retprobes is not zero (Viktor Malik) [RHEL-64700]
  - tracing: fprobe: Initialize ret valiable to fix smatch error (Viktor Malik) [RHEL-64700]
  - docs: tracing: Update fprobe documentation (Viktor Malik) [RHEL-64700]
  - lib/test_fprobe: Add a testcase for skipping exit_handler (Viktor Malik) [RHEL-64700]
  - fprobe: Skip exit_handler if entry_handler returns !0 (Viktor Malik) [RHEL-64700]
  - lib/test_fprobe: Add a test case for nr_maxactive (Viktor Malik) [RHEL-64700]
  - fprobe: Add nr_maxactive to specify rethook_node pool size (Viktor Malik) [RHEL-64700]
  - lib/test_fprobe: Add private entry_data testcases (Viktor Malik) [RHEL-64700]
  - fprobe: Pass entry_data to handlers (Viktor Malik) [RHEL-64700]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-527.el9]
changelog:
  - dt-bindings: soc: qcom: pmic-glink: allow orientation-gpios (Desnes Nunes) [RHEL-59050]
  - dt-bindings: soc: qcom: qcom,pmic-glink: document QCM6490 compatible (Desnes Nunes) [RHEL-59050]
  - dt-bindings: soc: qcom: qcom,pmic-glink: document X1E80100 compatible (Desnes Nunes) [RHEL-59050]
  - dt-bindings: soc: qcom: pmic-glink: document SM8650 compatible (Desnes Nunes) [RHEL-59050]
  - dt-bindings: soc: qcom: qcom,pmic-glink: add a gpio used to determine the Type-C port plug orientation (Desnes Nunes) [RHEL-59050]
  - dt-bindings: soc: qcom: qcom,pmic-glink: document SM8550 compatible (Desnes Nunes) [RHEL-59050]
  - dt-bindings: soc: qcom: qcom,pmic-glink: document SM8450 compatible (Desnes Nunes) [RHEL-59050]
  - USB: serial: mos7840: fix crash on resume (Desnes Nunes) [RHEL-59050] {CVE-2024-42244}
  - USB: serial: option: add Rolling RW350-GL variants (Desnes Nunes) [RHEL-59050]
  - USB: serial: option: add support for Foxconn T99W651 (Desnes Nunes) [RHEL-59050]
  - USB: serial: option: add Netprisma LCUK54 series modules (Desnes Nunes) [RHEL-59050]
  - usb: dwc3: pci: add support for the Intel Panther Lake (Desnes Nunes) [RHEL-59050]
  - usb: core: add missing of_node_put() in usb_of_has_devices_or_graph (Desnes Nunes) [RHEL-59050]
  - USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k (Desnes Nunes) [RHEL-59050]
  - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (Desnes Nunes) [RHEL-59050] {CVE-2024-41035}
  - xhci: always resume roothubs if xHC was reset during resume (Desnes Nunes) [RHEL-59050]
  - usb: dwc3: core: Workaround for CSR read timeout (Desnes Nunes) [RHEL-59050]
  - USB: serial: option: add Telit generic core-dump composition (Desnes Nunes) [RHEL-59050]
  - USB: serial: option: add Fibocom FM350-GL (Desnes Nunes) [RHEL-59050]
  - USB: serial: option: add Telit FN912 rmnet compositions (Desnes Nunes) [RHEL-59050]
  - usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock (Desnes Nunes) [RHEL-59050]
  - usb: typec: ucsi: glink: fix child node release in probe function (Desnes Nunes) [RHEL-59050]
  - usb: typec: ucsi_acpi: Add LG Gram quirk (Desnes Nunes) [RHEL-59050]
  - usb: ucsi: stm32: fix command completion handling (Desnes Nunes) [RHEL-59050]
  - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (Desnes Nunes) [RHEL-59050]
  - xhci: Apply broken streams quirk to Etron EJ188 xHCI host (Desnes Nunes) [RHEL-59050]
  - xhci: Apply reset resume quirk to Etron EJ188 xHCI host (Desnes Nunes) [RHEL-59050]
  - xhci: Set correct transferred length for cancelled bulk transfers (Desnes Nunes) [RHEL-59050]
  - usb: typec: ucsi: Ack also failed Get Error commands (Desnes Nunes) [RHEL-59050]
  - dt-bindings: usb: realtek,rts5411: Add missing "additionalProperties" on child nodes (Desnes Nunes) [RHEL-59050]
  - usb: typec: tcpm: Ignore received Hard Reset in TOGGLING state (Desnes Nunes) [RHEL-59050]
  - USB: xen-hcd: Traverse host/ when CONFIG_USB_XEN_HCD is selected (Desnes Nunes) [RHEL-59050]
  - usb: typec: ucsi: glink: increase max ports for x1e80100 (Desnes Nunes) [RHEL-59050]
  - Revert "usb: chipidea: move ci_ulpi_init after the phy initialization" (Desnes Nunes) [RHEL-59050]
  - thunderbolt: debugfs: Fix margin debugfs node creation condition (Desnes Nunes) [RHEL-59050]
  - usb: dwc3: core: Fix unused variable warning in core driver (Desnes Nunes) [RHEL-59050]
  - usb: typec: tipd: rely on i2c_get_match_data() (Desnes Nunes) [RHEL-59050]
  - usb: typec: tipd: fix event checking for tps6598x (Desnes Nunes) [RHEL-59050]
  - usb: typec: tipd: fix event checking for tps25750 (Desnes Nunes) [RHEL-59050]
  - usb: phy: tegra: Replace of_gpio.h by proper one (Desnes Nunes) [RHEL-59050]
  - usb: typec: ucsi: displayport: Fix potential deadlock (Desnes Nunes) [RHEL-59050]
  - extcon: max8997: select IRQ_DOMAIN instead of depending on it (Desnes Nunes) [RHEL-59050]
  - usb: core: Remove the useless struct usb_devmap which is just a bitmap (Desnes Nunes) [RHEL-59050]
  - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-59050]
  - media: gspca: cpia1: Use min macro (Desnes Nunes) [RHEL-59050]
  - media: s2255: Use refcount_t instead of atomic_t for num_channels (Desnes Nunes) [RHEL-59050]
  - media: uvcvideo: Use max() macro (Desnes Nunes) [RHEL-59050]
  - USB: usb_parse_endpoint: ignore reserved bits (Desnes Nunes) [RHEL-59050]
  - usb: xhci: compact 'trb_in_td()' arguments (Desnes Nunes) [RHEL-59050]
  - usb: xhci: remove duplicate TRB_TO_SLOT_ID() calls (Desnes Nunes) [RHEL-59050]
  - xhci: pci: Use PCI_VENDOR_ID_RENESAS (Desnes Nunes) [RHEL-59050]
  - xhci: pci: Group out Thunderbolt xHCI IDs (Desnes Nunes) [RHEL-59050]
  - xhci: pci: Use full names in PCI IDs for Intel platforms (Desnes Nunes) [RHEL-59050]
  - usb: xhci: remove goto 'cleanup' in handle_tx_event() (Desnes Nunes) [RHEL-59050]
  - usb: xhci: replace goto with return when possible in handle_tx_event() (Desnes Nunes) [RHEL-59050]
  - usb: xhci: remove 'handling_skipped_tds' from handle_tx_event() (Desnes Nunes) [RHEL-59050]
  - xhci: remove XHCI_TRUST_TX_LENGTH quirk (Desnes Nunes) [RHEL-59050]
  - xhci: improve PORTSC register debugging output (Desnes Nunes) [RHEL-59050]
  - usb: xhci: remove redundant variable 'erst_size' (Desnes Nunes) [RHEL-59050]
  - usb: xhci: address off-by-one in xhci_num_trbs_free() (Desnes Nunes) [RHEL-59050]
  - usb: xhci: improve debug message in xhci_ring_expansion_needed() (Desnes Nunes) [RHEL-59050]
  - xhci: remove xhci_check_usb2_port_capability helper (Desnes Nunes) [RHEL-59050]
  - xhci: stored cached port capability values in one place (Desnes Nunes) [RHEL-59050]
  - USB: fix up for "usb: misc: onboard_hub: rename to onboard_dev" (Desnes Nunes) [RHEL-59050]
  - thunderbolt: Correct trace output of firmware connection manager packets (Desnes Nunes) [RHEL-59050]
  - thunderbolt: Fix kernel-doc for tb_tunnel_alloc_dp() (Desnes Nunes) [RHEL-59050]
  - thunderbolt: Fix uninitialized variable in tb_tunnel_alloc_usb3() (Desnes Nunes) [RHEL-59050]
  - usb: dwc3: core: Fix compile warning on s390 gcc in dwc3_get_phy call (Desnes Nunes) [RHEL-59050]
  - memstick: rtsx_usb_ms: Convert to platform remove callback returning void (Desnes Nunes) [RHEL-59050]
  - memstick: rtsx_pci_ms: Convert to platform remove callback returning void (Desnes Nunes) [RHEL-59050]
  - memstick: rtsx_pci_ms: Drop if block with always false condition (Desnes Nunes) [RHEL-59050]
  - thunderbolt: There are only 5 basic router registers in pre-USB4 routers (Desnes Nunes) [RHEL-59050]
  - usb: dwc3: core: Refactor PHY logic to support Multiport Controller (Desnes Nunes) [RHEL-59050]
  - usb: dwc3: core: Skip setting event buffers for host only controllers (Desnes Nunes) [RHEL-59050]
  - usb: dwc3: core: Access XHCI address space temporarily to read port info (Desnes Nunes) [RHEL-59050]
  - dt-bindings: usb: Add bindings for multiport properties on DWC3 controller (Desnes Nunes) [RHEL-59050]
  - usb: dwc3: qcom: Add multiport suspend/resume support for wrapper (Desnes Nunes) [RHEL-59050]
  - usb: dwc3: qcom: Enable wakeup for applicable ports of multiport (Desnes Nunes) [RHEL-59050]
  - usb: dwc3: qcom: Refactor IRQ handling in glue driver (Desnes Nunes) [RHEL-59050]
  - usb: dwc3: qcom: Add helper function to request wakeup interrupts (Desnes Nunes) [RHEL-59050]
  - dt-bindings: usb: qcom,dwc3: fix interrupt max items (Desnes Nunes) [RHEL-59050]
  - dt-bindings: usb: dwc3: Add QDU1000 compatible (Desnes Nunes) [RHEL-59050]
  - dt-bindings: usb: qcom,dwc3: Add bindings for SC8280 Multiport (Desnes Nunes) [RHEL-59050]
  - usb: dwc3: qcom: Remove ACPI support from glue driver (Desnes Nunes) [RHEL-59050]
  - dt-bindings: usb: qcom,dwc3: fix a typo in interrupts' description (Desnes Nunes) [RHEL-59050]
  - dt-bindings: usb: qcom,dwc3: Fix SDM660 clock description (Desnes Nunes) [RHEL-59050]
  - usb: dwc3: qcom: Rename hs_phy_irq to qusb2_phy_irq (Desnes Nunes) [RHEL-59050]
  - dt-bindings: usb: dwc3: Clean up hs_phy_irq in binding (Desnes Nunes) [RHEL-59050]
  - dt-bindings: usb: qcom,dwc3: Add X1E80100 binding (Desnes Nunes) [RHEL-59050]
  - dt-bindings: usb: qcom,dwc3: adjust number of interrupts on SM6125 (Desnes Nunes) [RHEL-59050]
  - dt-bindings: usb: qcom,dwc3: document the SM8560 SuperSpeed DWC3 USB controller (Desnes Nunes) [RHEL-59050]
  - dt-bindings: usb: dwc3: Add IPQ5018 compatible (Desnes Nunes) [RHEL-59050]
  - USB: dwc3: qcom: fix ACPI platform device leak (Desnes Nunes) [RHEL-59050]
  - USB: dwc3: qcom: fix software node leak on probe errors (Desnes Nunes) [RHEL-59050]
  - USB: dwc3: qcom: fix resource leaks on probe deferral (Desnes Nunes) [RHEL-59050]
  - USB: dwc3: qcom: simplify wakeup interrupt setup (Desnes Nunes) [RHEL-59050]
  - USB: dwc3: qcom: fix wakeup after probe deferral (Desnes Nunes) [RHEL-59050]
  - usb: dwc3: qcom: use dev_err_probe() where appropriate (Desnes Nunes) [RHEL-59050]
  - usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe() (Desnes Nunes) [RHEL-59050]
  - usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() (Desnes Nunes) [RHEL-59050]
  - usb: dwc3: qcom: Fix potential memory leak (Desnes Nunes) [RHEL-59050]
  - dt-bindings: usb: uhci: convert to dt schema (Desnes Nunes) [RHEL-59050]
  - thunderbolt: No need to loop over all retimers if access fails (Desnes Nunes) [RHEL-59050]
  - thunderbolt: Increase sideband access polling delay (Desnes Nunes) [RHEL-59050]
  - dt-bindings: usb: usbmisc-imx: add fsl,imx8ulp-usbmisc compatible (Desnes Nunes) [RHEL-59050]
  - media: uvcvideo: Disable autosuspend for Insta360 Link (Desnes Nunes) [RHEL-59050]
  - media: uvcvideo: Fix power line control for Shine-Optics Camera (Desnes Nunes) [RHEL-59050]
  - media: uvcvideo: Add quirk for Logitech Rally Bar (Desnes Nunes) [RHEL-59050]
  - thunderbolt: Get rid of TB_CFG_PKG_PREPARE_TO_SLEEP (Desnes Nunes) [RHEL-59050]
  - thunderbolt: Use correct error code with ERROR_NOT_SUPPORTED (Desnes Nunes) [RHEL-59050]
  - usb: dwc3: Select 2.0 or 3.0 clk base on maximum_speed (Desnes Nunes) [RHEL-59050]
  - usb: typec: ucsi: glink: set orientation aware if supported (Desnes Nunes) [RHEL-59050]
  - usb: typec: ucsi: add update_connector callback (Desnes Nunes) [RHEL-59050]
  - usb: typec: ucsi: glink: use typec_set_orientation (Desnes Nunes) [RHEL-59050]
  - usb: typec: ucsi: glink: move GPIO reading into connector_status callback (Desnes Nunes) [RHEL-59050]
  - usb: typec: ucsi: add callback for connector status updates (Desnes Nunes) [RHEL-59050]
  - media: v4l2-ctrls-core.c: Do not use iterator outside loop (Desnes Nunes) [RHEL-59050]
  - thunderbolt: Allow USB3 bandwidth to be lower than maximum supported (Desnes Nunes) [RHEL-59050]
  - thunderbolt: Fix calculation of consumed USB3 bandwidth on a path (Desnes Nunes) [RHEL-59050]
  - usb: typec: ucsi_glink: drop special handling for CCI_BUSY (Desnes Nunes) [RHEL-59050]
  - usb: typec: ucsi_glink: drop NO_PARTNER_PDOS quirk for sm8550 / sm8650 (Desnes Nunes) [RHEL-59050]
  - usb: typec: ucsi_glink: enable the UCSI_DELAY_DEVICE_PDOS quirk on qcm6490 (Desnes Nunes) [RHEL-59050]
  - usb: typec: ucsi_glink: enable the UCSI_DELAY_DEVICE_PDOS quirk (Desnes Nunes) [RHEL-59050]
  - usb: typec: ucsi_glink: rework quirks implementation (Desnes Nunes) [RHEL-59050]
  - usb: typec: ucsi: fix UCSI on SM8550 & SM8650 Qualcomm devices (Desnes Nunes) [RHEL-59050]
  - usb: typec: ucsi: Add qcm6490-pmic-glink as needing PDOS quirk (Desnes Nunes) [RHEL-59050]
  - usb: typec: ucsi: Wait 20ms before reading CCI after a reset (Desnes Nunes) [RHEL-59050]
  - usb: chipidea: move ci_ulpi_init after the phy initialization (Desnes Nunes) [RHEL-59050]
  - dt-bindings: usb: hx3: Remove unneeded dr_mode (Desnes Nunes) [RHEL-59050]
  - dt-bindings: usb: Document the Microchip USB2514 hub (Desnes Nunes) [RHEL-59050]
  - usb: phy-generic: add short delay after pulling the reset pin (Desnes Nunes) [RHEL-59050]
  - thunderbolt: Enable NVM upgrade support on Intel Maple Ridge (Desnes Nunes) [RHEL-59050]
  - phy: core: make phy_class constant (Desnes Nunes) [RHEL-59050]
  - usb: misc: uss720: check for incompatible versions of the Belkin F5U002 (Desnes Nunes) [RHEL-59050]
  - usb: misc: uss720: add support for another variant of the Belkin F5U002 (Desnes Nunes) [RHEL-59050]
  - usb: misc: uss720: document the names of the compatible devices (Desnes Nunes) [RHEL-59050]
  - usb: misc: uss720: point pp->dev to usbdev->dev (Desnes Nunes) [RHEL-59050]
  - usb: typec: ucsi_acpi: Remove Dell quirk (Desnes Nunes) [RHEL-59050]
  - usb: typec: ucsi: Never send a lone connector change ack (Desnes Nunes) [RHEL-59050]
  - usb: typec: ucsi: Stop abuse of bit definitions from ucsi.h (Desnes Nunes) [RHEL-59050]
  - usb: typec: ucsi: support delaying GET_PDOS for device (Desnes Nunes) [RHEL-59050]
  - usb: typec: ucsi: extract code to read PD caps (Desnes Nunes) [RHEL-59050]
  - usb: typec: ucsi: simplify partner's PD caps registration (Desnes Nunes) [RHEL-59050]
  - usb: typec: ucsi: always register a link to USB PD device (Desnes Nunes) [RHEL-59050]
  - usb: typec: ucsi: properly register partner's PD device (Desnes Nunes) [RHEL-59050]
  - usb: typec: displayport: drop driver owner assignment (Desnes Nunes) [RHEL-59050]
  - usb: typec: ucsi: Only enable supported notifications (Desnes Nunes) [RHEL-59050]
  - phy: qcom: edp: Add set_mode op for configuring eDP/DP submode (Desnes Nunes) [RHEL-59050]
  - phy: Add Embedded DisplayPort and DisplayPort submodes (Desnes Nunes) [RHEL-59050]
  - redhat/configs: Adding CONFIG_PHY_FSL_SAMSUNG_HDMI_PHY (Desnes Nunes) [RHEL-59050]
  - phy: freescale: add Samsung HDMI PHY (Desnes Nunes) [RHEL-59050]
  - dt-bindings: phy: add binding for the i.MX8MP HDMI PHY (Desnes Nunes) [RHEL-59050]
  - usb: misc: onboard_dev: add support for XMOS XVF3500 (Desnes Nunes) [RHEL-59050]
  - usb: misc: onboard_dev: add support for non-hub devices (Desnes Nunes) [RHEL-59050]
  - redhat/configs: rename CONFIG_USB_ONBOARD_HUB to CONFIG_USB_ONBOARD_DEV (Desnes Nunes) [RHEL-59050]
  - ASoC: dt-bindings: xmos,xvf3500: add XMOS XVF3500 voice processor (Desnes Nunes) [RHEL-59050]
  - ARM: multi_v7_defconfig: update ONBOARD_USB_HUB to ONBOAD_USB_DEV (Desnes Nunes) [RHEL-59050]
  - ARM: multi_v7_defconfig: enable USB onboard HUB driver (Desnes Nunes) [RHEL-59050]
  - arm64: defconfig: update ONBOARD_USB_HUB to ONBOARD_USB_DEV (Desnes Nunes) [RHEL-59050]
  - drm: ci: arm64.config: update ONBOARD_USB_HUB to ONBOARD_USB_DEV (Desnes Nunes) [RHEL-59050]
  - usb: misc: onboard_hub: rename to onboard_dev (Desnes Nunes) [RHEL-59050]
  - usb: misc: onboard_usb_hub: Drop obsolete dependency on COMPILE_TEST (Desnes Nunes) [RHEL-59050]
  - usb: misc: onboard_hub: use device supply names (Desnes Nunes) [RHEL-59050]
  - dt-bindings: usb: ci-hdrc-usb2-imx: add compatible and clock-names restriction for imx93 (Desnes Nunes) [RHEL-59050]
  - dt-bindings: usb: ci-hdrc-usb2-imx: add restrictions for reg, interrupts, clock and clock-names properties (Desnes Nunes) [RHEL-59050]
  - dt-bindings: usb: chipidea,usb2-imx: move imx parts to dedicated schema (Desnes Nunes) [RHEL-59050]
  - usb: chipidea: ci_hdrc_imx: align usb wakeup clock name with dt-bindings (Desnes Nunes) [RHEL-59050]
  - usb: typec: stusb160x: convert to use maple tree register cache (Desnes Nunes) [RHEL-59050]
  - USB: Use EHCI control transfer pid macros instead of constant values. (Desnes Nunes) [RHEL-59050]
  - usb: chipidea: npcm: Convert to platform remove callback returning void (Desnes Nunes) [RHEL-59050]
  - USB: gadget: core: create sysfs link between udc and gadget (Desnes Nunes) [RHEL-59050]
  - i2c: tiny-usb: check usb base class before assuming the interface on device is for this driver (Desnes Nunes) [RHEL-59050]
  - i2c: Delete error messages for failed memory allocations (Desnes Nunes) [RHEL-59050]
  - usb: phy: generic: add suspend support for regulator (Desnes Nunes) [RHEL-59050]
  - qed: put cond_resched() in qed_dmae_operation_wait() (Michal Schmidt) [RHEL-6372]
  - qed: allow the callee of qed_mcp_nvm_read() to sleep (Michal Schmidt) [RHEL-6372]
  - qed: put cond_resched() in qed_grc_dump_ctx_data() (Michal Schmidt) [RHEL-6372]
  - qed: make 'ethtool -d' 10 times faster (Michal Schmidt) [RHEL-6372]
  - qed: allow sleep in qed_mcp_trace_dump() (Michal Schmidt) [RHEL-6372]
  - ipv4: Don't reset ->flowi4_scope in ip_rt_fix_tos(). (Hangbin Liu) [RHEL-59754]
  - iommu/amd: Fix argument order in amd_iommu_dev_flush_pasid_all() (Jerry Snitselaar) [RHEL-59981]
  - redhat/configs: Increase LOCKDEP_STACK_TRACE_BITS to 20 (Waiman Long) [RHEL-59009]
  - xfs: fix scrub stats file permissions (Bill O'Donnell) [RHEL-57114]
  - xfs: fix an off-by-one error in xreap_agextent_binval (Bill O'Donnell) [RHEL-57114]
  - xfs: Remove duplicate include (Bill O'Donnell) [RHEL-57114]
  - xfs: use roundup_pow_of_two instead of ffs during xlog_find_tail (Bill O'Donnell) [RHEL-57114]
  - xfs: only call xchk_stats_merge after validating scrub inputs (Bill O'Donnell) [RHEL-57114]
  - xfs: require a relatively recent V5 filesystem for LARP mode (Bill O'Donnell) [RHEL-57114]
  - xfs: reserve less log space when recovering log intent items (Bill O'Donnell) [RHEL-57114]
  - xfs: fix again select in kconfig XFS_ONLINE_SCRUB_STATS (Bill O'Donnell) [RHEL-57114]
  - xfs: fix select in config XFS_ONLINE_SCRUB_STATS (Bill O'Donnell) [RHEL-57114]
  - fs/xfs: Fix typos in comments (Bill O'Donnell) [RHEL-57114]
  - xfs: don't check reflink iflag state when checking cow fork (Bill O'Donnell) [RHEL-57114]
  - xfs: simplify returns in xchk_bmap (Bill O'Donnell) [RHEL-57114]
  - xfs: rewrite xchk_inode_is_allocated to work properly (Bill O'Donnell) [RHEL-57114]
  - xfs: hide xfs_inode_is_allocated in scrub common code (Bill O'Donnell) [RHEL-57114]
  - xfs: clear pagf_agflreset when repairing the AGFL (Bill O'Donnell) [RHEL-57114]
  - xfs: allow userspace to rebuild metadata structures (Bill O'Donnell) [RHEL-57114]
  - xfs: don't complain about unfixed metadata when repairs were injected (Bill O'Donnell) [RHEL-57114]
  - xfs: allow the user to cancel repairs before we start writing (Bill O'Donnell) [RHEL-57114]
  - xfs: always rescan allegedly healthy per-ag metadata after repair (Bill O'Donnell) [RHEL-57114]
  - xfs: implement online scrubbing of rtsummary info (Bill O'Donnell) [RHEL-57114]
  - xfs: move the realtime summary file scrubber to a separate source file (Bill O'Donnell) [RHEL-57114]
  - xfs: wrap ilock/iunlock operations on sc->ip (Bill O'Donnell) [RHEL-57114]
  - xfs: get our own reference to inodes that we want to scrub (Bill O'Donnell) [RHEL-57114]
  - xfs: track usage statistics of online fsck (Bill O'Donnell) [RHEL-57114]
  - xfs: create scaffolding for creating debugfs entries (Bill O'Donnell) [RHEL-57114]
  - xfs: improve xfarray quicksort pivot (Bill O'Donnell) [RHEL-57114]
  - xfs: cache pages used for xfarray quicksort convergence (Bill O'Donnell) [RHEL-57114]
  - xfs: speed up xfarray sort by sorting xfile page contents directly (Bill O'Donnell) [RHEL-57114]
  - xfs: teach xfile to pass back direct-map pages to caller (Bill O'Donnell) [RHEL-57114]
  - xfs: convert xfarray insertion sort to heapsort using scratchpad memory (Bill O'Donnell) [RHEL-57114]
  - xfs: enable sorting of xfile-backed arrays (Bill O'Donnell) [RHEL-57114]
  - xfs: create a big array data structure (Bill O'Donnell) [RHEL-57114]
  - xfs: use per-AG bitmaps to reap unused AG metadata blocks during repair (Bill O'Donnell) [RHEL-57114]
  - xfs: reap large AG metadata extents when possible (Bill O'Donnell) [RHEL-57114]
  - xfs: allow scanning ranges of the buffer cache for live buffers (Bill O'Donnell) [RHEL-57114]
  - xfs: rearrange xrep_reap_block to make future code flow easier (Bill O'Donnell) [RHEL-57114]
  - xfs: use deferred frees to reap old btree blocks (Bill O'Donnell) [RHEL-57114]
  - xfs: only allow reaping of per-AG blocks in xrep_reap_extents (Bill O'Donnell) [RHEL-57114]
  - xfs: only invalidate blocks if we're going to free them (Bill O'Donnell) [RHEL-57114]
  - xfs: move the post-repair block reaping code to a separate file (Bill O'Donnell) [RHEL-57114]
  - xfs: cull repair code that will never get used (Bill O'Donnell) [RHEL-57114]
  - xfs: stabilize fs summary counters for online fsck (Bill O'Donnell) [RHEL-57114]
  - pinctrl: Remove redundant null pointer checks in pinctrl_remove_device_debugfs() (Steve Best) [RHEL-61798]
  - pinctrl: core: fix possible memory leak when pinctrl_enable() fails (Steve Best) [RHEL-61798]
  - pinctrl: core: reset gpio_device in loop in pinctrl_pins_show() (Steve Best) [RHEL-61798]
  - pinctrl: core: take into account the pins array in pinctrl_pins_show() (Steve Best) [RHEL-61798]
  - pinctrl: core: comment that pinctrl_add_gpio_range() is deprecated (Steve Best) [RHEL-61798]
  - pwm: Provide wrappers for storing and getting driver private data (Steve Best) [RHEL-61798]
  - pinctrl: intel: Constify struct intel_pinctrl parameter (Steve Best) [RHEL-61798]
  - pinctrl: baytrail: Drop duplicate return statement (Steve Best) [RHEL-61798]
  - pinctrl: intel: Inline intel_gpio_community_irq_handler() (Steve Best) [RHEL-61798]
  - pinctrl: intel: Introduce for_each_intel_gpio_group() helper et al. (Steve Best) [RHEL-61798]
  - pinctrl: intel: Constify intel_get_community() returned object (Steve Best) [RHEL-61798]
  - pinctrl: intel: Implement high impedance support (Steve Best) [RHEL-61798]
  - pinctrl: intel: Refactor __intel_gpio_set_direction() to be more useful (Steve Best) [RHEL-61798]
  - pinctrl: intel: Add __intel_gpio_get_direction() helper (Steve Best) [RHEL-61798]
  - pinctrl: baytrail: Add pinconf group for uart3 (Steve Best) [RHEL-61798]
  - pinctrl: baytrail: Fix selecting gpio pinctrl state (Steve Best) [RHEL-61798]
  - pinctrl: lynxpoint: Simplify code with cleanup helpers (Steve Best) [RHEL-61798]
  - pinctrl: lynxpoint: Replace kernel.h by what is actually being used (Steve Best) [RHEL-61798]
  - pinctrl: lynxpoint: drop runtime PM support (Steve Best) [RHEL-61798]
  - pinctrl: lynxpoint: Make use of pm_ptr() (Steve Best) [RHEL-61798]
  - pinctrl: lynxpoint: reuse common functions from pinctrl-intel (Steve Best) [RHEL-61798]
  - pinctrl: lynxpoint: Convert to use new memeber in struct intel_function (Steve Best) [RHEL-61798]
  - pinctrl: lynxpoint: Add missing header(s) (Steve Best) [RHEL-61798]
  - pinctrl: lynxpoint: Switch to to embedded struct pingroup (Steve Best) [RHEL-61798]
  - sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start (Xin Long) [RHEL-63283]
  - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (Xin Long) [RHEL-63283]
  - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-63283]
  - sctp: cancel a blocking accept when shutdown a listen socket (Xin Long) [RHEL-63283]
  - dmaengine: Fix spelling mistakes (Jerry Snitselaar) [RHEL-63088]
  - dmaengine: avoid non-constant format string (Jerry Snitselaar) [RHEL-63088]
  - dmaengine: idxd: Add new DSA and IAA device IDs for Diamond Rapids platform (Jerry Snitselaar) [RHEL-63088]
  - dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform (Jerry Snitselaar) [RHEL-38566]
  - dmaengine: ti: k3-udma: Remove unused declarations (Jerry Snitselaar) [RHEL-63088]
  - dmaengine: dmatest: Explicitly cast divisor to u32 (Jerry Snitselaar) [RHEL-63088]
  - dmaengine: idxd: Convert comma to semicolon (Jerry Snitselaar) [RHEL-63088]
  - dmaengine: dw: Unify ret-val local variables naming (Jerry Snitselaar) [RHEL-63088]
  - dmaengine: dw: Simplify max-burst calculation procedure (Jerry Snitselaar) [RHEL-63088]
  - dmaengine: dw: Define encode_maxburst() above prepare_ctllo() callbacks (Jerry Snitselaar) [RHEL-63088]
  - dmaengine: dw: Simplify prepare CTL_LO methods (Jerry Snitselaar) [RHEL-63088]
  - bnxt_en: Don't clear ntuple filters and rss contexts during ethtool ops (Michal Schmidt) [RHEL-54645]
  - bnxt_en : Fix memory out-of-bounds in bnxt_fill_hw_rss_tbl() (Michal Schmidt) [RHEL-54645]
  - eth: bnxt: populate defaults in the RSS context struct (Michal Schmidt) [RHEL-54645]
  - eth: bnxt: reject unsupported hash functions (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Fix RSS logic in __bnxt_reserve_rings() (Michal Schmidt) [RHEL-54645]
  - eth: bnxt: use the indir table from ethtool context (Michal Schmidt) [RHEL-54645]
  - eth: bnxt: bump the entry size in indir tables to u32 (Michal Schmidt) [RHEL-54645]
  - eth: bnxt: pad out the correct indirection table (Michal Schmidt) [RHEL-54645]
  - eth: bnxt: use the RSS context XArray instead of the local list (Michal Schmidt) [RHEL-54645]
  - eth: bnxt: use context priv for struct bnxt_rss_ctx (Michal Schmidt) [RHEL-54645]
  - eth: bnxt: depend on core cleaning up RSS contexts (Michal Schmidt) [RHEL-54645]
  - eth: bnxt: remove rss_ctx_bmap (Michal Schmidt) [RHEL-54645]
  - eth: bnxt: move from .set_rxfh to .create_rxfh_context and friends (Michal Schmidt) [RHEL-54645]
  - eth: bnxt: allow deleting RSS contexts when the device is down (Michal Schmidt) [RHEL-54645]
  - bnxt: fix crashes when reducing ring count with active RSS contexts (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Fix the resource check condition for RSS contexts (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Remove atomic operations on ptp->tx_avail (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Increase the max total outstanding PTP TX packets to 4 (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Let bnxt_stamp_tx_skb() return error code (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Remove an impossible condition check for PTP TX pending SKB (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Refactor all PTP TX timestamp fields into a struct (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Add BCM5760X specific PHC registers mapping (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Add TX timestamp completion logic (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Allow some TX packets to be unprocessed in NAPI (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Add is_ts_pkt field to struct bnxt_sw_tx_bd (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Add new TX timestamp completion definitions (Michal Schmidt) [RHEL-54645]
  - bnxt_en: implement netdev_queue_mgmt_ops (Michal Schmidt) [RHEL-54645]
  - bnxt_en: split rx ring helpers out from ring helpers (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Cap the size of HWRM_PORT_PHY_QCFG forwarded response (Michal Schmidt) [RHEL-54645]
  - bnxt_en: fix atomic counter for ptp packets (Michal Schmidt) [RHEL-54645]
  - bnxt_en: add timestamping statistics support (Michal Schmidt) [RHEL-54645]
  - bnxt_en: silence clang build warning (Michal Schmidt) [RHEL-54645]
  - bnxt: fix bnxt_get_avail_msix() returning negative values (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Add VF PCI ID for 5760X (P7) chips (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Optimize recovery path ULP locking in the driver (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Add a mutex to synchronize ULP operations (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Don't call ULP_STOP/ULP_START during L2 reset (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Don't support offline self test when RoCE driver is loaded (Michal Schmidt) [RHEL-54645]
  - bnxt_en: share NQ ring sw_stats memory with subrings (Michal Schmidt) [RHEL-54645]
  - eth: bnxt: fix counting packets discarded due to OOM and netpoll (Michal Schmidt) [RHEL-54645]
  - bnxt_en: flower: validate control flags (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Fix the PCI-AER routines (Michal Schmidt) [RHEL-54645]
  - bnxt_en: refactor reset close code (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Update MODULE_DESCRIPTION (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Utilize ulp client resources if RoCE is not registered (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Change MSIX/NQs allocation policy (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Refactor bnxt_rdma_aux_device_init/uninit functions (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Remove unneeded MSIX base structure fields and code (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Remove a redundant NULL check in bnxt_register_dev() (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Skip ethtool RSS context configuration in ifdown state (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Reset PTP tx_avail after possible firmware reset (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Fix error recovery for RoCE ulp client (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init() (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Fix PTP firmware timeout parameter (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Add warning message about disallowed speed change (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Add XDP Metadata support (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Change bnxt_rx_xdp function prototype (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Allocate page pool per numa node (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Enable XPS by default on driver load (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Add delay to handle Downstream Port Containment (DPC) AER (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Support adding ntuple rules on RSS contexts (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Refactor bnxt_cfg_rfs_ring_tbl_idx() (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Support RSS contexts in ethtool .{get|set}_rxfh() (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Refactor bnxt_set_rxfh() (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Add a new_rss_ctx parameter to bnxt_rfs_capable() (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Simplify bnxt_rfs_capable() (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Refactor RSS indir alloc/set functions (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Introduce rss ctx structure, alloc/free functions (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Refactor VNIC alloc and cfg functions (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Add helper function bnxt_hwrm_vnic_rss_cfg_p5() (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Retry PTP TX timestamp from FW for 1 second (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Add a timeout parameter to bnxt_hwrm_port_ts_query() (Michal Schmidt) [RHEL-54645]
  - eth: bnxt: support per-queue statistics (Michal Schmidt) [RHEL-54645]
  - bnxt_en: fix accessing vnic_info before allocating it (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Use the new VNIC to create ntuple filters (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Create and setup the additional VNIC for adding ntuple filters (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Provision for an additional VNIC for ntuple filters (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Define BNXT_VNIC_DEFAULT for the default vnic index (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Refactor bnxt_set_features() (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Add bnxt_get_total_vnics() to calculate number of VNICs (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Check additional resources in bnxt_check_rings() (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Improve RSS context reservation infrastructure (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Explicitly specify P5 completion rings to reserve (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Refactor ring reservation functions (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Add RSS support for IPSEC headers (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Invalidate user filters when needed (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Add support for user configured RSS key (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Restore all the user created L2 and ntuple filters (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Retain user configured filters when closing (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Save user configured filters in a lookup list (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Add separate function to delete the filter structure (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Add drop action support for ntuple (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Enhance ethtool ntuple support for ip flows besides TCP/UDP (Michal Schmidt) [RHEL-54645]
  - bnxt_en: implement fully specified 5-tuple masks (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Support ethtool -n to display ether filters. (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Add ethtool -N support for ether filters. (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Use firmware provided maximum filter counts. (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Make PTP timestamp HWRM more silent (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Fix possible crash after creating sw mqprio TCs (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Prevent kernel warning when running offline self test (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Fix RSS table entries calculation for P5_PLUS chips (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Wait for FLR to complete during probe (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Fix RCU locking for ntuple filters in bnxt_rx_flow_steer() (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Fix RCU locking for ntuple filters in bnxt_srxclsrldel() (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Remove unneeded variable in bnxt_hwrm_clear_vnic_filter() (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Fix compile error without CONFIG_RFS_ACCEL (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Add support for ntuple filter deletion by ethtool. (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Add support for ntuple filters added from ethtool. (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Add ntuple matching flags to the bnxt_ntuple_filter structure. (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Refactor ntuple filter removal logic in bnxt_cfg_ntp_filters(). (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Refactor the hash table logic for ntuple filters. (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Refactor filter insertion logic in bnxt_rx_flow_steer(). (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Add new BNXT_FLTR_INSERTED flag to bnxt_filter_base struct. (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Add bnxt_lookup_ntp_filter_from_idx() function (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Add function to calculate Toeplitz hash (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Refactor L2 filter alloc/free firmware commands. (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Re-structure the bnxt_ntuple_filter structure. (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Add bnxt_l2_filter hash table. (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Refactor bnxt_ntuple_filter structure. (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Make PTP TX timestamp HWRM query silent (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Skip nic close/open when configuring tstamp filters (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Add support for UDP GSO on 5760X chips (Michal Schmidt) [RHEL-54645]
  - bnxt_en: add rx_filter_miss extended stats (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Configure UDP tunnel TPA (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Add support for VXLAN GPE (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Use proper TUNNEL_DST_PORT_ALLOC* commands (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Allocate extra QP backing store memory when RoCE FW reports it (Michal Schmidt) [RHEL-54645]
  - bnxt_en: Support TX coalesced completion on 5760X chips (Michal Schmidt) [RHEL-54645]
  - eth: bnxt: link NAPI instances to queues and IRQs (Michal Schmidt) [RHEL-54645]
  - bnxt_en: move bnxt_rx_ts_valid() to its upstream location (Michal Schmidt) [RHEL-54645]
  - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-60572]
  - pinctrl: intel: Move debounce validation out of the lock (Steve Best) [RHEL-65439]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-528.el9]
changelog:
  - net: Fix an unsafe loop on the list (CKI Backport Bot) [RHEL-63844] {CVE-2024-50024}
  - serial: protect uart_port_dtr_rts() in uart_shutdown() too (CKI Backport Bot) [RHEL-63838] {CVE-2024-50058}
  - net/sched: accept TCA_STAB only for root qdisc (CKI Backport Bot) [RHEL-63814] {CVE-2024-50039}
  - s390/crypto: Display Query and Query Authentication Information in sysfs (Mete Durlu) [RHEL-56382]
  - s390/crypto: Add Support for Query Authentication Information (Mete Durlu) [RHEL-56382]
  - s390/crypto: Rework RRE and RRF CPACF inline functions (Mete Durlu) [RHEL-56382]
  - s390/crypto: Add KDSA CPACF Instruction (Mete Durlu) [RHEL-56382]
  - s390/cpacf: Make use of invalid opcode produce a link error (Mete Durlu) [RHEL-56382]
  - s390/cpacf: Split and rework cpacf query functions (Mete Durlu) [RHEL-56382]
  - dma-mapping: fix tracing dma_alloc/free with vmalloc'd memory (Jerry Snitselaar) [RHEL-61942]
  - mmc: core: Only set maximum DMA segment size if DMA is supported (Jerry Snitselaar) [RHEL-61942]
  - dma-mapping: fix DMA API tracing for chained scatterlists (Jerry Snitselaar) [RHEL-61942]
  - dma-mapping: report unlimited DMA addressing in IOMMU DMA path (Jerry Snitselaar) [RHEL-61942]
  - dma-mapping: fix vmap and mmap of noncontiougs allocations (Jerry Snitselaar) [RHEL-61942]
  - iommu/dma: remove most stubs in iommu-dma.h (Jerry Snitselaar) [RHEL-61942]
  - dma-mapping: reflow dma_supported (Jerry Snitselaar) [RHEL-61942]
  - dma-mapping: reliably inform about DMA support for IOMMU (Jerry Snitselaar) [RHEL-61942]
  - dma-mapping: add tracing for dma-mapping API calls (Jerry Snitselaar) [RHEL-61942]
  - dma-mapping: use IOMMU DMA calls for common alloc/free page calls (Jerry Snitselaar) [RHEL-61942]
  - dma-direct: optimize page freeing when it is not addressable (Jerry Snitselaar) [RHEL-61942]
  - dma-mapping: clearly mark DMA ops as an architecture feature (Jerry Snitselaar) [RHEL-61942]
  - vdpa_sim: don't select DMA_OPS (Jerry Snitselaar) [RHEL-61942]
  - arm64: mm: keep low RAM dma zone (Jerry Snitselaar) [RHEL-61942]
  - dma-mapping: don't return errors from dma_set_max_seg_size (Jerry Snitselaar) [RHEL-61942]
  - dma-mapping: don't return errors from dma_set_seg_boundary (Jerry Snitselaar) [RHEL-61942]
  - dma-mapping: don't return errors from dma_set_min_align_mask (Jerry Snitselaar) [RHEL-61942]
  - scsi: check that busses support the DMA API before setting dma parameters (Jerry Snitselaar) [RHEL-61942]
  - arm64: mm: fix DMA zone when dma-ranges is missing (Jerry Snitselaar) [RHEL-61942]
  - dma-mapping: direct calls for dma-iommu (Jerry Snitselaar) [RHEL-61942]
  - dma-mapping: call ->unmap_page and ->unmap_sg unconditionally (Jerry Snitselaar) [RHEL-61942]
  - arm64: support DMA zone above 4GB (Jerry Snitselaar) [RHEL-61942]
  - dma-mapping: replace zone_dma_bits by zone_dma_limit (Jerry Snitselaar) [RHEL-61942]
  - dma-mapping: use bit masking to check VM_DMA_COHERENT (Jerry Snitselaar) [RHEL-61942]
  - iommu: Set iommu_attach_handle->domain in core (Jerry Snitselaar) [RHEL-61942]
  - iommufd: Avoid duplicated __iommu_group_set_core_domain() call (Jerry Snitselaar) [RHEL-61942]
  - iommufd: Protect against overflow of ALIGN() during iova allocation (Jerry Snitselaar) [RHEL-61942]
  - iommufd: Reorder struct forward declarations (Jerry Snitselaar) [RHEL-61942]
  - iommufd: Check the domain owner of the parent before creating a nesting domain (Jerry Snitselaar) [RHEL-61942]
  - iommufd/device: Enforce reserved IOVA also when attached to hwpt_nested (Jerry Snitselaar) [RHEL-55215]
  - iommufd/selftest: Fix buffer read overrrun in the dirty test (Jerry Snitselaar) [RHEL-61942]
  - iommufd: Reorder include files (Jerry Snitselaar) [RHEL-61942]
  - iommu: Allow ATS to work on VFs when the PF uses IDENTITY (Jerry Snitselaar) [RHEL-61942]
  - iommu/amd: Test for PAGING domains before freeing a domain (Jerry Snitselaar) [RHEL-61942]
  - iommu/amd: Add kernel parameters to limit V1 page-sizes (Jerry Snitselaar) [RHEL-61942]
  - iommu/amd: Do not set the D bit on AMD v2 table entries (Jerry Snitselaar) [RHEL-61942]
  - iommu/amd: Correct the reported page sizes from the V1 table (Jerry Snitselaar) [RHEL-61942]
  - iommu/amd: Remove the confusing dummy iommu_flush_ops tlb ops (Jerry Snitselaar) [RHEL-61942]
  - iommu/amd: Fix typo of , instead of ; (Jerry Snitselaar) [RHEL-61942]
  - iommu/amd: Remove conditions from domain free paths (Jerry Snitselaar) [RHEL-61942]
  - iommu/amd: Narrow the use of struct protection_domain to invalidation (Jerry Snitselaar) [RHEL-61942]
  - iommu/amd: Store the nid in io_pgtable_cfg instead of the domain (Jerry Snitselaar) [RHEL-61942]
  - iommu/amd: Remove amd_io_pgtable::pgtbl_cfg (Jerry Snitselaar) [RHEL-61942]
  - iommu/amd: Rename struct amd_io_pgtable iopt to pgtbl (Jerry Snitselaar) [RHEL-61942]
  - iommu/amd: Remove the amd_iommu_domain_set_pt_root() and related (Jerry Snitselaar) [RHEL-61942]
  - iommu/amd: Remove amd_iommu_domain_update() from page table freeing (Jerry Snitselaar) [RHEL-61942]
  - iommu/amd: Set the pgsize_bitmap correctly (Jerry Snitselaar) [RHEL-61942]
  - iommu/amd: Allocate the page table root using GFP_KERNEL (Jerry Snitselaar) [RHEL-61942]
  - iommu/amd: Move allocation of the top table into v1_alloc_pgtable (Jerry Snitselaar) [RHEL-61942]
  - iommu/amd: Make amd_iommu_dev_update_dte() static (Jerry Snitselaar) [RHEL-61942]
  - iommu/amd: Rework amd_iommu_update_and_flush_device_table() (Jerry Snitselaar) [RHEL-61942]
  - iommu/amd: Make amd_iommu_domain_flush_complete() static (Jerry Snitselaar) [RHEL-61942]
  - iommu/amd: Make amd_iommu_dev_flush_pasid_all() static (Jerry Snitselaar) [RHEL-61942]
  - iommu/amd: Handle error path in amd_iommu_probe_device() (Jerry Snitselaar) [RHEL-61942]
  - iommu/amd: Remove unused DTE_GCR3_INDEX_* macros (Jerry Snitselaar) [RHEL-61942]
  - iommu/amd: Make amd_iommu_is_attach_deferred() static (Jerry Snitselaar) [RHEL-61942]
  - iommu/amd: Update event log pointer as soon as processing is complete (Jerry Snitselaar) [RHEL-61942]
  - iommu/amd: Update PASID, GATS, GLX, SNPAVICSUP feature related macros (Jerry Snitselaar) [RHEL-61942]
  - iommu/amd: Add blocked domain support (Jerry Snitselaar) [RHEL-61942]
  - sizes.h: Add entries between SZ_32G and SZ_64T (Jerry Snitselaar) [RHEL-61942]
  - iommu/vt-d: Introduce batched cache invalidation (Jerry Snitselaar) [RHEL-61942]
  - iommu/vt-d: Add qi_batch for dmar_domain (Jerry Snitselaar) [RHEL-61942]
  - iommu/vt-d: Refactor IOTLB and Dev-IOTLB flush for batching (Jerry Snitselaar) [RHEL-61942]
  - iommu/vt-d: Factor out invalidation descriptor composition (Jerry Snitselaar) [RHEL-61942]
  - iommu/vt-d: Unconditionally flush device TLB for pasid table updates (Jerry Snitselaar) [RHEL-61942]
  - iommu/vt-d: Move PCI PASID enablement to probe path (Jerry Snitselaar) [RHEL-61942]
  - iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count (Jerry Snitselaar) [RHEL-61942]
  - iommu/vt-d: Cleanup si_domain (Jerry Snitselaar) [RHEL-61942]
  - iommu/vt-d: Add support for static identity domain (Jerry Snitselaar) [RHEL-61942]
  - iommu/vt-d: Factor out helpers from domain_context_mapping_one() (Jerry Snitselaar) [RHEL-61942]
  - iommu/vt-d: Remove has_iotlb_device flag (Jerry Snitselaar) [RHEL-61942]
  - iommu/vt-d: Always reserve a domain ID for identity setup (Jerry Snitselaar) [RHEL-61942]
  - iommu/vt-d: Remove identity mappings from si_domain (Jerry Snitselaar) [RHEL-61942]
  - iommu/vt-d: Require DMA domain if hardware not support passthrough (Jerry Snitselaar) [RHEL-61942]
  - hsr: Simplify code for announcing HSR nodes timer setup (Felix Maurer) [RHEL-63082]
  - net: annotate data-races around dev->if_port (Ivan Vecera) [RHEL-62123]
  - inet: bring NLM_DONE out to a separate recv() again (Ivan Vecera) [RHEL-62123]
  - rtnetlink: provide RCU protection to rtnl_fill_prop_list() (Ivan Vecera) [RHEL-62123]
  - rtnetlink: make rtnl_fill_link_ifmap() RCU ready (Ivan Vecera) [RHEL-62123]
  - inet: switch inet_dump_fib() to RCU protection (Ivan Vecera) [RHEL-62123]
  - nexthop: allow nexthop_mpath_fill_node() to be called without RTNL (Ivan Vecera) [RHEL-62123]
  - inet: allow ip_valid_fib_dump_req() to be called with RTNL or RCU (Ivan Vecera) [RHEL-62123]
  - ipv6: switch inet6_dump_ifinfo() to RCU protection (Ivan Vecera) [RHEL-62123]
  - rtnetlink: add RTNL_FLAG_DUMP_UNLOCKED flag (Ivan Vecera) [RHEL-62123]
  - rtnetlink: change nlk->cb_mutex role (Ivan Vecera) [RHEL-62123]
  - netlink: hold nlk->cb_mutex longer in __netlink_dump_start() (Ivan Vecera) [RHEL-62123]
  - netlink: fix netlink_diag_dump() return value (Ivan Vecera) [RHEL-62123]
  - ipv6: use xarray iterator to implement inet6_dump_ifinfo() (Ivan Vecera) [RHEL-62123]
  - ipv6: prepare inet6_fill_ifinfo() for RCU protection (Ivan Vecera) [RHEL-62123]
  - ipv6: prepare inet6_fill_ifla6_attrs() for RCU (Ivan Vecera) [RHEL-62123]
  - rtnetlink: prepare nla_put_iflink() to run under RCU (Ivan Vecera) [RHEL-62123]
  - net: free altname using an RCU callback (Ivan Vecera) [RHEL-62123]
  - net: fix removing a namespace with conflicting altnames (Ivan Vecera) [RHEL-62123]
  - selftests: net: add very basic test for netdev names and namespaces (Ivan Vecera) [RHEL-62123]
  - net: move altnames together with the netdevice (Ivan Vecera) [RHEL-62123]
  - net: avoid UAF on deleted altname (Ivan Vecera) [RHEL-62123]
  - net: check for altname conflicts when changing netdev's netns (Ivan Vecera) [RHEL-62123]
  - net: fix ifname in netlink ntf during netns move (Ivan Vecera) [RHEL-62123]
  - net: move from strlcpy with unused retval to strscpy (Ivan Vecera) [RHEL-62123]
  - ipv6: make mc_forwarding atomic (Ivan Vecera) [RHEL-62123]
  - net: introduce a function to check if a netdev name is in use (Ivan Vecera) [RHEL-62123]
  - RDMA/bnxt_re: Fix the GID table length (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Change the sequence of updating the CQ toggle value (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Fix an error path in bnxt_re_add_device (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Fix a possible NULL pointer dereference (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Return more meaningful error (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Fix incorrect dereference of srq in async event (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Fix out of bound check (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Fix the max CQ WQEs for older adapters (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Fix the max WQEs used in Static WQE mode (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Add a check for memory allocation (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Fix incorrect AVID type in WQE structure (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Fix a possible memory leak (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Remove the unused variable en_dev (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Recover the device when FW error is detected (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Group all operations under add_device and remove_device (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Use the aux device for L2 ULP callbacks (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Change aux driver data to en_info to hold more information (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Fix the max WQE size for static WQE support (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Fix the compatibility flag for variable size WQE (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Add support for MR Relaxed Ordering (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Avoid an extra hwrm per MR creation (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Rename a variable (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Update HW interface headers (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Share a page to expose per SRQ info with userspace (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Refactor the BNXT_RE_METHOD_GET_TOGGLE_MEM method (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Get the toggle bits from SRQ events (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Enable variable size WQEs for user space applications (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Handle variable WQE support for user applications (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Fix the table size for PSN/MSN entries (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Get the WQE index from slot index while completing the WQEs (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Add support for Variable WQE in Genp7 adapters (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Disable doorbell moderation if hardware register read fails (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Enable DB moderation for genP7 adapters (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Update the correct DB FIFO depth and mask for GenP7 (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Fix the max msix vectors macro (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Expose the MSN table capability for user library (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - RDMA/bnxt_re: Allow MSN table capability check (Mohammad Heib) [RHEL-52759 RHEL-54646]
  - sch/netem: fix use after free in netem_dequeue (CKI Backport Bot) [RHEL-59498] {CVE-2024-46800}
  - net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN (Jamie Bainbridge) [RHEL-57739]
  - selftests: net: bridge_vlan_aware: test that other TPIDs are seen as untagged (Jamie Bainbridge) [RHEL-57739]
  - selftests: forwarding: skip if kernel not support setting bridge fdb learning limit (Jamie Bainbridge) [RHEL-57739]
  - net: bridge: mst: Check vlan state for egress decision (Jamie Bainbridge) [RHEL-57739]
  - selftests: forwarding: Make vxlan-bridge-1d pass on debug kernels (Jamie Bainbridge) [RHEL-57739]
  - selftests: libs: Expand "$@" where possible (Jamie Bainbridge) [RHEL-57739]
  - net: bridge: fix an inconsistent indentation (Jamie Bainbridge) [RHEL-57739]
  - selftests: net: lib: set 'i' as local (Jamie Bainbridge) [RHEL-57739]
  - selftests/net: use tc rule to filter the na packet (Jamie Bainbridge) [RHEL-57739]
  - selftests: net: use upstream mtools (Jamie Bainbridge) [RHEL-57739]
  - net: bridge: switchdev: Improve error message for port_obj_add/del functions (Jamie Bainbridge) [RHEL-57739]
  - net: bridge: fix corrupted ethernet header on multicast-to-unicast (Jamie Bainbridge) [RHEL-57739]
  - net: bridge: fix multicast-to-unicast with fraglist GSO (Jamie Bainbridge) [RHEL-57739]
  - selftests: forwarding: add ability to assemble NETIFS array by driver name (Jamie Bainbridge) [RHEL-57739]
  - net: bridge: remove redundant check of f->dst (Jamie Bainbridge) [RHEL-57739]
  - bridge/br_netlink.c: no need to return void function (Jamie Bainbridge) [RHEL-57739]
  - selftests: forwarding: bail_on_lldpad() should SKIP (Jamie Bainbridge) [RHEL-57739]
  - selftests: forwarding: lib.sh: Validate NETIFS (Jamie Bainbridge) [RHEL-57739]
  - selftests: net: Unify code of busywait() and slowwait() (Jamie Bainbridge) [RHEL-57739]
  - selftests: forwarding: Support for performance sensitive tests (Jamie Bainbridge) [RHEL-57739]
  - selftests: forwarding: Convert log_test() to recognize RET values (Jamie Bainbridge) [RHEL-57739]
  - selftests: forwarding: Have RET track kselftest framework constants (Jamie Bainbridge) [RHEL-57739]
  - selftests: lib: Define more kselftest exit codes (Jamie Bainbridge) [RHEL-57739]
  - selftests/net: add variable NS_LIST for lib.sh (Jamie Bainbridge) [RHEL-57739]
  - selftests: forwarding: README: Document customization (Jamie Bainbridge) [RHEL-57739]
  - selftests: forwarding.config.sample: Move overrides to lib.sh (Jamie Bainbridge) [RHEL-57739]
  - selftests: net: libs: Change variable fallback syntax (Jamie Bainbridge) [RHEL-57739]
  - selftests: forwarding: Make VXLAN ECN encap tests more robust (Jamie Bainbridge) [RHEL-57739]
  - selftests: forwarding: Make vxlan-bridge-1q pass on debug kernels (Jamie Bainbridge) [RHEL-57739]
  - selftests: forwarding: Parametrize mausezahn delay (Jamie Bainbridge) [RHEL-57739]
  - net: bridge: Exit if multicast_init_stats fails (Jamie Bainbridge) [RHEL-57739]
  - net: bridge: constify the struct device_type usage (Jamie Bainbridge) [RHEL-57739]
  - bridge: vlan: use synchronize_net() when holding RTNL (Jamie Bainbridge) [RHEL-57739]
  - selftests: forwarding: Add missing multicast routing config entries (Jamie Bainbridge) [RHEL-57739]
  - selftests/net/forwarding: add slowwait functions (Jamie Bainbridge) [RHEL-57739]
  - net: bridge: Use KMEM_CACHE instead of kmem_cache_create (Jamie Bainbridge) [RHEL-57739]
  - selftests: forwarding: Remove duplicated lib.sh content (Jamie Bainbridge) [RHEL-57739]
  - selftests: bonding: Add net/forwarding/lib.sh to TEST_INCLUDES (Jamie Bainbridge) [RHEL-57739]
  - selftests: team: Add shared library scripts to TEST_INCLUDES (Jamie Bainbridge) [RHEL-57739]
  - selftests: forwarding: Redefine relative_path variable (Jamie Bainbridge) [RHEL-57739]
  - selftests: forwarding: Add missing config entries (Jamie Bainbridge) [RHEL-57739]
  - net: bridge: Do not allocate stats in the driver (Jamie Bainbridge) [RHEL-57739]
  - fscrypt: remove mention of symlink st_size quirk from documentation (Ian Kent) [RHEL-33888]
  - MAINTAINERS: update idmapping tree (Ian Kent) [RHEL-33888]
  - Add Seth Forshee as co-maintainer for idmapped mounts (Ian Kent) [RHEL-33888]
  - ceph: allow idmapped setattr inode op (Ian Kent) [RHEL-33888]
  - ceph: pass idmap to __ceph_setattr (Ian Kent) [RHEL-33888]
  - nfsd: use vfs setgid helper (Ian Kent) [RHEL-33888]
  - nfs: use vfs setgid helper (Ian Kent) [RHEL-33888]
  - xfs: use consistent uid/gid when grabbing dquots for inodes (Ian Kent) [RHEL-33888]
  - ovl: fix null pointer dereference in ovl_permission() (Ian Kent) [RHEL-33888]
  - evm: Complete description of evm_inode_setattr() (Ian Kent) [RHEL-33888]
  - smb: client: Fix -Wstringop-overflow issues (Ian Kent) [RHEL-33888]
  - ovl: fix null pointer dereference in ovl_get_acl_rcu() (Ian Kent) [RHEL-33888]
  - fs: move mnt_idmap (Ian Kent) [RHEL-33888]
  - MAINTAINERS: add entry for idmapped mounts (Ian Kent) [RHEL-33888]
  - fs: port vfs{g,u}id helpers to mnt_idmap (Ian Kent) [RHEL-33888]
  - fs: port fs{g,u}id helpers to mnt_idmap (Ian Kent) [RHEL-33888]
  - fs: port i_{g,u}id_into_vfs{g,u}id() to mnt_idmap (Ian Kent) [RHEL-33888]
  - fs: port i_{g,u}id_{needs_}update() to mnt_idmap (Ian Kent) [RHEL-33888]
  - quota: port to mnt_idmap (Ian Kent) [RHEL-33888]
  - fs: port privilege checking helpers to mnt_idmap (Ian Kent) [RHEL-33888]
  - f2fs: port to vfs{g,u}id_t and associated helpers (Ian Kent) [RHEL-33888]
  - fs: port inode_owner_or_capable() to mnt_idmap (Ian Kent) [RHEL-33888]
  - fs: port inode_init_owner() to mnt_idmap (Ian Kent) [RHEL-33888]
  - nilfs2: fix use-after-free bug of struct nilfs_root (Ian Kent) [RHEL-33888]
  - fs: port acl to mnt_idmap (Ian Kent) [RHEL-33888]
  - fs: port xattr to mnt_idmap (Ian Kent) [RHEL-33888]
  - fs: port ->permission() to pass mnt_idmap (Ian Kent) [RHEL-33888]
  - may_linkat(): constify path (Ian Kent) [RHEL-33888]
  - fs: port ->fileattr_set() to pass mnt_idmap (Ian Kent) [RHEL-33888]
  - ovl: support idmapped layers (Ian Kent) [RHEL-33888]
  - ovl: handle idmappings in layer open helpers (Ian Kent) [RHEL-33888]
  - ovl: handle idmappings in ovl_permission() (Ian Kent) [RHEL-33888]
  - ovl: handle idmappings for layer fileattrs (Ian Kent) [RHEL-33888]
  - ovl: use ovl_lookup_upper() wrapper (Ian Kent) [RHEL-33888]
  - exportfs: support idmapped mounts (Ian Kent) [RHEL-33888]
  - fs: port ->set_acl() to pass mnt_idmap (Ian Kent) [RHEL-33888]
  - fs: port ->get_acl() to pass mnt_idmap (Ian Kent) [RHEL-33888]
  - fs: port ->tmpfile() to pass mnt_idmap (Ian Kent) [RHEL-33888]
  - fuse: implement ->tmpfile() (Ian Kent) [RHEL-33888]
  - fs: port ->mknod() to pass mnt_idmap (Ian Kent) [RHEL-33888]
  - fs: port ->rename() to pass mnt_idmap (Ian Kent) [RHEL-33888]
  - selftests/filesystems: grant executable permission to run_fat_tests.sh (Ian Kent) [RHEL-33888]
  - selftests/filesystems: add a vfat RENAME_EXCHANGE test (Ian Kent) [RHEL-33888]
  - fat: add renameat2 RENAME_EXCHANGE flag support (Ian Kent) [RHEL-33888]
  - fat: factor out reusable code in vfat_rename() as helper functions (Ian Kent) [RHEL-33888]
  - fat: add a vfat_rename2() and make existing .rename callback a helper (Ian Kent) [RHEL-33888]
  - fs: port ->mkdir() to pass mnt_idmap (Ian Kent) [RHEL-33888]
  - fs: port ->symlink() to pass mnt_idmap (Ian Kent) [RHEL-33888]
  - autofs: remove unused ino field inode (Ian Kent) [RHEL-33888]
  - autofs: add comment about autofs_mountpoint_changed() (Ian Kent) [RHEL-33888]
  - autofs: use dentry info count instead of simple_empty() (Ian Kent) [RHEL-33888]
  - autofs: make dentry info count consistent (Ian Kent) [RHEL-33888]
  - autofs: use inode permission method for write access (Ian Kent) [RHEL-33888]
  - fs: port ->create() to pass mnt_idmap (Ian Kent) [RHEL-33888]
  - fs: port ->getattr() to pass mnt_idmap (Ian Kent) [RHEL-33888]
  - erofs: support idmapped mounts (Ian Kent) [RHEL-33888]
  - ubifs: Fix AA deadlock when setting xattr for encrypted file (Ian Kent) [RHEL-33888]
  - ubifs: report correct st_size for encrypted symlinks (Ian Kent) [RHEL-33888]
  - proc: report open files as size in stat() for /proc/pid/fd (Ian Kent) [RHEL-33888]
  - f2fs: report correct st_size for encrypted symlinks (Ian Kent) [RHEL-33888]
  - fs: port ->setattr() to pass mnt_idmap (Ian Kent) [RHEL-33888]
  - fs: port vfs_*() helpers to struct mnt_idmap (Ian Kent) [RHEL-33888]
  - f2fs: project ids aren't idmapped (Ian Kent) [RHEL-33888]
  - acl: conver higher-level helpers to rely on mnt_idmap (Ian Kent) [RHEL-33888]
  - fs: introduce dedicated idmap type for mounts (Ian Kent) [RHEL-33888]
  - linux/mount.h: trim includes (Ian Kent) [RHEL-33888]
  - fs: unset MNT_WRITE_HOLD on failure (Ian Kent) [RHEL-33888]
  - mount_setattr(): clean the control flow and calling conventions (Ian Kent) [RHEL-33888]
  - fs: clean up mount_setattr control flow (Ian Kent) [RHEL-33888]
  - fs: don't open-code mnt_hold_writers() (Ian Kent) [RHEL-33888]
  - fs: add mnt_allow_writers() and simplify mount_setattr_prepare() (Ian Kent) [RHEL-33888]
  - fs: remove unused idmapping helpers (Ian Kent) [RHEL-33888]
  - filelocks: use mount idmapping for setlease permission check (Ian Kent) [RHEL-33888]
  - ovl: port to vfs{g,u}id_t and associated helpers (Ian Kent) [RHEL-33888]
  - ima: use type safe idmapping helpers (Ian Kent) [RHEL-33888]
  - ima: add gid support (Ian Kent) [RHEL-33888]
  - ima: fix uid code style problems (Ian Kent) [RHEL-33888]
  - apparmor: use type safe idmapping helpers (Ian Kent) [RHEL-33888]
  - LSM: Remove double path_rename hook calls for RENAME_EXCHANGE (Ian Kent) [RHEL-33888]
  - landlock: Format with clang-format (Ian Kent) [RHEL-33888]
  - caps: use type safe idmapping helpers (Ian Kent) [RHEL-33888]
  - fs: use type safe idmapping helpers (Ian Kent) [RHEL-33888]
  - bprm_fill_uid(): don't open-code file_inode() (Ian Kent) [RHEL-33888]
  - mnt_idmapping: add missing helpers (Ian Kent) [RHEL-33888]
  - fs: use consistent setgid checks in is_sxid() (Ian Kent) [RHEL-33888]
  - attr: use consistent sgid stripping checks (Ian Kent) [RHEL-33888]
  - attr: add setattr_should_drop_sgid() (Ian Kent) [RHEL-33888]
  - fs: move should_remove_suid() (Ian Kent) [RHEL-33888]
  - attr: add in_group_or_capable() (Ian Kent) [RHEL-33888]
  - posix_acl: Fix the type of sentinel in get_acl (Ian Kent) [RHEL-33888]
  - orangefs: fix mode handling (Ian Kent) [RHEL-33888]
  - ovl: call posix_acl_release() after error checking (Ian Kent) [RHEL-33888]
  - evm: remove dead code in evm_inode_set_acl() (Ian Kent) [RHEL-33888]
  - cifs: check whether acl is valid early (Ian Kent) [RHEL-33888]
  - acl: make vfs_posix_acl_to_xattr() static (Ian Kent) [RHEL-33888]
  - acl: remove a slew of now unused helpers (Ian Kent) [RHEL-33888]
  - 9p: use stub posix acl handlers (Ian Kent) [RHEL-33888]
  - cifs: use stub posix acl handlers (Ian Kent) [RHEL-33888]
  - ovl: use stub posix acl handlers (Ian Kent) [RHEL-33888]
  - ecryptfs: use stub posix acl handlers (Ian Kent) [RHEL-33888]
  - evm: remove evm_xattr_acl_change() (Ian Kent) [RHEL-33888]
  - xattr: use posix acl api (Ian Kent) [RHEL-33888]
  - fuse: fixes after adapting to new posix acl api (Ian Kent) [RHEL-33888]
  - fuse: port to vfs{g,u}id_t and associated helpers (Ian Kent) [RHEL-33888]
  - ovl: use posix acl api (Ian Kent) [RHEL-33888]
  - ovl: implement set acl method (Ian Kent) [RHEL-33888]
  - ovl: implement get acl method (Ian Kent) [RHEL-33888]
  - ovl: improve ovl_get_acl() if POSIX ACL support is off (Ian Kent) [RHEL-33888]
  - ecryptfs: implement set acl method (Ian Kent) [RHEL-33888]
  - ecryptfs: implement get acl method (Ian Kent) [RHEL-33888]
  - acl: add vfs_remove_acl() (Ian Kent) [RHEL-33888]
  - acl: add vfs_get_acl() (Ian Kent) [RHEL-33888]
  - fs/posix_acl.c: avoid -Wempty-body warning (Ian Kent) [RHEL-33888]
  - acl: add vfs_set_acl() (Ian Kent) [RHEL-33888]
  - internal: add may_write_xattr() (Ian Kent) [RHEL-33888]
  - evm: add post set acl hook (Ian Kent) [RHEL-33888]
  - integrity: implement get and set acl hook (Ian Kent) [RHEL-33888]
  - smack: implement get, set and remove acl hook (Ian Kent) [RHEL-33888]
  - Smack: fix W=1 build warnings (Ian Kent) [RHEL-33888]
  - selinux: implement get, set and remove acl hook (Ian Kent) [RHEL-33888]
  - security: add get, remove and set acl hook (Ian Kent) [RHEL-33888]
  - 9p: implement set acl method (Ian Kent) [RHEL-33888]
  - 9p: implement get acl method (Ian Kent) [RHEL-33888]
  - cifs: implement set acl method (Ian Kent) [RHEL-33888]
  - cifs: implement get acl method (Ian Kent) [RHEL-33888]
  - fs: add new get acl method (Ian Kent) [RHEL-33888]
  - fs: rename current get acl method (Ian Kent) [RHEL-33888]
  - fs: pass dentry to set acl method (Ian Kent) [RHEL-33888]
  - f2fs: support idmapped mounts (Ian Kent) [RHEL-33888]
  - orangefs: rework posix acl handling when creating new filesystem objects (Ian Kent) [RHEL-33888]
  - xattr: always us is_posix_acl_xattr() helper (Ian Kent) [RHEL-33888]
  - acl: fix the comments of posix_acl_xattr_set (Ian Kent) [RHEL-33888]
  - xattr: constify value argument in vfs_setxattr() (Ian Kent) [RHEL-33888]
  - ovl: use vfs_set_acl_prepare() (Ian Kent) [RHEL-33888]
  - acl: move idmapping handling into posix_acl_xattr_set() (Ian Kent) [RHEL-33888]
  - acl: add vfs_set_acl_prepare() (Ian Kent) [RHEL-33888]
  - acl: return EOPNOTSUPP in posix_acl_fix_xattr_common() (Ian Kent) [RHEL-33888]
  - open: always initialize ownership fields (Ian Kent) [RHEL-33888]
  - acl: handle idmapped mounts for idmapped filesystems (Ian Kent) [RHEL-33888]
  - ovl: handle idmappings in ovl_get_acl() (Ian Kent) [RHEL-33888]
  - acl: make posix_acl_clone() available to overlayfs (Ian Kent) [RHEL-33888]
  - ovl: enable RCU'd ->get_acl() (Ian Kent) [RHEL-33888]
  - vfs: add rcu argument to ->get_acl() callback (Ian Kent) [RHEL-33888]
  - acl: port to vfs{g,u}id_t (Ian Kent) [RHEL-33888]
  - acl: move idmapped mount fixup into vfs_{g,s}etxattr() (Ian Kent) [RHEL-33888]
  - mnt_idmapping: align kernel doc and parameter order (Ian Kent) [RHEL-33888]
  - mnt_idmapping: return false when comparing two invalid ids (Ian Kent) [RHEL-33888]
  - attr: fix kernel doc (Ian Kent) [RHEL-33888]
  - attr: port attribute changes to new types (Ian Kent) [RHEL-33888]
  - quota: port quota helpers mount ids (Ian Kent) [RHEL-33888]
  - fs: port to iattr ownership update helpers (Ian Kent) [RHEL-33888]
  - fs: introduce tiny iattr ownership update helpers (Ian Kent) [RHEL-33888]
  - fs: use mount types in iattr (Ian Kent) [RHEL-33888]
  - docs: Add small intro to idmap examples (Ian Kent) [RHEL-33888]
  - fs: remove unused low-level mapping helpers (Ian Kent) [RHEL-33888]
  - docs: update mapping documentation (Ian Kent) [RHEL-33888]
  - doc: give a more thorough id handling explanation (Ian Kent) [RHEL-33888]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-529.el9]
changelog:
  - tracing: Add the ::microcode field to the mce_record tracepoint (David Arcari) [RHEL-55136]
  - tracing: Add the ::ppin field to the mce_record tracepoint (David Arcari) [RHEL-55136]
  - x86/mce: Clean up TP_printk() output line of the 'mce_record' tracepoint (David Arcari) [RHEL-55136]
  - bpf: Use raw_spinlock_t in ringbuf (Luis Claudio R. Goncalves) [RHEL-20608]
  - netfilter: xtables: fix typo causing some targets not to load on IPv6 (Phil Sutter) [RHEL-63905] {CVE-2024-50038}
  - netfilter: xtables: avoid NFPROTO_UNSPEC where needed (Phil Sutter) [RHEL-63905] {CVE-2024-50038}
  - mptcp: fallback when MPTCP opts are dropped after 1st data (CKI Backport Bot) [RHEL-62218]
  - fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF (CKI Backport Bot) [RHEL-59451] {CVE-2024-46786}
  - platform/x86/intel/pmc: Fix pmc_core_iounmap to call iounmap for valid addresses (David Arcari) [RHEL-65816 RHEL-65933] {CVE-2024-50107}
  - platform/x86:intel/pmc: Revert "Enable the ACPI PM Timer to be turned off when suspended" (David Arcari) [RHEL-65816]
  - platform/x86:intel/pmc: Disable ACPI PM Timer disabling on Sky and Kaby Lake (David Arcari) [RHEL-65816]
  - platform/x86/intel/pmt: Use PMT callbacks (David Arcari) [RHEL-65816]
  - platform/x86/intel/vsec: Add PMT read callbacks (David Arcari) [RHEL-65816]
  - clocksource: acpi_pm: Add external callback for suspend/resume (David Arcari) [RHEL-65816]
  - platform/x86: intel/pmc: Ignore all LTRs during suspend (David Arcari) [RHEL-65816]
  - platform/x86:intel/pmc: Fix comment for the pmc_core_acpi_pm_timer_suspend_resume function (David Arcari) [RHEL-65816]
  - platform/x86:intel/pmc: Enable the ACPI PM Timer to be turned off when suspended (David Arcari) [RHEL-65816]
  - platform/x86: intel/pmc: Remove unused param idx from pmc_for_each_mode() (David Arcari) [RHEL-65816]
  - platform/x86/intel/vsec.h: Move to include/linux (David Arcari) [RHEL-65816]
  - platform/x86/intel/pmc: Show live substate requirements (David Arcari) [RHEL-65816]
  - platform/x86:intel/pmc: Add support to undo ltr_ignore (David Arcari) [RHEL-65816]
  - platform/x86:intel/pmc: Use the Elvis operator (David Arcari) [RHEL-65816]
  - platform/x86:intel/pmc: Use DEFINE_SHOW_STORE_ATTRIBUTE macro (David Arcari) [RHEL-65816]
  - platform/x86:intel/pmc: Remove unneeded min_t check (David Arcari) [RHEL-65816]
  - platform/x86:intel/pmc: Add support to show ltr_ignore value (David Arcari) [RHEL-65816]
  - platform/x86:intel/pmc: Move pmc assignment closer to first usage (David Arcari) [RHEL-65816]
  - platform/x86:intel/pmc: Convert index variables to be unsigned (David Arcari) [RHEL-65816]
  - platform/x86:intel/pmc: Simplify mutex usage with cleanup helpers (David Arcari) [RHEL-65816]
  - platform/x86:intel/pmc: Use the return value of pmc_core_send_msg (David Arcari) [RHEL-65816]
  - platform/x86/intel: add missing MODULE_DESCRIPTION() macros (David Arcari) [RHEL-65816]
  - platform/x86/intel/pmc: Switch to new Intel CPU model defines (David Arcari) [RHEL-65816]
  - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Olga Kornievskaia) [RHEL-64496] {CVE-2024-49974}
  - powerpc/fadump: Fix section mismatch warning (Mamatha Inamdar) [RHEL-52914]
  - powerpc/fadump: update documentation about bootargs_append (Mamatha Inamdar) [RHEL-52914]
  - powerpc/fadump: pass additional parameters when fadump is active (Mamatha Inamdar) [RHEL-52914]
  - powerpc/fadump: setup additional parameters for dump capture kernel (Mamatha Inamdar) [RHEL-52914]
  - powerpc/pseries/fadump: add support for multiple boot memory regions (Mamatha Inamdar) [RHEL-52914]
  - i2c: i801: Add support for Intel Arrow Lake-H (Steve Best) [RHEL-20114]
  - xfrm: call xfrm_dev_policy_delete when kill policy (Sabrina Dubroca) [RHEL-63989]
  - xfrm: fix netdev reference count imbalance (Sabrina Dubroca) [RHEL-63989]
  - xfrm: Preserve vlan tags for transport mode software GRO (Sabrina Dubroca) [RHEL-63989]
  - xfrm: set skb control buffer based on packet offload as well (Sabrina Dubroca) [RHEL-63989]
  - xfrm: fix xfrm child route lookup for packet offload (Sabrina Dubroca) [RHEL-63989]
  - Documentation: bonding: add XDP support explanation (Hangbin Liu) [RHEL-62339]
  - bonding: return detailed error when loading native XDP fails (Hangbin Liu) [RHEL-62339]
  - net: stmmac: dwmac-tegra: Fix link bring-up sequence (Jose Ignacio Tornos Martinez) [RHEL-32687]
  - net: sysctl: allow dump_cpumask to handle higher numbers of CPUs (Antoine Tenart) [RHEL-61203]
  - net: sysctl: do not reserve an extra char in dump_cpumask temporary buffer (Antoine Tenart) [RHEL-61203]
  - net: sysctl: remove always-true condition (Antoine Tenart) [RHEL-61203]
  - scsi: megaraid_sas: Remove trailing space after \n newline (Chandrakanth Patil) [RHEL-60013]
  - scsi: megaraid_sas: struct MR_LD_VF_MAP: Replace 1-element arrays with flexible arrays (Chandrakanth Patil) [RHEL-60013]
  - scsi: megaraid: Indent Kconfig option help text (Chandrakanth Patil) [RHEL-60013]
  - scsi: mpt3sas: Remove trailing space after \n newline (Chandrakanth Patil) [RHEL-60026]
  - scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES (Chandrakanth Patil) [RHEL-60026]
  - scsi: mpt3sas: Avoid possible run-time warning with long manufacturer strings (Chandrakanth Patil) [RHEL-60026]
  - scsi: mpt3sas: Add missing kerneldoc parameter descriptions (Chandrakanth Patil) [RHEL-60026]
  - scsi: mpt3sas: Replace deprecated strncpy() with strscpy() (Chandrakanth Patil) [RHEL-60026]
  - scsi: mpt3sas: Prevent sending diag_reset when the controller is ready (Chandrakanth Patil) [RHEL-60026]
  - scsi: mpt3sas: Update driver version to 48.100.00.00 (Chandrakanth Patil) [RHEL-60026]
  - scsi: mpt3sas: Reload SBR without rebooting HBA (Chandrakanth Patil) [RHEL-60026]
  - scsi: mpt3sas: Suppress a warning in debug kernel (Chandrakanth Patil) [RHEL-60026]
  - scsi: mpt3sas: Replace dynamic allocations with local variables (Chandrakanth Patil) [RHEL-60026]
  - scsi: mpt3sas: Replace a dynamic allocation with a local variable (Chandrakanth Patil) [RHEL-60026]
  - scsi: mpt3sas: Fix typo of "TRIGGER" (Chandrakanth Patil) [RHEL-60026]
  - scsi: mpt3sas: Fix an outdated comment (Chandrakanth Patil) [RHEL-60026]
  - scsi: mpt3sas: Remove the iounit_pg8 member of the per-adapter struct (Chandrakanth Patil) [RHEL-60026]
  - scsi: mpt3sas: Use struct_size() for struct size calculations (Chandrakanth Patil) [RHEL-60026]
  - scsi: mpt3sas: Make MPI26_CONFIG_PAGE_PIOUNIT_1::PhyData[] a flexible array (Chandrakanth Patil) [RHEL-60026]
  - scsi: mpt3sas: Make MPI2_CONFIG_PAGE_SASIOUNIT_1::PhyData[] a flexible array (Chandrakanth Patil) [RHEL-60026]
  - scsi: mpt3sas: Make MPI2_CONFIG_PAGE_SASIOUNIT_0::PhyData[] a flexible array (Chandrakanth Patil) [RHEL-60026]
  - scsi: mpt3sas: Make MPI2_CONFIG_PAGE_RAID_VOL_0::PhysDisk[] a flexible array (Chandrakanth Patil) [RHEL-60026]
  - scsi: mpt3sas: Make MPI2_CONFIG_PAGE_IO_UNIT_8::Sensor[] a flexible array (Chandrakanth Patil) [RHEL-60026]
  - scsi: mpt3sas: Use flexible arrays when obviously possible (Chandrakanth Patil) [RHEL-60026]
  - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54908] {CVE-2024-42322}
  - powerpc/mm: Fix boot crash with FLATMEM (Audra Mitchell) [RHEL-55462]
  - powerpc/64s/radix: Don't warn on copros in radix__tlb_flush() (Audra Mitchell) [RHEL-55462]
  - powerpc/mm/book3s64: Use 256M as the upper limit with coherent device memory attached (Audra Mitchell) [RHEL-55462]
  - powerpc/mm/book3s64: Fix build error with SPARSEMEM disabled (Audra Mitchell) [RHEL-55462]
  - powerpc/47x: Remove early_init_mmu_47x() to fix no previous prototype (Audra Mitchell) [RHEL-55462]
  - powerpc/47x: Add prototype for mmu_init_secondary() (Audra Mitchell) [RHEL-55462]
  - powerpc/radix: Move some functions into #ifdef CONFIG_KVM_BOOK3S_HV_POSSIBLE (Audra Mitchell) [RHEL-55462]
  - powerpc/mm: Cleanup memory block size probing (Audra Mitchell) [RHEL-55462]
  - powerpc/mm/altmap: Fix altmap boundary check (Audra Mitchell) [RHEL-55462]
  - powerpc/kasan: Disable KCOV in KASAN code (Audra Mitchell) [RHEL-55462]
  - powerpc: mm: convert to GENERIC_IOREMAP (Audra Mitchell) [RHEL-55462]
  - powerpc/hugetlb: pte_alloc_huge() (Audra Mitchell) [RHEL-55462]
  - powerpc: allow pte_offset_map[_lock]() to fail (Audra Mitchell) [RHEL-55462]
  - powerpc: kvmppc_unmap_free_pmd() pte_offset_kernel() (Audra Mitchell) [RHEL-55462]
  - powerpc/64s/radix: Fix exit lazy tlb mm switch with irqs enabled (Audra Mitchell) [RHEL-55462]
  - powerpc/32s: Fix LLVM SMP build (Audra Mitchell) [RHEL-55462]
  - powerpc/64s/radix: combine final TLB flush and lazy tlb mm shootdown IPIs (Audra Mitchell) [RHEL-55462]
  - powerpc: Add mm_cpumask warning when context switching (Audra Mitchell) [RHEL-55462]
  - powerpc/64s: Use dec_mm_active_cpus helper (Audra Mitchell) [RHEL-55462]
  - powerpc: Account mm_cpumask and active_cpus in init_mm (Audra Mitchell) [RHEL-55462]
  - powerpc/64s: Fix native_hpte_remove() to be irq-safe (Audra Mitchell) [RHEL-55462]
  - powerpc: Use of_address_to_resource() (Audra Mitchell) [RHEL-55462]
  - powerpc/embedded6xx/ls_uart: Add missing of_node_put() (Audra Mitchell) [RHEL-55462]
  - powerpc/embedded6xx: Add missing of_node_put()s (Audra Mitchell) [RHEL-55462]
  - powerpc/e500: Add missing prototype for 'relocate_init' (Audra Mitchell) [RHEL-55462]
  - powerpc/64s/radix: Remove TLB_FLUSH_ALL test from range flushes (Audra Mitchell) [RHEL-55462]
  - powerpc/64s/radix: mm->context.id should always be valid (Audra Mitchell) [RHEL-55462]
  - powerpc/64s/radix: Remove need_flush_all test from radix__tlb_flush (Audra Mitchell) [RHEL-55462]
  - powerpc/64s: enable MMU_LAZY_TLB_SHOOTDOWN (Audra Mitchell) [RHEL-55462]
  - lazy tlb: shoot lazies, non-refcounting lazy tlb mm reference handling scheme (Audra Mitchell) [RHEL-55462]
  - lazy tlb: allow lazy tlb mm refcounting to be configurable (Audra Mitchell) [RHEL-55462]
  - lazy tlb: introduce lazy tlb mm refcount helper functions (Audra Mitchell) [RHEL-55462]
  - kthread: simplify kthread_use_mm refcounting (Audra Mitchell) [RHEL-55462]
  - powerpc/64s/hash: Make stress_hpt_timer_fn() static (Audra Mitchell) [RHEL-55462]
  - powerpc/64s: Fix stress_hpt memblock alloc alignment (Audra Mitchell) [RHEL-55462]
  - powerpc/64s/hash: add stress_hpt kernel boot option to increase hash faults (Audra Mitchell) [RHEL-55462]
  - powerpc/64s: make linear_map_hash_lock a raw spinlock (Audra Mitchell) [RHEL-55462]
  - powerpc/64s: make HPTE lock and native_tlbie_lock irq-safe (Audra Mitchell) [RHEL-55462]
  - powerpc/64s: Add lockdep for HPTE lock (Audra Mitchell) [RHEL-55462]
  - powerpc/64s: Fix hash__change_memory_range preemption warning (Audra Mitchell) [RHEL-55462]
  - powerpc/64s: Disable preemption in hash lazy mmu mode (Audra Mitchell) [RHEL-55462]
  - powerpc/highmem: Properly handle fragmented memory (Audra Mitchell) [RHEL-55462]
  - powerpc/mm: Fix UBSAN warning reported on hugetlb (Audra Mitchell) [RHEL-55462]
  - powerpc/mm/book3s/hash: Rename flush_tlb_pmd_range (Audra Mitchell) [RHEL-55462]
  - powerpc/32: Remove wii_memory_fixups() (Audra Mitchell) [RHEL-55462]
  - powerpc/32: Allow fragmented physical memory (Audra Mitchell) [RHEL-55462]
  - powerpc/32: Drop a stale comment about reservation of gigantic pages (Audra Mitchell) [RHEL-55462]
  - powerpc/fsl_booke: Make calc_cam_sz() static (Audra Mitchell) [RHEL-55462]
  - powerpc: Remove stale declarations in mmu_decl.h (Audra Mitchell) [RHEL-55462]
  - powerpc/mm: Rearrange if-else block to avoid clang warning (Audra Mitchell) [RHEL-55462]
  - arm64/hugetlb: pte_alloc_huge() pte_offset_huge() (Audra Mitchell) [RHEL-55465]
  - arm64: allow pte_offset_map() to fail (Audra Mitchell) [RHEL-55465]
  - powerpc: Fix all occurences of duplicate words (Audra Mitchell) [RHEL-55462]
  - powerpc/mm: Always update max/min_low_pfn in mem_topology_setup() (Audra Mitchell) [RHEL-55462]
  - arm: allow pte_offset_map[_lock]() to fail (Audra Mitchell) [RHEL-55465]
  - powerpc/32s: Fix boot failure with KASAN + SMP + JUMP_LABEL_FEATURE_CHECK_DEBUG (Audra Mitchell) [RHEL-55462]
  - arm64: kasan: remove !KASAN_VMALLOC remnants (Audra Mitchell) [RHEL-55465]
  - Revert "arm64: dma: Drop cache invalidation from arch_dma_prep_coherent()" (Audra Mitchell) [RHEL-55465]
  - x86/mm: Use IPIs to synchronize LAM enablement (Audra Mitchell) [RHEL-55461]
  - powerpc/32: Set an IBAT covering up to _einittext during init (Audra Mitchell) [RHEL-55462]
  - arm64: dma: Drop cache invalidation from arch_dma_prep_coherent() (Audra Mitchell) [RHEL-55465]
  - powerpc/32: Call mmu_mark_initmem_nx() regardless of data block mapping. (Audra Mitchell) [RHEL-55462]
  - x86/mm: clarify "prev" usage in switch_mm_irqs_off() (Audra Mitchell) [RHEL-55461]
  - powerpc/mm/kasan: rename kasan_init_32.c to init_32.c (Audra Mitchell) [RHEL-55462]
  - mm: Warn on shadow stack memory in wrong vma (Audra Mitchell) [RHEL-55461]
  - ARM: mm: kill unused runtime hook arch_iounmap() (Audra Mitchell) [RHEL-55465]
  - Documentation/protection-keys: Clean up documentation for User Space pkeys (Audra Mitchell) [RHEL-55461]
  - powerpc: Remove find_current_mm_pte() (Audra Mitchell) [RHEL-55462]
  - ARM: add __arm_iomem_set_ro() to write-protect ioremapped area (Audra Mitchell) [RHEL-55465]


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-10
changelog:
  - Add conflicts of kernel-srpm-macros with kernel-rpm-macros < 185-9
    as macros.kmp, kmodtool, and rpmsort were moved from the latter
    to the former.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-11
changelog:
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x
  - Resolves: #2055464


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-13
changelog:
  - Handle symvers.xz in kabi.attr (#2209253).
  - Fix indirect __crc_* sumbols parsing in find-provides.ksyms
    and find-requires.ksyms to avoid matching multiple sections
    producing bogus duplicate provides for kmods that have both __kcrctab
    and __kcrctab_gpl sections (#2115811, #2178935).
  - Call "readelf -R" on a correct section in find-requires.ksyms.
  - Rewrite section data extraction in find-provides.ksyms and find-requires.ksyms
    to avoid garbage at the end of extracted sections, causing unnecessary awk
    complaints (#2115811).
  - Perform section parsing inside the awk script in find-provides.ksyms
    and find-requires.ksyms to avoid hitting command line argument limit
    when handling large .rodata sections (#2178935).


author: Tomas Halman <thalman@redhat.com> - 1.3-1
changelog:
  - Rebase to version 1.3
  - Resolves: RHEL-3336 - khci won't work with Quarkus-based Keycloak due to missing /auth path


author: Sergio Correia <scorreia@redhat.com> - 7.3.0-3
changelog:
  - Fix Keylime configuration upgrades issues introduced in last rebase
    Resolves: RHEL-475
  - Handle session close using a session manager
    Resolves: RHEL-1252
  - Add ignores for EV_PLATFORM_CONFIG_FLAGS
    Resolves: RHEL-947


author: Sergio Correia <scorreia@redhat.com> - 7.3.0-4
changelog:
  - Update spec file to use %verify(not md5 size mode mtime) for files updated in %post scriptlets
    Resolves: RHEL-475


author: Sergio Correia <scorreia@redhat.com> - 6.5.2-1
changelog:
  - Update to 6.5.2
    Resolves: CVE-2022-3500
    Resolves: rhbz#2138167 - agent fails IMA attestation when one scripts is executed quickly after the other
    Resolves: rhbz#2140670 - Segmentation fault in /usr/share/keylime/create_mb_refstate script
    Resolves: rhbz#142009 - Registrar may crash during EK validation when require_ek_cert is enabled


author: Sergio Correia <scorreia@redhat.com> - 6.5.2-4
changelog:
  - Backport upstream PR#1240 - logging: remove option to log into separate file
    Resolves: rhbz#2154584 - keylime verifier is not logging to /var/log/keylime


author: Patrik Koncity <pkoncity@redhat.com> - 7.3.0-2
changelog:
  - Keylime SELinux policy provides more restricted ports.
  - New SELinux label for ports used by keylime.
  - Adding tabrmd interfaces allow unix stream socket communication and dbus communication.
  - Allow the keylime_server_t domain to get the attributes of all filesystems.
    Resolves: RHEL-595
    Resolves: RHEL-390
    Resolves: RHEL-948


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Set supplementary groups when dropping privileges
  - Show more descriptive error messages on missing files errors
  - Create /usr/libexec/keylime directory


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Use classic release instead of autorelease macro
  - Use classic changelog instead of autochangelog macro


author: Julien Rische <jrische@redhat.com> - 1.19.1-20
changelog:
  - Fix OpenSSL 3 MD5 encyption in FIPS mode
  - Allow libkrad UDP/TCP connection to localhost in FIPS mode
  - Resolves: rhbz#2068458


author: Julien Rische <jrische@redhat.com> - 1.19.1-21
changelog:
  - Fix libkrad client cleanup
  - Allow use of larger RADIUS attributes in krad library
  - Resolves: rhbz#2100351


author: Julien Rische <jrische@redhat.com> - 1.19.1-22
changelog:
  - Restore "supportedCMSTypes" attribute in PKINIT preauth requests
  - Set SHA-512 or SHA-256 with RSA as preferred CMS signature algorithms
  - Resolves: rhbz#2068935


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
  - Resolves: rhbz#2151513
  - Remove invalid password expiry warning
  - Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
  - Resolves: rhbz#2063838
  - New upstream version (1.20.1)
  - Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
  - Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
  - Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
  - Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
    Resolves: rhbz#2151513
  - Remove invalid password expiry warning
    Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
    Resolves: rhbz#2063838
  - New upstream version (1.20.1)
    Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
    Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.0~BETA-1
changelog:
  - new upstream release
  - remove upstreamed patches
  - update CCFLAGS (https://github.com/ksh93/ksh/commit/98f989afcc7)
    Resolves: #1986897


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.6-1
changelog:
  - Rebase to non-beta version, because upstream says it should to be used
    https://github.com/ksh93/ksh/issues/667#issuecomment-1653665697
  - fix acl test case regression
    Resolves: #2034188


author: Steve Dickson <steved@redhat.com> 0.10-0
changelog:
  - Initial package
  - Upstream contributions by:
      - Chuck Lever <chuck.lever@oracle.com>
      - Hannes Reinecke <hare@suse.de>
      - Jeff Layton <jlayton@kernel.org>
      - Benjamin Coddington <bcodding@redhat.com>
      - David Härdeman <david@hardeman.nu>
      - Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
      - Moritz "WanzenBug" Wanzenböck <moritz.wanzenboeck@linbit.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.51-1
changelog:
  - Parse stuff in glibc locale names after @ which is not a script as a variant
  - Add ckb_IQ.UTF-8 locale


author: Mike FABIAN <mfabian@redhat.com> - 0.0.52-1
changelog:
  - Update to 0.0.52
  - add list_common_keyboards() to public api by Sundeep ANAND <suanand@redhat.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.53-1
changelog:
  - Update to 0.0.53
  - Capitalize the return values of language_name() and territory_name()
    (See: https://github.com/rhinstaller/anaconda/pull/2837).
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Mike FABIAN <mfabian@redhat.com> - 0.0.54-1
changelog:
  - Update to 0.0.54
  - add list_common_languages derived from gnome-control-center
    by Sundeep ANAND <suanand@redhat.com>


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-2
changelog:
  - Rebuild with openssl3, presumably in a buildroot with xmlsec1
    linked against openssl3
  - Resolves: rhbz#1962052 - lasso: Port to OpenSSL 3.0


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Petr Menšík <pemensik@redhat.com> - 1.7.1-2
changelog:
  - Use make_build and make_install macro instead of make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Lescak <rlescak@redhat.com> - 1.7.1-9
changelog:
  - Fix for CVE-2020-19860 ldns: heap overread vulnerability (#2051211)
  - Added also patch for deprecated distutils Python module used in build


author: José Expósito <jexposit@redhat.com> - 1.7.0-9
changelog:
  - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
  - Fix CVE-2023-43786: stack exhaustion from infinite recursion in
    PutSubImage()
  - Fix CVE-2023-43787: integer overflow in XCreateImage() leading to
    a heap overflow


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: José Expósito <jexposit@redhat.com> - 3.5.13-9
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Tom Stellard <tstellar@redhat.com> - 2.2.53-6
changelog:
  - Spec file cleanups and build fix
  - Add BuildRequires: perl-FileHandle to fix make check
  - Add BuildRequres: gcc [1]
  - Use make_build [2] and make_install[3] macros
  - [1] https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_buildrequires_and_requires
  - [2] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - [3] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.16-1
changelog:
  - Update to 0.7.15
  - Add UPL short name to SPDX conversion
  - Allow parsing desktop files using as_app_parse_data()
  - Do not preserve restrictive permissions when installing AppStream files
  - Modernize the validation requirements
  - Remove relative path from icon names
  - Support loading YAML from as_store_from_bytes()
  - Update list of allowed metadata licences
  - Update the SPDX license list to v3.5


author: Richard Hughes <richard@hughsie.com> 0.7.17-1
changelog:
  - New upstream release
  - Add "icon-theme" as recognised component type
  - Fix CI by moving 'future' back a bit
  - Make default content rating values match OARS semantics
  - Properly initialize unique_id_mutex


author: Richard Hughes <richard@hughsie.com> 0.7.18-1
changelog:
  - New upstream release
  - Add content rating system APIs from gnome-software
  - Add "validate-version" command
  - Allow timestamp in the future in validate-relax
  - Don't ignore localized strings that are the same as original
  - Fix crash with invalid children of <ul/>
  - Properly initialize mutexes
  - Test launchable tags in validation


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.3.0 base"


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-1
changelog:
  - Rebase to the latest upstream release 2.28
    Resolves: rhbz#2123346
  - Add dependency on device-mapper-multipath to libblockdev-mpath
    Resolves: rhbz#2121072
  - Fix spec issues found by rpminspect
    Resolves: rhbz#2116544


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-4
changelog:
  - nvme: Fix namespace identifiers
    Resolves: rhbz#2151535
  - nvme: Avoid sending NVME_IDENTIFY_CNS_NS_DESC_LIST on older devices
    Related: rhbz#2151535


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-5
changelog:
  - Allow resizing of inactive LVs with latest LVM
    Resolves: rhbz#2161181
  - Fix test_swapon_pagesize on systems with 64k pages
    Resolves: rhbz#2168220


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-14
changelog:
  - tests: Fix expected extended partition flags with new parted
    Related: rhbz#2109026
  - mdraid: Fix copy-paste error when checking return value
    Related: rhbz#2109026


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-15
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix bad local IPv6 connection reuse (CVE-2022-27775)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-19
changelog:
  - fix unpreserved file permissions (CVE-2022-32207)
  - fix HTTP compression denial of service (CVE-2022-32206)
  - fix FTP-KRB bad message verification (CVE-2022-32208)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-24
changelog:
  - fix SSH connection too eager reuse still (CVE-2023-27538)
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)
  - fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
  - fix TELNET option IAC injection (CVE-2023-27533)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-26
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix host name wildcard checking (CVE-2023-28321)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: Vishal Vijayraghavan <vvijayra AT redhat DOT com> - 1:2.1.3-1
changelog:
  - New release of liberation-fonts 2.1.3
  - Resolves:rh#1464310 : Tilded G not works with Liberation Sans and Serif


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040454


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Resolves: rhbz#1963838 restore missing functions
    Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libformula
    didn't use its built-in loaders so libreoffice's database
    report generator didn't show all categories in formula wizard


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-3
changelog:
  - Minor fixes for Python 3.12 compatibility
  - Fix Python unit tests to use the right assert methods
  - Explicitly BR python3-setuptools


author: Mohan Boddu <mboddu@redhat.com> - 0.2.10-24
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951286 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951284 replace apache-commons-logging with java.util.logging


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libloader
    didn't use its built-in loaders so libreoffice's database
    report generator didn't work


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Michal Ruprich <mruprich@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64
  - Fix for CVE-2020-28241


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.8.2-2
changelog:
  - Fix nbdcopy progress bar.
  - Add nbdinfo --map --totals and --can/--is options.
    resolves: rhbz#1950630


author: Richard W.M. Jones <rjones@redhat.com> - 1.10.5-1
changelog:
  - Rebase to new stable branch version 1.10.5
    resolves: rhbz#2011708
  - Map uint32_t to OCaml int64 to avoid signedness problems
    resolves: rhbz#2040610
  - CVE-2022-0485 nbdcopy destination image corruption
  - New upstream API to control initialization of pread buffer
    resolves: rhbz#2046194


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.6-1
changelog:
  - Rebase to new stable branch version 1.12.6
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660
  - Fix remote TLS failures
    resolves: rhbz#2111524
    (and 2111813)


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Adrian Reber <areber@redhat.com> - 1.2-5
changelog:
  - Repack tarball to remove problematic license from unused code
  - Apply fixes for warnings found by gcc -fanalyzer


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: Michel Normand <normand@linux.vnet.ibm.com> 1.1.0-5
changelog:
  - Add remove_2_backslashes_in_shell_call.patch
    Add remove_eng_inc_in_version_pl.patch
    to avoid f33 build failure


author: Adam Borowski <kilobyte@angband.pl> - 1.11-1
changelog:
  - Update to version 1.11.
  - Disable enumerable_thread_specific_access_0_drd
  - Fix internal find in radix_tree


author: Bryan Gurney <bgurney@redhat.com> - 1.12-8
changelog:
  - Apply patch to fix undefined behavior on realloc
  - Also add and apply patch to fix referencing empty array
  - Related: rhbz#2034641


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Remi Collet <remi@remirepo.net> - 0.11.0-1
changelog:
  - update to 0.11.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/665


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951282 replace apache-commons-logging with java.util.logging


author: Daiki Ueno <dueno@redhat.com> - 4.9-2
changelog:
  - Fix CVE-2023-23009: remote DoS via crafted TS payload with an
    incorrect selector length (rhbz#2173674)


author: Sahana Prasad <sahana@redhat.com> - 4.9-3
changelog:
  - Fix CVE-2023-30570:Malicious IKEv1 Aggressive Mode packets can crash
    libreswan
  - Resolves: rhbz#2187171


author: Sahana Prasad <sahana@redhat.com> - 4.9-5
changelog:
  - Just bumping up the version to include bugs for CVE-2023-2295. There is no
    code fix for it. Fix for it is including the code fix for CVE-2023-30570.
  - Fix CVE-2023-2295 Regression of CVE-2023-30570 fixes in the
    Red Hat Enterprise Linux
  - Resolves: rhbz#2189777, rhbz#2190148


author: Daiki Ueno <dueno@redhat.com> - 4.15-2
changelog:
  - Fix auto=ondemand connection initialization with TCP (RHEL-51879)
  - Make use of Netlink extack for additional error reporting (RHEL-51881)


author: Daiki Ueno <dueno@redhat.com> - 4.4-1
changelog:
  - Update to 4.4. Resolves: rhbz#1975812
  - Port compiler warning suppression by Paul Wouters:
    https://src.fedoraproject.org/rpms/libreswan/c/8d7f98d41444ac77c562f735b4b93038f5346ce2?branch=rawhide


author: Daiki Ueno <dueno@redhat.com> - 4.4-3
changelog:
  - Backport removal gethostbyname2 uses from the upstream
  - Fix issues spotted by covscan (rhbz#1938784)


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.99.20-1
changelog:
  - 1900160 - sane-airscan-0.99.20 is available
  - 1897935 - Crash on libsane-airscan when trying to activate scanner


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Mohan Boddu <mboddu@redhat.com> - 1.1.2-29
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951281 replace apache-commons-logging with java.util.logging


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    Resolves: rhbz#1970826 rhbz#1970839 rhbz#1970857 rhbz#1970847


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.31-6
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985029)


author: Kalev Lember <klember@redhat.com> - 2.72.0-2
changelog:
  - Tighten soname globs
  - Avoid automatic requires on sysprof-devel package
  - Update required glib2 version


author: Kalev Lember <klember@redhat.com> - 2.72.0-5
changelog:
  - Don't try to avoid sysprof dep any more now that sysprof-capture-devel is
    split out to a separate subpackage


author: Norbert pocs <npocs@redhat.com> - 0.10.4-1
changelog:
  - Rebase to version 0.10.4
  - Add pkcs11 support
  - Disallow ssh-rsa key in FIPS mode
  - Fix openssl KDF check at build
  - ChangeLog was renamed to CHANGELOG
  - Resolves: rhbz#2068475, rhbz#2026449, rhbz#2004021,
              rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Matej Mužila <mmuzila@redhat.com> 4.4.0-2
changelog:
  - Update to version 4.4.0
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354
    CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-8
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188916)
  - tests: Use stronger passphrases for LUKS tests (#2188750,#2188752)
  - integration-test: Fix scsi_debug cd drive read-only detection (#2211191)
  - lvm2: Improve uevent processing (#2031673)
  - tests: Mark test_job.UdisksJobTest.test_job as unstable (#2148844)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-4
changelog:
  - Fix a couple of issues found by Coverity (#1938890)
  - Ignore systemd "Extended Boot Loader" GPT partition


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-1
changelog:
  - Version 2.9.4 (#2010363)
  - CVE-2021-3802: Harden the default mount options for ext filesystems (#2004423)
  - Fix double free on daemon exit (unaligned fastbin chunk) (#2001549)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.5-1
changelog:
  - Update license to GPL-2.0 OR MIT
  - Add io_uring_prep_epoll_ctl()
  - Add io_uring_get_probe(), io_uring_get_probe_ring()
  - Add io_uring_register_probe()
  - Add io_uring_{register,unregister}_personality()
  - Add io_uring_prep_{recv,send}()
  - Add io_uring_prep_openat2()
  - Add io_uring_ring_dontfork()
  - Add io_uring_prep_read() and io_uring_prep_write()
  - Documentation fixes and improvements


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.6-1
changelog:
  - add io_uring_prep_splice()
  - add io_uring_prep_provide_buffers()
  - add io_uring_prep_remove_buffers()
  - add io_uring_register_eventfd_async()
  - reinstate io_uring_unregister_eventfd() (it was accidentally removed in 0.4)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.7-1
changelog:
  - Add io_uring_cq_eventfd_toggle() helper for new IORING_CQ_EVENTFD_DISABLED flag
  - Add IORING_OP_TEE
  - Documentation fixes and improvements


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Jiri Denemark <jdenemar@redhat.com> - 9.10.0-1
changelog:
  - Rebased to libvirt-9.10.0 (rhbz#RHEL-15267)
  - The rebase also fixes the following bugs:
      rhbz#RHEL-16878, rhbz#RHEL-14611, rhbz#RHEL-7384, rhbz#RHEL-16870, rhbz#RHEL-18439
      rhbz#RHEL-16751, rhbz#RHEL-4452, rhbz#RHEL-17841, rhbz#RHEL-15288, rhbz#RHEL-7040


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-1
changelog:
  - Rebased to libvirt-10.0.0 (RHEL-15267)
  - The rebase also fixes the following bugs:
      RHEL-18782, RHEL-735, RHEL-18165, RHEL-4607, RHEL-700
      RHEL-7100, RHEL-15480, RHEL-7416, RHEL-20609, RHEL-7570
      RHEL-20444, RHEL-17596, RHEL-7569


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-2
changelog:
  - tests: Add hostcpudata for machine with CPU clusters (RHEL-7043)
  - conf: Report CPU clusters in capabilities XML (RHEL-7043)
  - conf: Allow specifying CPU clusters (RHEL-7043)
  - qemu: Introduce QEMU_CAPS_SMP_CLUSTERS (RHEL-7043)
  - qemu: Use CPU clusters for guests (RHEL-7043)
  - tests: Add test case for CPU clusters (RHEL-7043)
  - qemu: Make monitor aware of CPU clusters (RHEL-7043)
  - tests: Verify handling of CPU clusters in QMP data (RHEL-7043)
  - build: Make daemons depend on generated *_protocol.[ch] (RHEL-15267)
  - domain_validate: Check for domain address conflicts fully (RHEL-4452)
  - qemu_hotplug: Don't lose 'created' flag in qemuDomainChangeNet() (RHEL-22714)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-3
changelog:
  - remote_driver: Restore special behavior of remoteDomainGetBlockIoTune() (RHEL-22800)
  - conf: Introduce dynamicMemslots attribute for virtio-mem (RHEL-15316)
  - qemu_capabilities: Add QEMU_CAPS_DEVICE_VIRTIO_MEM_PCI_DYNAMIC_MEMSLOTS capability (RHEL-15316)
  - qemu_validate: Check capability for virtio-mem dynamicMemslots (RHEL-15316)
  - qemu_command: Generate cmd line for virtio-mem dynamicMemslots (RHEL-15316)
  - qemu_snapshot: fix detection if non-leaf snapshot isn't in active chain (RHEL-23212)
  - qemu_snapshot: create: refactor external snapshot detection (RHEL-22797)
  - qemu_snapshot: create: don't require disk-only flag for offline external snapshot (RHEL-22797)
  - remoteDispatchAuthPolkit: Fix lock ordering deadlock if client closes connection during auth (RHEL-20337)
  - util: virtportallocator: Add VIR_DEBUG statements for port allocations and release (RHEL-21543)
  - qemu: migration: Properly handle reservation of manually specified NBD port (RHEL-21543)
  - qemuMigrationDstStartNBDServer: Refactor cleanup (RHEL-21543)
  - virPCIVPDResourceIsValidTextValue: Adjust comment to reflect actual code (RHEL-22314)
  - util: pcivpd: Refactor virPCIVPDResourceIsValidTextValue (RHEL-22314)
  - virNodeDeviceCapVPDFormatCustom*: Escape unsanitized strings (RHEL-22314)
  - virNodeDeviceCapVPDFormat: Properly escape system-originated strings (RHEL-22314)
  - schema: nodedev: Adjust allowed characters in 'vpdFieldValueFormat' (RHEL-22314)
  - tests: Test the previously mishandled PCI VPD characters (RHEL-22314)
  - Don't overwrite error message from 'virXPathNodeSet' (RHEL-22314)
  - tests: virpcivpdtest: Remove 'testVirPCIVPDReadVPDBytes' case (RHEL-22314)
  - util: virpcivpd: Unexport 'virPCIVPDReadVPDBytes' (RHEL-22314)
  - util: pcivpd: Unexport virPCIVPDParseVPDLargeResourceFields (RHEL-22314)
  - tests: virpcivpd: Remove 'testVirPCIVPDParseVPDStringResource' case (RHEL-22314)
  - util: virpcivpd: Unexport 'virPCIVPDParseVPDLargeResourceString' (RHEL-22314)
  - virPCIVPDResourceGetKeywordPrefix: Fix logging (RHEL-22314)
  - util: virpcivpd: Remove return value from virPCIVPDResourceCustomUpsertValue (RHEL-22314)
  - conf: virNodeDeviceCapVPDParse*: Remove pointless NULL checks (RHEL-22314)
  - virpcivpdtest: testPCIVPDResourceBasic: Remove tests for uninitialized 'ro'/'rw' section (RHEL-22314)
  - util: virPCIVPDResourceUpdateKeyword: Remove impossible checks (RHEL-22314)
  - conf: node_device: Refactor 'virNodeDeviceCapVPDParseCustomFields' to fix error reporting (RHEL-22314)
  - virNodeDeviceCapVPDParseXML: Fix error reporting (RHEL-22314)
  - util: virpcivpd: Remove return value from virPCIVPDResourceUpdateKeyword (RHEL-22314)
  - virPCIDeviceHasVPD: Refactor "debug" messages (RHEL-22314)
  - virPCIDeviceGetVPD: Fix multiple error handling bugs (RHEL-22314)
  - virPCIDeviceGetVPD: Handle errors in callers (RHEL-22314)
  - virPCIVPDReadVPDBytes: Refactor error handling (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceString: Properly report errors (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Merge logic conditions (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Remove impossible 'default' switch case (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Refactor processing of read data (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Refactor return logic (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Report proper errors (RHEL-22314)
  - virPCIVPDParse: Do reasonable error reporting (RHEL-22314)
  - virt-admin: Add warning when connection to default daemon fails (RHEL-23170)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-4
changelog:
  - Set stubDriverName from hostdev driver model attribute during pci device setup (RHEL-25858)
  - qemuMigrationDstPrepareStorage: Use 'switch' statement to include all storage types (RHEL-24825)
  - qemuMigrationDstPrepareStorage: Properly consider path for 'vdpa' devices (RHEL-24825)
  - domain_validate: Account for NVDIMM label size properly when checking for memory conflicts (RHEL-4452)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-5
changelog:
  - cpu: x86: Add support for adding features to existing CPU models (RHEL-25995)
  - qemu: domain: Check arch in qemuDomainMakeCPUMigratable (RHEL-25995)
  - conf: cpu: Introduce virCPUDefListFeatures (RHEL-25995)
  - qemu: domain: Drop added features from migratable CPU (RHEL-25995)
  - Add vmx-* features to Broadwell* (RHEL-25995)
  - Add vmx-* features to Cascadelake* (RHEL-25995)
  - Add vmx-* features to Conroe (RHEL-25995)
  - Add vmx-* features to Cooperlake (RHEL-25995)
  - Add vmx-* features to core{,2}duo (RHEL-25995)
  - Add vmx-* features to Haswell* (RHEL-25995)
  - Add vmx-* features to Icelake* (RHEL-25995)
  - Add vmx-* features to IvyBridge* (RHEL-25995)
  - Add vmx-* features to kvm* (RHEL-25995)
  - Add vmx-* features to Nehalem* (RHEL-25995)
  - Add vmx-* features to Penryn (RHEL-25995)
  - Add vmx-* features to SandyBridge* (RHEL-25995)
  - Add vmx-* features to SapphireRapids (RHEL-25995)
  - Add vmx-* features to Skylake* (RHEL-25995)
  - Add vmx-* features to Snowridge (RHEL-25995)
  - Add vmx-* features to Westmere* (RHEL-25995)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-7
changelog:
  - qemu: virtiofs: do not crash if cgroups are missing
  - qemu: virtiofs: set correct label when creating the socket
  - qemu: virtiofs: error out if getting the group or user name fails
  - Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)
  - remote: check for negative array lengths before allocation (CVE-2024-2494)
  - qemu: Fix migration with custom XML (RHEL-30622)


author: Jiri Denemark <jdenemar@redhat.com> - 10.3.0-1
changelog:
  - Rebased to libvirt-10.3.0 (RHEL-29642)
  - The rebase also fixes the following bugs:
      RHEL-25993, RHEL-7101, RHEL-7461, RHEL-16333, RHEL-7343
      RHEL-28808, RHEL-32880, RHEL-35879, RHEL-34112, RHEL-30373
      RHEL-23416, RHEL-23608, RHEL-26276, RHEL-22728


author: Jiri Denemark <jdenemar@redhat.com> - 10.4.0-1
changelog:
  - Rebased to libvirt-10.4.0 (RHEL-7489)
  - The rebase also fixes the following bugs:
      RHEL-29642, RHEL-30373, RHEL-32182, RHEL-33044, RHEL-33082
      RHEL-34615, RHEL-35948, RHEL-36565, RHEL-36721, RHEL-39271
      RHEL-39400


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-1
changelog:
  - Rebased to libvirt-10.5.0 (RHEL-21381)
  - The rebase also fixes the following bugs:
      RHEL-23833, RHEL-29642, RHEL-37542, RHEL-39969, RHEL-40899
      RHEL-43309


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-2
changelog:
  - vmx: Do not require all ID data for VMWare Distributed Switch (RHEL-46099)
  - tests: vhostuser: add virtiofsd json descriptor (RHEL-7108, RHEL-40135)
  - tests: qemuxmlconf: adjust test case to new virtiofsd (RHEL-7108, RHEL-40135)
  - qemu: fill capabilities for virtiofsd (RHEL-7108, RHEL-40135)
  - qemu: do not use deprecated options for new virtiofsd (RHEL-7108)
  - qemu: migration: allow migration for virtiofs (RHEL-40135)
  - virt-host-validate: Drop extra "PASS" (RHEL-46868)
  - qemu: Don't leave beingDestroyed=true on inactive domain (RHEL-43309)


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-5
changelog:
  - qemu: virtiofs: cache: use 'never' instead of 'none' (RHEL-50329)
  - qemu_domain: Strip <acpi/> from s390(x) definitions (RHEL-49516)
  - qemuxmlconftest: Add tests for the ACPI stripping hack on s390 (RHEL-49516)
  - vsh: Allow vshReadlineInit() to be called multiple times (RHEL-53560)


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-1
changelog:
  - Rebased to libvirt-10.8.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-688, RHEL-7122, RHEL-19379, RHEL-22166, RHEL-24746
      RHEL-28827, RHEL-45200, RHEL-45952, RHEL-53964, RHEL-54550
      RHEL-56611, RHEL-58446


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-2
changelog:
  - Revert "network: *un*set the firewalld zone while shutting down a network" (RHEL-61576)
  - Revert "network: support setting firewalld zone for bridge device of open networks" (RHEL-61576)
  - network: call network(Add|Remove)FirewallRules() for forward mode='open' (RHEL-61576)
  - network: a different way of supporting firewalld zone for mode='open' networks (RHEL-61576)
  - network: a different implementation of *un*setting firewalld zone when network is destroyed (RHEL-61576)


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-2
changelog:
  - Drop libwacom-show-stylus, it's a debugging tool that requires extra
    dependencies that we shouldn't pull in everywhere (#2044710)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.8-17
changelog:
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update flags, enable LTO
  - Remove RANDFILE and increase default bits in ssleay.conf


author: Victor Stinner <vstinner@python.org> - 2.9.10-9
changelog:
  - Build the Python extension with the PY_SSIZE_T_CLEAN macro to make it
    compatible with Python 3.10.
  - Fixes: rhbz#1890878.


author: David King <dking@redhat.com> - 2.9.10-12
changelog:
  - Fix CVE-2021-3516 (#1956969)
  - Fix CVE-2021-3517 (#1957002)
  - Fix CVE-2021-3518 (#1957029)
  - Fix CVE-2021-3537 (#1957285)


author: Jakub Jelen <jjelen@redhat.com> - 1.1.33-4
changelog:
  - Do not build python bindings even if the python is available
  - Fix CVE-2019-13117 (#1728547)
  - Fix CVE-2019-13118 (#1728542)


author: Simo Sorce <simo@redhat.com> - 1.1.34-3
changelog:
  - Drop crypto dependency.
  - The "cryptography" implemented in exslt is outdated and bad supporting only
    insecure algorithms (RC4, SHA1, MD5, MD4), and should not be used anyway.


author: Michal Ruprich <mruprich@redhat.com> - 1.0.225-3
changelog:
  - Resolves: #1965253 - CVE-2021-28902 libyang: NULL pointer dereference in read_yin_container()
  - Resolves: #1965255 - CVE-2021-28903 libyang: recursive call to lyxml_parse_mem() lead to crash


author: Remi Collet <remi@remirepo.net> - 1.7.2-1
changelog:
  - update to 1.7.2
  - fix installation layout using merged patch from
    https://github.com/nih-at/libzip/pull/190


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "ppc64le-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j20  
    cd -


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1-3
changelog:
  - fix handling of zero-length messages
  - minimize default configuration
  - remove obsolete build requirement


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-1
changelog:
  - update to 3.1.1 (#1979954 CVE-2021-3570 CVE-2021-3571)
  - add read-only UDS port
  - add option to set clockClass threshold
  - don't repeat some log messages in multi-port configuration
  - increase default TX timestamp timeout to 10 ms
  - limit unicast message rate per address and grant duration


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-6
changelog:
  - add support for VLAN over bond (#2120521)
  - handle EINTR when waiting for transmit timestamp (#2128786)
  - check for unexpected changes in frequency offset (#2150815)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (RHEL-2026 RHEL-2342 RHEL-12182 RHEL-15929)
  - fix ts2phc to handle large NMEA delay (RHEL-23208)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-3
changelog:
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-39387)
  - fix ts2phc to correctly handle leap seconds (RHEL-40216)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-40947)
  - add options to configure multicast IP addresses (RHEL-31178)
  - add holdover support to ts2phc (RHEL-50216)


author: Vit Mojzis <vmojzis@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.
  - Updated to 1.0.18. [1568622]


author: Artem Egorenkov <aegorenk@redhat.com> - 3.6.0-7
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Sérgio Basto <sergio@serjux.com> - 2.14.1-1
changelog:
  - Update to 2.14.1
  - Disable javadoc (#1988896)
  - Build with jansi-2
  - Remove deps on slf4j-ext (no longer available in Fedora 35)


author: Frank Crawford <frank@crawford.emu.id.au> - 7.5.4-2
changelog:
  - Add requires for perl-diagnostics (#1893671) and perl-lib (#1893503)
  - Add other requires as nothing is now automatically supplied


author: Brian C. Lane <bcl@redhat.com> 34.9.15-1
changelog:
  - tito: Add the LoraxRHELTagger from rhel8-branch (bcl)
    Related: rhbz#2070910
  - runtime-postinstall: Remove machine specific nvme files (bcl)
    Resolves: rhbz#2070910


author: Brian C. Lane <bcl@redhat.com> 34.9.16-1
changelog:
  - Makefile: Add local-srpm target to create a .src.rpm from HEAD (bcl)
    Related: rhbz#2088631
  - mkksiso: Fix s390x support (bcl)
    Related: rhbz#2088631
  - mkksiso: Remove use of os.path.join (bcl)
    Related: rhbz#2088631
  - Makefile: Add mkksiso to coverage report (bcl)
    Related: rhbz#2088631
  - setup.py: Install mkksiso to /usr/bin (bcl)
    Related: rhbz#2088631
  - mkksiso: Fix grub2 editing error (bcl)
    Related: rhbz#2088631
  - mkksiso: Rewrite to use xorriso features (bcl)
    Resolves: rhbz#2088631


author: Brian C. Lane <bcl@redhat.com> 34.9.17-1
changelog:
  - minimal.ks: Add include for architecture specific packages (bcl)
    Related: rhbz#2051548
  - livemedia.ks: Add include for architecture specific packages (bcl)
    Resolves: rhbz#2051548
  - tests: Add tests for mkksiso (bcl)
    Related: rhbz#2037015
  - mkksiso: Add kernel cmdline customization support (bcl)
    Resolves: rhbz#2037015
  - mkksiso: Move kickstart to --ks KICKSTART (bcl)
    Related: rhbz#2037015
  - mkksiso: Add helper functions for kernel cmdline modifications (bcl)
    Related: rhbz#2037015
  - lorax.spec: Fix changelog order (bcl)
    Resolves: rhbz#1972099


author: Brian C. Lane <bcl@redhat.com> 34.9.18-1
changelog:
  - mkksiso: Set u+rw permission on extracted files and directories (bcl)
    Related: rhbz#2088631
  - lorax.spec: Fix changelog (bcl)
    Resolves: rhbz#1972099


author: Brian C. Lane <bcl@redhat.com> 34.9.19-1
changelog:
  - mkksiso: Optionally support 3 arguments or --ks (bcl)
    Resolves: rhbz#2037015
  - mkksiso: Add -U to xorriso on ppc64le (bcl)
    Resolves: rhbz#2109665
  - mkksiso: Fix passing -iso-level to xorriso (bcl)
    Related: rhbz#2109665


author: Brian C. Lane <bcl@redhat.com> 34.9.20-1
changelog:
  - templates: Update runtime-* templates (bcl)
    Resolves: rhbz#2042057
  - templates: Update path to license files (bcl)
    Related: rhbz#2042057
  - templates: Update boot timeout to 5s (bcl)
    Related: rhbz#2042057


author: Brian C. Lane <bcl@redhat.com> 34.9.23-1
changelog:
  - rsyslog.conf: Set WorkDirectory to /var/lib/rsyslog (bcl)
    Resolves: rhbz#2158731
  - lorax.spec: fix changelog entry for 2132511 (bcl)
    Related: rhbz#2132511


author: Brian C. Lane <bcl@redhat.com> 34.9.26-1
changelog:
  - monitor: Skip repo errors involving CDROM/file source (bcl) (bcl)
    Resolves: RHEL-4658
  - rsyslog.conf: Update to use current config syntax (bcl) (bcl)
    Resolves: RHEL-46857


author: Brian C. Lane <bcl@redhat.com> - 9.0-29
changelog:
  - Drop ia32 uefi package installation (bcl)
    Resolves: rhbz#2038397
  - Enable sftp when using inst.sshd (bcl)
    Resolves: rhbz#2035049


author: Brian C. Lane <bcl@redhat.com> - 9.0-30
changelog:
  - Add .discinfo on all arches (bcl)
    Resolves: rhbz#2030008
  - Add inst.rngd cmdline option (bcl)
    Resolves: rhbz#2028720


author: Brian C. Lane <bcl@redhat.com> - 9.0-31
changelog:
  - Do not install rng-tools (bcl)
    Resolves: rhbz#2028720
  - Revert "Add inst.rngd cmdline option" (bcl)
    Related: rhbz#2028720


author: Brian C. Lane <bcl@redhat.com> - 9.0-35
changelog:
  - Makefile: Making it easier to create releases (bcl)
    Related: rhbz#2071074
  - runtime-postinstall: Remove machine specific nvme files (bcl)
    Resolves: rhbz#2071074


author: Brian C. Lane <bcl@redhat.com> - 9.0-38
changelog:
  - tools: Add support for Jira RHEL-XXX issues (bcl)
    Related: RHEL-15122
  - Add setpriv as ostree containers dependency (bcl)
    Resolves: RHEL-15122


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: Tom Callaway <spot@fedoraproject.org> - 33.3.1-17
changelog:
  - hack this ancient beastie to work with lua 5.4
  - maintainer, please update this to the current upstream release at your earliest convenience


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: Miro Hrončok <mhroncok@redhat.com> - 1-3
changelog:
  - Modify several conditionals to support RHEL 9+ and drop ancient Fedora 17
  - Add explicit conflict with older lua-devel
  - Require rpm, not redhat-rpm-config


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-6
changelog:
  - Fix lvresize resizing LUKS device only when resizing FS is enabled.
  - Improve lvresize handling of renamed volumes.
  - Fix random unmount when resizing volume backed by thin pool.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.21-3
changelog:
  - Fix lvresize fail in case of multiple mountpoints.
  - Fix allocator for RAID LVs allocating multiple legs on single device.
  - Fix device id handling of WWIDs with trailing spaces.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-5
changelog:
  - Revert the CMake change regarding the in-source builds for now
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug buildchnages to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers the CMAKE_INSTALL_PREFIX="%{_prefix}" option
  - Default to %cmake commands instead fo %make commands
  - Update the WITH_UNITTEST macro to the one upstream use now
  - Introduce macro to enable / disable testusite (and building of the *-test subpackage)


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: Ondrej Dubaj <odubaj@redhat.com> - 3.0.1-1
changelog:
  - Rebase to new major version 3.0.1 (it's Beta version)
  - Removed documentation/ folder, as it was removed by upstream


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.0.3-1
changelog:
  - Rebase to 3.0.3
  - Temporarily disable generation of -javadoc.rpm, due to missing feature in xmvn,
    which leads to build crash


author: Christopher Tubbs <ctubbsii@fedoraproject.org> - 1:3.6.3-6
changelog:
  - Remove unneeded commons-logging from runtime class path (rhbz#1883751)
  - Also remove redundant commons-codec


author: Alex Williamson <alex.williamson@redhat.com> - 0.57-1
changelog:
  - 13f1322e576c ("Remove systemd support")
  - d84a2737e79c ("Fix device udev tagging")
  - 68c92c7beaca ("Tag before generating spec file")
  - c34c4f1ade60 ("Update mdevctl.spec.in for lsmdev.8")
  - ed86d345aae0 ("Fix systemd UUID escaping")
  - d4e83f08161d ("Merge pull request #13 from cpaelzer/fix-lsmdev-man-page")
  - 3c0d285b75ab ("lsmdev - add the alternative name to the man page")


author: Alex Williamson <alex.williamson@redhat.com> - 0.61-1
changelog:
  - d7dfac5f5bfb ("Merge pull request #15 from cohuck/attr_sanity")
  - 28a9fa17b51e ("validate attribute names")


author: Cornelia Huck <cohuck@redhat.com> - 0.69-1
changelog:
  - a2621934aa37 ("Merge pull request #18 from cohuck/validate")
  - ffbcef5a1c84 ("Merge pull request #25 from etrunko/master")
  - 5ec75a83bf30 ("Remove never used 'available' option")
  - d49b0f0db6b3 ("Merge pull request #23 from eskultety/man-fix")
  - 4cfe37eb2d99 ("man: Point --verbose to the 'list' command rather than 'types'")
  - a0ae49eb7178 ("Merge pull request #17 from cohuck/install_symlinks")
  - 504beba6e8f9 ("Force symlink cretion")
  - 522c5ded00ff ("Fix attribute validation")


author: Alex Williamson <alex.williamson@redhat.com> - 0.78-1
changelog:
  - e029640033d3 ("Automatic version commit for tag 0.78")
  - e32f506656fd ("use standard bash path")
  - 70690b64401f ("avoid other tags spilling into the .spec changelog")
  - 70b89c18cf5b ("Merge pull request #31 from awilliam/20201113.0")
  - 80187bc9ba03 ("Merge pull request #30 from fiuczy/fix-error-cleanup")
  - 97ea8bbeefb7 ("mdevctl: fix cleanup on error when creating and removing mdev")
  - b45d33dfd36c ("version support")
  - 2b1c16ce6fb0 ("Fix attributes getting applied via start-parent-mdevs")
  - 25d5e8d24d57 ("mdevctl: fix cleanup on error when writing to attribute")


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: Konstantin Kostiuk <kkostiuk@redhat.com> 104.0.2
changelog:
  - Set version to 104.0.2
  - BZ#2084608 - Fix mismatched allocation function
  - BZ#2084613 - qga-win: race condition in build


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.1
changelog:
  - Set version to 105.0.1
  - Remove redundant package
  - BZ#2090333 - [mingw-qemu-ga-win] qga command 'guest-get-fsinfo' can't query bus-type of USB


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.2
changelog:
  - Set version to 105.0.2
  - Fix wrong requires
  - Fix missing patch0002
  - Remove extra Summary
  - BZ#2090333 - [mingw-qemu-ga-win] qga command 'guest-get-fsinfo' can't query bus-type of USB


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.3
changelog:
  - Set version to 105.0.3
  - BZ#2090250 - mingw-qemu-ga-win: Add Provides: bundled() to rpm packages [rhel-9]


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.0
changelog:
  - Set version to 106.0.0
  - RHEL-408 - Add provides, obsoletes for mingw-qemu-ga-win
  - RHEL-385 - Rebase mingw-qemu-ga-win to QEMU 8.0


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.1
changelog:
  - Set version to 106.0.1
  - RHELPLAN-147763 - [mingw-qemu-ga-win] VSS DLL: Add logging mechanism
  - RHEL-581 - Use the SPDX vocabulary to specify the license


author: Konstantin Kostiuk <kkostiuk@redhat.com> 109.1.0
changelog:
  - RHEL-57013 - Rebase qemu-ga to 9.1.0
  - RHEL-57012 - guest agent public ssh injection api support for Windows
  - Set version to 109.1.0


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Jakub Hrozek <jhrozek@redhat.com> - 0.17.0-6
changelog:
  - Related: rhbz#1986806 - CVE-2021-3639 mod_auth_mellon: Open Redirect
                            vulnerability in logout URLs


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-2
changelog:
  - Resolves: rhbz#2153656 - CVE-2022-23527 - Open Redirect in
    oidc_validate_redirect_url() using tab character


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-3
changelog:
  - Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference
    when OIDCStripCookies is set and a crafted Cookie header is supplied


author: Tomas Halman <thalman@redhat.com> - 2.4.10-1
changelog:
  Rebase to 2.4.10 version improves `state cookies piling up` problem
    Resolves: RHEL-32450 Race condition in mod_auth_openidc filecache
    Resolves: RHEL-25422 mod_auth_openidc: DoS when using
              `OIDCSessionType client-cookie` and manipulating cookies
              (CVE-2024-24814)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.4.9.1-1
changelog:
  - Resolves: rhbz#1987223 - CVE-2021-32792 mod_auth_openidc: XSS when using
                             OIDCPreservePost On [rhel-9.0]
  - Resolves: rhbz#1987217 - CVE-2021-32791 mod_auth_openidc: hardcoded
                             static IV and AAD with a reused key in AES GCM
                             encryption [rhel-9.0]
  - Resolves: rhbz#1987204 - CVE-2021-32786 mod_auth_openidc: open redirect in
                             oidc_validate_redirect_url() [rhel-9.0]


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-1
changelog:
  - Resolves: rhbz#2001852 - CVE-2021-39191 mod_auth_openidc: open redirect
                             by supplying a crafted URL in the target_link_uri
                             parameter


author: Paul Howarth <paul@city-fan.org> - 2.3.9-24
changelog:
  - Drop EL-6 support
    - Use %license unconditionally
    - _httpd_* macros always available
    - Run directory is always /run on tmpfs
    - Assume httpd ≥ 2.4 filesystem layout
    - systemd-units always provided by systemd


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-26
changelog:
  - Resolves: #1958882 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-3
changelog:
  - Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
    in forward proxy configurations


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-5
changelog:
  - Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with
    mod_rewrite and mod_proxy


author: Coty Sutherland <csutherl@redhat.com> - 1.2.48-20
changelog:
  - Cleanup spec file and remove .redhat-N suffix from release
  - Remove ap24 subpackage since we only need to build for one version of httpd


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-1
changelog:
  - Resolves: RHEL-25075 - new version 2.4.26
  - Resolves: RHEL-11838 - [RFE] add support of dns_01 challenge to mod_md
  - Resolves: RHEL-17462 - OCSP response rejected when nextUpdate field not set
  - Resolves: RHEL-17467 - mod_md should trigger the reissue of new pair
    key/certificate when OCSP reports a revoked status


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release


author: Fedora Release Engineering <releng@fedoraproject.org> - 2.9.3-10
changelog:
  - Resolves: #1930664 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules
  - rename mlogc to mod_security-mlogc


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-2
changelog:
  - Resolves: RHEL-16358 - A form data, "会社"(Company in Japanese) is forbade
    with REQUEST-941-APPLICATION-ATTACK-XSS.conf of mod_security_crs


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-3
changelog:
  - Resolves: #RHEL-22733 - mod_security_crs - The rule id:913100 in the
    REQUEST-913-SCANNER-DETECTION.conf blocks requests  with "User-agent:
    urlgrabber/3.10 yum/3.4.3"


author: Jakub Kadlcik <frostyx@email.cz> 0.5-1
changelog:
  - Release for epel8 as well (frostyx@email.cz)
  - Require createrepo_c for the createrepo_mod package (frostyx@email.cz)
  - modulemd-merge: improve README.md file (frostyx@email.cz)
  - repo2module: improve README.md file (frostyx@email.cz)
  - dir2module: improve README.md file (frostyx@email.cz)
  - Improve README.md file (frostyx@email.cz)
  - createrepo_mod: improve README.md file (frostyx@email.cz)
  - Loosen the python3-libmodulemd dependency to just libmodulemd
    (frostyx@email.cz)
  - createrepo_mod: use just createrepo_c if it has built-in module support
    (frostyx@email.cz)
  - Explicitly depend on python3-setuptools (frostyx@email.cz)
  - createrepo_mod: dump modules.yaml into the correct directory
    (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6-1
changelog:
  - Generate manpages for all tools in this repository 
  - modulemd-generate-macros: add a tool for generating module-build-macros
  - modulemd_tools: add the first pieces of a python library (for internal usage only)


author: Jakub Kadlcik <frostyx@email.cz> 0.7-1
changelog:
  - Generate manpages on the fly
  - Automated test builds incl. Docker/Travis
  - Fix PEP8 in all tools
  - modulemd_tools: temporarily skip some tests on EPEL8 or Fedora
  - Drop libmodulemd dependency in favor of python3-libmodulemd


author: Jakub Kadlcik <frostyx@email.cz> 0.8-1
changelog:
  - modulemd_tools: drop python3-parameterized dependency (frostyx@email.cz)
  - Package modulemd_tools helper lib (fvalder@redhat.com)
  - Add modulemd-merge tests (fvalder@redhat.com)
  - Add createrepo_mod tests (fvalder@redhat.com)
  - Replace master in fedora releaser to rawhide (frostyx@email.cz)


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-4
changelog:
  - Generate profiles section and modulemd-defaults file
    Related: rhbz#1801747
  - Use autosetup to automatically apply patches


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-5
changelog:
  - Don't traceback because of a modular SRPM in the repo
    Related: rhbz#2227436
  - Replace deprecated LooseVersion
  - Fix tests for new libmodulemd version 2.15.0


author: Adam Jackson <ajax@redhat.com> - 2.3.4-25
changelog:
  - Fix invoking autogen/configure so the default CFLAGS actually get applied
    Resolves: rhbz#2044881


author: José Expósito <jexposit@redhat.com> - 2.3.4-28
changelog:
  - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
  - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap


author: Jan Horak <jhorak@redhat.com> - 1.9-28
changelog:
  - Removed NPAPI from the description, since is no longer supported in Mozilla
    products
    Resolves: rhbz#2041339


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Honggang Li <honli@redhat.com> - 5.7-3
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960479


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2015392


author: Davide Caratti <dcaratti@redhat.com> - 0.7-2
changelog:
  - add a simple sanity test and enable gating. Related: rhbz#1962741
  - don't overwrite global build options. Related: rhbz#1967697
  - fix 'check_conflicts' on multilib. Related: rhbz#1967697


author: Davide Caratti <dcaratti@redhat.com> - 0.8-2
changelog:
  - fix mptcpize to work also when protocol number is 0 (upstream issue #159)
    and when command resides in another file system (upstream issue #161)
    Related: rhbz#2015623


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 0.5.13-6
changelog:
  - updating line in /usr/lib/tmpfiles.d/munge.conf: /var/run/munge → /run/munge
  - add license tag
  - add requires logrotate


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Ray Strode <rstrode@redhat.com> - 40.9-18
changelog:
  - Don't allow applications on other workspaces to steal
    focus, unless their timestamps are pristine
    Resolves: RHEL-29537


author: Jonas Ådahl <jadahl@redhat.com>) - 40.9-20
changelog:
  - Fix positioning when using always-on-top windows
    Resolves: RHEL-45998
  - Improve handling of always-on-visible-workspace windows
    Resolves: RHEL-45366


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-22
changelog:
  - Fix crash when moving window while switching workspace
    Resolves: RHEL-62997
  - Improve app discovery for workspace logic
    Resolves: RHEL-63000


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, OpenSSL 3, s390 and robin hood
  - Add a new plugin


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.34-1
changelog:
  - Update to MySQL 8.0.34
  - Add patch from upstream bug#110569
  - Add patch to fix binlog format issue
  - Use --skip-combinations over --binlog-format=mixed
  - Add alignment patch upstream bug#110752


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Michal Schorm <mschorm@redhat.com> - 1.0.1-1
changelog:
  - Rebase to 1.0.1 release
    This release is just a sync-up with upstream selinux-policy
  - URL changed to a new upstream repository


author: Richard W.M. Jones <rjones@redhat.com> - 1.28.5-1
changelog:
  - Rebase to new stable branch version 1.28.5
    resolves: rhbz#2011709
  - Move nbdkit-null-plugin to nbdkit-server package
    resolves: rhbz#2021154
  - Add asynchronous support in nbdkit-vddk-plugin
  - Drop obsolete documentation related to thread model in vddk plugin
    resolves: rhbz#2018463
  - Switch to xorriso (instead of genisoimage)
  - Distribute README.VDDK in nbdkit-vddk-plugin subpackage
  - Fix nbdkit-cow-filter cow-block-size=4096
  - file: Fix implementation of cache=none for writes
    resolves: rhbz#2029751
  - vddk: Implement VMDK creation


author: Richard W.M. Jones <rjones@redhat.com> - 1.30.8-1
changelog:
  - Rebase to new stable branch version 1.30.8
    resolves: rhbz#2059289
  - Add automatic provides generator and subpackage nbdkit-srpm-macros
    resolves: rhbz#2059291
  - New filters: blocksize-policy, protect, retry-request
  - Fix license of bash-completion subpackage
  - vddk: Fix use of uninitialized memory when computing block size
    resolves: rhbz#2066655
  - Skip vsock tests unless the vsock_loopback module is loaded
    resolves: rhbz#2069558
  - Add support for ssh create remote file.
  - Suppress excess messages from nbdkit-nbd-plugin
    resolves: rhbz#2083498
  - Suppress incorrect VDDK error when converting guests from vCenter
    resolves: rhbz#2083617
  - Backport new readahead filter from 1.32.
  - Backport new LUKS filter from 1.32.
  - Backport new scan filter from 1.32.
  - Add new Python binding for nbdkit_parse_size from 1.32
  - Add new rate filter burstiness setting from 1.32
  - vddk: Suppress new VDDK "phone home" messages
    resolves: rhbz#2104720
  - vddk: Clearer error message when thumbprint is wrong
    resolves: rhbz#1905772
  - Fix memory allocator=malloc,mlock=true
    resolves: rhbz#2044432
  - Fix multiple Coverity problems
  - Fix bounds error in nbdkit-checkwrite-filter
    resolves: rhbz#2108545


author: Richard W.M. Jones <rjones@redhat.com> - 1.32.5-4
changelog:
  - Rebase to new stable branch version 1.32.5
    resolves: rhbz#2135765
  - Move stats filter to new subpackage.
  - Improve error message when PasswordAuthentication is set to 'no'
    resolves: rhbz#2158300
  - luks: Avoid crash when image does not contain a LUKS header
    resolves: rhbz#2159581
  - curl: Enable multi-conn for read-only connections
    resolves: rhbz#2166686


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-9
changelog:
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141902) and (#2141906)
  - fix memory leak when ipv6 disable set to 1 (#2151540)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-14
changelog:
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26649)


author: Thomas Haller <thaller@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0 release
  - Drop NotShowIn=GNOME
  - Use wireless-security code from libnma
  - Add flatpak build configuration
  - applet: hide unmanaged ethernet devices in nm-applet
  - applet: fix Wi-Fi scan requests with appindicator
  - editor: fix drop down list for connection.secondaries


author: Steve Dickson <steved@redhat.com> 2.5.4-15
changelog:
  - Fix uninstall warnings (bz 2048023)
  - rpc-statd.service: Stop rpcbind and rpc.stat in an exit race (bz 2112941)


author: Steve Dickson <steved@redhat.com> 2.5.4-16
changelog:
  - nfsd.man: Explain that setting nfsv4=n turns off all v4 versions (bz 2042362)
  - mount.nfs: fix NULL pointer derefernce in nfs_parse_square_bracket (bz 2136807)


author: Steve Dickson <steved@redhat.com> 2.5.4-19
changelog:
  - Don't allow junction tests to trigger automounts (bz 2148353)
  - Fix typo in man page nfs.conf.man (bz 2203092)


author: Steve Dickson <steved@redhat.com> 2.5.4-21
changelog:
  - gssd: fix handling DNS lookup failure (RHEL-15035)
  - gssd: handle KRB5_AP_ERR_BAD_INTEGRITY errors (RHEL-15034)


author: Steve Dickson <steved@redhat.com> 2.5.4-22
changelog:
  - nfsmount.conf: Fix typo of the attribute name (RHEL-7904)
  - Update to support for the NFS RPC-with-TLS (RHEL-14754)


author: Steve Dickson <steved@redhat.com> 2.5.4-23
changelog:
  - Typos and documentation fixes (RHEL-22654)
  - blkmapd: fix coredump in bl_add_disk (RHEL-7941)
  - rpcdebug: avoid buffer underflow (RHEL-7931)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-5
changelog:
  - Add -mod-devel subpackage for building external nginx modules
    Resolves: rhbz#1991720 (Neal Gompa)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-10
changelog:
  - Resolves: #1975747 - CVE-2021-3618 nginx: ALPACA: Application Layer Protocol
    Confusion - Analyzing and Mitigating Cracks in TLS Authentication


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-16
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-17
changelog:
  - bump package epoch to resolve RHEL-33939
  - Resolves: RHEL-33939 - Update path for nginx broken for existing CS
    installations


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1
changelog:
  - Resolves: #2096174 - RFE: add nginx:1.22 module stream
  - switch to pcre2
  - add stream_geoip_module and stream_realip_module
  - enable kTLS support


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-4
changelog:
  - Resolves: #2170808 - Running nginx with systemctl and entering ssl
    private key's pass phrase
  - added new ssl_pass_phrase_dialog directive which enables setting
    external program for entering password for encrypted private key


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-5
changelog:
  - Resolves: RHEL-12737 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Martin Osvald <mosvald@redhat.com> - 3:7.92-1
changelog:
  - New version 7.92
  - Resolves: #2180330 - Rebase nmap for TLS v1.3 support
  - Resolves: #2164833 - Remove duplicate tests


author: Ana Cabral <acabral@redhat.com> - 2.0.0-0.4.alpha3
changelog:
  - Upgrade to 2.0.0 alpha 3. Resolves: RHBZ#1996575
  - Remove connection renaming behaviour. Resolves: RHBZ#1998222
  - Add prefixes to OVS bridges and interfaces connections. Resolves: RHBZ#1998218
  - Improve OVS bridge start with nmstate. Resolves: RHBZ#1660250


author: Gris Ge <fge@redhat.com> - 2.2.27-1
changelog:
  - N/A

   - Support TCP congestion window(cwnd) in route. (59f99632)
   - Support query interface driver. (67817c23)
   - New API to generate changed state. (fe5327a2)

   - Include driver information for `persist-nic-names` subcommand. (1129e46b)
   - nm: Protect global DNS config in checkpoint. (881373ba)
   - route rule: Append rule instead of overriding when iface defined. (88d3d3ef)
  - Resolves RHEL-19409


author: Gris Ge <fge@redhat.com> - 2.2.33-1
changelog:
  - Upgrade to 2.2.33
  - Fix validation of controller overbook. RHEL-40683
  - Support DNS and route in kernel mode. RHEL-37665


author: Gris Ge <fge@redhat.com> - 2.2.35-1
changelog:
  - Upgrade to 2.2.35
  - Fix gen_diff on VLAN ID change. RHEL-38623
  - Fix Nmpolicy on mac-address identifier. RHEL-54292
  - Fix reapply. RHEL-50556


author: Gris Ge <fge@redhat.com> - 2.2.36-1
changelog:
  - Upgrade to 2.2.36
  - Support route source. RHEL-56258
  - Fix setting empty MPTCP flags. RHEL-38607
  - Fix gc mode on blackhole route. RHEL-56727
  - Support ipsec require-id-on-certificate. RHEL-50696
  - Reselect iface DNS if desired. RHEL-56557


author: Gris Ge <fge@redhat.com> - 2.2.38-1
changelog:
  - Upgrade to 2.2.38
  - Preserve current IP setting for multiconnect profile. RHEL-61890
  - Fix profile name changing. RHEL-59239
  - IPvlan support. RHEL-43438
  - Handle ipv6.method: ignore. RHEL-58406


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.18.1-2
changelog:
  - Add back libs and v8-devel subpackages
  - Related: RHBZ#2121126
  - Record previously fixed CVE
  - Resolves: CVE-2021-44906


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.19.1-1
changelog:
  - Rebase to 16.19.1
  - Resolves: rhbz#2153714
  - Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-23920
  - Resolves: CVE-2022-25881 CVE-2022-4904


author: Jan Staněk <jstanek@redhat.com> - 1:16.19.1-2
changelog:
  - Update bundled c-ares to 1.19.1
    Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.1-1
changelog:
  - Rebase to 16.20.1
    Resolves: rhbz#2188291
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2177781


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.2-5
changelog:
  - Backport patches for several CVEs.
    Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.7.0-1
changelog:
  - Update to latest release
  - Resolves CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
  - Resolves CVE-2022-29244
  - Resolves: RHBZ#2111009


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.8.0-1
changelog:
  - Update to latest release
  - Resolves: RHBZ#2111009
  - Provide undici and cjs-module-lexer + wasi-sdk sources
  - Resolves: RBHZ#2111861


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.14.2-1
changelog:
  - Rebase to 18.14.2
  - Resolves: #2159389
  - Resolves: CVE-2022-25881, CVE-2022-4904, CVE-2023-23936, CVE-2023-24807
  - Resolves: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920


author: Jan Staněk <jstanek@redhat.com> - 1:18.16.1-1
changelog:
  - Rebase to 18.16.1
    Resolves: rhbz#2188292 rhbz#2187683
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2222285


author: Jan Staněk <jstanek@redhat.com> - 1:18.17.1-1
changelog:
  - Rebase to version 18.17.1
    Resolves: rhbz#2228940
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559
  - Specify proper OpenSSL configuration section build
    Related: rhbz#2226726


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:18.19.1-1
changelog:
  - Rebase to version 18.19.1
  - Fixes: CVE-2024-21892 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 (medium)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.5.0-1
changelog:
  - Update to v20.5.0
  - Remove dtrace support
  - bcond corepack, so we don't provide it by default
  - Decrease debuginfo verbosity for all arches
  - Resolves: #2186717
  - Resolves RHELPLAN-155639


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.5.1-1
changelog:
  - Rebase to new security release
  - Address CVE-2023-32002, CVE-2023-32004, CVE-2023-32558 (high)
  - Address CVE-2023-32006, CVE-2023-32559 (medium)
  - Address CVE-2023-32005, CVE-2023-32003 (low)
  - Resolves: #2186717
  - Resolves RHELPLAN-155639


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.8.1-1
changelog:
  - Update node and nghttp
  - Add fips patch
  - Fixes CVE-2023-44487 (nghttp)
  - Fixes CVE-2023-45143, CVE-2023-39331, CVE-2023-39332, CVE-2023-38552, CVE-2023-39333


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-2
changelog:
  - Build with bootstrap by default due to old versions of dependencies available
  - Resolves: #2042995, #2042970, #2042981, #2042989
  - Resolves: #2029936, #2024890, #2014499, #2014135
  - Resolves: #2013834, #1945299


author: Jan Staněk <jstanek@redhat.com> - 16.16.0-1
changelog:
  - Rebase to version 16.16.0
    Resolves: RHBZ#2106290
    Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
    Resolves: CVE-2022-29244


author: Jan Staněk <jstanek@redhat.com> - 2.0.3-6
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469


author: Jan Staněk <jstanek@redhat.com> - 2.0.19-1
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469
    Resolves: CVE-2020-7788


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
changelog:
  - Resolves: RHBZ#2005419
  - Resolves CVE-2020-28469
  - Rebase to newest version
  - Change source to npmjs.com


author: Stephen Gallagher <sgallagh@redhat.com> - 2021.06-1
changelog:
  - Update to 2021.06-1
  - bundler: Handle archaic license metadata
  - bundler: Warn about bundled dependencies with no license metadata


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-4
changelog:
  - FIPS review changes
  -   add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
  -   update the indicators for this release
  -   allow hashing of longer than int32 values in a single PKCS #11 call.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-5
changelog:
  - Pick up validated constant time implementations of p256, p384, and p521
    from upsream
  - More Fips indicator changes


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-2
changelog:
  - Fix MD-5 decode issue in pkcs #12
  - turn off policy processing for pkcs12 and smime
  - restore the rhel9 pkcs12 defaults for pk12util


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-17
changelog:
  - fix consistency return errors. We shouldn't lock the FIPS
    token if the application asked for invalid DH parameters on
    on keygen.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-1
changelog:
  - Rebase to NSS-3.90
  - Rebase to NSPR-3.35
  - fix incorrect version values in the NSS spec file for FIPS


author: Andreas Schneider <asn@redhat.com> - 1.1.11-8
changelog:
  - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install
                             smaller footprint


author: Jan Macku <jamacku@redhat.com> - 1.15-1
changelog:
  - spec: sync specfile with Fedora
  - makefile: Use rpmdev-bumpspec's legacy date option
  - Add feature to generate specfile entry, commit and archive


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jerry James <loganjerry@gmail.com> - 8.0.1-1
changelog:
  - Version 8.0.1
  - Add 0002-Catch-CompileException-in-test.patch to fix compilation of a test
  - Make generate-tarball.sh actually compress the tarball


author: Jindrich Novy <jnovy@redhat.com> - 1.2.5-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.5
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.6-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.6
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.8-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.8
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1.2.9-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 1.2.10-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to
    https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.1
  - require crun >= 0.17


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.5-1
changelog:
  - apply patch from Matthias Gerstner of the SUSE security team to fix a
    possible race condition in the mkhomedir helper (CVE-2020-10737)
  - only process SELinux contexts if SELinux is not disabled (Alexander Bokovoy)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.6-1
changelog:
  - update license on src/buffer.h
  - change /var/run -> /run in systemd service file (Orion Poplawski)


author: Zuzana Miklankova <zmiklank@redhat.com> - 1.9.0~beta1-1
changelog:
  - Rebase to 1.9-beta1
  - change of licences of ongres-scram and ongres-scram-javadoc to "BSD and MIT and ASL 2.0"


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Milan Crha <mcrha@redhat.com> - 2.3-38
changelog:
  - Related: #2013578 (Add patch to build against samba 4.15)
  - Avoid build time dependencies related to server, when it's not built


author: Karol Herbst <kherbst@redhat.com> - 3.0-0.20200512git5cc337c
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Bump CLHPP version to 2.0.11


author: Karol Herbst <kherbst@redhat.com> - 3.0-1.20200512gitd082d42
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Rework CLHPP handling as file is not downloadable anymore
  - Bump CLHPP version to 2.0.12


author: Than Ngo <than@redhat.com> - 3.21.0-3
changelog:
  - Resolves: #2110497, concurrent MK rotation for cca token
  - Resolves: #2110498, concurrent MK rotation for ep11 token
  - Resolves: #2110499, ep11 token: PKCS #11 3.0 - support AES_XTS
  - Resolves: #2111010, cca token: protected key support 
  - Resolves: #2160061, rebase to 3.21.0
  - Resolves: #2160105, pkcsslotd hardening
  - Resolves: #2160107, p11sak support Dilithium and Kyber keys
  - Resolves: #2160109, ica and soft tokens: PKCS #11 3.0 - support AES_XTS


author: Than Ngo <than@redhat.com> - 3.21.0-8
changelog:
  - Resolves: #2222592, p11sak tool: slot option does not accept argument 0 for slot index 0
  - Resolves: #2222596, p11sak fails as soon as there reside non-key objects


author: Than Ngo <than@redhat.com> - 3.22.0-2
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22792


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-50064, update to 3.24.0
  - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le
  - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-50056, openCryptoki cca token SHA3 support
  - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-6
changelog:
  - Fix slapd.tmpfiles complaints. Related: rhbz#1969853
  - Use https:// for source Related: rhbz#1973597


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2109485)
  - Remove oscap-remediate service (rhbz#2111358)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159286)
  - Fix error when processing OVAL filters (rhbz#2126883)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2138884)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217442)
  - Fix systemd* probes unit enumeration (rhbz#2219532)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-11
changelog:
  - Initialize crypto API only once (rhbz#2020044)
  - Add support for Blueprint remediations (rhbz#2020052)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-12
changelog:
  - Allow using local files instead of remote resources (rhbz#2015518)
  - Add an alternative source of hostname (rhbz#2021509)
  - Lower memory limits and improve their checking (rhbz#2022362)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041782)
  - Select and exclude groups of rules on the command line (rhbz#2020580, rhbz#2020581)
  - The boot-time remediation service for systemd's Offline Update mode


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-30
changelog:
  - Some non-terminating processes were listening on ports.
    Resolves: rhbz#2177768
  - On sshd startup, we check whether signing using the SHA1 for signing is
    available and don't use it when it isn't.
  - On ssh private key conversion we explicitly use SHA2 for testing RSA keys.
  - In sshd, when SHA1 signatures are unavailable, we fallback (fall forward :) )
    to SHA2 on host keys proof confirmation.
  - On a client side we permit SHA2-based proofs from server when requested SHA1
    proof (or didn't specify the hash algorithm that implies SHA1 on the client
    side). It is aligned with already present exception for RSA certificates.
  - We fallback to SHA2 if SHA1 signatures is not available on the client side
    (file sshconnect2.c).
  - We skip dss-related tests (they don't work without SHA1).
    Resolves: rhbz#2070163
  - FIPS compliance efforts for dh, ecdh and signing
    Resolves: rhbz#2091694


author: Norbert Pocs <npocs@redhat.com> - 8.7p1-31
changelog:
  - Fix minor issues with openssh-8.7p1-evp-fips-compl-dh.patch:
  - Check return values
  - Use EVP API to get the size of DH
  - Add some log debug lines
  - Related: rhbz#2091694


author: Norbert Pocs <npocs@redhat.com> - 8.7p1-32
changelog:
  - Fix pkcs11 issue with the recent changes
  - Delete unnecessary log messages from previous compl-dh patch
  - Add ssh_config man page explanation on rhbz#2068423
  - Resolves: rhbz#2207793, rhbz#2209096


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-35
changelog:
  - Relax OpenSSH checks for OpenSSL version
    Resolves: RHEL-4734
  - Limit artificial delays in sshd while login using AD user
    Resolves: RHEL-2469
  - Move users/groups creation logic to sysusers.d fragments
    Resolves: RHEL-5222


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Clemens Lang <cllang@redhat.com> - 1:3.0.7-19
changelog:
  - Re-enable DHX keys in FIPS mode, disable FIPS 186-4 parameter validation and generation in FIPS mode
    Resolves: rhbz#2169757


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-20
changelog:
  - Fix possible DoS translating ASN.1 object identifiers
    Resolves: CVE-2023-2650
  - Release the DRBG in global default libctx early
    Resolves: rhbz#2211340


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-25
changelog:
  - Provide relevant diagnostics when FIPS checksum is corrupted
    Resolves: RHEL-5317
  - Don't limit using SHA1 in KDFs in non-FIPS mode.
    Resolves: RHEL-5295
  - Provide empty evp_properties section in main OpenSSL configuration file
    Resolves: RHEL-11439
  - Avoid implicit function declaration when building openssl
    Resolves: RHEL-1780
  - Forbid explicit curves when created via EVP_PKEY_fromdata
    Resolves: RHEL-5304
  - AES-SIV cipher implementation contains a bug that causes it to ignore empty
    associated data entries (CVE-2023-2975)
    Resolves: RHEL-5302
  - Excessive time spent checking DH keys and parameters (CVE-2023-3446)
    Resolves: RHEL-5306
  - Excessive time spent checking DH q parameter value (CVE-2023-3817)
    Resolves: RHEL-5308
  - Fix incorrect cipher key and IV length processing (CVE-2023-5363)
    Resolves: RHEL-13251
  - Switch explicit FIPS indicator for RSA-OAEP to approved following
    clarification with CMVP
    Resolves: RHEL-14083
  - Backport the check required by SP800-56Br2 6.4.1.2.1 (3.c)
    Resolves: RHEL-14083
  - Add missing ECDH Public Key Check in FIPS mode
    Resolves: RHEL-15990
  - Excessive time spent in DH check/generation with large Q parameter value (CVE-2023-5678)
    Resolves: RHEL-15954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-26
changelog:
  - Avoid implicit function declaration when building openssl
    Related: RHEL-1780
  - In FIPS mode, prevent any other operations when rsa_keygen_pairwise_test fails
    Resolves: RHEL-17104
  - Add a directory for OpenSSL providers configuration
    Resolves: RHEL-17193
  - Eliminate memory leak in OpenSSL when setting elliptic curves on SSL context
    Resolves: RHEL-19515
  - POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)
    Resolves: RHEL-21151
  - Excessive time spent checking invalid RSA public keys (CVE-2023-6237)
    Resolves: RHEL-21654
  - SSL ECDHE Kex fails when pkcs11 engine is set in config file
    Resolves: RHEL-20249
  - Denial of service via null dereference in PKCS#12
    Resolves: RHEL-22486
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Resolves: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-27
changelog:
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Related: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-1
changelog:
  - Rebase to OpenSSL 3.2.2. Fixes CVE-2024-2511, CVE-2024-4603, CVE-2024-4741,
    and Minerva attack.
    Resolves: RHEL-32148
    Resolves: RHEL-36792
    Resolves: RHEL-38514
    Resolves: RHEL-39111


author: Benedikt Bongartz <bongartz@redhat.com> - 0.95.0
changelog:
  - add observability user that is part of the systemd-journal group
  - add opentelemetry collector config folder (`/etc/opentelemetry-collector/configs`)
  - add opentelemetry collector default config
  - add microshift manifests


author: Felix Kolwa <fkolwa@redhat.com> - 0.102.1-4
changelog:
  - Fix SELinux policy resource names
  - Use sources for SELinux resources in spec file
  - Bump revision


author: Felix Kolwa <fkolwa@redhat.com> - 0.107.0-1
changelog:
  - Version bump to 0.107.0
  - Reset release to 1
  - Update addresses the following CVEs:
  - CVE-2024-34155
  - CVE-2024-34156
  - CVE-2024-42368


author: Matej Tyc <matyc@redhat.com> - 2.0.0-5
changelog:
  - Fix handling of content archives
    Resolves: rhbz#1996129
  - Fix handling of content fingerprint
    Resolves: rhbz#1993065
  - Fix crash when a previously selected hardening has been cancelled
    Resolves: rhbz#2014108
  - Pull latest translations


author: Matej Tyc <matyc@redhat.com> - 2.0.0-8
changelog:
  - Introduce unified help support
    Resolves: rhbz#2043512
  - Update translations
    Resolves: rhbz#2017374


author: Matej Tyc <matyc@redhat.com> - 2.0.0-9
changelog:
  - Introduce the firstboot remediation
    Resolves: rhbz#1999587
  - Add better error handling of installation using unsupported installation sources
    Resolves: rhbz#2042334


author: Matej Tyc <matyc@redhat.com> - 2.0.0-12
changelog:
  - Remove the firstboot remediation feature completely.
    We can't have it, while maintaining the standard UX.
    Resolves: rhbz#2065751


author: Matej Tyc <matyc@redhat.com> - 2.0.0-13
changelog:
  - Fix problems with handling multi-datastream archives
    Resolves: rhbz#2129846
  - Fix a crash when compulsively clicking in the GUI
    Resolves: rhbz#2127502


author: Jan Černý <jcerny@redhat.com> - 2.0.0-17
changelog:
  - Update translations (rhbz#2189526)
  - Fix tar file extraction (rhbz#2218875)
  - Fix conflict of tftp package with "network servers" group (rhbz#2172264)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210809-1
changelog:
  - Update for new release (v20210809) [bz#1970881]
  - Resolves: bz#1970881
    ([RHEL-9] virt-install --location fails with Could not find an installable distribution at URL '/var/lib/libvirt/images/boot.iso')


author: Victor Toso <victortoso@redhat.com> - 20221130-1
changelog:
  - Update for new release (v20221130)
    Resolves: rhbz#2135751
  - Add rhel-8.8 and rhel-9.2 prereleases
    Related: rhbz#2135751


author: Colin Walters <walters@verbum.org> - 2024.4-3
changelog:
  - Backport
    https://github.com/ostreedev/ostree/pull/3205/commits/e47b37096343efa3bea8295f3f44c4dc90cc04e2


author: Alex Macdonald <almacdon@redhat.com> - 1.2.2-3
changelog:
  - Remove osgi metadata patch0 that previously added a manifest
  - Include patch (courtesy of jkang) to package as a bundle instead of a jar
  - Update maven-compiler-plugin source/target version for builds in f33


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.2-1
changelog:
  - Update to new upstream release 0.25.2
    Resolves: RHEL-14834
  - Add IBM specific mechanisms and attributes
    Resolves: RHEL-10570


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.3-3
changelog:
  - Fix regression in trust where file creation fails for long cert labels
    Resolves: RHEL-58899
  - Fix usage message in p11-kit list-tokens command
    Resolves: RHEL-31810


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-14
changelog:
  - pam_lastlog: check localtime_r() return value. Resolves: #2130124
  - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2126632
  - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2126648


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-16
changelog:
  - libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
  - fix formatting of audit messages. Resolves: RHEL-5100


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.3.1-18
changelog:
  - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
  - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.3.1-19
changelog:
  - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
    situations. CVE-2024-22365. Resolves: RHEL-21244


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-22
changelog:
  - pam_unix: always run the helper to obtain shadow password file entries.
    CVE-2024-10041. Resolves: RHEL-62879
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-23631 and RHEL-39943


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.11-1
changelog:
  - Update to v6.11 release
  - Resolves: rhbz#1876400 - CVE-2020-14342 - cifs-utils: shell command injection


author: Jonathan Lebon <jonathan@jlebon.com> - 6.11-2
changelog:
  - Split out -info subpackage for smb2-quota and smbinfo
    https://bugzilla.redhat.com/show_bug.cgi?id=1909288


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: Peng Wu <pwu@redhat.com> - 1.48.7-3
changelog:
  - Update pango-emoji-table.h for emoji 14 support
  - Add pango-update-emoji.patch
  - Resolves: #2119674


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.42.2-3
changelog:
  - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use
    cairomm1.0, which may be a virtual Provides, in the manual lib Requires


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230222.g4ddbcb9-2
changelog:
  - udp: Actually use host resolver to forward DNS queries (rhbz#2177075)
  - conf: Split add_dns{4,6}() out of get_dns() (rhbz#2177075)
  - conf, udp: Allow any loopback address to be used as resolver (rhbz#2177075)
  - tcp, tcp_splice: Get rid of false positive CWE-394 Coverity warning from fls() (rhbz#2177084)
  - tcp: Avoid false (but convoluted) positive Coverity CWE-476 warning (rhbz#2177084)
  - tcp: Avoid (theoretical) resource leak (CWE-772) Coverity warning (rhbz#2177084)
  - Fix definitions of SOCKET_MAX, TCP_MAX_CONNS (rhbz#2177084)
  - doc/demo: Fix and suppress ShellCheck warnings (rhbz#2177084)
  - contrib/selinux: Drop duplicate init_daemon_domain() rule (rhbz#2176813)
  - contrib/selinux: Let passt write to stdout and stderr when it starts (rhbz#2176813)
  - contrib/selinux: Allow binding and connecting to all UDP and TCP ports (rhbz#2176813)
  - contrib/selinux: Let interface users set paths for log, PID, socket files (rhbz#2176813)
  - contrib/selinux: Drop "example" from headers: this is the actual policy (rhbz#2176813)
  - contrib/selinux: Drop unused passt_read_data() interface (rhbz#2176813)
  - contrib/selinux: Split interfaces into smaller bits (rhbz#2176813)
  - fedora: Install SELinux interface files to shared include directory (rhbz#2176813)
  - tcp, udp, util: Pass socket creation errors all the way up (rhbz#2177080)
  - tcp, udp: Fix partial success return codes in {tcp,udp}_sock_init() (rhbz#2177080)
  - conf: Terminate on EMFILE or ENFILE on sockets for port mapping (rhbz#2177080)
  - tcp: Clamp MSS value when queueing data to tap, also for pasta (rhbz#2177083)
  - Fix up SELinux labels on install/uninstall, require matching -selinux package (rhbz#2176813)
  - Resolves: rhbz#2177075 rhbz#2177084 rhbz#2177080 rhbz#2177083 rhbz#2176813


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230222.g4ddbcb9-3
changelog:
  - Refresh SELinux labels in scriptlets, require -selinux package (rhbz#2183089)
  - Don't install useless SELinux interface file for pasta (rhbz#2183106)


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230222.g4ddbcb9-4
changelog:
  - Drop (pointless) patches 20, 21, 22, actually apply changes to the spec file!
  - Refresh SELinux labels in scriptlets, require -selinux package (rhbz#2183089)
  - Don't install useless SELinux interface file for pasta (rhbz#2183106)


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-2
changelog:
  - Drop user_namespace create allow rule, incompatible with current el9 kernel
  - Resolves: RHELPLAN-155811


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-3
changelog:
  - Explicit restorecon in scriptlet as rpm(8) mix up contexts with hard links
  - Resolves: RHELPLAN-155811


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-4
changelog:
  - Switch to copies instead of links for pasta: previous workaround unreliable
  - Resolves: RHELPLAN-155811


author: Nathan Scott <nathans@redhat.com> - 6.1.1-1
changelog:
  - Improve pmlogcheck performance with compressed archives (RHEL-3930)
  - Fix pcp-ss(1) utility handling of duplicate sources (RHEL-7498)
  - Fine-tune PCP python wrapper path resolution (RHEL-7509)
  - Rebase to latest stable version of PCP (RHEL-2317)


author: Nathan Scott <nathans@redhat.com> - 6.1.1-2
changelog:
  - Fix pcp-ss(1) default handling of listen state (RHEL-17335)
  - Added pcp package dependency on diffutils for diffstat(1)


author: Nathan Scott <nathans@redhat.com> - 6.2.1-1
changelog:
  - Rebase to latest stable version of PCP (RHEL-30198)
  - Disable pmproxy(1) RESP proxying by default (RHEL-30720)
  - Add pmcheck(1) utility to check installation (RHEL-25497)


author: Nathan Scott <nathans@redhat.com> - 6.2.2-1
changelog:
  - Rebase to latest stable version of PCP (RHEL-30198)
  - Fix pcp2openmetrics on s390x reading from an archive (RHEL-32407)
  - Fix pcp2openmetrics -F output file option (RHEL-32674)
  - Fix pmlogdump version reporting (RHEL-32381)
  - Add timestamps for pcp2openmetrics archive option (RHEL-32369)
  - Add new metrics to monitor VMware balloon usage (RHEL-32198)


author: Lauren Chilton <lchilton@redhat.com> - 6.2.2-4
changelog:
  - Removed excess headers for pcp2openmetrics tool (RHEL-39159)
  - Fix pcp2openmetrics '-s' option (RHEL-39132)
  - Fix pcp2openmetrics timestamps in archive mode (RHEL-32983)
  - Fix pcp2openmetrics output to adhere to prometheus parser (RHEL-39293)


author: Nathan Scott <nathans@redhat.com> - 6.2.2-5
changelog:
  - Add rpm dependency on package providing ps(1) tool (RHEL-39491)
  - Update Java bytecode in pcp-testasuite package (RHEL-40718)


author: Nathan Scott <nathans@redhat.com> - 6.3.1-1
changelog:
  - New pcp-xsos utility for rapid system summaries (RHEL-30590)
  - Fix Upgrade scripts to not rewrite pmcd.conf (RHEL-40631)
  - Add new Hyper-V balloon usage metrics (RHEL-45715)
  - Auto-load pmdaproc in local context (RHEL-50941)
  - Fix a benign potential libpcp buffer overflow (RHEL-58914)
  - Fix pcp-zeroconf pmie.config write permission (RHEL-59366)
  - Rebase to latest stable version of PCP (RHEL-58953)


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Add proc PMDA access control for IO metrics (RHEL-60891)
  - Fix pmdastatsd segfaults within pmdaRehash (RHEL-57717)
  - Multiple hugepage size NUMA metric support (RHEL-45876)
  - Improve pcp-xsos command line diagnostics (RHEL-61597, RHEL-61598)
  - Add pmlogger_farm_check service selinux policy (RHEL-61885)
  - Fix v3 archive replay on big endian machines (RHEL-61501)
  - Rebase to latest stable version of PCP (RHEL-58953)


author: Nathan Scott <nathans@redhat.com> - 5.3.0-1
changelog:
  - Added conditional lockdown policy access by pmdakvm (BZ 1940971)
  - Added spec file dependency on cyrus-sasl-scram (BZ 1942879)
  - Update to latest PCP sources (BZ 1957575)


author: Nathan Scott <nathans@redhat.com> - 5.3.0-2
changelog:
  - Improve pmchart duplicate archive diagnostics (BZ 1615718)
  - Save pmchart users prefered archive locations (BZ 1615742)
  - Remove libvarlink dependency from podman PMDA (BZ 1956608)
  - Correct pcp-testsuite file permissions (BZ 1922040)
  - Resolve pcp-testsuite linkage problems (BZ 1950263)


author: Nathan Scott <nathans@redhat.com> - 5.3.1-3
changelog:
  - Fix pmproxy parallel TLS requests bug (BZ 1947989)
  - Backport pmrep archive creation fix (BZ 1974266)
  - Related: rhbz#1957575


author: Mark Goodwin <mgoodwin@redhat.com> - 5.3.1-4
changelog:
  - Improve pmproxy and libpcp_web scalability (BZ 1975069)
  - Provide a pcp-ss(1) tool in pcp-system-tools (BZ 1879350)


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Petr Pisar <ppisar@redhat.com> - 10.36-4
changelog:
  - Fix a mismatch if \K was involved in a recursion
  - Restore single character repetition optimization in JIT (upstream bug #2698)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-1
changelog:
  - Rebase to the 10.37
  - libpcre2-posix.so.2* SONAME bump to libpcre2-posix.so.3*
  - Enable JIT for s390x arch
  - Patches upstreamed: Patch 1,2,3,4
  - Resolves: rhbz#1970765, BZ#1965025


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-28
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951271 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1:0.9.4-23
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951270 replace apache-commons-logging with java.util.logging


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-471
changelog:
  - Make accessing environment by DynaLoader thread-safe
  - Use duplocale() if available
  - Fix fc() in Turkish locale
  - Fix croaking on "my $_" when "use utf8" is in effect (GH#18449)
  - Fix PERL_UNUSED_ARG() definition in XSUB.h
  - Add missing entries to perldiag (GH#18276)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-472
changelog:
  - Protect locale tests from LANGUAGE environment variable
  - Prevent the number of buckets in a hash from getting too large
  - Fix a memory leak when compiling a regular expression (GH#18604)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-474
changelog:
  - Fix dumping a hash entry of PL_strtab type
  - Fix an arithmetic left shift of a minimal integer value (GH#18639)


author: Paul Howarth <paul@city-fan.org> - 1.2000-1
changelog:
  - Update to 1.200
    - New release with no new features, just preparing for a series of bugfix
      releases
  - Specify all build dependencies
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.014-14
changelog:
  - Spec clean-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Use %{make_build} and %{make_install}
    - Fix permissions of installed files


author: Tom Callaway <spot@fedoraproject.org> - 0.44-1
changelog:
  - Update to 0.44
    - Support Perls with COW disabled
    - Bump B::COW requirement for testing
  - Disable tests until B::COW is packaged


author: Tom Stellard <tstellar@redhat.com> - 1.64-4
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Petr Pisar <ppisar@redhat.com> - 1.66-2
changelog:
  - Update DBD-SQLite-1.60-Unbundle-Test-NoWarnings.patch
  - Do not build-require unused Test::FailWarnings
  - Update the description


author: Tom Stellard <tstellar@redhat.com> - 1.642-7
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Paul Howarth <paul@city-fan.org> - 1:0.17029-1
changelog:
  - Update to 0.17029
    - Rebuild for order of 'NAME' and 'VERSION' sections in the generated POD
      documentation (VERSION used to appear before NAME)


author: Paul Howarth <paul@city-fan.org> - 1.002002-1
changelog:
  - Update to 1.002002
    - Fix bug in handling regexps in import lists; Exporter::Tiny allowed regexps
      like /foo/i but not /foo/; having trailing flags is now optional! (GH#6)
    - Tests would fail if 'PERL5OPT=-Mfeature=:5.18' environment variable was set;
      this is because bareword '-default' was being interpreted as the Perl
      'default' keyword (GH#5)
  - Unbundle newly-bundled test modules


author: Paul Howarth <paul@city-fan.org> - 1.16-18
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.72-21
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - IO::Socket::Utils CERT_asHash and CERT_create now support subject and
      issuer with multiple same parts (like multiple OU); in this case an array
      ref instead of a scalar is used as hash value (GH#95)


author: Michal Josef Špaček <mspacek@redhat.com> - 2.070-4
changelog:
  - Remove failing tests in openssl 3.0.0-alpha16. Related: rhbz#1968046
    - Provisional for mass rebuild of openssl3.


author: Paul Howarth <paul@city-fan.org> - 1.26-1
changelog:
  - Update to 1.26
    - BUILD: Update FAIL_POSIX warning message (GH#28)
    - TEST: t/07_taint.t: Use executable name as source of taintedness (GH#21)
    - OTHER: Typographic corrections (CPAN RT#60211, CPAN RT#86403)
    - Add Travis configuration


author: Paul Howarth <paul@city-fan.org> - 1.29-1
changelog:
  - Update to 1.29
    - Improved handling of shell commands on Windows, which should get us closer
      to resolving Win32-related issues; there should be no change of
      functionality on Unix-like platforms
    - Better workaround for bug in perl-5.8.9 (GH#23)
    - Add t/args.t
    - Modify t/win32.t
    - Added Travis and AppVeyor configuration files
    - Eliminated use of Dist::Zilla for build, using older, but more reliable and
      better understood (by maintainer) ExtUtils::MakeMaker-based configuration
    - Move author testing to xt/ directory


author: Emmanuel Seyman <emmanuel@seyman.fr> - 4.03-1
changelog:
  - Update to 4.03
  - Use %{make_install} instead of "make pure_install"
  - Use %{make_build} instead of make
  - Replace calls to %{__perl} with /usr/bin/perl
  - Pass NO_PACKLIST and NO_PERLLOCAL to Makefile.PL


author: Petr Pisar <ppisar@redhat.com> - 1:0.68-3
changelog:
  - Fix resolving localhost on loopback-only machines
    (https://github.com/perl-ldap/perl-ldap/pull/60)


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix failing installation in parallel make (GH#38)
    - Infrastructure improvements and tooling updates, lots of author tests with
      corresponding fixes added
    - Added slide and slideatatime functions
    - Documentation fixes (GH#21, GH#33, GH#34, CPAN RT#126029, CPAN RT#132043,
      CPAN RT#132940)
    - Bump List::MoreUtils::XS requirement to 0.430
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix parts of CPAN RT#123989: more $a/$b/$_ refcounting bugs
      - Since some bugs are simply reported wrong, dealing with them breaks more
        (including running code) than it solves - way too heavy to feel better...
    - Introduce functions slide and slideatatime
    - Toolchain fixes
    - Fix LANG=nb_NO.utf8 related str tests fails (CPAN RT#133128)
    - Fix typo (GH#7)
    - Fix parts of CPAN RT#132043: listcmp misbehave in XS implementation
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.70-1
changelog:
  - Update to 0.70
    - Protect ourselves from Module::Metadata parsing problems (CPAN RT#130939)
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.86-1
changelog:
  - Update to 0.86
    - Update PAUSE and ANDK keys to 2020
    - Update documentation pertaining to SHA1
    - Fix compatibility with Crypt::OpenPGP
  - Use mktemp to create temporary GPG directory


author: Paul Howarth <paul@city-fan.org> - 0.21-26
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.90-1
changelog:
  - Update to 1.90
    - Formalised libssl version support policy: all stable versions of OpenSSL
      in the 0.9.8-1.1.1 branches (with the exception of 0.9.8-0.9.8b) and all
      stable releases of LibreSSL in the 2.0-3.1 series are supported
    - The LibreSSL 3.2 series is not yet fully supported because its TLSv1.3
      implementation is not currently libssl-compatible
    - Added support for LibreSSL on Windows when built with Visual C++
    - Exposed P_X509_CRL_add_extensions, several SSL_CIPHER functions, and
      several stack functions
    - Fixed crashes in the callback functions CTX_set_next_proto_select_cb and
      CTX_set_alpn_select_cb
    - The test suite is now compatible with OpenSSL 1.1.1e onwards, as well as
      OpenSSL security level 2 (the default on many Linux distributions)


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-4
changelog:
  - Fix tests for openssl 3.0.0-alpha16. rhbz#1964854
    - Fix check across alpha1 vs alpha17
    - Change default alg for PEM_get_string_PrivateKey()
    - Different order in CA chain in some versions
    - Changed API of CTX_set_ciphersuites() and set_ciphersuites(), ignore
      unknown ciphers
    - Disable TLSv1 and TLSv1_1 usage in test


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-6
changelog:
  - Fix tests for openssl 3.0.0-beta1. rhbz#1964854
    - Add fix for t/05_passwd_cb.t
    - Update Net-SSLeay-1.90-openssl3.0.0-43_misc_functions.patch to accept beta version
  - Fix tab vs space in spec file
  - Update Net-SSLeay-1.90-openssl3.0.0-39_pkcs12.patch patch to upstream version


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-8
changelog:
  - Fix tests for openssl 3.0.0-beta2. rhbz#1992571
    - Add another fix for t/05_passwd_cb.t, because change in passphrase caching
  - Remove XXX in spec file


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-1
changelog:
  - Resolves: RHEL-40758
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list
  - Package tests


author: Paul Howarth <paul@city-fan.org> - 1.106-20
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build requirements
    - Drop support for building with Test::More < 0.88
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license macro


author: Paul Howarth <paul@city-fan.org> - 1:0.38-458
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Tom Stellard <tstellar@redhat.com> - 3:1.54-441
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.29-6
changelog:
  - Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.36-3
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Petr Pisar <ppisar@redhat.com> - 3:1.302177-1
changelog:
  - Update to 1.302177
    - Minor fix to author downstream test
    - No significant changes since the last trial
    - Fix Test::More's $TODO inside intercept (#862)


author: Paul Howarth <paul@city-fan.org> - 3:1.302180-1
changelog:
  - Update to 1.302180
    - Move try_sig_mask to the only module that uses it
    - Inherit warnings bitmask in cmp_ok string eval
    - Update copyright date
    - Improved API for intercept {} and what it returns
    - Bump minimum List::Util version (for uniq)


author: Paul Howarth <paul@city-fan.org> - 3:1.302181-1
changelog:
  - Update to 1.302181
    - Put try_sig_mask back where it goes (and add test to prevent this in the
      future)
    - Drop new List::Util requirement back down


author: Tom Stellard <tstellar@redhat.com> - 1.1-36
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Paul Howarth <paul@city-fan.org> - 1.30-1
changelog:
  - Update to 1.30
    - Breaking Change: Set $YAML::LoadBlessed default to false to make it more
      secure


author: Paul Howarth <paul@city-fan.org> - 1:0.238-1
changelog:
  - Update to 0.238
    - Move the prerequisite Test::More from being a runtime prerequisite to a
      test time / build time prerequisite (GH#11)


author: Filip Janus <fjanus@redhat.com> - 1.7.0-1
changelog:
  - Initial import for postgresql 15 module
  - Update to 1.7.0
  - Support postgresql 15
  - Related: #2128410


author: Remi Collet <rcollet@redhat.com> - 8.0.10-1
changelog:
  - rebase to 8.0.10 #1992513
  - compatibility with OpenSSL 3.0 #1992492
  - snmp:  add sha256 / sha512 security protocol #1936635
  - phar: implement openssl_256 and openssl_512 for phar signatures
  - phar: use sha256 signature by default


author: Remi Collet <rcollet@redhat.com> - 8.0.20-1
changelog:
  - rebase to 8.0.20 #2095752
  - clean unneeded dependency on useradd command #2095447
  - add upstream patch to initialize pcre before mbstring
  - retrieve tzdata version from /usr/share/zoneinfo/tzdata.zi


author: Remi Collet <rcollet@redhat.com> - 8.1.6-2
changelog:
  - add upstream patch to initialize pcre before mbstring
  - add upstream patch to use more sha256 in openssl tests


author: Remi Collet <rcollet@redhat.com> - 8.2.13-1
changelog:
  - rebase to 8.2.13 RHEL-14699
  - add %__phpize and %__phpconfig macros
  - move httpd/nginx wants directives to config files in /etc
  - php-fpm.conf: move include directive after [global] section
    following upstream example, allowing overriding
  - use SPDX license IDs


author: Jakub Jelen <jjelen@redhat.com> - 1.1.1-2
changelog:
  - Move pinentry-tty to separate subpackage (#1782442)
  - Update the wrapper selecting the appropriate version (#1918969)


author: Neal Gompa <ngompa@centosproject.org> - 0.3.40-1
changelog:
  - Update to version 0.3.40 which drops media-session service for WirePlumber
    Resolves: rhbz#2022694


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 2.11.4-6
changelog:
  - Drop jackson-module-afterburner, jackson-module-guice, jackson-module-mrbean,
    jackson-module-osgi, jackson-module-paranamer, and jackson-module-javadoc


author: Alexander Scheel <ascheel@redhat.com> - 3.0.26-6
changelog:
  - CVE-2020-1695: Improper validation of response header in MediaTypeHeaderDelegate.java class
    Resolves: rh-bz#1845547


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 3.0.26-13
changelog:
  - Replace jboss-annotations-1.2-api with jakarta-annotations
  - Drop log4j dependency
  - Add jakarta-activation dependency


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.30-1
changelog:
  - Resolves: rhbz#1721684 Rebase pki-servlet-engine to 9.0.30
  - Update to JWS 5.3.0 distribution
  - Remove new dependencies that PKI doesn't need (and are not provided by RHEL 8)


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.43-1
changelog:
  - Update to JWS 5.5, and drop jakarta-saaj dependency
  - Updates to javapackages-local removed %add_maven_depmap which broke the build,
    so I removed most of the maven artifacts as they aren't very useful anyway
  - Cleaned up a few unnecessary patches


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.43-2
changelog:
  - Related: rhbz#1977948 Cleanup unused tomcat-juli.jar copy now that the maven artifacts have been removed


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-13.20200306git58a7289
changelog:
  - Add patches fixing crash on monitor hot(un)plug (rhbz#1809681)
  - Add patches fixing delay between gdm telling us to deactivate and
    us telling gdm it is ok to continue
  - Drop plymouth-plugin-throbgress sub-package, the spinfinity theme now
    uses the two-step plugin


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-14.20200306git58a7289
changelog:
  - New upstream git snapshot
  - Add RemainAfterExit=yes to plymouth's systemd service files (rhbz#1807771)
  - Fix the spinner / animation missing on shutdown and reboot


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-1.20210323git8a3c9bb
changelog:
  - Update to 0.9.5 + a bunch of extra fixes from git (new upstream git snapshot)
  - Fixes 1896929 - systemd complains about Unit configured to use KillMode=none


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2.20210331git1ea1020
changelog:
  - New git snapshot
  - Fixes 1933378 - Bootsplash doesn't always fully clear on boot to console
  - Fixes 1941329 - Flickering plymouth on shutdown/reboot
  - Prune spec-file changelog a bit


author: Jindrich Novy <jnovy@redhat.com> - 2:5.0.0-2
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/5.0.0
    (https://github.com/containers/podman/commit/e71ec6f1d94d2d97fb3afe08aae0d8adaf8bddf0)
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.1.1-rhel
    (https://github.com/containers/podman/commit/fa692a6)
  - Related: #2097694


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-6
changelog:
  - convert catatonit dependency to soft dep as catatonit is
    no longer in Appstream but in CRB
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.2.0
    (https://github.com/containers/podman/commit/7fe5a419cfd2880df2028ad3d7fd9378a88a04f4)
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 2:4.5.1-3
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175074
  - Resolves: #2179966
  - Resolves: #2187322
  - Resolves: #2187383
  - Resolves: #2203702
  - Resolves: #2207522


author: Jindrich Novy <jnovy@redhat.com> - 2:4.5.1-5
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175071
  - Resolves: #2179950
  - Resolves: #2187318
  - Resolves: #2187366
  - Resolves: #2203681
  - Resolves: #2207512


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.0
    (https://github.com/containers/podman/commit/38e6fab9664c6e59b66e73523b307a56130316ae)


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/1b2fadd)
  - Resolves: #2232127


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/8bb0204)
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/ea33dce)
  - Related: #2176063


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-2
changelog:
  - gettext: handle unsupported languages properly (#2100378)
  - semodule: rename --rebuild-if-modules-changed to --refresh
  - python: Split "semanage import" into two transactions (#2063353)
  - selinux-autorelabel: Do not force reboot (#2093133)


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-3
changelog:
  - Run autorelabel in parallel by default
    https://fedoraproject.org/wiki/Changes/SELinux_Parallel_Autorelabel


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Jan Rybar <jrybar@redhat.com> - 0.117-13
changelog:
  - session-monitor: watch sessions only
  - PolkitPermission: react on really changed sessions
  - allow polkit-pkla-compat to be uninstalled if no .pkla rules
  - Resolves: RHEL-39063


author: Marek Kasik <mkasik@redhat.com> - 21.01.0-11
changelog:
  - Backport fixes for issues found by Coverity Scan
  - and fix some of the new issues
  - Resolves: #1967967


author: Tomas Korbar <tkorbar@redhat.com> - 2:3.5.9-20
changelog:
  - Backport dns SRV record resolution feature (RFC6186)
    Resolves: rhbz#2134789
  - Fix building in ZUUL CI
    Resolves: rhbz#2193363


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.5.9-14
changelog:
  - Fixed cleanup crash when processing messages with whitespace only fullname
    Resolves: rhbz#1978901


author: Honza Horak <hhorak@redhat.com> - 13.3-6
changelog:
  - Do not provide pkgconfig(libpq) to not trick packages that actually require
    libpq-devel
    Resolves: #1980992


author: Filip Januš <fjanus@redhat.com> - 13.3-9
changelog:
  - Remove tests failing with openssl3, now pgp is tested only with
    supported ciphers
    Add postgresql-pgcrypto-openssl3-init.patch - Correctly init ciphers
    Add postgresql-pgcrypto-openssl3-tests.patch - disable unsupported
    ciphers in the test suite
    Related discussion: #2008773
    Resolves: #1964848


author: Marek Kulik <mkulik@redhat.com> - 13.5-1
changelog:
  - Update to 13.5 (#2023301)
    Remove patch postgresql-pgcrypto-openssl3-init.patch - Already in upstream


author: Masahiro Matsuya <mmatsuya@redhat.com> - 13.13-1
changelog:
  - Update to 13.13
  - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, and CVE-2023-39417
  - Resolves: RHEL-5567


author: Masahiro Matsuya <mmatsuya@redhat.com> - 15.5-1
changelog:
  - update to 15.5
  - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, CVE-2023-39417, and CVE-2023-39418


author: Filip Januš <fjanus@redhat.com> - 15.0-1
changelog:
  - Initial import for postgresql 15
  - Specfile is based on version locate in centos stream
    It reflects changes with libpq. This version of databse server
    will use private libpq library.
  - Resolves: #2128241


author: Filip Januš <fjanus@redhat.com> - 15.2-1
changelog:
  - Update to upstream version 15.2
  - Update postgresql-setup to 8.8
  - PostgreSQL systemd unit waits for the network to be up
  - Resolves: #2128241


author: Filip Janus <fjanus@redhat.com> - 16.0-1
changelog:
  - New postgresql stream - 16
  - Remove pdf documentation
  - Update postgresql-setup to 8.9
  - postmaster binary no more shipped
  - Resolves: RHEL-3636


author: Bastien Nocera <bnocera@redhat.com> - 0.8.1-2
changelog:
  + power-profiles-daemon-0.8.1-2
  - Remove linter, as apparently unwanted in check section
  - Resolves: rhbz#1947950


author: Kate Hsuan <hpa@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Support multi-drivers mode and amdgpu
  - Support dynamically adjusts amd-pstate EPP values between battery and AC modes.
  - Resolves: RHEL-23395


author: Than Ngo <than@redhat.com> - 1.3.10-1
changelog:
  - Resolves: #1920964, P10 Power Mode Reporting
  - Resolves: #2050893, Linux Hybrid Network Virtualizatio
  - Resolves: #2065169, bootloader fails to update boot order after OS install
  - Resolves: #2071862, Fix NM HNV setting primary slave
  - Resolves: #2089106, smtstate --save command failed


author: Than Ngo <than@redhat.com> - 1.3.10-3
changelog:
  - Resolves: #2111991, Add udev rule for the nx-gzip in to the core subpackage
  - Resolves: #2121470, Fix lsslot -c mem output when using 4GB LMB size
  - Resolves: #2110129, Add NVMf-FC boot support for Power


author: Than Ngo <than@redhat.com> - 1.3.10-4
changelog:
  - Resolves: #2150698, handle nsid of nvmf device as hexadecimal number
  - Resolves: #2150697, setup multiple device path for a nvmf boot device


author: Than Ngo <than@redhat.com> - 1.3.10-6
changelog:
  - Resolves: #2166870, lparstat: Fix display of mode for dedicated-donating partition
  - Resolves: #2169269, lparstat: Fix negative values seen while running lparstat with -E option


author: Than Ngo <than@redhat.com> - 1.3.10-7
changelog:
  - Fix negative values seen while running lpar
  - Fix lparstat error with mixed SMT state
  Resolves: #2225371


author: Than Ngo <than@redhat.com> - 1.3.10-8
changelog:
  - Resolves: RHEL-16045, Support partial SMT level through SYS FS smt/control files
  - Resolves: RHEL-11456, LPM hooks


author: Than Ngo <than@redhat.com> - 1.3.10-9
changelog:
  - Resolves: RHEL-20350, getting larger Negative value while running rtas_dbg -l
  - Resolves: RHEL-19076, installation fails if nsid of nvme device is greater than 10
  - Resolves: RHEL-11456, add new /etc/drmgr.d/pmig hierarchy


author: Than Ngo <than@redhat.com> - 1.3.10-11
changelog:
  - Resolves: RHEL-23620, nvram help page and man page are not in sync
  - Resolves: RHEL-23619, segault when running nvram --nvram-size 268435456
  - Resolves: RHEL-23624, segault when running nvram --print-config


author: Adrian Reber <adrian@lisas.de> - 3.14.0-6
changelog:
  - Reintroduce the emacs subpackage to avoid file conflicts between
    protobuf-compiler.x86_64 and protobuf-compiler.i686
  - Disable LTO to fix annobin errors


author: Adrian Reber <areber@redhat.com> - 3.14.0-14
changelog:
  - Applied patch for CVE-2022-1941 (#RHEL-40872)
  - Applied patch to make emacs dependency optional (#RHEL-40572)


author: Jan Rybar <jrybar@redhat.com> - 3.6-16
changelog:
  - output is not redirected when ps_mem is killed
  - cmdline unwanted blank spaces fixed
  - Resolves: rhbz#2033997
  - Resolves: rhbz#2049743


author: Wim Taymans <wtaymans@redhat.com> - 15.0-1
changelog:
  - Update to 15.0
  - convert to meson build
  - esound, gconf, oss are no longer supported
  - Resolves: rhbz#1961581


author: Brian C. Lane <bcl@redhat.com> - 3.32.1-1
changelog:
  - Use .z version for new builds, start with 3.32.0 (bcl)
    Related: rhbz#1968762
  - tests: Use pykickstart/commands relative to the import (bcl)
    Related: rhbz#1968762


author: Brian C. Lane <bcl@redhat.com> - 3.32.2-1
changelog:
  - Add RHEL 9 handler (mkolman)
    Resolves: rhbz#1966730
  - Add RHEL 9 version for commands that had a RHEL version in the past (mkolman)
    Related: rhbz#1966730
  - Add RHEL 9 version for BTRFS related commands (mkolman)
    Related: rhbz#1966730


author: Brian C. Lane <bcl@redhat.com> - 3.32.4-1
changelog:
  - github: Add rhel9-branch to the list of branches (bcl)
    Related: rhbz#2054906
  - Fix validation of packages arguments (bcl)
    Resolves: rhbz#2054906


author: Brian C. Lane <bcl@redhat.com> - 3.32.5-1
changelog:
  - Tools should default to RHEL9 not DEVEL (bcl)
    Resolves: rhbz#2060779
  - Default to RHEL9 for docs and ksshell test. (bcl)
    Related: rhbz#2060779
  - Set default version to RHEL9 (bcl)
    Related: rhbz#2060779
  - Remove the --ignorebroken option from RHEL handlers (vponcova)
    Related: rhbz#2060779
  - Add the isRHEL function (vponcova)
    Related: rhbz#2060779


author: Brian C. Lane <bcl@redhat.com> - 3.32.6-1
changelog:
  - tests: Update ksvalidator tests to allow new wording for help output (bcl)
    Related: rhbz#2083269
  - rootpw: Use RHEL9 instead of F37 for new rootpw feature (bcl)
    Related: rhbz#2083269
  - rootpw: Add an --allow-ssh argument (bcl)
    Resolves: rhbz#2083269
  - github: Fix workflow to only send coverage for python 3.9 (bcl)
    Related: rhbz#2083269


author: Brian C. Lane <bcl@redhat.com> - 3.32.10-1
changelog:
  - Add DNS handling options to the network command (vslavik)
    Resolves: rhbz#2172531
  - whitelist_externals has changed to allowlist_externals (bcl)
    Related: rhbz#2172531


author: Brian C. Lane <bcl@redhat.com> - 3.32.11-1
changelog:
  - tox: Only run unit tests for python 3.6 (bcl)
    Related: RHEL-17662
  - Add conflict test between ostree sources (#2125655) (jkonecny)
    Related: RHEL-17662
  - Fix missing seen check for output generation (#2125655) (jkonecny)
    Related: RHEL-17662
  - Add new ostreecontainer command (#2125655) (jkonecny)
    Resolves: RHEL-17662
  - Check the conflicting commands automatically (vponcova)
    Related: RHEL-17662
  - Fix tests for conflicting commands (vponcova)
    Related: RHEL-17662
  - Add conflicting commands support (bcl)
    Related: RHEL-17662


author: Brian C. Lane <bcl@redhat.com> - 3.32-1
changelog:
  - Conditionally BuildRequire coverage and sphinx for runtests (bcl)
    Resolves: rhbz#1916735
  - Change the lilo command removal to use RemovedCommand (vslavik)
  - Change the lilocheck command removal to use RemovedCommand (vslavik)
  - Fix test for the removed "interactive" command (vslavik)
  - Change the langsupport command removal to use RemovedCommand (vslavik)
  - Change the monitor command removal to use RemovedCommand (vslavik)
  - Change the mouse command removal to use RemovedCommand (vslavik)
  - Change the upgrade command removal to use RemovedCommand (vslavik)
  - Fix ksverdiff detection of removed commands (vslavik)
  - Check warnings of the deprecated kickstart commands (vponcova)
  - Remove the install command (vslavik)
  - Remove the deviceprobe command (vslavik)
  - Remove the device command (vslavik)
  - Remove the dmraid command (vslavik)
  - Remove the multipath command (vslavik)
  - Fix deprecation test for removed commands (vslavik)
  - Switch interactive removal to use RemovedCommand (bcl)
  - Add RemovedCommand for removing commands and documenting them (bcl)
  - Remove support for the updates command without an URL (vponcova)
  - Document how to deprecate commands and options (bcl)
  - Remove the ignoredisk --interactive option (vslavik)
  - Remove the partition --active option (vslavik)
  - Deprecate the %traceback section (vslavik)
  - Add missing .coveragerc file (bcl)
  - Switch to using GitHub Actions instead of Travis CI (bcl)
  - Add support for running via tox (bcl)
  - Deprecate the method command (vslavik)
  - Remove the bootloader option --upgrade (vslavik)


author: Lumír Balhar <lbalhar@redhat.com> - 1.6.3-1
changelog:
  - Remove .dist-info directory at the end of %pyproject_buildrequires
  - An incomplete .dist-info directory in $PWD can confuse tests in %check


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.0-1
changelog:
  - %pyproject_buildrequires: Redirect stdout to stderr via Shell
  - Dependencies are recorded to a text file that is catted at the end


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.0-1
changelog:
  - %pyproject_buildrequires: Add support for self-referential extras requirements
  - Deprecate the provisional %{pyproject_build_lib} macro
    See https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/HMLOPAU3RZLXD4BOJHTIPKI3I4U6U7OE/


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.1-1
changelog:
  - On Python older than 3.11, use tomli instead of deprecated toml
  - Fix literal % handling in %{pyproject_files} on RPM 4.19


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.2-1
changelog:
  - Update %pyproject_build_lib to support setuptools 62.1.0 and later
  - %pyproject_buildrequires: When extension modules are built,
    support https://fedoraproject.org/wiki/Changes/Package_information_on_ELF_objects


author: Python Maint <python-maint@redhat.com> - 1.4.0-1
changelog:
  - %pyproject_save_files: Support License-Files installed into the *Root License Directory* from PEP 369
  - %pyproject_check_import: Import only the modules whose top-level names
    match any of the globs provided to %pyproject_save_files


author: Miro Hrončok <mhroncok@redhat.com> - 3.9-44
changelog:
  - Set $RPM_BUILD_ROOT in %{python3_...} macros
    to allow selecting alternate sysconfig install scheme based on that variable


author: Karolina Surma <ksurma@redhat.com> - 3.9-45
changelog:
  - Introduce -f (read from file) option to %py{3}_check_import
  - Introduce -t (filter top-level modules) option to %py{3}_check_import
  - Introduce -e (exclude module globs) option to %py{3}_check_import


author: Karolina Surma <ksurma@redhat.com> - 3.9-46
changelog:
  - Fix multiline arguments processing for %py_check_import
  - Fix %py_shebang_flags handling within %py_check_import
  - Process .pth files in buildroot's sitedirs in %py_check_import
  - Move import_all_modules.py from python-srpm-macros to python-rpm-macros


author: Miro Hrončok <mhroncok@redhat.com> - 3.9-47
changelog:
  - Set %__python3 value according to %python3_pkgversion
    I.e. when %python3_pkgversion is 3.12, %__python3 is /usr/bin/python3.12


author: Tomas Orsava <torsava@redhat.com> - 3.9-49
changelog:
  - Add lua helper functions to make it possible to automatically generate
    Obsoletes tags
  - Modify the %py_provides macro to also generate Obsoletes tags on CentOS/RHEL
  - Resolves: rhbz#1990421


author: Tomas Orsava <torsava@redhat.com> - 3.9-51
changelog:
  - Add Obsoletes tags with the python39- prefix for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.19-1
changelog:
  - Update to 3.9.19
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix tests for XMLPullParser with Expat with fixed CVE
  Resolves: RHEL-33679, RHEL-33691


author: Tomas Orsava <torsava@redhat.com> - 0.10.1-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 1.4.3-12
changelog:
  - Subpackage python2-appdirs has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.5.0-18
changelog:
  - Subpackage python2-augeas has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Pino Toscano <ptoscano@redhat.com> - 0.5.0-20
changelog:
  - Backport upstream commit d93e1563add8c40450556b7d74520439ee792bd9 to fix
    the discovery of location in the test
  - Execute the tests at build time
  - Add a simple gating test to execute the test script, and make it gating for
    the python-augeas source


author: Packit <hello@packit.dev> - 0.19.6-1
changelog:
  - [packit] 0.19.6 upstream release
  - Resolves rhbz#2211521 Upstream tag: v0.19.6 Upstream commit: b83949d0


author: Tomas Popela <tpopela@redhat.com> - 1.20.1-1
changelog:
  - Update to 1.20.1
  - Resolves: rhbz#2016905
  - Ship python3-cairo-devel in CRB
  - Resolves: rhbz#2053665


author: Miro Hrončok <mhroncok@redhat.com> - 5.0.6-19
changelog:
  - Subpackage python2-configobj has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 3.4.7-1
changelog:
  - Update to 3.4.7
  - Remove dependency on python-cryptography-vectors package and use vectors
    directly from Github source tar ball. Related: rhbz#1952343


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-6
changelog:
  - Rebase to 36.0.1, related: rhbz#2059630, rhbz#2060787
  - OpenSSL 3.0 FIPS mode is now detected correctly, related: rhbz#2054785
  - Fix error check from EVP_PKEY_CTX_set_signature_md, related: rhbz#2060343
  - Block 3DES in FIPS mode, related: rhbz#2055209
  - Disable DSA tests in FIPS mode
  - Enable SHA1 signatures in test suite
  - Fix serialization of keyusage ext with no bits
  - Re-enable tests that are passing again


author: Vendula Poncova <vponcova@redhat.com> - 0.4-1
changelog:
  - Replace the error register with the error mapper (vponcova)
  - Propagate additional arguments for the client handler factory (vponcova)
  - Propagate additional arguments in the class AddressedMessageBus (vponcova)
  - Generate the documentation (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.0-1
changelog:
  - Fix the documentation (vponcova)
  - Fix minor typos (yurchor)
  - Enable Codecov (vponcova)
  - Test the documentation build (vponcova)
  - Extend the documentation (vponcova)
  - Add configuration files for Read the Docs and Conda (vponcova)
  - Fix all warnings from the generated documentation (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.1-1
changelog:
  - Include tests and examples in the source distribution (vponcova)
  - Fix the pylint warning signature-differs (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.2-1
changelog:
  - Replace ABC with ABCMeta (vponcova)
  - Fix typing tests (vponcova)
  - Run tests on the latest CentOS (vponcova)
  - Install sphinx from PyPI (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.3-1
changelog:
  - Document differences between dasbus and pydbus (vponcova)
  - Improve the support for interface proxies in the service identifier (vponcova)
  - Improve the support for interface proxies in the message bus (vponcova)
  - Test the interface proxies (vponcova)
  - Make the message bus of a service identifier accessible (vponcova)
  - Fix the testing environment for Fedora Rawhide (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.4-1
changelog:
  - Handle all errors of the DBus call (vponcova)
  - Fix tests for handling DBus errors on the server side (vponcova)
  - Run packit smoke tests for all Fedora (jkonecny)
  - Fix packit archive creation (jkonecny)
  - Add possibility to change setup.py arguments (jkonecny)


author: Bryan Gurney <bgurney@redhat.com> - 0.8-4
changelog:
  - Remove check test
  - Remove BuildRequires for python3-dbus and python3-into-dbus-python
  - Resolves: rhbz#1986608


author: Bryan Gurney <bgurney@redhat.com> - 0.04-4
changelog:
  - Remove check test
  - Remove Requires and BuildRequires for python3-pyparsing
  - Resolves: rhbz#1986574


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-2
changelog:
  - Fix Python configuration for ELN/RHEL 9
  - Rework bconds for Python now that there are no Fedoras left that should
    use Python2


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-6
changelog:
  - Fix boot time derivation for systems with no rtc (RhBug:2166444,2182157)
  - system-upgrade: Add --poweroff option to reboot subcommand (RhBug:2157844)
  - Doc update for reposync (RhBug:2132383,2182004)
  - reposync: Implement --safe-write-path option (RhBug:1898089,2203766)
  - Enable the leaves and show-leaves DNF plugins (RhBug:2134638)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-7
changelog:
  - Remove patch: "reposync: Implement --safe-write-path option (RhBug:1898089,2203766)" (RhBug:2207946)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-12
changelog:
  - Fix incorrect spanish translation file (RHEL-6394)
  - Fix for strange issue with binary garbage in smaps files (RHEL-6420, RhBug:2231923)


author: Petr Pisar <ppisar@redhat.com> - 4.3.0-14
changelog:
  - needs-restarting prefers to obtain a boot time from systemd to deal with
    RTCs running in local time (RHEL-14900)


author: Petr Pisar <ppisar@redhat.com> - 4.3.0-16
changelog:
  - Revert needs-restarting prefers to obtain a boot time from systemd to deal
    with RTCs running in local time (RHEL-39775)


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Bryan Gurney <bgurney@redhat.com> - 0.08-4
changelog:
  - Remove check test
  - Remove BuildRequires for python3-dbus-signature-pyparsing and python3-dbus
  - Resolves: rhbz#1986609


author: Christian Glombek <cglombek@redhat.com> - 6.2.1.2-0.git802688d
changelog:
  - Update to upstream v2.1.2
  - Remove systemctl enable calls, as this is now handled by Fedora presets
  - per the guidelines
  - Remove initiator name generation, as this is now handled by an init service
  - Install ghost lockfile and dir to /run instead of /var
  - Rebased/fixed up patches
  - Fixed macros in comments and comments after macros
  - Merged service-file-tweaks.patch and
  - improve-systemd-service-files-for-boot-session-handl.patch
  - into unit-file-tweaks.patch 
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1493296
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1729740
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1834509


author: Chris Leech <cleech@redhat.com> - 6.2.1.2-1.git13e7f58
changelog:
  - iscsiadm overflow regression when discovering many targets at once
  - check for invalid session id during stop connection
  - add ability to attempt target logins asynchronously


author: Chris Leech <cleech@redhat.com> - 6.2.1.9-18.gita65a472
changelog:
  - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
  - new meson build system, sync with fedora packaging


author: Miro Hrončok <mhroncok@redhat.com> - 1.10-18
changelog:
  - Subpackage python2-jsonpointer has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Bryan Gurney <bgurney@redhat.com> - 0.15-5
changelog:
  - Remove check test
  - Remove BuildRequires and Requires for python3-justbases
  - Resolves: rhbz#1986913


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-1
changelog:
  - Rebased to libvirt-python-8.5.0 (rhbz#2060316)
  - The rebase also fixes the following bugs:
      rhbz#2092752


author: Miro Hrončok <mhroncok@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.2
  - Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
  - Fixes: rhbz#1855415
  - Fixes: rhbz#1901634


author: Petr Viktorin <pviktori@redhat.com> - 1.1.4-1
changelog:
  - Update to version 1.1.4
  - Avoids test warnings on Python 3.10
    Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1907474


author: Martin Kolman <mkolman@redhat.com> - 0.48-1
changelog:
  - Merge pull request #23 from poncovka/master-decode_bytes (mkolman)
  - Handle bytes and strings from RPM (#1764642) (vponcova)


author: Martin Kolman <mkolman@redhat.com> - 0.49-1
changelog:
  - Merge pull request #31 from jkonecny12/master-fix-make-archive (mkolman)
  - Fix make archive command after pot file removal (jkonecny)
  - Merge pull request #29 from jkonecny12/master-weblate-support (jkonecny)
  - Add Readme with description and translation badge (jkonecny)
  - Add pot file to the git ignore (jkonecny)
  - Pause release when making bumpver to check and solve translations (jkonecny)
  - Remove unused PREFIX from Makefile (jkonecny)
  - Remove Zanata (jkonecny)
  - Push translations to our translation repository (jkonecny)
  - Download translations from Weblate (jkonecny)
  - Remove pot file (jkonecny)
  - Merge pull request #24 from M4rtinK/master-fix_zanata_client_detection_in_makefile (mkolman)
  - Fix Zanata client detection in Makefile (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.50-1
changelog:
  - Merge pull request #33 from mzidek-gh/master (mkolman)
  - dump: Use exception's type and value when calculating hash (mzidek)


author: Tomas Orsava <torsava@redhat.com> - 4.7.1-9
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Use the modern way of filtering Provides not to interfere with modern Python
    RPM generators
  - Related: rhbz#1990421


author: Tom Stellard <tstellar@redhat.com> - 4.6.8-3
changelog:
  - Use make_build macro instead of just make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Miro Hrončok <mhroncok@redhat.com> - 0.10.6-9
changelog:
  - Subpackage python2-netifaces has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-2
changelog:
  - Limit BuildRequires to necessary minimum in Red Hat Enterprise Linux
  - Skip pytest in Red Hat Enterprise Linux
  - Do not build -doc subpackage for Red Hat Enterprise Linux


author: Jakub Hrozek <jhrozek@redhat.com> - 3.1.0-1
changelog:
  - Resolves: rhbz#1922352 - python-oauthlib requires python-mock
  - Update to upstream 3.1.0
  - Gets rid of obsolete python-nose dependency
  - Nuke the python2/python3 conditionals, let's only support python3


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.0-2
changelog:
  - Remove the python3-oauthlib+signedtoken package
  - When building, skip tests that require jwt
  - Resolves: rhbz#1966407 - Drop python-jwt dependency from python-oauthlib


author: Jakub Hrozek <jhrozek@redhat.com> - 3.1.1-1
changelog:
  - Resolves: rhbz#1935433 - python-oauthlib implements and/or uses the
                             deprecated SHA1 algorithm by default


author: TomasHalman <thalman@redhat.com> - 3.1.1-3
changelog:
  - Remove RSA support
  - Remove build dependency on blinker
    Resolves: rhbz#1984046 - python-oauthlib depends on jwt for RSA


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-4
changelog:
  - Make the python-pip-wheel subpackage versioned (python3-pip-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-5
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Miro Hrončok <mhroncok@redhat.com> - 3.11-6
changelog:
  - Subpackage python2-ply has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Lokesh Mandvekar <lsm5@redhat.com> - 3:4.8.0.post1-1
changelog:
  - update to https://github.com/containers/podman-py/releases/tag/v4.8.0.post1
  - Related: Jira:RHEL-2112


author: Miro Hrončok <mhroncok@redhat.com> - 0.7.2-21
changelog:
  - Subpackage python2-prettytable has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomas Orsava <torsava@redhat.com> - 5.8.0-5
changelog:
  - Remove unnecessary test dependency on python3-mock
  - Remove unnecessary macro __provides_exclude_from


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.8.6-6
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Add manual Obsoletes for python39-psycopg2-doc
  - Related: rhbz#1990421


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Dominik Mierzejewski <rpm@greysector.net> - 0.26-1
changelog:
  - update to 0.26 (#1780153)
  - make main package archful to run tests on all arches
    (pythonN-pyelftools subpackages are still noarch)
  - run readelf tests on x86_64 only for now
  - rename binaries to conform to Python packaging guidelines
  - enable python3 subpackage for EPEL7
  - declare bundled old construct module instead of needlessly requiring it


author: Pavel Cahyna <pcahyna@redhat.com> - 1.5.29-1
changelog:
  - Updated to 1.5.29.
  - Avoid dependency on python-pbr, conditionalize docs build, to allow building in RHEL.
    Inspired by python-sushy.


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.4-1
changelog:
  - Use Decimal for Device.getSize() operations, return a
    float (#1801355)
  - Update the 'twine upload' line in the Makefile
  - Don't intentionally prohibit Python 2 usage (#67)
  - mips64 support


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.5-1
changelog:
  - Require at least libparted 3.3 and python 3.7 (dcantrell)
  - pedmodule.c: Fix partition enum flag handling (bcl)
  - Add support for chromeos_kernel and bls_boot partition flags (bcl)
  - Move exception declarations to _pedmodule.c (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.7-1
changelog:
  - Upgrade to pyparted-3.11.7 (BZ#1890443)
  - Set PY_SSIZE_T_CLEAN for the build (bcl)
  - add nvme support
  - Update RELEASE file to make last step be "make pypi" (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.12.0-1
changelog:
  - Patch pyparted to handle PED_DISK_TYPE_PARTITION_TYPE_ID for the
    msdos disk type and PED_DISK_TYPE_PARTITION_TYPE_UUID for the gpt
    label
    Resolves: rhbz#2103243


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.3-3
changelog:
  - Replace pypi_name macro with srcname
  - Update BR’s
  - Run the doctests
  - Build documentation in a new -doc subpackage


author: Miro Hrončok <mhroncok@redhat.com> - 0.17.3-7
changelog:
  - Don't BuildRequire python3-hypothesis and exclude affected tests from %check
  - Resolves: rhbz#1928125


author: Miro Hrončok <mhroncok@redhat.com> - 3.4-6
changelog:
  - Subpackage python2-pyserial has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Charalampos Stratakis <cstratak@redhat.com> - 6.2.2-2
changelog:
  - Disable tests and documentation generation on RHEL9 to avoid pulling in dependencies
  - Drop redundant build dependency on wcwidth (unused since 6.0.0rc1)


author: Tony Asleson <tasleson@redhat.com> - 0.14.6-6
changelog:
  - Fix build failure
    Bad source: /builddir/build/SOURCES/pywbem-0.14.6.tar.gz: No such file or directory


author: Miro Hrončok <mhroncok@redhat.com> - 0.26-8
changelog:
  - Subpackage python2-pyxdg has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 6.1-10
changelog:
  - Resolves: #1935839 Remove python-imaging build requirements for RHEL
  - Run unit tests during build


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.0-11
changelog:
  - Don't use SIGNATURE_RSA
  - Related: #1935433 - python-oauthlib implements and/or uses the deprecated
                        SHA1 algorithm by default


author: Paul Belanger <pabelanger@redhat.com> - 0.5.4-1
changelog:
  - Initial package.
  - Forked from https://fedora.pkgs.org/rawhide/fedora-x86_64/python3-resolvelib-0.5.5-2.fc35.noarch.rpm.html however
    downgraded to 0.5.4 due to 0.5.5 being yanked from pypi.


author: Miro Hrončok <mhroncok@redhat.com> - 12-1
changelog:
  - Disable the dist generators for Python 2
  - https://fedoraproject.org/wiki/Changes/Disable_Python_2_Dist_RPM_Generators_and_Freeze_Python_2_Macros


author: Tomas Orsava <torsava@redhat.com> - 12-2
changelog:
  - scripts/pythondistdeps: Switch from using pkg_resources to importlib.metadata
    for reading the egg/dist-info metadata
  - The script no longer requires setuptools but instead requires packaging


author: Tomas Orsava <torsava@redhat.com> - 12-4
changelog:
  - scripts/pythondistdeps: Treat extras names case-insensitively and always
    output them in lower case (#1936875)


author: Miro Hrončok <mhroncok@redhat.com> - 12-5.1
changelog:
  - Do not generate setuptools requirement for console_scripts on Python 3.10+
  - See https://fedoraproject.org/wiki/Changes/Reduce_dependencies_on_python3-setuptools


author: Miro Hrončok <mhroncok@redhat.com> - 12-6
changelog:
  - Get rid of distutils deprecation warning (by not using it)
  - The distutils module is deprecated in Python 3.10+
  - https://www.python.org/dev/peps/pep-0632/


author: Tomas Orsava <torsava@redhat.com> - 12-8
changelog:
  - From `python3-foo` packages automatically generate `python3.X-foo` Obsoletes
    tags on CentOS/RHEL
  - Resolves: rhbz#1990421


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Andrea Claudi <aclaudi@redhat.com> - [2.4.4-4.el9]
changelog:
  - Don't build scapy-doc package on rhel (Andrea Claudi) [1973720]
  - Enable gating test on RHEL9 (Jianwen Ji) [1974642]


author: Andrea Claudi <aclaudi@redhat.com> - 2.5.0-1.el9
changelog:
  - Don't package scapy tests (Andrea Claudi)
  - Fix scapy compliance with pep-0440 (Andrea Claudi) [2162667]
  - New version 2.5.0 (Andrea Claudi) [RHEL-657]


author: Packit Service <user-cont-team+packit-service@redhat.com> - 1.8-1
changelog:
  - New version - 1.8 (Jiri Konecny)
  - Add missing make command to spec file (Jiri Konecny)
  - Don't translate the prompt keys (Vendula Poncova)
  - Enable daily build for Anaconda-devel COPR repository (Jiri Konecny)
  - Use Fedora container registry instead of Dockerhub (Jiri Konecny)
  - Migrate COPR daily COPR builds to Packit (Jiri Konecny)
  - Test build on Fedora ELN (Jiri Konecny)
  - Remove packit get-current-action (Jiri Konecny)
  - Run tests in GitHub workflow (Martin Pitt)
  - Fix raise-missing-from (W0707) pylint warnings (Martin Pitt)
  - Fix pylint to check test code correctly (Jiri Konecny)
  - Use script to run unit tests (Jiri Konecny)
  - Use relative imports in tests (Jiri Konecny)
  - Change directory structure of unit tests (Jiri Konecny)
  - Fix documentation of _process_screen method (Jiri Konecny)
  - Fix pylint issues (Jiri Konecny)
  - Use pylint instead of pocketlint (Jiri Konecny)
  - Add coverage support (Jiri Konecny)
  - Make link to exmples directory in Readme (Jiri Konecny)
  - Fix homepage of the project in setup.py (Jiri Konecny)
  - Fix classifiers in setup.py (Jiri Konecny)
  - Add pypi-upload to Makefile (Jiri Konecny)
  - Use correct variant of the field (Jiri Konecny)
  - Propose Fedora update only to Fedora in development (Jiri Konecny)
  - Add upstream tag template to packit for releasing (Jiri Konecny)
  - Packit will download archive from Source0 if needed (Jiri Konecny)


author: Jiri Konecny <jkonecny@redhat.com> - 1.8.3-1
changelog:
  - Fix bumpver Makefile target (Jiri Konecny)
  - Add tests for UIScreen wide disabling of concurrency check (Jiri Konecny)
    Related: rhbz#2134889
  - Abstract registering signal handler in the InputHandler constructor (Jiri Konecny)
    Related: rhbz#2134889
  - Allow to disable concurrency check for all UIScreen inputs (Jiri Konecny)
    Resolves: rhbz#2134889
  - Add Makefile target for local container tests (Jiri Konecny)
  - Use localization from rhel-9 weblate translation component (Jiri Konecny)
  - Remove changelog from the upstream spec file (Jiri Konecny)
  - Fix spec file archive link (Jiri Konecny)
  - Include also documentation to the tarball (Jiri Konecny)
  - Rename doc directory to docs (Jiri Konecny)
  - Add explanations of what is included in the MANIFEST.in file (Jiri Konecny)
  - Update packit config to reflect new tag naming (Jiri Konecny)
  - Change tag name to just version (Jiri Konecny)
  - Fix GitHub workflow checkout (Jiri Konecny)
  - Switch to packit new fedora-latest alias (Jiri Konecny)
  - Disable duplicate-code in pylint test (Jiri Konecny)
  - Remove duplicate of code between event loops (Jiri Konecny)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Nils Philippsen <nils@tiptoe.de> - 1.4.32-1
changelog:
  - version 1.4.32
  - don't BR: python3-pytest-xdist on EL9
  - remove obsolete (no-op) tweak of setup.cfg


author: Sergio Correia <scorreia@redhat.com> - 1.4.37-3
changelog:
  - Remove obsolete cruft from the specfile, follow the packaging guidelines
  - Remove also extra packages we have no runtime dependencies for
    Related: rhbz#2084556


author: Jerry James <loganjerry@gmail.com> - 2020.3-4
changelog:
  - Fix cmake file installation (bz 1930389)
  - Allow use of RTM instructions when available
  - At upstream's suggestion, do not force ITT_NOTIFY support
  - Drop -fetchadd64 patch, only needed for forced ITT_NOTIFY support


author: Miro Hrončok <mhroncok@redhat.com> - 2.0.1-5
changelog:
  - Initial package for RHEL 9
  - Resolves: rhbz#2175213
  - Fedora+EPEL contributions by:
        Maxwell G <gotmax@e.email>
        Michel Alexandre Salim <salimma@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>


author: Jonathon Turel <jturel@gmail.com> 0.7.2-1
changelog:
  - Use DNF on RHEL (jturel@gmail.com)
  - Use PackageManager to determine kernel version (jturel@gmail.com)
  - Use subprocess to check process path arguments (jturel@gmail.com)
  - Find the right lxml version for Python 3.4 (jturel@gmail.com)
  - Update Vagrantfile to use Fedora 30 (jturel@gmail.com)
  - Ignore debug kernels when checking if kernel has been updated
    (jturel@gmail.com)
  - Add build dependency for nosetests (frostyx@email.cz)
  - Run tests within the %check phase (frostyx@email.cz)
  - Update fedora branches (frostyx@email.cz)


author: Jonathon Turel <jturel@gmail.com> 0.7.2-3
changelog:
  - Update tito releaser branches (frostyx@email.cz)
  - Not build for python2 package for Fedora anymore (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.4-1
changelog:
  - Fix list index out of range for ssh process names (frostyx@email.cz)
  - When there is no helper, it doesn't contain anything (frostyx@email.cz)
  - Fix wrong parameters number when upating an application objects
    (frostyx@email.cz)
  - Remove unnecessary string decoding (frostyx@email.cz)
  - Fix the missing dist in release (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.5-1
changelog:
  - Depend on python3-six instead of python3-future (frostyx@email.cz)
  - Drop beautifulsoup4 in favor of built-in xml.dom (frostyx@email.cz)
  - Drop nosetests dependency, use pytest instead (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.9-1
changelog:
  - Create /var/run/reboot-required file (frostyx@email.cz)
  - Recommend the correct command for restarting auditd (frostyx@email.cz)
  - Add python3-setuptools dependency (frostyx@email.cz)
  - Fix argument passed to print_helper() (ferdnyc@gmail.com)
  - Add similar software to the readme (frostyx@email.cz)
  - Update url references to point to tracer.readthedocs.io (dcampano@gmail.com)
  - Oracle Linux 8 uses dnf, too (suttner@atix.de)
  - Drop python-setuptools runtime dependency (frostyx@email.cz)
  - Fix Python DeprecationWarning: invalid escape sequence
    (jvanderwaa@redhat.com)
  - Add readthedocs configuration file (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 1.0-1
changelog:
  - Fix querying RPM files on EPEL7 (frostyx@email.cz)
  - Use backported lru_cache on EPEL7 (frostyx@email.cz)
  - Don't hang forever when executed via SSH (frostyx@email.cz)
  - Don't check if package is installed before listing its files
    (frostyx@email.cz)
  - Replace regexes where they are not needed (frostyx@email.cz)
  - Query all packages at once, its faster than one by one (frostyx@email.cz)
  - Cache some properties for a massive performance boost (frostyx@email.cz)
  - Refactor unnecessary condition (frostyx@email.cz)
  - Fix weird indentation (frostyx@email.cz)
  - Pass the whole application to the provided_by function, not just its name
    (frostyx@email.cz)
  - Stop using deprecated rpm.fi (frostyx@email.cz)
  - Attempt to fix readthedocs deprecation error (frostyx@email.cz)
  - More reliable check if /usr/lib/sysimage/dnf/ database should be used
    (frostyx@email.cz)


author: Artem Egorenkov <aegorenk@redhat.com> - 1.13.1-4
changelog:
  - Don't start unbound-anchor before unbound service if DISABLE_UNBOUND_ANCHOR
    environment variable equals to "yes"
  - Resolves: rhbz#1951923


author: Artem Egorenkov <aegorenk@redhat.com> - 1.13.1-5
changelog:
  - Option --enable-linux-ip-local-port-range added to use system configured port range for libunbound on Linux
  - Resolves: rhbz#1952814


author: Tomas Korbar <tkorbar@redhat.com> - 1.16.2-6
changelog:
  - Fix KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387
  - Fix Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868
  - Resolves: RHEL-25671
  - Resolves: RHEL-25643


author: Gerd Hoffmann <kraxel@redhat.com> - 1.6-1
changelog:
  - update to version 1.6
  - drop peutils
  - add man-pages
  - add tests sub-package
  - resolves: rhbz#2142608


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.9-1
changelog:
  - Rebase to 3.11.9
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix expat tests for the latest expat security release
  Resolves: RHEL-33677, RHEL-33689


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.5-1
changelog:
  - Rebase to 3.11.5
  - Security fixes for CVE-2023-40217 and CVE-2023-41105
  Resolves: RHEL-3045, RHEL-3269


author: Charalampos Stratakis <cstratak@redhat.com> - 1.0.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Carl George <carl@george.computer>
        Damien Ciabrini <dciabrin@redhat.com>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Itamar Reis Peixoto <itamar@ispbrasil.com.br>
        Julien Enselme <jujens@jujens.eu>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.15.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Joel Capitao <jcapitao@redhat.com>
        John Dulaney <jdulaney@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Parag Nemade <pnemade@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.1.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Gwyn Ciesla <limb@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 37.0.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Paul Wouters <pwouters@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Tom Prince <tom.prince@ualberta.net>


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <fale@redhat.com>
        Igor Raits <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jcollie@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomas Orsava <torsava@redhat.com> - 4.9.2-4
changelog:
  - Bring back the isoschematron submodule,
    but without the validation of the schema file itself
  - Resolves: RHEL-5570


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.23.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <sharkcz@fedoraproject.org>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <limburgher@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 22.3.1-1
changelog:
  - Initial package
  - Fedora contributions by:
      Bill Nottingham <notting@fedoraproject.org>
      Charalampos Stratakis <cstratak@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Jon Ciesla <limburgher@gmail.com>
      Karolina Surma <ksurma@redhat.com>
      Kevin Fenzi <kevin@fedoraproject.org>
      Kevin Kofler <Kevin@tigcc.ticalc.org>
      Luke Macken <lmacken@redhat.com>
      Lumir Balhar <lbalhar@redhat.com>
      Marcel Plch <mplch@redhat.com>
      Matej Stuchlik <mstuchli@redhat.com>
      Michal Cyprian <m.cyprian@gmail.com>
      Miro Hrončok <miro@hroncok.cz>
      Orion Poplawski <orion@cora.nwra.com>
      Pádraig Brady <P@draigBrady.com>
      Peter Halliday <hoangelos@fedoraproject.org>
      Petr Viktorin <pviktori@redhat.com>
      Robert Kuska <rkuska@redhat.com>
      Slavek Kabrda <bkabrda@redhat.com>
      Tim Flink <tflink@fedoraproject.org>
      Tomáš Hrnčiar <thrnciar@redhat.com>
      Tomas Orsava <torsava@redhat.com>
      Toshio Kuratomi <toshio@fedoraproject.org>
      Ville Skyttä <ville.skytta@iki.fi>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tom spot Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim GÜNDÜZ <devrim@fedoraproject.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.20-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.7.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Carl George <carl@george.computer>
        Charalampos Stratakis <cstratak@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Raphael Groner <raphgro@fedoraproject.org>
        Tim Orling <timothy.t.orling@linux.intel.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 6.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <ausil@fedoraproject.org>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.28.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Arun SAG <sagarun@gmail.com>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Rex Dieter <rdieter@math.unl.edu>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        yatinkarel <ykarel@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.8.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 65.5.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Haikel Guemar <hguemar@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Konstantin Ryabitsev <icon@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Petr Viktorin <pviktori@redhat.com>
        Pierre-Yves Chibon <pingou@pingoured.fr>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.16.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@nwra.com>
        Pádraig Brady <P@draigBrady.com>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        yatin <ykarel@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.26.12-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Anna Khaitovich <akhaitov@redhat.com>
        Arun S A G <sagarun@gmail.com>
        Carl George <carl@george.computer>
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lukas Slebodnik <lslebodn@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ralph Bean <rbean@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hoger <thoger@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        yatinkarel <ykarel@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 0.38.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.2-3
changelog:
  - Move all test modules to the python3-test package, namely:
     - __phello__
     - _xxsubinterpreters
     - xxlimited
     - xxlimited_35
     - xxsubtype


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.1.0-4
changelog:
  - Initial package
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Carl George <carl@george.computer>
        Damien Ciabrini <dciabrin@redhat.com>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Itamar Reis Peixoto <itamar@ispbrasil.com.br>
        Julien Enselme <jujens@jujens.eu>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.3.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Lumír Balhar <lbalhar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 41.0.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Paul Wouters <pwouters@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Tom Prince <tom.prince@twistedmatrix.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <me@fale.io>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jeff@ocjtech.us>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.24.4-2
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowitz@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 23.2.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Jon Ciesla <limburgher@gmail.com>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@fedoraproject.org>
        Kevin Kofler <Kevin@tigcc.ticalc.org>
        Luke Macken <lmacken@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <m.cyprian@gmail.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Pádraig Brady <P@draigBrady.com>
        Peter Halliday <hoangelos@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tim Flink <tflink@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <tomas.n@orsava.cz>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Ville Skyttä <ville.skytta@iki.fi>


author: Miro Hrončok <mhroncok@redhat.com> - 23.2.1-3
changelog:
  - Don't RPM Provide pip
  - Remove a superfluous RPM Conflict with python-pip
  - Allows to install python3.12-pip together with python3-pip


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11-22
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Rob Crittenden <rcritten@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tom spot Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.6-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim Gündüz <devrim@gunduz.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.20-13
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Rob Crittenden <rcritten@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 6.0.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.28.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Arun SAG <sagarun@gmail.com>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Rex Dieter <rdieter@math.unl.edu>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        yatinkarel <ykarel@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 68.2.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Konstantin Ryabitsev <icon@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Petr Viktorin <pviktori@redhat.com>
        Pierre-Yves Chibon <pingou@pingoured.fr>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.26.18-1
changelog:
  - Initial package
  - Fedora contributions by
        Adam Williamson <awilliam@redhat.com>
        Anna Khaitovich <akhaitov@redhat.com>
        Arun S A G <sagarun@gmail.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Carl George <carl@george.computer>
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lukas Slebodnik <lslebodn@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Ralph Bean <rbean@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hoger <thoger@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        yatinkarel <ykarel@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 0.41.2-1
changelog:
  - Initial package.
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>


author: Yan Vugenfirer <yvugenfi@redhat.com> 102.5.0
changelog:
  - Set version to 102.5.0
  - Bug 1972070 - RFE: Add Windows Server 2022 version support for mingw-qemu-ga


author: Yan Vugenfirer <yvugenfi@redhat.com> 102.6.0
changelog:
  - Set version to 102.6.0
  - BZ#1978859 - The qemu-ga-win build version in MSI is different between checking inside guest and qga command
  - BZ#1981302 - QGA version can't be upgrade directly without uninstalling old version


author: Yan Vugenfirer <yvugenfi@redhat.com> 102.9.0
changelog:
  - Set version to 102.9.0
  - BZ#2026167 - Add Windows11 version support for mingw-qemu-ga
  - Use mingw-glib2-2.70.1


author: Yan Vugenfirer <yvugenfi@redhat.com> 102.10.0
changelog:
  - Set version to 102.10.0
  - BZ#2026167 - Add Windows11 version support for mingw-qemu-ga
  - Dynamically link mingw-glib2 library


author: Konstantin Kostiuk <kkostiuk@redhat.com> 103.0.0
changelog:
  - Set version to 103.0.0
  - BZ#1992643 - Add mingw-qemu-ga-win package to CentOS stream
  - Rebase to qemu-6.2.0


author: Konstantin Kostiuk <kkostiuk@redhat.com> 104.0.0
changelog:
  - Set version to 104.0.0
  - BZ#2078384 - Rebase QEMU Guest Agent Windows to 7.0.0
  - Rebase to qemu-7.0.0


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-1
changelog:
  - Rebase to QEMU 9.0.0 [RHEL-28073]
  - Resolves: RHEL-28073
    (Rebase qemu-kvm to QEMU 9.0.0 for RHEL 9.5)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-2
changelog:
  - kvm-hw-arm-virt-Fix-spurious-call-to-arm_virt_compat_set.patch [RHEL-34945]
  - kvm-Revert-x86-rhel-9.4.0-machine-type-compat-fix.patch [RHEL-30362]
  - Resolves: RHEL-34945
    ([aarch64, kvm-unit-tests] all tests tagged as FAIL [qemu-kvm: GLib: g_ptr_array_add: assertion 'rarray' failed] )
  - Resolves: RHEL-30362
    (Check/fix machine type compatibility for QEMU 9.0.0 [x86_64][rhel-9.5.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-3
changelog:
  - kvm-nbd-server-do-not-poll-within-a-coroutine-context.patch [RHEL-33440]
  - kvm-nbd-server-Mark-negotiation-functions-as-coroutine_f.patch [RHEL-33440]
  - Resolves: RHEL-33440
    (Qemu hang when quit dst vm after storage migration(nbd+tls))


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-4
changelog:
  - kvm-qio-Inherit-follow_coroutine_ctx-across-TLS.patch [RHEL-33440]
  - kvm-iotests-test-NBD-TLS-iothread.patch [RHEL-33440]
  - kvm-virtio-gpu-fix-v2-migration.patch [RHEL-34621]
  - kvm-rhel-9.4.0-machine-type-compat-for-virtio-gpu-migrat.patch [RHEL-34621]
  - Resolves: RHEL-33440
    (Qemu hang when quit dst vm after storage migration(nbd+tls))
  - Resolves: RHEL-34621
    ([RHEL9.5.0][stable_guest_abi]Failed to migrate VM with (qemu) qemu-kvm: Missing section footer for 0000:00:01.0/virtio-gpu qemu-kvm: load of migration failed: Invalid argument)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-5
changelog:
  - kvm-linux-aio-add-IO_CMD_FDSYNC-command-support.patch [RHEL-42411]
  - kvm-Revert-monitor-use-aio_co_reschedule_self.patch [RHEL-34618 RHEL-38697]
  - kvm-aio-warn-about-iohandler_ctx-special-casing.patch [RHEL-34618 RHEL-38697]
  - kvm-block-crypto-create-ciphers-on-demand.patch [RHEL-36159]
  - kvm-crypto-block-drop-qcrypto_block_open-n_threads-argum.patch [RHEL-36159]
  - Resolves: RHEL-42411
    (qemu-kvm: linux-aio: add support for IO_CMD_FDSYNC command)
  - Resolves: RHEL-34618
    (aio=io_uring: Assertion failure `luringcb->co->ctx == s->aio_context' with block_resize)
  - Resolves: RHEL-38697
    (aio=native: Assertion failure `laiocb->co->ctx == laiocb->ctx->aio_context' with block_resize)
  - Resolves: RHEL-36159
    (qemu crash on Assertion `block->n_free_ciphers > 0' failed in guest installation with luks and iothread-vq-mapping)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-6
changelog:
  - kvm-qcow2-Don-t-open-data_file-with-BDRV_O_NO_IO.patch [RHEL-35611]
  - kvm-iotests-244-Don-t-store-data-file-with-protocol-in-i.patch [RHEL-35611]
  - kvm-iotests-270-Don-t-store-data-file-with-json-prefix-i.patch [RHEL-35611]
  - kvm-block-Parse-filenames-only-when-explicitly-requested.patch [RHEL-35611]
  - Resolves: RHEL-35611
    (CVE-2024-4467 qemu-kvm: QEMU: 'qemu-img info' leads to host file read/write [rhel-9.5])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-7
changelog:
  - kvm-hw-virtio-Fix-the-de-initialization-of-vhost-user-de.patch [RHEL-40708]
  - kvm-hw-arm-virt-Avoid-unexpected-warning-from-Linux-gues.patch [RHEL-39936]
  - Resolves: RHEL-40708
    ([RHEL9.5.0][virtio_fs][s390x] after hot-unplug the vhost-user-fs-ccw device, the device is failed to hot-plug again )
  - Resolves: RHEL-39936
    (ARCH_DMA_MINALIGN smaller than CTR_EL0.CWG (128 < 256) on FUJITSU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-8
changelog:
  - kvm-introduce-pc_rhel_9_5_compat.patch [RHEL-39544]
  - kvm-target-i386-add-guest-phys-bits-cpu-property.patch [RHEL-39544]
  - kvm-kvm-add-support-for-guest-physical-bits.patch [RHEL-39544]
  - kvm-i386-kvm-Move-architectural-CPUID-leaf-generation-to.patch [RHEL-39544]
  - kvm-target-i386-Introduce-Icelake-Server-v7-to-enable-TS.patch [RHEL-39544]
  - kvm-target-i386-Add-new-CPU-model-SierraForest.patch [RHEL-39544]
  - kvm-target-i386-Export-RFDS-bit-to-guests.patch [RHEL-39544]
  - kvm-pci-host-q35-Move-PAM-initialization-above-SMRAM-ini.patch [RHEL-39544]
  - kvm-q35-Introduce-smm_ranges-property-for-q35-pci-host.patch [RHEL-39544]
  - kvm-hw-i386-acpi-Set-PCAT_COMPAT-bit-only-when-pic-is-no.patch [RHEL-39544]
  - kvm-confidential-guest-support-Add-kvm_init-and-kvm_rese.patch [RHEL-39544]
  - kvm-i386-sev-Switch-to-use-confidential_guest_kvm_init.patch [RHEL-39544]
  - kvm-ppc-pef-switch-to-use-confidential_guest_kvm_init-re.patch [RHEL-39544]
  - kvm-s390-Switch-to-use-confidential_guest_kvm_init.patch [RHEL-39544]
  - kvm-scripts-update-linux-headers-Add-setup_data.h-to-imp.patch [RHEL-39544]
  - kvm-scripts-update-linux-headers-Add-bits.h-to-file-impo.patch [RHEL-39544]
  - kvm-linux-headers-update-to-current-kvm-next.patch [RHEL-39544]
  - kvm-runstate-skip-initial-CPU-reset-if-reset-is-not-actu.patch [RHEL-39544]
  - kvm-KVM-track-whether-guest-state-is-encrypted.patch [RHEL-39544]
  - kvm-KVM-remove-kvm_arch_cpu_check_are_resettable.patch [RHEL-39544]
  - kvm-target-i386-introduce-x86-confidential-guest.patch [RHEL-39544]
  - kvm-target-i386-Implement-mc-kvm_type-to-get-VM-type.patch [RHEL-39544]
  - kvm-target-i386-SEV-use-KVM_SEV_INIT2-if-possible.patch [RHEL-39544]
  - kvm-i386-sev-Add-legacy-vm-type-parameter-for-SEV-guest-.patch [RHEL-39544]
  - kvm-hw-i386-sev-Use-legacy-SEV-VM-types-for-older-machin.patch [RHEL-39544]
  - kvm-trace-kvm-Split-address-space-and-slot-id-in-trace_k.patch [RHEL-39544]
  - kvm-kvm-Introduce-support-for-memory_attributes.patch [RHEL-39544]
  - kvm-RAMBlock-Add-support-of-KVM-private-guest-memfd.patch [RHEL-39544]
  - kvm-kvm-Enable-KVM_SET_USER_MEMORY_REGION2-for-memslot.patch [RHEL-39544]
  - kvm-kvm-memory-Make-memory-type-private-by-default-if-it.patch [RHEL-39544]
  - kvm-HostMem-Add-mechanism-to-opt-in-kvm-guest-memfd-via-.patch [RHEL-39544]
  - kvm-RAMBlock-make-guest_memfd-require-uncoordinated-disc.patch [RHEL-39544]
  - kvm-physmem-Introduce-ram_block_discard_guest_memfd_rang.patch [RHEL-39544]
  - kvm-kvm-handle-KVM_EXIT_MEMORY_FAULT.patch [RHEL-39544]
  - kvm-kvm-tdx-Don-t-complain-when-converting-vMMIO-region-.patch [RHEL-39544]
  - kvm-kvm-tdx-Ignore-memory-conversion-to-shared-of-unassi.patch [RHEL-39544]
  - kvm-hw-i386-x86-Eliminate-two-if-statements-in-x86_bios_.patch [RHEL-39544]
  - kvm-hw-i386-Have-x86_bios_rom_init-take-X86MachineState-.patch [RHEL-39544]
  - kvm-hw-i386-pc_sysfw-Remove-unused-parameter-from-pc_isa.patch [RHEL-39544]
  - kvm-hw-i386-x86-Don-t-leak-isa-bios-memory-regions.patch [RHEL-39544]
  - kvm-hw-i386-x86-Don-t-leak-pc.bios-memory-region.patch [RHEL-39544]
  - kvm-hw-i386-x86-Extract-x86_isa_bios_init-from-x86_bios_.patch [RHEL-39544]
  - kvm-hw-i386-pc_sysfw-Alias-rather-than-copy-isa-bios-reg.patch [RHEL-39544]
  - kvm-i386-correctly-select-code-in-hw-i386-that-depends-o.patch [RHEL-39544]
  - kvm-i386-pc-remove-unnecessary-MachineClass-overrides.patch [RHEL-39544]
  - kvm-hw-i386-split-x86.c-in-multiple-parts.patch [RHEL-39544]
  - kvm-scripts-update-linux-header.sh-be-more-src-tree-frie.patch [RHEL-39544]
  - kvm-scripts-update-linux-headers.sh-Remove-temporary-dir.patch [RHEL-39544]
  - kvm-scripts-update-linux-headers.sh-Fix-the-path-of-setu.patch [RHEL-39544]
  - kvm-update-linux-headers-fix-forwarding-to-asm-generic-h.patch [RHEL-39544]
  - kvm-update-linux-headers-move-pvpanic.h-to-correct-direc.patch [RHEL-39544]
  - kvm-linux-headers-Update-to-current-kvm-next.patch [RHEL-39544]
  - kvm-update-linux-headers-import-linux-kvm_para.h-header.patch [RHEL-39544]
  - kvm-machine-allow-early-use-of-machine_require_guest_mem.patch [RHEL-39544]
  - kvm-i386-sev-Replace-error_report-with-error_setg.patch [RHEL-39544]
  - kvm-i386-sev-Introduce-sev-common-type-to-encapsulate-co.patch [RHEL-39544]
  - kvm-i386-sev-Move-sev_launch_update-to-separate-class-me.patch [RHEL-39544]
  - kvm-i386-sev-Move-sev_launch_finish-to-separate-class-me.patch [RHEL-39544]
  - kvm-i386-sev-Introduce-sev-snp-guest-object.patch [RHEL-39544]
  - kvm-i386-sev-Add-a-sev_snp_enabled-helper.patch [RHEL-39544]
  - kvm-i386-sev-Add-sev_kvm_init-override-for-SEV-class.patch [RHEL-39544]
  - kvm-i386-sev-Add-snp_kvm_init-override-for-SNP-class.patch [RHEL-39544]
  - kvm-i386-cpu-Set-SEV-SNP-CPUID-bit-when-SNP-enabled.patch [RHEL-39544]
  - kvm-i386-sev-Don-t-return-launch-measurements-for-SEV-SN.patch [RHEL-39544]
  - kvm-i386-sev-Add-a-class-method-to-determine-KVM-VM-type.patch [RHEL-39544]
  - kvm-i386-sev-Update-query-sev-QAPI-format-to-handle-SEV-.patch [RHEL-39544]
  - kvm-i386-sev-Add-the-SNP-launch-start-context.patch [RHEL-39544]
  - kvm-i386-sev-Add-handling-to-encrypt-finalize-guest-laun.patch [RHEL-39544]
  - kvm-i386-sev-Set-CPU-state-to-protected-once-SNP-guest-p.patch [RHEL-39544]
  - kvm-hw-i386-sev-Add-function-to-get-SEV-metadata-from-OV.patch [RHEL-39544]
  - kvm-i386-sev-Add-support-for-populating-OVMF-metadata-pa.patch [RHEL-39544]
  - kvm-i386-sev-Add-support-for-SNP-CPUID-validation.patch [RHEL-39544]
  - kvm-hw-i386-sev-Add-support-to-encrypt-BIOS-when-SEV-SNP.patch [RHEL-39544]
  - kvm-i386-sev-Invoke-launch_updata_data-for-SEV-class.patch [RHEL-39544]
  - kvm-i386-sev-Invoke-launch_updata_data-for-SNP-class.patch [RHEL-39544]
  - kvm-i386-kvm-Add-KVM_EXIT_HYPERCALL-handling-for-KVM_HC_.patch [RHEL-39544]
  - kvm-i386-sev-Enable-KVM_HC_MAP_GPA_RANGE-hcall-for-SNP-g.patch [RHEL-39544]
  - kvm-i386-sev-Extract-build_kernel_loader_hashes.patch [RHEL-39544]
  - kvm-i386-sev-Reorder-struct-declarations.patch [RHEL-39544]
  - kvm-i386-sev-Allow-measured-direct-kernel-boot-on-SNP.patch [RHEL-39544]
  - kvm-memory-Introduce-memory_region_init_ram_guest_memfd.patch [RHEL-39544]
  - kvm-hw-i386-sev-Use-guest_memfd-for-legacy-ROMs.patch [RHEL-39544]
  - kvm-hw-i386-Add-support-for-loading-BIOS-using-guest_mem.patch [RHEL-39544]
  - kvm-i386-sev-fix-unreachable-code-coverity-issue.patch [RHEL-39544]
  - kvm-i386-sev-Move-SEV_COMMON-null-check-before-dereferen.patch [RHEL-39544]
  - kvm-i386-sev-Return-when-sev_common-is-null.patch [RHEL-39544]
  - kvm-target-i386-SEV-fix-formatting-of-CPUID-mismatch-mes.patch [RHEL-39544]
  - kvm-i386-sev-Fix-error-message-in-sev_get_capabilities.patch [RHEL-39544]
  - kvm-i386-sev-Fallback-to-the-default-SEV-device-if-none-.patch [RHEL-39544]
  - kvm-i386-sev-Don-t-allow-automatic-fallback-to-legacy-KV.patch [RHEL-39544]
  - kvm-target-i386-SEV-fix-mismatch-in-vcek-disabled-proper.patch [RHEL-39544]
  - kvm-virtio-rng-block-max-bytes-0.patch [RHEL-50336]
  - kvm-scsi-disk-Use-positive-return-value-for-status-in-dm.patch [RHEL-50000]
  - kvm-scsi-block-Don-t-skip-callback-for-sgio-error-status.patch [RHEL-50000]
  - kvm-scsi-disk-Add-warning-comments-that-host_status-erro.patch [RHEL-50000]
  - kvm-scsi-disk-Always-report-RESERVATION_CONFLICT-to-gues.patch [RHEL-50000]
  - kvm-nbd-server-Plumb-in-new-args-to-nbd_client_add.patch [RHEL-52617]
  - kvm-nbd-server-CVE-2024-7409-Cap-default-max-connections.patch [RHEL-52617]
  - kvm-nbd-server-CVE-2024-7409-Drop-non-negotiating-client.patch [RHEL-52617]
  - kvm-nbd-server-CVE-2024-7409-Close-stray-clients-at-serv.patch [RHEL-52617]
  - Resolves: RHEL-39544
    ([QEMU] Add support for AMD SEV-SNP to Qemu)
  - Resolves: RHEL-50336
    (Fail to boot up the guest including vtpm and virtio-rng (max-bytes=0) devices)
  - Resolves: RHEL-50000
    (scsi-block: Cannot setup Windows Failover Cluster, qemu crashes on assert)
  - Resolves: RHEL-52617
    (CVE-2024-7409 qemu-kvm: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure [rhel-9.5])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-9
changelog:
  - kvm-qemu-guest-agent-Update-the-logfile-path-of-qga-fsfr.patch [RHEL-52250]
  - Resolves: RHEL-52250
    (fsfreeze hooks break on the systems first restorecon)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-10
changelog:
  - kvm-nbd-server-CVE-2024-7409-Avoid-use-after-free-when-c.patch [RHEL-52617]
  - Resolves: RHEL-52617
    (CVE-2024-7409 qemu-kvm: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure [rhel-9.5])


author: Miroslav Rezanina <mrezanin@redhat.com> - 8.2.0-9
changelog:
  - kvm-mirror-Don-t-call-job_pause_point-under-graph-lock.patch [RHEL-28125]
  - kvm-nbd-server-Fix-race-in-draining-the-export.patch [RHEL-28125]
  - kvm-iotests-Add-test-for-reset-AioContext-switches-with-.patch [RHEL-28125]
  - kvm-pc-smbios-fixup-manufacturer-product-version-to-matc.patch [RHEL-21705]
  - Resolves: RHEL-28125
    (RHEL9.4 - KVM : Live migration of guest with multiple qcow devices remains incomplete.)
  - Resolves: RHEL-21705
    (pc-q35-rhel9.4.0 does not provide proper computer information)


author: Miroslav Rezanina <mrezanin@redhat.com> - 8.2.0-10
changelog:
  - kvm-chardev-lower-priority-of-the-HUP-GSource-in-socket-.patch [RHEL-24614]
  - kvm-Revert-chardev-char-socket-Fix-TLS-io-channels-sendi.patch [RHEL-24614]
  - kvm-Revert-chardev-use-a-child-source-for-qio-input-sour.patch [RHEL-24614]
  - Resolves: RHEL-24614
    ([RHEL9][chardev] qemu hit core dump while using TLS server from host to guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - 8.2.0-11
changelog:
  - kvm-coroutine-cap-per-thread-local-pool-size.patch [RHEL-28947]
  - kvm-coroutine-reserve-5-000-mappings.patch [RHEL-28947]
  - Resolves: RHEL-28947
    (Qemu crashing with "failed to set up stack guard page: Cannot allocate memory")


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-4
changelog:
  - Rebuild (LLVM-15)
    Resolves: bz#2119003

  - Add versioned dependencies between subpackages
    Resolves: bz#2088352


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-4
changelog:
  - Fix specific overflow in qtextlayout
  - Fix incorrect parsing of the strict-transport-security (HSTS) header
  - Fix buffer over-read via a crafted reply from a DNS server
    Resolves: bz#2209492


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-5
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-6
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410) (version #2)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-27
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch patches
    - validate configure results (base, egl-x11)

    Resolves: bz#2014991


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-9
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch fixes
    - pull in candidate fix QTBUG-83890
    Resolves: bz#1988934


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-10
changelog:
  - Sync spec changes and downstream patches from RHEL 8 rear-2.6-2
    - Fix multipath performance regression in 2.6, introduced by upstream PR #2299.
      Resolves: rhbz1993296
    - On POWER add bootlist & ofpathname to the list of required programs
      conditionally (bootlist only if running under PowerVM, ofpathname
      always except on PowerNV) - upstream PR2665, add them to package
      dependencies
      Resolves: rhbz1983013
    - Backport PR2608:
      Fix setting boot path in case of UEFI partition (ESP) on MD RAID
      Resolves: rhbz1945869
    - Backport PR2625
      Prevents accidental backup removal in case of errors
      Resolves: rhbz1958247
    - Fix rsync error and option handling
      Resolves: rhbz1930662


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-11
changelog:
  - Apply PR2675 to fix leftover temp dir bug (introduced in backported PR2625)
  - Apply PR2603 to ignore unused PV devices
  - Apply upstream PR2750 to avoid exclusion of wanted multipath devices
  - Remove unneeded xorriso dep on s390x (no ISO image support there)
  - Apply upstream PR2736 to add the EXCLUDE_{IP_ADDRESSES,NETWORK_INTERFACES}
    options
  - Add patch for better handling of thin pools and other LV types not supported
    by vgcfgrestore


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-12
changelog:
  - Apply PR2795 to detect changes in system files between backup
    and rescue image
  - Apply PR2808 to exclude dev/watchdog* from recovery system
  - Backport upstream PRs 2827 and 2839 to pass -y to lvcreate instead of one "y"
    on stdin
  - Apply PR2811 to add the PRE/POST_RECOVERY_COMMANDS directives
  - Recommend dosfstools on x86_64, needed for EFI System Partition
  - Backport PR2825 to replace defunct mkinitrd with dracut
  - Apply PR2580 to load the nvram module in the rescue environment in order
    to be able to set the boot order on ppc64le LPARs
  - Backport PR2822 to include the true vi executable in rescue ramdisk


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-16
changelog:
  - Apply PR2903 to protect against colons in pvdisplay output
  - Apply PR2873 to fix initrd regeneration on s390x
  - Apply PR2431 to migrate XFS configuration files


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-18
changelog:
  - Add patch to start rsyslog and include NBU systemd units
  - Apply PR 3027 to ensure correct creation of the rescue environment
    when a file is shrinking while being read
  - Backport PR 2774 to increase USB_UEFI_PART_SIZE to 1024 MiB
  - Apply upstream patch for temp dir usage with LUKS to ensure
    that during recovery an encrypted disk can be unlocked using a keyfile
  - Backport upstream PR 3031: Secure Boot support for OUTPUT=USB
  - Correct a mistake done when backporting PR 2691


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-19
changelog:
  - Add patch to force removal of lvmdevices, prevents LVM problems after
    restoring to different disks/cloning. Upstream PR 3043


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-20
changelog:
  - Backport PR 3061 to save LVM pool metadata volume size in disk layout
    and restore it
  - Backport PR 3058 to skip useless xfs mount options when mounting
    during recovery, prevents mount errors like "logbuf size must be greater
    than or equal to log stripe size"


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-21
changelog:
  - Support saving and restoring hybrid BIOS/UEFI bootloader, PRs 3145 3136
  - make initrd accessible only by root (CVE-2024-23301), PR 3123


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-22
changelog:
  - Do not delete NetBackup logs in case of errors and save
    /usr/openv/netbackup/logs to the restored system after a successful recovery
  - Add /usr/openv/var to COPY_AS_IS_NBU, fixes an issue seen
    with NetBackup 10.2.0.1


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-23
changelog:
  - Resolve libs for executable links in COPY_AS_IS, PR 3073
  - Skip invalid disk drives when saving layout PR 3047


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-24
changelog:
  - Support "export TMPDIR" in user configuration again, print a warning
    when this is used - revert commit f464eae2, adapt PR 3163, add commit
    b422845f.
    Will be supported only until the update to 2.7


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-25
changelog:
  - Backport PR 3250 to fix useless warning that libsystemd-core requires
    additional libraries and ReaR recovery system needs additional libraries
  - Backport PR 3242 to fix IPv6 address in nfs:// and sshfs:// BACKUP/OUTPUT_URL
  - Backport PR 2576 to remove obsolete FAT16 options to avoid kernel warning


author: Nick Clifton <nickc@redhat.com> - 196-1
changelog:
  - Pass "--remove section .gnu.build.attributes" to the find-debuginfo script.
  - Resolves: rhbz#2099613


author: Michal Domonkos <mdomonko@redhat.com> - 208-1
changelog:
  - brp-mangle-shebangs: Strip env flags when mangling shebangs (RHEL-26961)
  - Fix automatic soname requires on non-versioned symlink targets (RHEL-28767)


author: Remi Collet <remi@remirepo.net> - 7.0.10-2
changelog:
  - fix modules directory ownership and permissions #2176173
  - drop redis-shutdown helper and rely on systemd #2181181


author: Alba Hita Catala <ahitacat@redhat.com> - 0.2.4-1
changelog:
  - Configure proxy for http connections (RHBZ#2227018)
  - Failling to get system profile is not an error but a warning (RHBZ#2227012)
  - Prevent message content being logged at any level (RHBZ#2227010)
  - Added bash completion (RHBZ#2145198)


author: Link Dupont <link@redhat.com> - 0.2.4-5
changelog:
  - Update embedded yggdrasil-worker-package-manager to 0.1.3 (RHEL-17179)
  - Update embedded yggdrasil to 0.2.4 (RHEL-17179)


author: Rich Megginson <rmeggins@redhat.com> - 1.77.0-0.1
changelog:
  - Resolves: RHEL-18075 :  - package rhel-system-roles.noarch does not provide docs for ansible-doc
  - Resolves: RHEL-33532 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - Utilization Support
  - Resolves: RHEL-33076 : ha_cluster - Fix inconsistent approach for multiple `attributes.attrs` in `ha_cluster_node_options`
  - Resolves: RHEL-32872 : network - Fix testing Failures due to connection.autoconnect-ports Unknown Property
  - Resolves: RHEL-33547 : podman - feat: manage TLS cert/key files for registry connections and validate certs
  - Resolves: RHEL-30185 : podman - podman role should support default credentials and per-unit credentials
  - Resolves: RHEL-30183 : podman - podman role should support containers-auth.json
  - Resolves: RHEL-25777 : storage - rhel-system-role.storage is not idempotent


author: Sergei Petrosian <spetrosi@redhat.com> - 1.79.0-0.1
changelog:
  - Resolves: RHEL-35561 : logging - Setup imuxsock using rhel-system-roles.logging causing an error
  - Resolves: RHEL-37549 : sudo - Add sudo system role


author: Rich Megginson <rmeggins@redhat.com> - 1.79.0-0.2
changelog:
  - Resolves: RHEL-39996 : bootloader - Set user.cfg path to /boot/grub2/ on EL 9 UEFI
  - Resolves: RHEL-35561 : logging - Setup imuxsock using rhel-system-roles.logging causing an error
    fix test
  - Resolves: RHEL-40761 : podman - fix: grab name of network to remove from quadlet file
  - Resolves: RHEL-39438 : podman - Create podman secret when skip_existing=True and it does not exist
  - Resolves: RHEL-40180 : ssh - Add new configuration options and remove false positives in the test
  - Resolves: RHEL-31854 : storage - [RFE] manage stratis
  - Resolves: RHEL-25777 : storage - rhel-system-role.storage is not idempotent
  - Resolves: RHEL-14862 : storage - [RHEL9][RFE] resize LVM PVs
  - Resolves: RHEL-25994 : storage - var unused_disks get different sector size disks


author: Rich Megginson <rmeggins@redhat.com> - 1.79.0-0.3
changelog:
  - add patch for https://github.com/containers/ansible-podman-collections/pull/784
    this is blocking gating tests


author: Rich Megginson <rmeggins@redhat.com> - 1.82.0-0.1
changelog:
  - Resolves: RHEL-41090 : cockpit - cockpit install all wildcard match does not work in newer el9
  - Resolves: RHEL-45717 : nbde_client - feat: Allow initrd configuration to be skipped
  - Implements meta/main.yml el10 support in most roles


author: Rich Megginson <rmeggins@redhat.com> - 1.83.0-0.1
changelog:
  - Resolves: RHEL-46854 : postfix - feat: Added postfix_files feature as a simple means to add extra files/maps to config
  - Resolves: RHEL-48227 : snapshot - feat: rewrite snapshot.py as an Ansible module / add support for thin origins


author: Rich Megginson <rmeggins@redhat.com> - 1.84.1-0.1
changelog:
  - Resolves: RHEL-46590 : logging - RFE - system-roles - logging: Add truncate options for local file inputs
  - Resolves: RHEL-40273 : logging - redhat.rhel_system_roles.logging role fails to process logging_outputs: of type: "custom"
  - Resolves: RHEL-34935 : logging - [RFE] Add the umask settings or enable a variable in linux-system-roles.logging
  - Resolves: RHEL-50102 : podman - fix: proper cleanup for networks; ensure cleanup of resources
  - Resolves: RHEL-30888 : storage - Fingerprint storage RHEL System Role managed config files


author: Rich Megginson <rmeggins@redhat.com> - 1.85.0-0.1
changelog:
  - Resolves: RHEL-49596 : ha_cluster - alerts support
  - other fixes for el10 support
  - add timesync_provider.sh side car doc for Automation Hub rendering issue


author: Rich Megginson <rmeggins@redhat.com> - 1.86.0-0.1
changelog:
  - Resolves: RHEL-53896 : kernel_settings - fix: Use tuned files instead of using it as a module
  - Resolves: RHEL-3252 : network - support route src parameter
  - Resolves: RHEL-53902 : rhc - fix: drop usage of "auto_attach" of the "redhat_subscription" module


author: Rich Megginson <rmeggins@redhat.com> - 1.87.0-0.1
changelog:
  - Resolves: RHEL-48227 : snapshot - feat: rewrite snapshot.py as an Ansible module / add support for thin origins
  - some test fixes in snapshot, network


author: Rich Megginson <rmeggins@redhat.com> - 1.87.1-0.1
changelog:
  - Resolves: RHEL-30888 : storage - Fingerprint storage RHEL System Role managed config files
  - s390x issue fix requires fix for architecture fact


author: Rich Megginson <rmeggins@redhat.com> - 1.87.2-0.1
changelog:
  - Resolves: RHEL-50825 : System Roles: No module documentation
  - Fix storage role tests_lvm_pool_pv_grow issue with pvcreate hang on el7
  - podman - skip quadlet tests on non-x86_64 arch
  - journald - fix the test pattern that looks for the max size
  - network - fix the bond tests issue with firewall
  - sshd - add new parameters for openssh 9.8


author: Rich Megginson <rmeggins@redhat.com> - 1.88.0-0.1
changelog:
  - Resolves: RHEL-55295 : ha_cluster - Fixes for new pcs and ansible
  - fix gather_facts issue with fapolicyd
  - fix gather_facts issue with ha_cluster
  - fix bond test firewall issue with network


author: Rich Megginson <rmeggins@redhat.com> - 1.88.2-0.1
changelog:
  - Resolves: RHEL-55295 : ha_cluster - Fixes for new pcs and ansible
  - several fixes for ostree issues


author: Rich Megginson <rmeggins@redhat.com> - 1.88.4-0.1
changelog:
  - Resolves: RHEL-53896 : kernel_settings - fix: Use tuned files instead of using it as a module
  - recent tuned in el9 changed the profile directory back to the old one
  - so had to change the role to detect directory


author: Rich Megginson <rmeggins@redhat.com> - 1.88.7-0.1
changelog:
  - Resolves: RHEL-56626 : podman - fails to configure and run containers with podman rootless using different username and groupname
  - fapolicyd - fix method used to read from journald to determine when daemon is listening
  - storage - fix tests to use blkid instead of lsblk to get partition table
  - storage - skip stratis tests on el8
  - logging - tests_combination.yml needs fact gathering


author: Rich Megginson <rmeggins@redhat.com> - 1.88.7-0.2
changelog:
  - Resolves: RHEL-56626 : podman - fails to configure and run containers with podman rootless using different username and groupname
  - fapolicyd - fix method used to read from journald to determine when daemon is listening
  - storage - fix tests to use blkid instead of lsblk to get partition table
  - storage - skip stratis tests on el8
  - logging - tests_combination.yml needs fact gathering
  - same as 1.88.7-0.1 but needed to bump N-V-R and rebuild for exception


author: Rich Megginson <rmeggins@redhat.com> - 1.88.8-0.1
changelog:
  - Resolves: RHEL-56626 : podman - fails to configure and run containers with podman rootless using different username and groupname
  - podman - previous fix broke ansible 2.9 + el8 with volume cleanup
  - logging - test issue with imuxsock and journald - restart dbus-broker


author: Rich Megginson <rmeggins@redhat.com> - 1.88.9-0.1
changelog:
  - Resolves: RHEL-56626 : podman - fails to configure and run containers with podman rootless using different username and groupname
  - logging - test issue with imuxsock and loginctl used by podman - restart systemd-logind to fix podman tests
  - updates collection README for new Automation Hub format


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-20
changelog:
  - Add bcond macros (#2129060)
  - Fix db queries with carets (#2129468)
  - Remove spurious Python rpm module (#2135731)
  - Handle SELinux log messages (#2123719)
  - Add --nocompression to rpm2archive (#2150804)


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-25
changelog:
  - Followup on #2166383
  - Add compat scripts calling external find-debug, sepdebugcrcfix and debugedit
  - Add %__find_debuginfo macro


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-26
changelog:
  - Backport file handling code from rpm-4.19 to fix CVE-2021-35937,
    CVE-2021-35938 and CVE-2021-35939


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-27
changelog:
  - Fix short circuiting of version strings in expressions (RHEL-15688)
  - Fix description of whatconflicts in the man page (RHEL-6303)
  - Expose and document rpmdb --verifydb operation (RHEL-14591)
  - Fixes to the file handling backport


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-29
changelog:
  - Actually add --verifydb to the man page (RHEL-14591)
  - Don't warn about missing user/group on skipped files (RHEL-18037)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-30
changelog:
  - Don't segfault on missing priority tag (RHEL-35249)
  - Use unsigned integers for buildtime too for Y2K38 safety (RHEL-22602)
  - Rebuild against libimaevm.so.4 (RHEL-32505)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-31
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-22604)
  - Fix potential use of uninitialized pgp struct (RHEL-22605)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)
  - Add SourceLicense tag to spec syntax (RHEL-28798)
  - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-33
changelog:
  - Fix root relocation regression (RHEL-28967)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-35
changelog:
  - Fix %patch N applying Patch0 implicitly (RHEL-6294)
  - Issue deprecation warning for number-less %patch (RHEL-6294)


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2024.3-1
changelog:
  - https://github.com/coreos/rpm-ostree/releases/tag/v2024.3
    Backport https://github.com/coreos/rpm-ostree/commit/fe586621e5014d14f92b913338171a02ed29e6cc
    Resolves: #RHEL-26186


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2024.5-1
changelog:
  - Rebase to 2024.5
    Adds fix for https://github.com/coreos/rpm-ostree/security/advisories/GHSA-2m76-cwhg-7wv6
    Resolves: #RHEL-30415


author: Michal Domonkos <mdomonko@redhat.com> - 9.3-5
changelog:
  - Drop progressbar2 dependency and bundle a tiny replacement (#1927784)
  - Drop fakeroot dependency and qa-robot scripts (#1905465)


author: Miro Hrončok <mhroncok@redhat.com> - 1.11-10
changelog:
  - Don't use the %python_sitelib macro, because it errors
  - See https://fedoraproject.org/wiki/Changes/PythonMacroError


author: Liming Sun <lsun@mellanox.com> - 2.0.2-1
changelog:
  - Remove unnecessary dependency in .spec and use make_build
  - Add package build for debian/ubuntu
  - Fix some format in the man page
  - Add check for syslog headers


author: Liming Sun <lsun@mellanox.com> - 2.0.3-1
changelog:
  - Enable pci device during probing
  - Map the pci resource0 file instead of /dev/mem
  - Add copyright header in bootstrap.sh
  - Add 'Requires' tag check in the rpm .spec for kernel-modules-extra
  - Fix the 'rshim --version' output


author: Liming Sun <lsun@mellanox.com> - 2.0.4-1
changelog:
  - Update .spec file according to review comments
  - Fix the 'KillMode' in rshim.service
  - Support process termination by SIGTERM
  - Fix some compiling warnings and configure issue for FreeBSD
  - Fix a read()/write() issue in rshim_pcie.c caused by optimization


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-1
changelog:
  - Update user-space rshim driver source to version 2.0.5
  - Modify rshim.spec accordingly
  - Switch to %autosetup to handle Patch0 and any future patches
  - Resolves: rhbz#1858577


author: Dean Nelson <dnelson@redhat.com> - 2.0.8-1
changelog:
  - Update user-space rshim driver source to version 2.0.8
  - Modify rshim.spec accordingly
  - Resolves: rhbz#2196626


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-7
changelog:
  - Resolves: #1955008 - rsync segfaults in --append mode when file on sender is large (> 2GB) and gets truncated


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-17
changelog:
  - Resolves: #2116669 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-109
changelog:
  - Make rsyslog-relp require librelp>= 1.9.0
    resolves: rhbz#2124440
  - Reorder logrotate parameters to work with POSIXLY_CORRECT env var
    resolves: rhbz#2124488


author: Attila Lakatos <alakatos@redhat.com> -8.2102.0-110
changelog:
  - Do not preserve capabilities when changing credentials
    resolves: rhbz#2169748
  - Remove unnecessary capability CAP_PERFMON
  - Add CAP_DAC_OVERRIDE to bypass file read and write permission checks
    resolves: rhbz#2158659


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-114
changelog:
  - Fix wrong type conversion in cstrLen()
    resolves: rhbz#2157805
  - imjournal: by default retrieves _PID from journal as PID number
    resolves: rhbz#2176397
  - Systemd service file hardening
    resolves: rhbz#2176403
  - rsyslog.conf: load imuxsock and imjournal before loading rsyslog.d
    resolves: rhbz#2165899
  - rsyslog is now started after the network service during boot
    resolves: rhbz#2074318
  - imjournal: add second fallback to the message identifier
    resolves: rhbv#2129015


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-115
changelog:
  - omelasticsearch: make compatible with elasticsearch>=8
  - add new action specific parameter esversion.major
    resolves: rhbz#2209017


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-116
changelog:
  - libcapng: do not try to drop capabilities that are not present
  - add global libcapng.default to not abort when libcapng fails
    resolves: rhbz#2216919


author: Attila Lakatos <alakatos@redhat.com> - 8.2310.0-3
changelog:
  - Rebase to 8.2310.0
    Resolves: RHEL-5196
  - Allow setting certificates for separate connections
    Resolves: RHEL-937
  - Capability dropping feature can be turned off
    Resolves: RHEL-943
  - imjournal: new module parameter filecreatemode
    Resolves: RHEL-949


author: Pavel Valena <pvalena@redhat.com> - 3.0.1-154
changelog:
  - Upgrade to Ruby 3.0.2.
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810
  - Fix StartTLS stripping vulnerability in Net::IMAP
    Resolves: CVE-2021-32066
  - Fix dependencies of gems with explicit source installed from a
    different source.
    Resolves: CVE-2020-36327
  - Pass ldflags to gem install via CONFIGURE_ARGS.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.4-160
changelog:
  - Upgrade to Ruby 3.0.4.
    Resolves: rhbz#2096347
  - OpenSSL test suite fixes due to disabled SHA1.
    Resolves: rbhz#2107696
  - Fix double free in Regexp compilation.
    Resolves: CVE-2022-28738
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739


author: Jun Aruga <jaruga@redhat.com> - 3.0.4-160
changelog:
  - Bypass git submodule test failure on Git >= 2.38.1.
  - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b.
  - Fix for tzdata-2022g.
  - Fix File.utime test.


author: Jun Aruga <jaruga@redhat.com> - 3.0.4-161
changelog:
  - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS.
    Resolves: RHEL-12724
  - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters
    Related: RHEL-12724


author: Jun Aruga <jaruga@redhat.com> - 3.0.7-162
changelog:
  - Upgrade to Ruby 3.0.7.
    Resolves: RHEL-35740
  - Fix HTTP response splitting in CGI.
    Resolves: RHEL-35741
  - Fix ReDoS vulnerability in URI.
    Resolves: RHEL-35742
  - Fix ReDoS vulnerability in Time.
    Resolves: RHEL-35743
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-35744
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-35746
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-35747


author: Jarek Prokop <jprokop@redhat.com> - 3.1.2-141
changelog:
  - Upgrade to Ruby 3.1.2 by merging Fedora Rawhide branch (commit: b7b5473).
    Resolves: rhbz#2063773


author: Jun Aruga <jaruga@redhat.com> - 3.1.2-142
changelog:
  - Bypass git submodule test failure on Git >= 2.38.1.
  - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b.
  - Fix for tzdata-2022g.
  - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS.
    Resolves: RHEL-5590
  - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters
    Related: RHEL-5590
  - Disable fiddle tests that use FFI closures.
    Related: RHEL-5590


author: Jarek Prokop <jprokop@redhat.com> - 3.1.4-143
changelog:
  - Upgrade to Ruby 3.1.4.
    Resolves: RHEL-5586
  - Fix HTTP response splitting in CGI.
    Resolves: RHEL-5591
  - Fix ReDos vulnerability in URI.
    Resolves: RHEL-28919
    Resolves: RHEL-5612
  - Fix ReDos vulnerability in Time.
    Resolves: RHEL-28920
  - Make RDoc soft dependency in IRB.
    Resolves: RHEL-5613


author: Jun Aruga <jaruga@redhat.com> - 3.1.5-144
changelog:
  - Upgrade to Ruby 3.1.5.
    Resolves: RHEL-33978
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-34129
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-34121
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-33871


author: Jarek Prokop <jprokop@redhat.com> - 3.3.1-2
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33976
  - Fix buffer overread vulnerability in StringIO.
    (CVE-2024-27280)
    Resolves: RHEL-34130
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    (CVE-2024-27281)
    Resolves: RHEL-34122
  - Fix Arbitrary memory address read vulnerability with Regex search.
    (CVE-2024-27282)
    Resolves: RHEL-33872


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-3
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-55411
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57575
    Resolves: RHEL-57572
    Resolves: RHEL-57068
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-57569
  - Fix incorrect symlink for rubygem-irb's library.
    Resolves: RHEL-42646


author: Jun Aruga <jaruga@redhat.com> - 0.5.3-1
changelog:
  - New upstream release 0.5.3 by merging Fedora master branch (commit: 674d475)
    Resolves: rhbz#1817135


author: Jarek Prokop <jprokop@redhat.com> - 0.5.4-1
changelog:
  - New upstream release 0.5.4 by merging Fedora rawhide branch (commit: e21b5b9)
    Resolves: rhbz#2063773


author: Jindrich Novy <jnovy@redhat.com> - 4:1.1.7-2
changelog:
  - rebuild for following CVEs:
  CVE-2021-43784 CVE-2022-41724 CVE-2023-28642
  - Resolves: #2033659
  - Resolves: #2179973
  - Resolves: #2183103


author: Lokesh Mandvekar <lsm5@redhat.com> - 4:1.1.10-3
changelog:
  - Rebuild for CVEs: CVE-2023-39321 CVE-2023-39322 CVE-2023-29409
  - Related: Jira:RHEL-2792
  - Related: Jira:RHEL-7454


author: Dan Horák <dhorak@redhat.com> - 2:2.24.0-1
changelog:
  - rebased to 2.24.0 (#2110310)
  - KVM: Tool to process encrypted Secure Execution guest dumps (#2044198)
  - zdev: Site-aware device configuration (#2044202)
  - Support IBM z16 Processor-Activity-Instrumentation Facility (#2110298)
  - Transparent DASD PPRC (Peer-to-Peer Remote Copy) handling (#2126617)
  - Support IBM z16 Processor Activity Instrumentation Extension 1 (#2127435)
  - Display Processor Activity Instrumentation CPACF counters (#2111012)
  - Resolves: #2110310 #2044198 #2044202 #2110298 #2126617 #2127435 #2111012


author: Dan Horák <dhorak@redhat.com> - 2:2.25.0-1
changelog:
  - rebased to 2.25.0 (#2110310)
  - zipl: Support for Secure Boot IPL and Dump from ECKD DASD (#2044200)
  - zipl: Add secure boot trailer (#2142883)
  - Resolves: #2110310 #2044200 #2142883


author: Dan Horák <dhorak@redhat.com> - 2:2.27.0-1
changelog:
  - rebased to 2.27.0 (#2160062)
  - lszcrypt fails when querying a specific domain (#2177612)
  - DASD autoquiesce support (#2196517)
  - zcrypt DD: AP command filtering (#2170360)
  - vmconvert and zgetdump consolidation (#2173924)
  - Support for List-Directed dump from ECKD DASD (#2160052)
  - Support for List-Directed IPL and re-IPL from ECKD DASD (#2160040)
  - Resolves: #2160062 #2177612 #2196517 #2170360 #2173924 #2160052 #2160040


author: Dan Horák <dhorak@redhat.com> - 2:2.27.0-2
changelog:
  - zdev: cleanup patches to fix warnings (#2223304)
  - zdev: add missing label in the udev-rules (#2222900)
  - Resolves: #2223304 #2222900


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-1
changelog:
  - rebased to 2.29.0 (RHEL-11408)
  - KVM: Support AP Bindings in SE Header (RHEL-10572)
  - KVM: Userspace Tool for IBK Request Generation and Insertion (RHEL-10578)
  - zkey: support for key type PKEY_TYPE_EP11_AES (RHEL-11440)
  - vmur: fix handling of option -t (RHEL-11480)
  - dbginfo.sh: global original Input Field Separator (IFS) (RHEL-16527)
  - enable multi-arch build (RHEL-10567)
  - Resolves: RHEL-11408 RHEL-10572 RHEL-10578 RHEL-11440 RHEL-11480 RHEL-16527 RHEL-10567


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-3
changelog:
  - add s390utils-se-data as a noarch subpackage with Secure Execution data files
  - Resolves: RHEL-10567


author: Dan Horák <dhorak@redhat.com> - 2:2.33.1-1
changelog:
  - rebased to 2.33.1 (RHEL-23704)
  - dbginfo.sh: missing data of new ROCE cards (RHEL-24109)
  - SE-tooling: New IBM host-key subject locality (RHEL-30273)
  - Fix disk type detection when running under QEMU (RHEL-40358)
  - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.4-101
changelog:
  - resolves: rhbz#2216712 - Fix broken symlink for libwbclient
  - resolves: rhbz#2214327 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes`
  - resolves: rhbz#2211605 - Fix access of Samba share with veto files = /.*/
  - resolves: rhbz#2207692 - Fix Python tarfile extraction to avoid a warning


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.5-100
changelog:
  - resolves: rhbz#2222895 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: Andreas Schneider <asn@redhat.com> - 4.18.6-100
changelog:
  - related: rhbz#2190415 - Update to version 4.18.6
  - resolves: rhbz#2211617 - Fix the rpcclient dfsgetinfo command


author: Andreas Schneider <asn@redhat.com> - 4.19.3-100
changelog:
  - resolves: RHEL-16476 - Update to version 4.19.3
  - resolves: RHEL-11362 - Fix security issues:
    CVE-2023-4091 CVE-2023-42669
  - resolves: RHEL-18030 - Logging Format Enhancement
  - resolves: RHEL-1960 - Fix smbget issues with DFS shares
  - resolves: RHEL-2118 - Fix force user/group issues with 'allow trusted domains = yes'
  - resolves: RHEL-16875 - Fix memory corruption in libnss_winbind
  - resolves: RHEL-19243 - Fix smbget password interactive authentication


author: Andreas Schneider <asn@redhat.com> - 4.19.4-100
changelog:
  - related: RHEL-16476 - Update to version 4.19.4
  - resolves: RHEL-2109 - Add support for certificate auto enrollment
  - resolves: RHEL-20761 - Add missing requirements for samba-gpupdate
  - resolves: RHEL-19566 - Fix smbget interactive authentication
  - resolves: RHEL-21001 - Fix samba-gpupdate paths for RHEL


author: Andreas Schneider <asn@redhat.com> - 4.19.4-102
changelog:
  - resolves: RHEL-22157 - Don't require NDES for samba-gpupdate
  - resolves: RHEL-20897 - Fix site name fetching for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.0-102
changelog:
  - resolves: RHEL-2109  - Support Certificate Auto Enrollment in Samba
  - resolves: RHEL-22157 - Fix root cert import for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.1-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.1
  - resolves: RHEL-26337 - Fix site lookup for samba-gpupdate
  - resolves: RHEL-5846 - Fix warning messages while upgrading libwbclient


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.2-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.2
  - resolves: RHEL-45841 - Fix KDC IP address lookup in case of trusted domain
  - resolves: RHEL-23814 - Fix smbclient to enumerate the printers


author: Michal Fabik <mfabik@redhat.com> 0.35-1
changelog:
  - New upstream version
   - Fix leaks in koops stacktrace- and report-handling code
   - Replace utility code with GLib functions
   - Fix unit test portability issue
   - Add build dependency on make


author: Michal Fabik <mfabik@redhat.com> 0.38-1
changelog:
  - New upstream version
   - lib: Use GLib for computing SHA-1 digests
   - sr_distances_cluster_objects: Check arg safety


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-14
changelog:
  - Fix getting of InstallDate property, improve it to work on non en_US locales
    and update support for recent Fedora distributions


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.3-16
changelog:
  - Fix exit status (i. e. apply https://sourceforge.net/p/sblim/bugs/2761/)
  - Fix issues found by static analysis


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.62-2
changelog:
  - Remove sysctl_fs_protected_* rules from RHEL9 OSPP (RHBZ#2081719)
  - Make rule audit_access_success_ unenforcing in RHEL9 OSPP (RHBZ#2058154)
  - Drop zipl_vsyscall_argument rule from RHEL9 OSPP profile (RHBZ#2060049)
  - make sysctl_user_max_user_namespaces in RHEL9 OSPP (RHBZ#2083716)
  - Remove some sysctl rules  related to network from RHEL9 OSPP (RHBZ#2081708)
  - Add rule to check if Grub2 recovery is disabled to RHEL9 OSPP (RHBZ#2092809)
  - Add rule grub2_systemd_debug-shell_argument_absent (RHBZ#2092840)
  - Remove rule accounts_password_minlen_login_defs from all profiles (RHBZ#2073040)
  - Remove rules related to remove logging from RHEL9 OSPP (RHBZ#2105016)
  - Remove sshd_enable_strictmodes from OSPP (RHBZ#2105278)
  - Remove rules related to NIS services (RHBZ#2096602)
  - Make rule stricter when checking for FIPS crypto-policies (RHBZ#2057082)


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.63-2
changelog:
  - OSPP: utilize different audit rule set for different hardware platforms (RHBZ#1998583)
  - OSPP: update rules related to coredumps (RHBZ#2081688)
  - OSPP: update rules related to BPF (RHBZ#2081728)
  - fix description of require_singleuser_mode (RHBZ#2092799)
  - fix remediation of OpenSSL cryptopolicy (RHBZ#2108569)
  - OSPP: use minimal Authselect profile(RHBZ#2114979)


author: Watson Sato <wsato@redhat.com> - 0.1.66-1
changelog:
  - Rebase to a new upstream release 0.1.66 (RHBZ#2169443)
  - Fix remediation of audit watch rules (RHBZ#2169441)
  - Fix check firewalld_sshd_port_enabled (RHBZ#2169443)
  - Fix accepted control flags for pam_pwhistory (RHBZ#2169443)
  - Unselect rule logind_session_timeout (RHBZ#2169443)
  - Add support rainer scripts in rsyslog rules (RHBZ#2169445)


author: Jan Černý <jcerny@redhat.com> - 0.1.69-1
changelog:
  - Rebase to a new upstream release 0.1.69 (RHBZ#2221697)
  - Improve CIS benchmark rules related to auditing of kernel module related events (RHBZ#2209657)
  - SSSD configuration files are now created with correct permissions whenever remediating SSSD related rules (RHBZ#2211511)
  - add warning about migration of network configuration files when upgrading from RHEL 8 to RHEL 9 (RHBZ#2172555)
  - Correct URL used to download CVE checks. (RHBZ#2223178)
  - update ANSSI BP-028 profiles to be aligned with version 2.0 (RHBZ#2155790)
  - Fixed excess quotes in journald configuration files (RHBZ#2193169)
  - Change rules checking home directories to apply only to local users (RHBZ#2203791)
  - Change rules checking password age to apply only to local users (RHBZ#2213958)
  - Updated man page (RHBZ#2060028)


author: Jan Černý <jcerny@redhat.com> - 0.1.69-2
changelog:
  - Remove OpenSSH crypto policy hardening rules from STIG profile (RHBZ#2221697)
  - Fix ANSSI High profile with secure boot (RHBZ#2221697)


author: Marcus Burghardt <maburgha@redhat.com> - 0.1.72-1
changelog:
  - Rebase to a new upstream release 0.1.72 (RHEL-21425)
  - Check dropin files in /etc/systemd/journald.conf.d/ (RHEL-14484)
  - Fix remediation to not update comments (RHEL-1484)
  - Fix package check on SCAP tests for dnf settings (RHEL-17417)
  - Update description for audit_rules_kernel_module_loading (RHEL-1489)
  - Disable remediation for /dev/shm options in offline mode (RHEL-16801)
  - Include explanatory comment in the remediation of CCE-83871-4 (RHEL-17418)


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.73-1
changelog:
  - Rebase to a new upstream release 0.1.73 (RHEL-36663)
  - Correctly parse sudo options even if they are not quoted (RHEL-31976)
  - Ensure that web links within kickstart files are valid (RHEL-30735)
  - Align set of allowed SSH ciphers with STIG requirement (RHEL-29684)
  - Add audit rules on /etc/sysconfig/network-scripts (RHEL-29308)
  - Remove rule restricting user namespaces from stig_gui profile (RHEL-10416)
  - Add rule which enables auditing of files within /etc/sysconfig/network-scripts (RHEL-1093)


author: Matthew Burket <mburket@redhat.com> - 0.1.74-1
changelog:
  - Rebase to a new upstream release 0.1.74 (RHEL-53865)
  - Ensure authselect features are preserved by enable_authselect rule (RHEL-39383)
  - Fix check for passwords last changed date (RHEL-47129)
  - Remediations of Journald configuration files now include a correct section (RHEL-38531)
  - Adjust service requirements for CIS profiles (RHEL-23852)
  - Update password hashing settings for ANSSI-BP-028 (RHEL-44983)


author: Jan Černý <jcerny@redhat.com> - 1.2.1-5
changelog:
  - Remove qt5-devel from "Requires" section
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/WO625MVYEAAJNHNRLEEJDVZTIWMQOBRR/
  - Update for new CMake out of source builds
    https://fedoraproject.org/wiki/Changes/CMake_to_do_out-of-source_builds
  - Fix Qt5 deprecated symbols
  - Fix FTBS in Rawhide/F33 (RHBZ#1865462)


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.36-1
changelog:
  - Allow systemd-timedated get the timemaster service status
  Resolves: RHEL-25978
  - postfix: allow qmgr to delete mails in bounce/ directory
  Resolves: RHEL-30271
  - Allow NetworkManager the sys_ptrace capability in user namespace
  Resolves: RHEL-24346
  - Label /dev/iommu with iommu_device_t
  Resolves: RHEL-22063
  - Allow qemu-ga read vm sysctls
  Resolves: RHEL-31892
  - Update repository link and branches names for c9s
  Related: RHEL-22960


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.37-1
changelog:
  - Allow numad to trace processes in user namespace
  Resolves: RHEL-33994
  - Remove permissive domain for rshim_t
  Resolves: RHEL-22173
  - Remove permissive domain for mptcpd_t
  Resolves: RHEL-22173
  - Remove permissive domain for coreos_installer_t
  Resolves: RHEL-22173
  - Remove permissive domain for afterburn_t
  Resolves: RHEL-22173
  - Update afterburn policy
  Resolves: RHEL-22173
  - Allow bootupd search EFI directory
  Resolves: RHEL-22172
  - Add the bootupd module
  Resolves: RHEL-22172
  - Add policy for bootupd
  Resolves: RHEL-22172
  - Label /dev/mmcblk0rpmb character device with removable_device_t
  Resolves: RHEL-28080
  - Differentiate between staff and sysadm when executing crontab with sudo
  Resolves: RHEL-31888
  - Add crontab_admin_domtrans interface
  Resolves: RHEL-31888
  - Add crontab_domtrans interface
  Resolves: RHEL-31888
  - Allow svirt_t read vm sysctls
  Resolves: RHEL-32296


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.38-1
changelog:
  - Add boolean qemu-ga to run unconfined script
  Resolves: RHEL-31211
  - Ensure dbus communication is allowed bidirectionally
  Resolves: RHEL-35782
  - Allow logwatch_mail_t read network sysctls
  Resolves: RHEL-34135
  - Allow sysadm execute dmidecode using sudo
  Resolves: RHEL-16104
  - Allow sudodomain list files in /var
  Resolves: RHEL-16104
  - Allow various services read and write z90crypt device
  Resolves: RHEL-33361
  - Allow system_cronjob_t dbus chat with avahi_t
  Resolves: RHEL-32290
  - Allow setroubleshootd get attributes of all sysctls
  Resolves: RHEL-34078
  - Remove permissive domain for bootupd_t
  Resolves: RHEL-22173


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.39-1
changelog:
  - Add interfaces for watching and reading ifconfig_var_run_t
  Resolves: RHEL-39408
  - Allow dhcpcd use unix_stream_socket
  Resolves: RHEL-39408
  - Allow dhcpc read /run/netns files
  Resolves: RHEL-39408
  - Allow all domains read and write z90crypt device
  Resolves: RHEL-38833
  - Allow bootupd search efivarfs dirs
  Resolves: RHEL-36289
  - Move unconfined_domain(sap_unconfined_t) to an optional block
  Resolves: RHEL-37663


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.40-1
changelog:
  - Allow systemd-coredump read nsfs files
  Resolves: RHEL-39937
  - Allow login_userdomain execute systemd-tmpfiles in the caller domain
  Resolves: RHEL-40374
  - Allow ptp4l_t request that the kernel load a kernel module
  Resolves: RHEL-38905
  - Allow collectd to trace processes in user namespace
  Resolves: RHEL-36293


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.41-1
changelog:
  - Differentiate between staff and sysadm when executing crontab with sudo
  Resolves: RHEL-31888
  - Label /usr/bin/samba-gpupdate with samba_gpupdate_exec_t
  Resolves: RHEL-25724
  - Allow unconfined_service_t transition to passwd_t
  Resolves: RHEL-17404
  - Allow sbd to trace processes in user namespace
  Resolves: RHEL-44680
  - Allow systemd-coredumpd sys_admin and sys_resource capabilities
  Resolves: RHEL-45245
  - Label /usr/lib/node_modules/npm/bin with bin_t
  Resolves: RHEL-36587
  - Support /var is empty
  Resolves: RHEL-29331
  - Allow timemaster write to sysfs files
  Resolves: RHEL-28777
  - Don't audit crontab_domain write attempts to user home
  Resolves: RHEL-31888
  - Transition from sudodomains to crontab_t when executing crontab_exec_t
  Resolves: RHEL-31888
  - Fix label of pseudoterminals created from sudodomain
  Resolves: RHEL-31888


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.42-1
changelog:
  - Label samba certificates with samba_cert_t
  Resolves: RHEL-25724
  - Allow systemd-coredumpd the sys_chroot capability
  Resolves: RHEL-45245
  - Allow svirt_tcg_t read vm sysctls
  Resolves: RHEL-27141
  - Label /usr/sbin/samba-gpupdate with samba_gpupdate_exec_t
  Resolves: RHEL-25724
  - Label /var/run/coreos-installer-reboot with coreos_installer_var_run_t
  Resolves: RHEL-38614
  - Allow coreos-installer add systemd unit file links
  Resolves: RHEL-38614


