# changelog

author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-531.el9]
changelog:
  - bnx2x: Set ivi->vlan field as an integer (Michal Schmidt) [RHEL-52258 RHEL-52667]
  - bnx2x: Provide declaration of dmae_reg_go_c in header (Michal Schmidt) [RHEL-52258 RHEL-52667]
  - bnx2x: Fix multiple UBSAN array-index-out-of-bounds (Michal Schmidt) [RHEL-52258 RHEL-52667]
  - bnx2x: adopt skb_network_header_len() more broadly (Michal Schmidt) [RHEL-52258 RHEL-52667]
  - bnx2x: adopt skb_network_offset() and similar helpers (Michal Schmidt) [RHEL-52258 RHEL-52667]
  - bnx2x: constify references to netdev->dev_addr in drivers (Michal Schmidt) [RHEL-52258 RHEL-52667]
  - bnx2x: use eth_hw_addr_set() for dev->addr_len cases (Michal Schmidt) [RHEL-52258 RHEL-52667]
  - tg3: Remove residual error handling in tg3_suspend (Michal Schmidt) [RHEL-52671 RHEL-52757]
  - tg3: simplify tg3_phy_autoneg_cfg (Michal Schmidt) [RHEL-52671 RHEL-52757]
  - powerpc/pseries/eeh: move pseries_eeh_err_inject() outside CONFIG_DEBUG_FS block (Mamatha Inamdar) [RHEL-61572]
  - powerpc/pseries/eeh: Fix pseries_eeh_err_inject (Mamatha Inamdar) [RHEL-61572]
  - nvmet-auth: assign dh_key to NULL after kfree_sensitive (CKI Backport Bot) [RHEL-66830] {CVE-2024-50215}
  - perf/x86/rapl: Fix the energy-pkg event for AMD CPUs (David Arcari) [RHEL-66194]
  - net: sched: use RCU read-side critical section in taprio_dump() (Xin Long) [RHEL-65978] {CVE-2024-50126}
  - nfsd: enforce upper limit for namelen in __cld_pipe_inprogress_downcall() (Olga Kornievskaia) [RHEL-63198] {CVE-2024-47692}
  - nfsd: return -EINVAL when namelen is 0 (Olga Kornievskaia) [RHEL-63198] {CVE-2024-47692}
  - powerpc/qspinlock: Fix deadlock in MCS queue (Mamatha Inamdar) [RHEL-58127]
  - net: ethtool: phy: Don't set the context dev pointer for unfiltered DUMP (Michal Schmidt) [RHEL-57751]
  - net: ethtool: Enhance error messages sent to user space (Michal Schmidt) [RHEL-57751]
  - Documentation: networking: Fix missing PSE documentation and grammar issues (Michal Schmidt) [RHEL-57751]
  - net: ethtool: phy: Check the req_info.pdn field for GET commands (Michal Schmidt) [RHEL-57751]
  - ptp: ptp_ines: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - net: stmmac: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - sfc/siena: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - sfc: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - qede: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - enic: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - net: thunderx: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - liquidio: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - net: macb: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - amd-xgbe: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - bonding: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - tg3: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - bnxt_en: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - bnx2x: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - cxgb4: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - ixgbe: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - igc: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - igb: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - ice: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - net: netcp: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - net: ti: icssg-prueth: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - net: ethernet: ti: cpsw_ethtool: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - net: ethernet: ti: am65-cpsw-ethtool: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - mlxsw: spectrum: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - lan743x: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - net: mvpp2: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - octeontx2-pf: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - net: fec: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - net: hns3: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - net: renesas: rswitch: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - ionic: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - can: peak_usb: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - can: peak_canfd: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - can: dev: Remove setting of RX software timestamp (Michal Schmidt) [RHEL-57751]
  - ethtool: RX software timestamp for all (Michal Schmidt) [RHEL-57751]
  - ethtool: pse-pd: move pse validation into set (Michal Schmidt) [RHEL-57751]
  - net: ethtool: cable-test: Release RTNL when the PHY isn't found (Michal Schmidt) [RHEL-57751]
  - net: fix unreleased lock in cable test (Michal Schmidt) [RHEL-57751]
  - ethtool: Add support for specifying information source in cable test results (Michal Schmidt) [RHEL-57751]
  - ethtool: Extend cable testing interface with result source information (Michal Schmidt) [RHEL-57751]
  - Documentation: networking: document phy_link_topology (Michal Schmidt) [RHEL-57751]
  - net: ethtool: strset: Allow querying phy stats by index (Michal Schmidt) [RHEL-57751]
  - net: ethtool: cable-test: Target the command to the requested PHY (Michal Schmidt) [RHEL-57751]
  - net: ethtool: pse-pd: Target the command to the requested PHY (Michal Schmidt) [RHEL-57751]
  - net: ethtool: plca: Target the command to the requested PHY (Michal Schmidt) [RHEL-57751]
  - netlink: specs: add ethnl PHY_GET command set (Michal Schmidt) [RHEL-57751]
  - net: ethtool: Introduce a command to list PHYs on an interface (Michal Schmidt) [RHEL-57751]
  - netlink: specs: add phy-index as a header parameter (Michal Schmidt) [RHEL-57751]
  - net: ethtool: Allow passing a phy index for some commands (Michal Schmidt) [RHEL-57751]
  - net: sfp: Add helper to return the SFP bus name (Michal Schmidt) [RHEL-57751]
  - net: phy: add helpers to handle sfp phy connect/disconnect (Michal Schmidt) [RHEL-57751]
  - net: sfp: pass the phy_device when disconnecting an sfp module's PHY (Michal Schmidt) [RHEL-57751]
  - net: phy: Introduce ethernet link topology representation (Michal Schmidt) [RHEL-57751]
  - ethtool: Add new result codes for TDR diagnostics (Michal Schmidt) [RHEL-57751]
  - Documentation: networking: correct spelling (Michal Schmidt) [RHEL-57751]
  - netlink: specs: decode indirection table as u32 array (Michal Schmidt) [RHEL-57751]
  - ethtool: rss: support skipping contexts during dump (Michal Schmidt) [RHEL-57751]
  - ethtool: rss: support dumping RSS contexts (Michal Schmidt) [RHEL-57751]
  - ethtool: rss: report info about additional contexts from XArray (Michal Schmidt) [RHEL-57751]
  - ethtool: rss: move the device op invocation out of rss_prepare_data() (Michal Schmidt) [RHEL-57751]
  - ethtool: rss: don't report key if device doesn't support it (Michal Schmidt) [RHEL-57751]
  - bnxt: remove .cap_rss_ctx_supported from updated drivers (Michal Schmidt) [RHEL-57751]
  - ethtool: make ethtool_ops::cap_rss_ctx_supported optional (Michal Schmidt) [RHEL-57751]
  - ethtool: refactor checking max channels (Michal Schmidt) [RHEL-57751]
  - net: ethtool: check rxfh_max_num_contexts != 1 at register time (Michal Schmidt) [RHEL-57751]
  - ethtool: cmis_cdb: Remove unused declaration ethtool_cmis_page_fini() (Michal Schmidt) [RHEL-57751]
  - ethtool: Don't check for NULL info in prepare_data callbacks (Michal Schmidt) [RHEL-57751]
  - ppp: do not assume bh is held in ppp_channel_bridge_input() (Guillaume Nault) [RHEL-63598] {CVE-2024-49946}
  - ppp: fix ppp_async_encode() illegal access (Guillaume Nault) [RHEL-63757] {CVE-2024-50035}
  - powerpc/pseries/vas: Use usleep_range() to support HCALL delay (Mamatha Inamdar) [RHEL-44917]
  - icmp: change the order of rate limits (Hangbin Liu) [RHEL-63235] {CVE-2024-47678}
  - static_call: Replace pointless WARN_ON() in static_call_module_notify() (David Arcari) [RHEL-64532] {CVE-2024-49954}
  - tracing/hwlat: Fix a race during cpuhp processing (Tomas Glozar) [RHEL-65271]
  - tracing/timerlat: Fix a race during cpuhp processing (Tomas Glozar) [RHEL-65271] {CVE-2024-49866}
  - tracing/timerlat: Drop interface_lock in stop_kthread() (Tomas Glozar) [RHEL-65271]
  - tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline (Tomas Glozar) [RHEL-65271]
  - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-65229]
  - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-65229]
  - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-65229]
  - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-65229]
  - KVM: s390: remove useless include (Thomas Huth) [RHEL-65229]
  - s390/mm: Re-enable the shared zeropage for !PV and !skeys KVM guests (Thomas Huth) [RHEL-65229]
  - mm/userfaultfd: Do not place zeropages when zeropages are disallowed (Thomas Huth) [RHEL-65229]
  - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-65229]
  - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-65229]
  - resource: fix region_intersects() vs add_memory_driver_managed() (Myron Stowe) [RHEL-64585] {CVE-2024-49878}
  - bpf: devmap: provide rxq after redirect (Felix Maurer) [RHEL-65205]
  - bpf: Make sure internal and UAPI bpf_redirect flags don't overlap (Felix Maurer) [RHEL-65205]
  - sock_map: Add a cond_resched() in sock_hash_free() (Felix Maurer) [RHEL-63189 RHEL-65205] {CVE-2024-47710}
  - bpf, net: Fix a potential race in do_sock_getsockopt() (Felix Maurer) [RHEL-65205]
  - selftests/bpf: Add XDP_UMEM_TX_METADATA_LEN to XSK TX metadata test (Felix Maurer) [RHEL-65205]
  - xsk: Require XDP_UMEM_TX_METADATA_LEN to actuate tx_metadata_len (Felix Maurer) [RHEL-65205]
  - bpf: Fix a segment issue when downgrading gso_size (Felix Maurer) [RHEL-65205]
  - bpf, arm64: Fix address emission with tag-based KASAN enabled (Felix Maurer) [RHEL-65205]
  - bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG (Felix Maurer) [RHEL-65205]
  - xdp: fix invalid wait context of page_pool_destroy() (Felix Maurer) [RHEL-54828 RHEL-65205] {CVE-2024-43834}
  - bpf: Fix too early release of tcx_entry (Felix Maurer) [RHEL-65205 RHEL-65858] {CVE-2024-41010}
  - xdp: use flags field to disambiguate broadcast redirect (Felix Maurer) [RHEL-65205]
  - bpf: Fix dev's rx stats for bpf_redirect_peer traffic (Felix Maurer) [RHEL-65205]
  - veth: Use tstats per-CPU traffic counters (Felix Maurer) [RHEL-65205]
  - tipc: guard against string buffer overrun (Xin Long) [RHEL-63545] {CVE-2024-49995}
  - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (CKI Backport Bot) [RHEL-65161] {CVE-2024-50082}
  - devlink: Support setting max_io_eqs (CKI Backport Bot) [RHEL-64903]
  - driver core: bus: Fix double free in driver API bus_register() (CKI Backport Bot) [RHEL-63832] {CVE-2024-50055}
  - redhat: Add CONFIG_CRYPTO_HMAC_S390 config files (Mete Durlu) [RHEL-50799]
  - s390/crypto: Add hardware acceleration for HMAC modes (Mete Durlu) [RHEL-50799]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-532.el9]
changelog:
  - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-66118]
  - pinctrl: intel: platform: fix error path in device_for_each_child_node() (Steve Best) [RHEL-66957] {CVE-2024-50197}
  - device property: Introduce device_for_each_child_node_scoped() (Steve Best) [RHEL-66957] {CVE-2024-50197}
  - device property: Add cleanup.h based fwnode_handle_put() scope based cleanup. (Steve Best) [RHEL-66957] {CVE-2024-50197}
  - kernel.spec: add bootconfig to kernel-tools package (Brian Masney) [RHEL-65546]
  - bootconfig: Remove duplicate included header file linux/bootconfig.h (Brian Masney) [RHEL-65546]
  - bootconfig: Fix the kerneldoc of _xbc_exit() (Brian Masney) [RHEL-65546]
  - bootconfig: use memblock_free_late to free xbc memory to buddy (Brian Masney) [RHEL-65546]
  - bootconfig: do not put quotes on cmdline items unless necessary (Brian Masney) [RHEL-65546]
  - bootconfig: Fix testcase to increase max node (Brian Masney) [RHEL-65546]
  - bootconfig: Change message if no bootconfig with CONFIG_BOOT_CONFIG_FORCE=y (Brian Masney) [RHEL-65546]
  - tools/bootconfig: fix single & used for logical condition (Brian Masney) [RHEL-65546]
  - bootconfig: Increase max nodes of bootconfig from 1024 to 8192 for DCC support (Brian Masney) [RHEL-65546]
  - bootconfig: Default BOOT_CONFIG_FORCE to y if BOOT_CONFIG_EMBED (Brian Masney) [RHEL-65546]
  - Allow forcing unconditional bootconfig processing (Brian Masney) [RHEL-65546]
  - Documentation: Fixed a typo in bootconfig.rst (Brian Masney) [RHEL-65546]
  - bootconfig: Support embedding a bootconfig file in kernel (Brian Masney) [RHEL-65546]
  - bootconfig: Check the checksum before removing the bootconfig from initrd (Brian Masney) [RHEL-65546]
  - docs: bootconfig: Add how to embed the bootconfig into kernel (Brian Masney) [RHEL-65546]
  - bootconfig: Make the bootconfig.o as a normal object file (Brian Masney) [RHEL-65546]
  - bootconfig: Initialize ret in xbc_parse_tree() (Brian Masney) [RHEL-65546]
  - lib/bootconfig: Fix the xbc_get_info kerneldoc (Brian Masney) [RHEL-65546]
  - lib/bootconfig: Make xbc_alloc_mem() and xbc_free_mem() as __init function (Brian Masney) [RHEL-65546]
  - bootconfig: Cleanup dummy headers in tools/bootconfig (Brian Masney) [RHEL-65546]
  - bootconfig: Replace u16 and u32 with uint16_t and uint32_t (Brian Masney) [RHEL-65546]
  - bootconfig: Remove unused debug function (Brian Masney) [RHEL-65546]
  - bootconfig: Split parse-tree part from xbc_init (Brian Masney) [RHEL-65546]
  - bootconfig: Rename xbc_destroy_all() to xbc_exit() (Brian Masney) [RHEL-65546]
  - tools/bootconfig: Run test script when build all (Brian Masney) [RHEL-65546]
  - bootconfig: Add xbc_get_info() for the node information (Brian Masney) [RHEL-65546]
  - bootconfig: Allocate xbc_data inside xbc_init() (Brian Masney) [RHEL-65546]
  - init/bootconfig: Reorder init parameter from bootconfig and cmdline (Brian Masney) [RHEL-65546]
  - init: bootconfig: Remove all bootconfig data when the init memory is removed (Brian Masney) [RHEL-65546]
  - tools/bootconfig: Show whole test command for each test case (Brian Masney) [RHEL-65546]
  - tools/bootconfig: Fix tracing_on option checking in ftrace2bconf.sh (Brian Masney) [RHEL-65546]
  - docs: bootconfig: Add how to use bootconfig for kernel parameters (Brian Masney) [RHEL-65546]
  - tracing/boot: Fix to check the histogram control param is a leaf node (Brian Masney) [RHEL-65546]
  - tracing/boot: Fix trace_boot_hist_add_array() to check array is value (Brian Masney) [RHEL-65546]
  - bootconfig: Rename xbc_node_find_child() to xbc_node_find_subkey() (Brian Masney) [RHEL-65546]
  - bootconfig/tracing/ktest: Update ktest example for boot-time tracing (Brian Masney) [RHEL-65546]
  - docs/trace: fix a label of boottime-trace (Brian Masney) [RHEL-65546]
  - Documentation: tracing: Add histogram syntax to boot-time tracing (Brian Masney) [RHEL-65546]
  - tracing: Fix missing trace_boot_init_histograms kstrdup NULL checks (Brian Masney) [RHEL-65546]
  - tracing/boot: Show correct histogram error command (Brian Masney) [RHEL-65546]
  - tracing/boot: Support multiple histograms for each event (Brian Masney) [RHEL-65546]
  - tracing: Initialize integer variable to prevent garbage return value (Brian Masney) [RHEL-65546]
  - tracing/boot: Support multiple handlers for per-event histogram (Brian Masney) [RHEL-65546]
  - tracing/boot: Add per-event histogram action options (Brian Masney) [RHEL-65546]
  - tracing/boot: Fix a hist trigger dependency for boot time tracing (Brian Masney) [RHEL-65546]
  - tools/bootconfig: Use per-group/all enable option in ftrace2bconf script (Brian Masney) [RHEL-65546]
  - tools/bootconfig: Add histogram syntax support to bconf2ftrace.sh (Brian Masney) [RHEL-65546]
  - tools/bootconfig: Support per-group/all event enabling option (Brian Masney) [RHEL-65546]
  - redhat/configs: set values for CONFIG_BOOT_CONFIG_{EMBED,FORCE} (Brian Masney) [RHEL-65546]
  - tools/power/x86/intel-speed-select: v1.20 release (Steve Best) [RHEL-65196]
  - tools/power/x86/intel-speed-select: Set TRL MSR in 100 MHz units (Steve Best) [RHEL-65196]
  - platform/x86: ISST: Add Diamond Rapids to support list (Steve Best) [RHEL-65196]
  - platform/x86: ISST: Fix return value on last invalid resource (Steve Best) [RHEL-65196]
  - platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg() (Steve Best) [RHEL-65196]
  - platform/x86: intel_speed_select_if: Switch to new Intel CPU model defines (Steve Best) [RHEL-65196]
  - platform/x86: ISST: Use only TPMI interface when present (Steve Best) [RHEL-65196]
  - platform/x86: ISST: Avoid some SkyLake server models (Steve Best) [RHEL-65196]
  - platform/x86: ISST: Add model specific loading for common module (Steve Best) [RHEL-65196]
  - x86/cpu: Add two Intel CPU model numbers (Steve Best) [RHEL-65196]
  - ext4: fix i_data_sem unlock order in ext4_ind_migrate() (CKI Backport Bot) [RHEL-64540] {CVE-2024-50006}
  - ext4: no need to continue when the number of entries is 1 (CKI Backport Bot) [RHEL-64524] {CVE-2024-49967}
  - ext4: fix slab-use-after-free in ext4_split_extent_at() (CKI Backport Bot) [RHEL-64147] {CVE-2024-49884}
  - ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free (CKI Backport Bot) [RHEL-64010] {CVE-2024-49983}
  - ext4: fix timer use-after-free on failed mount (CKI Backport Bot) [RHEL-64008] {CVE-2024-49960}
  - ext4: aovid use-after-free in ext4_ext_insert_extent() (CKI Backport Bot) [RHEL-64001] {CVE-2024-49883}
  - ext4: fix double brelse() the buffer of the extents path (CKI Backport Bot) [RHEL-63617] {CVE-2024-49882}
  - driver core: Fix uevent_show() vs driver detach race (CKI Backport Bot) [RHEL-61583] {CVE-2024-44952}
  - thermal: intel: hfi: Give HFI instances package scope (David Arcari) [RHEL-20130]
  - thermal: intel: hfi: Increase the number of CPU capabilities per netlink event (David Arcari) [RHEL-20130]
  - thermal: intel: hfi: Rename HFI_MAX_THERM_NOTIFY_COUNT (David Arcari) [RHEL-20130]
  - thermal: intel: hfi: Shorten the thermal netlink event delay to 100ms (David Arcari) [RHEL-20130]
  - thermal: intel: hfi: Rename HFI_UPDATE_INTERVAL (David Arcari) [RHEL-20130]
  - thermal: intel: hfi: Enable HFI only when required (David Arcari) [RHEL-20130]
  - thermal: netlink: Add genetlink bind/unbind notifications (David Arcari) [RHEL-20130]
  - x86/cpu/topology: Rename topology_max_die_per_package() [partial] (David Arcari) [RHEL-20130]
  - genetlink: Add per family bind/unbind callbacks (David Arcari) [RHEL-20130]
  - thermal: netlink: Rework notify API for cooling devices (David Arcari) [RHEL-20130]
  - thermal: netlink: Add thermal_group_has_listeners() helper (David Arcari) [RHEL-20130]
  - thermal: netlink: Add enum for mutlicast groups indexes (David Arcari) [RHEL-20130]
  - thermal: netlink: Drop thermal_notify_tz_trip_add/delete() (David Arcari) [RHEL-20130]
  - thermal: netlink: Use for_each_trip() in thermal_genl_cmd_tz_get_trip() (David Arcari) [RHEL-20130]
  - ext4: fix infinite loop when replaying fast_commit (CKI Backport Bot) [RHEL-54846] {CVE-2024-43828}


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-533.el9]
changelog:
  - ext4: sanity check for NULL pointer after ext4_force_shutdown (Brian Foster) [RHEL-64967] {CVE-2024-43898}
  - ext4: dax: fix overflowing extents beyond inode size when partially writing (Brian Foster) [RHEL-64575] {CVE-2024-50015}
  - ext4: fix access to uninitialised lock in fc replay path (Brian Foster) [RHEL-63918] {CVE-2024-50014}
  - ext4: fix error message when rejecting the default hash (Brian Foster) [RHEL-63899]
  - ext4: factor out ext4_hash_info_init() (Brian Foster) [RHEL-63899]
  - ext4: filesystems without casefold feature cannot be mounted with siphash (Brian Foster) [RHEL-63899] {CVE-2024-49968}
  - ext4: check stripe size compatibility on remount as well (Brian Foster) [RHEL-63289] {CVE-2024-47700}
  - ata: libata: avoid superfluous disk spin down + spin up during hibernation (Tomas Henzl) [RHEL-52820]
  - ata: libata-scsi: Fix ata_msense_control() CDL page reporting (Tomas Henzl) [RHEL-52820]
  - ata: libata: Fix W=1 compilation warning (Tomas Henzl) [RHEL-52820]
  - ata: libata: Move sector_buf from struct ata_port to struct ata_device (Tomas Henzl) [RHEL-52820]
  - ata: libata: Rename ata_eh_read_sense_success_ncq_log() (Tomas Henzl) [RHEL-52820]
  - ata: libata: Move sata_std_hardreset() definition to libata-sata.c (Tomas Henzl) [RHEL-52820]
  - ata: libata: Move sata_down_spd_limit() to libata-sata.c (Tomas Henzl) [RHEL-52820]
  - ata: libata: Improve __ata_qc_complete() (Tomas Henzl) [RHEL-52820]
  - ata: libata-scsi: Improve ata_scsi_handle_link_detach() (Tomas Henzl) [RHEL-52820]
  - ata: libata: Cleanup libata-transport (Tomas Henzl) [RHEL-52820]
  - ata: libata: Add helper ata_eh_decide_disposition() (Tomas Henzl) [RHEL-52820]
  - ata: libata: Remove ata_noop_qc_prep() (Tomas Henzl) [RHEL-52820]
  - ata: libata: Change ata_dev_knobble() to return a bool (Tomas Henzl) [RHEL-52820]
  - perf test: Restore sample rate for perf_event_attr (Michael Petlan) [RHEL-22716]
  - perf test attr: Add back missing topdown events (Michael Petlan) [RHEL-15967]
  - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-68102]
  - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-68102]
  - thermal: intel: int340x: processor: Fix warning during module unload (David Arcari) [RHEL-65903] {CVE-2024-50093}
  - x86/resctrl: Avoid overflow in MB settings in bw_validate() (David Arcari) [RHEL-59825]
  - KVM: SVM: Propagate error from snp_guest_req_init() to userspace (Bandan Das) [RHEL-65840]
  - KVM: SEV: Provide support for SNP_EXTENDED_GUEST_REQUEST NAE event (Bandan Das) [RHEL-65840]
  - x86/sev: Move sev_guest.h into common SEV header (Bandan Das) [RHEL-65840]
  - KVM: SEV: Provide support for SNP_GUEST_REQUEST NAE event (Bandan Das) [RHEL-65840]
  - perf vendor events: Move PM_BR_MPRED_CMPL event for power10 platform (Mamatha Inamdar) [RHEL-52736]
  - perf vendor events power10: Move the JSON/events (Mamatha Inamdar) [RHEL-52736]
  - perf vendor events power10: Update JSON/events (Mamatha Inamdar) [RHEL-52736]
  - perf vendor events power10: Update JSON/events (Mamatha Inamdar) [RHEL-52736]
  - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66328] {CVE-2024-50154}
  - net: explicitly clear the sk pointer, when pf->create fails (Andrea Claudi) [RHEL-66687] {CVE-2024-50186}
  - scsi: libcxgbi: Remove an unused field in struct cxgbi_device (Chris Leech) [RHEL-66745]
  - scsi: bnx2i: Remove unused declarations (Chris Leech) [RHEL-66745]
  - scsi: iscsi: Remove unused list 'connlist_err' (Chris Leech) [RHEL-66745]
  - scsi: qla4xxx: Replace deprecated strncpy() with strscpy() (Chris Leech) [RHEL-66745]
  - scsi: be2iscsi: Make some variables static (Chris Leech) [RHEL-66745]
  - net: sched: fix use-after-free in taprio_change() (Xin Long) [RHEL-65971] {CVE-2024-50127}
  - selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids() test (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: local_termination: Down ports on cleanup (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: no_forwarding: Down ports on cleanup (Ivan Vecera) [RHEL-66601]
  - selftests: net/forwarding: spawn sh inside vrf to speed up ping loop (Ivan Vecera) [RHEL-66601]
  - selftests: net: local_termination: add PTP frames to the mix (Ivan Vecera) [RHEL-66601]
  - selftests: net: local_termination: don't use xfail_on_veth() (Ivan Vecera) [RHEL-66601]
  - selftests: net: local_termination: introduce new tests which capture VLAN behavior (Ivan Vecera) [RHEL-66601]
  - selftests: net: local_termination: add one more test for VLAN-aware bridges (Ivan Vecera) [RHEL-66601]
  - selftests: net: local_termination: parameterize test name (Ivan Vecera) [RHEL-66601]
  - selftests: net: local_termination: parameterize sending interface (Ivan Vecera) [RHEL-66601]
  - selftests: net: local_termination: refactor macvlan creation/deletion (Ivan Vecera) [RHEL-66601]
  - selftests: net: lib: kill PIDs before del netns (Ivan Vecera) [RHEL-66601]
  - selftests: libs: Drop unused functions (Ivan Vecera) [RHEL-66601]
  - selftests: libs: Drop slow_path_trap_install()/_uninstall() (Ivan Vecera) [RHEL-66601]
  - selftests: mirror_gre_lag_lacp: Drop unnecessary code (Ivan Vecera) [RHEL-66601]
  - selftests: mirror: Drop dual SW/HW testing (Ivan Vecera) [RHEL-66601]
  - selftests: mirror: mirror_test(): Allow exact count of packets (Ivan Vecera) [RHEL-66601]
  - selftests: mirror: do_test_span_dir_ips(): Install accurate taps (Ivan Vecera) [RHEL-66601]
  - selftests: mirror_gre_lag_lacp: Check counters at tunnel (Ivan Vecera) [RHEL-66601]
  - selftests: lib: tc_rule_stats_get(): Move default to argument definition (Ivan Vecera) [RHEL-66601]
  - selftests: mirror: Drop direction argument from several functions (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: Add test for minimum and maximum MTU (Ivan Vecera) [RHEL-66601]
  - selftests: net: lib: remove 'ns' var in setup_ns (Ivan Vecera) [RHEL-66601]
  - selftests: net: lib: do not set ns var as readonly (Ivan Vecera) [RHEL-66601]
  - selftests: net: lib: remove ns from list after clean-up (Ivan Vecera) [RHEL-66601]
  - selftests: net: lib: ignore possible errors (Ivan Vecera) [RHEL-66601]
  - selftests: net: lib: avoid error removing empty netns name (Ivan Vecera) [RHEL-66601]
  - selftests: net: lib: support errexit with busywait (Ivan Vecera) [RHEL-66601]
  - selftests: net: local_termination: annotate the expected failures (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: add wait_for_dev() helper (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: add check_driver() helper (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: router_nh: Add a diagram (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: router_mpath_nh_res: Add a diagram (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: router_mpath_nh: Add a diagram (Ivan Vecera) [RHEL-66601]
  - selftests: drivers: hw: Include tc_common.sh in hw_stats_l3 (Ivan Vecera) [RHEL-66601]
  - selftests: drivers: hw: ethtool.sh: Adjust output (Ivan Vecera) [RHEL-66601]
  - selftests: drivers: hw: Fix ethtool_rmon (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: Add a test for testing lib.sh functionality (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: router_mpath_nh_lib: Don't skip, xfail on veth (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: Mark performance-sensitive tests (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: Change inappropriate log_test_skip() calls (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: Ditch skip_on_veth() (Ivan Vecera) [RHEL-66601]
  - selftests: mlxsw: ethtool_lanes: Source ethtool lib from correct path (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: Move several selftests (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: ipip_lib: Do not import lib.sh (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: Make {, ip6}gre-inner-v6-multipath tests more robust (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: Remove IPv6 L3 multipath hash tests (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: ethtool_mm: fall back to aggregate if device does not report pMAC stats (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: ethtool_mm: support devices with higher rx-min-frag-size (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: ethtool_rmon: Add histogram counter test (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: ethtool_mm: Skip when MAC Merge is not supported (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: add a test for MAC Merge layer (Ivan Vecera) [RHEL-66601]
  - bpf: Fix a sdiv overflow issue (CKI Backport Bot) [RHEL-64597] {CVE-2024-49888}
  - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66461] {CVE-2024-50142}
  - selinux,smack: don't bypass permissions check in inode_setsecctx hook (CKI Backport Bot) [RHEL-66109] {CVE-2024-46695}
  - ext4: don't set SB_RDONLY after filesystem errors (CKI Backport Bot) [RHEL-66718] {CVE-2024-50191}
  - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (CKI Backport Bot) [RHEL-63300] {CVE-2024-47685}
  - netfilter: bpf: must hold reference on net namespace (Florian Westphal) [RHEL-65877] {CVE-2024-50130}
  - bpf: fix order of args in call to bpf_map_kvcalloc (Viktor Malik) [RHEL-30773]
  - bpf: Allow return values 0 and 1 for kprobe session (Viktor Malik) [RHEL-30773]
  - selftests/bpf: skip the timer_lockup test for single-CPU nodes (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add tests for tail calls with locks and refs (Viktor Malik) [RHEL-30773]
  - bpf: Unify resource leak checks (Viktor Malik) [RHEL-30773]
  - bpf: Tighten tail call checks for lingering locks, RCU, preempt_disable (Viktor Malik) [RHEL-30773]
  - bpf: fix do_misc_fixups() for bpf_get_branch_snapshot() (Viktor Malik) [RHEL-30773]
  - bpf: use type_may_be_null() helper for nullable-param check (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add timer lockup selftest (Viktor Malik) [RHEL-30773]
  - bpf: Defer work in bpf_timer_cancel_and_free (Viktor Malik) [RHEL-30773]
  - bpf: Fail bpf_timer_cancel when callback is being cancelled (Viktor Malik) [RHEL-30773]
  - selftests/bpf: amend for wrong bpf_wq_set_callback_impl signature (Viktor Malik) [RHEL-30773]
  - bpf: helpers: fix bpf_wq_set_callback_impl signature (Viktor Malik) [RHEL-30773]
  - bpf: Fix atomic probe zero-extension (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add more ring buffer test coverage (Viktor Malik) [RHEL-30773]
  - bpf: Change bpf_session_cookie return value to __u64 * (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add a few tests to cover (Viktor Malik) [RHEL-30773]
  - bpf: Add missed var_off setting in coerce_subreg_to_size_sx() (Viktor Malik) [RHEL-30773]
  - bpf: Add missed var_off setting in set_sext32_default_val() (Viktor Malik) [RHEL-30773]
  - bpf: Harden __bpf_kfunc tag against linker kfunc removal (Viktor Malik) [RHEL-30773]
  - compiler_types.h: Define __retain for __attribute__((__retain__)) (Viktor Malik) [RHEL-30773]
  - bpf: fix UML x86_64 compile failure (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add test coverage for reg_set_min_max handling (Viktor Malik) [RHEL-30773]
  - bpf: Reduce stack consumption in check_stack_write_fixed_off (Viktor Malik) [RHEL-30773]
  - bpf: Fix reg_set_min_max corruption of fake_reg (Viktor Malik) [RHEL-30773]
  - bpf: Make bpf_session_cookie() kfunc return long * (Viktor Malik) [RHEL-30773]
  - bpf: Set run context for rawtp test_run callback (Viktor Malik) [RHEL-30773]
  - bpf, devmap: Remove unnecessary if check in for loop (Viktor Malik) [RHEL-30773]
  - libbpf: don't close(-1) in multi-uprobe feature detector (Viktor Malik) [RHEL-30773]
  - bpf: Fix bpf_session_cookie BTF_ID in special_kfunc_set list (Viktor Malik) [RHEL-30773]
  - powerpc/bpf: enforce full ordering for ATOMIC operations with BPF_FETCH (Viktor Malik) [RHEL-30773]
  - selftests/bpf: extend multi-uprobe tests with USDTs (Viktor Malik) [RHEL-30773]
  - selftests/bpf: extend multi-uprobe tests with child thread case (Viktor Malik) [RHEL-30773]
  - libbpf: detect broken PID filtering logic for multi-uprobe (Viktor Malik) [RHEL-30773]
  - bpf: remove unnecessary rcu_read_{lock,unlock}() in multi-uprobe attach logic (Viktor Malik) [RHEL-30773]
  - bpf: fix multi-uprobe PID filtering logic (Viktor Malik) [RHEL-30773]
  - bpf: Fix potential integer overflow in resolve_btfids (Viktor Malik) [RHEL-30773]
  - selftests/bpf: add more variations of map-in-map situations (Viktor Malik) [RHEL-30773]
  - bpf: save extended inner map info for percpu array maps as well (Viktor Malik) [RHEL-30773]
  - bpf, docs: Fix the description of 'src' in ALU instructions (Viktor Malik) [RHEL-30773]
  - bpf: make list_for_each_entry portable (Viktor Malik) [RHEL-30773]
  - bpf: ignore expected GCC warning in test_global_func10.c (Viktor Malik) [RHEL-30773]
  - bpf: disable strict aliasing in test_global_func9.c (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Fix a few tests for GCC related warnings. (Viktor Malik) [RHEL-30773]
  - s390/bpf: Emit a barrier for BPF_FETCH instructions (Viktor Malik) [RHEL-30773]
  - kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later (Viktor Malik) [RHEL-30773]
  - kbuild: avoid too many execution of scripts/pahole-flags.sh (Viktor Malik) [RHEL-30773]
  - bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD (Viktor Malik) [RHEL-30773]
  - bpf: guard BPF_NO_PRESERVE_ACCESS_INDEX in skb_pkt_end.c (Viktor Malik) [RHEL-30773]
  - bpf: avoid UB in usages of the __imm_insn macro (Viktor Malik) [RHEL-30773]
  - bpf: avoid uninitialized warnings in verifier_global_subprogs.c (Viktor Malik) [RHEL-30773]
  - bpf, arm64: Add support for lse atomics in bpf_arena (Viktor Malik) [RHEL-30773]
  - selftests/bpf: shorten subtest names for struct_ops_module test (Viktor Malik) [RHEL-30773]
  - selftests/bpf: validate struct_ops early failure detection logic (Viktor Malik) [RHEL-30773]
  - libbpf: improve early detection of doomed-to-fail BPF program loading (Viktor Malik) [RHEL-30773]
  - libbpf: fix libbpf_strerror_r() handling unknown errors (Viktor Malik) [RHEL-30773]
  - selftests/bpf: add another struct_ops callback use case test (Viktor Malik) [RHEL-30773]
  - libbpf: handle yet another corner case of nulling out struct_ops program (Viktor Malik) [RHEL-30773]
  - libbpf: remove unnecessary struct_ops prog validity check (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add CFLAGS per source file and runner (Viktor Malik) [RHEL-30773]
  - bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC (Viktor Malik) [RHEL-30773]
  - bpf: Disable some `attribute ignored' warnings in GCC (Viktor Malik) [RHEL-30773]
  - bpf: Avoid __hidden__ attribute in static object (Viktor Malik) [RHEL-30773]
  - bpf: Remove redundant page mask of vmf->address (Viktor Malik) [RHEL-30773]
  - selftests/bpf: MUL range computation tests. (Viktor Malik) [RHEL-30773]
  - bpf/verifier: relax MUL range computation check (Viktor Malik) [RHEL-30773]
  - selftests/bpf: XOR and OR range computation tests. (Viktor Malik) [RHEL-30773]
  - bpf/verifier: improve XOR and OR range computation (Viktor Malik) [RHEL-30773]
  - bpf/verifier: refactor checks for range computation (Viktor Malik) [RHEL-30773]
  - bpf/verifier: replace calls to mark_reg_unknown. (Viktor Malik) [RHEL-30773]
  - bpftool, selftests/hid/bpf: Fix 29 clang warnings (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Use bpf_tracing.h instead of bpf_tcp_helpers.h (Viktor Malik) [RHEL-30773]
  - powerpc/bpf: enable kfunc call (Viktor Malik) [RHEL-30773]
  - libbpf: Avoid casts from pointers to enums in bpf_tracing.h (Viktor Malik) [RHEL-30773]
  - libbpf: Fix bpf_ksym_exists() in GCC (Viktor Malik) [RHEL-30773]
  - libbpf: fix ring_buffer__consume_n() return result logic (Viktor Malik) [RHEL-30773]
  - libbpf: fix potential overflow in ring__consume_n() (Viktor Malik) [RHEL-30773]
  - bpf: Missing trailing slash in tools/testing/selftests/bpf/Makefile (Viktor Malik) [RHEL-30773]
  - libbpf: Fix error message in attach_kprobe_multi (Viktor Malik) [RHEL-30773]
  - libbpf: Fix error message in attach_kprobe_session (Viktor Malik) [RHEL-30773]
  - libbpf: better fix for handling nulled-out struct_ops program (Viktor Malik) [RHEL-30773]
  - selftests/bpf: add tests for the "module: Function" syntax (Viktor Malik) [RHEL-30773]
  - libbpf: support "module: Function" syntax for tracing programs (Viktor Malik) [RHEL-30773]
  - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-30773 RHEL-64874] {CVE-2024-38564}
  - selftests/bpf: Add kprobe session cookie test (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add kprobe session test (Viktor Malik) [RHEL-30773]
  - libbpf: Add kprobe session attach type name to attach_type_name (Viktor Malik) [RHEL-30773]
  - libbpf: Add support for kprobe session attach (Viktor Malik) [RHEL-30773]
  - bpf: Add support for kprobe session cookie (Viktor Malik) [RHEL-30773]
  - bpf: Add support for kprobe session context (Viktor Malik) [RHEL-30773]
  - bpf: Add support for kprobe session attach (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Drop an unused local variable (Viktor Malik) [RHEL-30773]
  - bpf: Do not walk twice the hash map on free (Viktor Malik) [RHEL-30773]
  - bpf: Do not walk twice the map on free (Viktor Malik) [RHEL-30773]
  - selftests/bpf: validate nulled-out struct_ops program is handled properly (Viktor Malik) [RHEL-30773]
  - libbpf: handle nulled-out program in struct_ops correctly (Viktor Malik) [RHEL-30773]
  - bpf: Include linux/types.h for u32 (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Free strdup memory in veristat (Viktor Malik) [RHEL-30773]
  - bpf: Switch to krealloc_array() (Viktor Malik) [RHEL-30773]
  - bpf: Use struct_size() (Viktor Malik) [RHEL-30773]
  - samples/bpf: Add valid info for VMLINUX_BTF (Viktor Malik) [RHEL-30773]
  - bpf: Fix verifier assumptions about socket->sk (Viktor Malik) [RHEL-30773]
  - bpf, docs: Clarify PC use in instruction-set.rst (Viktor Malik) [RHEL-30773]
  - bpf_helpers.h: Define bpf_tail_call_static when building with GCC (Viktor Malik) [RHEL-30773]
  - bpf, docs: Add introduction for use in the ISA Internet Draft (Viktor Malik) [RHEL-30773]
  - selftests/bpf: dummy_st_ops should reject 0 for non-nullable params (Viktor Malik) [RHEL-30773]
  - bpf: check bpf_dummy_struct_ops program params for test runs (Viktor Malik) [RHEL-30773]
  - selftests/bpf: do not pass NULL for non-nullable params in dummy_st_ops (Viktor Malik) [RHEL-30773]
  - selftests/bpf: adjust dummy_st_ops_success to detect additional error (Viktor Malik) [RHEL-30773]
  - bpf: mark bpf_dummy_struct_ops.test_1 parameter as nullable (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add ring_buffer__consume_n test. (Viktor Malik) [RHEL-30773]
  - bpf: Add bpf_guard_preempt() convenience macro (Viktor Malik) [RHEL-30773]
  - bpf: update the comment for BTF_FIELDS_MAX (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Fix wq test. (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add tests for preempt kfuncs (Viktor Malik) [RHEL-30773]
  - bpf: Introduce bpf_preempt_[disable,enable] kfuncs (Viktor Malik) [RHEL-30773]
  - bpf: Don't check for recursion in bpf_wq_work. (Viktor Malik) [RHEL-30773]
  - selftests/bpf: wq: add bpf_wq_start() checks (Viktor Malik) [RHEL-30773]
  - bpf: add bpf_wq_start (Viktor Malik) [RHEL-30773]
  - selftests/bpf: add checks for bpf_wq_set_callback() (Viktor Malik) [RHEL-30773]
  - bpf: wq: add bpf_wq_set_callback_impl (Viktor Malik) [RHEL-30773]
  - selftests/bpf: wq: add bpf_wq_init() checks (Viktor Malik) [RHEL-30773]
  - bpf: wq: add bpf_wq_init (Viktor Malik) [RHEL-30773]
  - selftests/bpf: add bpf_wq tests (Viktor Malik) [RHEL-30773]
  - bpf: allow struct bpf_wq to be embedded in arraymaps and hashmaps (Viktor Malik) [RHEL-30773]
  - bpf: add support for KF_ARG_PTR_TO_WORKQUEUE (Viktor Malik) [RHEL-30773]
  - bpf: verifier: bail out if the argument is not a map (Viktor Malik) [RHEL-30773]
  - tools: sync include/uapi/linux/bpf.h (Viktor Malik) [RHEL-30773]
  - bpf: add support for bpf_wq user type (Viktor Malik) [RHEL-30773]
  - bpf: replace bpf_timer_cancel_and_free with a generic helper (Viktor Malik) [RHEL-30773]
  - bpf: replace bpf_timer_set_callback with a generic helper (Viktor Malik) [RHEL-30773]
  - bpf: replace bpf_timer_init with a generic helper (Viktor Malik) [RHEL-30773]
  - bpf: make timer data struct more generic (Viktor Malik) [RHEL-30773]
  - bpf: Fix typos in comments (Viktor Malik) [RHEL-30773]
  - bpf: Fix typo in function save_aux_ptr_type (Viktor Malik) [RHEL-30773]
  - bpf, docs: Fix formatting nit in instruction-set.rst (Viktor Malik) [RHEL-30773]
  - bpf, docs: Clarify helper ID and pointer terms in instruction-set.rst (Viktor Malik) [RHEL-30773]
  - bpf: Fix JIT of is_mov_percpu_addr instruction. (Viktor Malik) [RHEL-30773]
  - libbpf: Fix dump of subsequent char arrays (Viktor Malik) [RHEL-30773]
  - libbpf: Fix misaligned array closing bracket (Viktor Malik) [RHEL-30773]
  - bpftool: Address minor issues in bash completion (Viktor Malik) [RHEL-30773]
  - bpftool: Update documentation where progs/maps can be passed by name (Viktor Malik) [RHEL-30773]
  - bpf: Harden and/or/xor value tracking in verifier (Viktor Malik) [RHEL-30773]
  - bpf, tests: Fix typos in comments (Viktor Malik) [RHEL-30773]
  - btf: Avoid weak external references (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add read_trace_pipe_iter function (Viktor Malik) [RHEL-30773]
  - bpftool: Fix typo in error message (Viktor Malik) [RHEL-30773]
  - selftest/bpf: Test a perf BPF program that suppresses side effects (Viktor Malik) [RHEL-30773]
  - tools include: Add some common function attributes (Viktor Malik) [RHEL-30773]
  - bpf: Choose RCU Tasks based on TASKS_RCU rather than PREEMPTION (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Enable tests for atomics with cpuv4 (Viktor Malik) [RHEL-30773]
  - bpftool: Add link dump support for BPF_LINK_TYPE_SOCKMAP (Viktor Malik) [RHEL-30773]
  - libbpf: Add bpf_link support for BPF_PROG_TYPE_SOCKMAP (Viktor Malik) [RHEL-30773]
  - bpf: Add bpf_link support for sk_msg and sk_skb progs [UAPI headers only] (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add tests for atomics in bpf_arena. (Viktor Malik) [RHEL-30773]
  - bpf: Add support for certain atomics in bpf_arena to x86 JIT (Viktor Malik) [RHEL-30773]
  - selftests/bpf: eliminate warning of get_cgroup_id_from_path() (Viktor Malik) [RHEL-30773]
  - libbpf: Add ring__consume_n / ring_buffer__consume_n (Viktor Malik) [RHEL-30773]
  - libbpf: ringbuf: Allow to consume up to a certain amount of items (Viktor Malik) [RHEL-30773]
  - libbpf: Start v1.5 development cycle (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Verify calling core kfuncs from BPF_PROG_TYPE_SYCALL (Viktor Malik) [RHEL-30773]
  - bpf: Allow invoking kfuncs from BPF_PROG_TYPE_SYSCALL progs (Viktor Malik) [RHEL-30773]
  - bpf, docs: Editorial nits in instruction-set.rst (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Make sure libbpf doesn't enforce the signature of a func pointer. (Viktor Malik) [RHEL-30773]
  - selftests/bpf: add test for bpf_for_each_map_elem() with different maps (Viktor Malik) [RHEL-30773]
  - bpf: allow invoking bpf_for_each_map_elem with different maps (Viktor Malik) [RHEL-30773]
  - bpf: store both map ptr and state in bpf_insn_aux_data (Viktor Malik) [RHEL-30773]
  - bpf: fix perf_snapshot_branch_stack link failure (Viktor Malik) [RHEL-30773]
  - selftests/bpf: add fp-leaking precise subprog result tests (Viktor Malik) [RHEL-30773]
  - bpf: prevent r10 register from being marked as precise (Viktor Malik) [RHEL-30773]
  - bpftool: Mount bpffs on provided dir instead of parent dir (Viktor Malik) [RHEL-30773]
  - bpf: inline bpf_get_branch_snapshot() helper (Viktor Malik) [RHEL-30773]
  - bpf: make bpf_get_branch_snapshot() architecture-agnostic (Viktor Malik) [RHEL-30773]
  - bpf: Optimize emit_mov_imm64(). (Viktor Malik) [RHEL-30773]
  - bpf: handle CONFIG_SMP=n configuration in x86 BPF JIT (Viktor Malik) [RHEL-30773]
  - bpf: inline bpf_map_lookup_elem() helper for PERCPU_HASH map (Viktor Malik) [RHEL-30773]
  - bpf: inline bpf_map_lookup_elem() for PERCPU_ARRAY maps (Viktor Malik) [RHEL-30773]
  - bpf: inline bpf_get_smp_processor_id() helper (Viktor Malik) [RHEL-30773]
  - bpf: add special internal-only MOV instruction to resolve per-CPU addrs (Viktor Malik) [RHEL-30773]
  - bpf: Replace deprecated strncpy with strscpy (Viktor Malik) [RHEL-30773]
  - bpf: Add arm64 JIT support for bpf_addr_space_cast instruction. (Viktor Malik) [RHEL-30773]
  - bpf: Add arm64 JIT support for PROBE_MEM32 pseudo instructions. (Viktor Malik) [RHEL-30773]
  - libbpf: Use local bpf_helpers.h include (Viktor Malik) [RHEL-30773]
  - bpf: Improve program stats run-time calculation (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Skip test when perf_event_open returns EOPNOTSUPP (Viktor Malik) [RHEL-30773]
  - bpftool: Use __typeof__() instead of typeof() in BPF skeleton (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Using llvm may_goto inline asm for cond_break macro (Viktor Malik) [RHEL-30773]
  - bpf: Add a verbose message if map limit is reached (Viktor Malik) [RHEL-30773]
  - bpf: Fix typo in uapi doc comments (Viktor Malik) [RHEL-30773]
  - bpftool: Clean-up typos, punctuation, list formatting in docs (Viktor Malik) [RHEL-30773]
  - bpftool: Remove useless emphasis on command description in man pages (Viktor Malik) [RHEL-30773]
  - bpftool: Use simpler indentation in source rST for documentation (Viktor Malik) [RHEL-30773]
  - selftests/bpf: make multi-uprobe tests work in RELEASE=1 mode (Viktor Malik) [RHEL-30773]
  - bpf: Avoid kfree_rcu() under lock in bpf_lpm_trie. (Viktor Malik) [RHEL-30773]
  - bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add a kprobe_multi subtest to use addrs instead of syms (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Fix kprobe_multi_bench_attach test failure with LTO kernel (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add {load,search}_kallsyms_custom_local() (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Refactor trace helper func load_kallsyms_local() (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Refactor some functions for kprobe_multi_test (Viktor Malik) [RHEL-30773]
  - libbpf: Handle <orig_name>.llvm.<hash> symbol properly (Viktor Malik) [RHEL-30773]
  - libbpf: Mark libbpf_kallsyms_parse static function (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Replace CHECK with ASSERT macros for ksyms test (Viktor Malik) [RHEL-30773]
  - selftests/bpf: add batched tp/raw_tp/fmodret tests (Viktor Malik) [RHEL-30773]
  - bpf: add bpf_modify_return_test_tp() kfunc triggering tracepoint (Viktor Malik) [RHEL-30773]
  - selftests/bpf: lazy-load trigger bench BPF programs (Viktor Malik) [RHEL-30773]
  - selftests/bpf: remove syscall-driven benchs, keep syscall-count only (Viktor Malik) [RHEL-30773]
  - selftests/bpf: add batched, mostly in-kernel BPF triggering benchmarks (Viktor Malik) [RHEL-30773]
  - bpf: Mitigate latency spikes associated with freeing non-preallocated htab (Viktor Malik) [RHEL-30773]
  - selftests/bpf: rename and clean up userspace-triggered benchmarks (Viktor Malik) [RHEL-30773]
  - bpf,arena: Use helper sizeof_field in struct accessors (Viktor Malik) [RHEL-30773]
  - bpf: implement insn_is_cast_user() helper for JITs (Viktor Malik) [RHEL-30773]
  - bpf: Avoid get_kernel_nofault() to fetch kprobe entry IP (Viktor Malik) [RHEL-30773]
  - bpf: Sync uapi bpf.h to tools directory (Viktor Malik) [RHEL-30773]
  - libbpf: Add new sec_def "sk_skb/verdict" (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Mark uprobe trigger functions with nocf_check attribute (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Use syscall(SYS_gettid) instead of gettid() wrapper in bench (Viktor Malik) [RHEL-30773]
  - bpf-next: Avoid goto in regs_refine_cond_op() (Viktor Malik) [RHEL-30773]
  - bpftool: Clean up HOST_CFLAGS, HOST_LDFLAGS for bootstrap bpftool (Viktor Malik) [RHEL-30773]
  - selftests/bpf: scale benchmark counting by using per-CPU counters (Viktor Malik) [RHEL-30773]
  - bpftool: Remove unnecessary source files from bootstrap version (Viktor Malik) [RHEL-30773]
  - bpftool: Enable libbpf logs when loading pid_iter in debug mode (Viktor Malik) [RHEL-30773]
  - selftests/bpf: add raw_tp/tp_btf BPF cookie subtests (Viktor Malik) [RHEL-30773]
  - libbpf: add support for BPF cookie for raw_tp/tp_btf programs (Viktor Malik) [RHEL-30773]
  - bpf: support BPF cookie in raw tracepoint (raw_tp, tp_btf) programs (Viktor Malik) [RHEL-30773]
  - bpf: pass whole link instead of prog when triggering raw tracepoint (Viktor Malik) [RHEL-30773]
  - bpf: flatten bpf_probe_register call chain (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add a sk_msg prog bpf_get_ns_current_pid_tgid() test (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Refactor out some functions in ns_current_pid_tgid test (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test (Viktor Malik) [RHEL-30773]
  - bpf: Allow helper bpf_get_[ns_]current_pid_tgid() for all prog types (Viktor Malik) [RHEL-30773]
  - bpf/lpm_trie: Inline longest_prefix_match for fastpath (Viktor Malik) [RHEL-30773]
  - bpf: Check return from set_memory_rox() (Viktor Malik) [RHEL-30773]
  - libbpbpf: Check bpf_map/bpf_program fd validity (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Remove second semicolon (Viktor Malik) [RHEL-30773]
  - bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro() (Viktor Malik) [RHEL-30773]
  - bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro() (Viktor Malik) [RHEL-30773]
  - bpf: preserve sleepable bit in subprog info (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Ensure libbpf skip all-zeros fields of struct_ops maps. (Viktor Malik) [RHEL-30773]
  - libbpf: Skip zeroed or null fields if not found in the kernel type. (Viktor Malik) [RHEL-30773]
  - bpftool: Fix missing pids during link show (Viktor Malik) [RHEL-30773]
  - bpftool: Cast pointers for shadow types explicitly. (Viktor Malik) [RHEL-30773]
  - arm64: probes: Remove broken LDR (literal) uprobe support (CKI Backport Bot) [RHEL-66045] {CVE-2024-50099}
  - xfrm: fix one more kernel-infoleak in algo dumping (CKI Backport Bot) [RHEL-65959] {CVE-2024-50110}
  - net: napi: Prevent overflow of napi_defer_hard_irqs (Antoine Tenart) [RHEL-63914] {CVE-2024-50018}
  - net: tighten bad gso csum offset check in virtio_net_hdr (Guillaume Nault) [RHEL-62411]
  - udp: fix receiving fraglist GSO packets (Guillaume Nault) [RHEL-62411]
  - redhat/configs: For aarch64/RT, default kstack randomization off (Gabriele Monaco) [RHEL-62390]
  - wifi: ath11k: fix RCU documentation in ath11k_mac_op_ipv6_changed() (Antoine Tenart) [RHEL-62205]
  - wifi: ath11k: use RCU when accessing struct inet6_dev::ac_list (Antoine Tenart) [RHEL-62205]
  - ipv6: Fix address dump when IPv6 is disabled on an interface (Antoine Tenart) [RHEL-62205]
  - ipv6: remove RTNL protection from inet6_dump_addr() (Antoine Tenart) [RHEL-62205]
  - ipv6: use xa_array iterator to implement inet6_dump_addr() (Antoine Tenart) [RHEL-62205]
  - ipv6: remove unnecessary local variable (Antoine Tenart) [RHEL-62205]
  - ipv6: make in6_dump_addrs() lockless (Antoine Tenart) [RHEL-62205]
  - ipv6: make inet6_fill_ifaddr() lockless (Antoine Tenart) [RHEL-62205]
  - ipv6: anycast: complete RCU handling of struct ifacaddr6 (Antoine Tenart) [RHEL-62205]
  - inet: fix inet_fill_ifaddr() flags truncation (Antoine Tenart) [RHEL-62204]
  - inet6: expand rcu_read_lock() scope in inet6_dump_addr() (Antoine Tenart) [RHEL-62204]
  - rtnetlink: make the "split" NLM_DONE handling generic (Antoine Tenart) [RHEL-62204]
  - ipv4: correctly iterate over the target netns in inet_dump_ifaddr() (Antoine Tenart) [RHEL-62204]
  - ipv4: Fix address dump when IPv4 is disabled on an interface (Antoine Tenart) [RHEL-62204]
  - rtnetlink: use xarray iterator to implement rtnl_dump_ifinfo() (Antoine Tenart) [RHEL-62204]
  - inet: use xa_array iterator to implement inet_dump_ifaddr() (Antoine Tenart) [RHEL-62204]
  - inet: prepare inet_base_seq() to run without RTNL (Antoine Tenart) [RHEL-62204]
  - inet: annotate data-races around ifa->ifa_flags (Antoine Tenart) [RHEL-62204]
  - inet: annotate data-races around ifa->ifa_preferred_lft (Antoine Tenart) [RHEL-62204]
  - inet: annotate data-races around ifa->ifa_valid_lft (Antoine Tenart) [RHEL-62204]
  - inet: annotate data-races around ifa->ifa_tstamp and ifa->ifa_cstamp (Antoine Tenart) [RHEL-62204]
  - ipv6: use xa_array iterator to implement inet6_netconf_dump_devconf() (Antoine Tenart) [RHEL-62203]
  - ipv6/addrconf: annotate data-races around devconf fields (II) (Antoine Tenart) [RHEL-62203]
  - ipv6: Remove duplicate statements (Antoine Tenart) [RHEL-62203]
  - ipv6/addrconf: annotate data-races around devconf fields (I) (Antoine Tenart) [RHEL-62203]
  - ipv6: addrconf_disable_policy() optimization (Antoine Tenart) [RHEL-62203]
  - ipv6: annotate data-races around devconf->disable_policy (Antoine Tenart) [RHEL-62203]
  - ipv6: annotate data-races around devconf->proxy_ndp (Antoine Tenart) [RHEL-62203]
  - ipv6: annotate data-races in rt6_probe() (Antoine Tenart) [RHEL-62203]
  - ipv6: annotate data-races around idev->cnf.ignore_routes_with_linkdown (Antoine Tenart) [RHEL-62203]
  - ipv6: annotate data-races in ndisc_router_discovery() (Antoine Tenart) [RHEL-62203]
  - ipv6: annotate data-races around cnf.forwarding (Antoine Tenart) [RHEL-62203]
  - ipv6: annotate data-races around cnf.hop_limit (Antoine Tenart) [RHEL-62203]
  - ipv6: annotate data-races around cnf.mtu6 (Antoine Tenart) [RHEL-62203]
  - ipv6: addrconf_disable_ipv6() optimization (Antoine Tenart) [RHEL-62203]
  - ipv6: annotate data-races around cnf.disable_ipv6 (Antoine Tenart) [RHEL-62203]
  - ipv6: add ipv6_devconf_read_txrx cacheline_group (Antoine Tenart) [RHEL-62203]
  - inet: use xa_array iterator to implement inet_netconf_dump_devconf() (Antoine Tenart) [RHEL-62202]
  - inet: do not use RTNL in inet_netconf_get_devconf() (Antoine Tenart) [RHEL-62202]
  - inet: annotate devconf data-races (Antoine Tenart) [RHEL-62202]
  - slip: make slhc_remember() more robust against malicious packets (CKI Backport Bot) [RHEL-63892] {CVE-2024-50033}
  - mm: split critical region in remap_file_pages() and invoke LSMs in between (Waiman Long) [RHEL-63349]
  - mm: call the security_mmap_file() LSM hook in remap_file_pages() (Waiman Long) [RHEL-63349] {CVE-2024-47745}
  - NFS: Further fixes to attribute delegation a/mtime changes (Scott Mayhew) [RHEL-59704]
  - NFS: Fix attribute delegation behaviour on exclusive create (Scott Mayhew) [RHEL-59704]
  - rpcrdma: Always release the rpcrdma_device's xa_array (Scott Mayhew) [RHEL-59704]
  - nfsd: fix possible badness in FREE_STATEID (Scott Mayhew) [RHEL-59704]
  - NFSv4.2: Fix detection of "Proxying of Times" server support (Scott Mayhew) [RHEL-59704]
  - nfsd: fix initial getattr on write delegation (Scott Mayhew) [RHEL-59704]
  - nfsd: untangle code in nfsd4_deleg_getattr_conflict() (Scott Mayhew) [RHEL-59704]
  - NFSD: remove redundant assignment operation (Scott Mayhew) [RHEL-59704]
  - nfsd/sunrpc: have svc tasks sleep in TASK_IDLE (Scott Mayhew) [RHEL-59704]
  - nfsd: fix nfsd4_deleg_getattr_conflict in presence of third party lease (Scott Mayhew) [RHEL-59704]
  - fs/nfsd: fix update of inode attrs in CB_GETATTR (Scott Mayhew) [RHEL-59704]
  - nfsd: fix potential UAF in nfsd4_cb_getattr_release (Scott Mayhew) [RHEL-59704]
  - nfsd: hold reference to delegation when updating it for cb_getattr (Scott Mayhew) [RHEL-59704]
  - nfsd: prevent panic for nfsv4.0 closed files in nfs4_show_open (Scott Mayhew) [RHEL-59704]
  - NFS: Avoid unnecessary rescanning of the per-server delegation list (Scott Mayhew) [RHEL-59704]
  - NFSv4: Fix clearing of layout segments in layoutreturn (Scott Mayhew) [RHEL-59704]
  - NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations (Scott Mayhew) [RHEL-59704]
  - nfs: fix bitmap decoder to handle a 3rd word (Scott Mayhew) [RHEL-59704]
  - nfs: fix the fetch of FATTR4_OPEN_ARGUMENTS (Scott Mayhew) [RHEL-59704]
  - rpcrdma: Trace connection registration and unregistration (Scott Mayhew) [RHEL-59704]
  - rpcrdma: Use XA_FLAGS_ALLOC instead of XA_FLAGS_ALLOC1 (Scott Mayhew) [RHEL-59704]
  - rpcrdma: Device kref is over-incremented on error from xa_alloc (Scott Mayhew) [RHEL-59704]
  - nfsd: don't set SVC_SOCK_ANONYMOUS when creating nfsd sockets (Scott Mayhew) [RHEL-59704]
  - sunrpc: avoid -Wformat-security warning (Scott Mayhew) [RHEL-59704]
  - SUNRPC: Fix a race to wake a sync task (Scott Mayhew) [RHEL-59704]
  - nfs: split nfs_read_folio (Scott Mayhew) [RHEL-59704]
  - nfs: do not extend writes to the entire folio (Scott Mayhew) [RHEL-59704]
  - nfs/blocklayout: add support for NVMe (Scott Mayhew) [RHEL-59704]
  - nfs: remove nfs_page_length (Scott Mayhew) [RHEL-59704]
  - nfs: remove the unused max_deviceinfo_size field from struct pnfs_layoutdriver_type (Scott Mayhew) [RHEL-59704]
  - nfsd: new netlink ops to get/set server pool_mode (Scott Mayhew) [RHEL-59704]
  - sunrpc: refactor pool_mode setting code (Scott Mayhew) [RHEL-59704]
  - nfsd: allow passing in array of thread counts via netlink (Scott Mayhew) [RHEL-59704]
  - nfsd: make nfsd_svc take an array of thread counts (Scott Mayhew) [RHEL-59704]
  - sunrpc: fix up the special handling of sv_nrpools == 1 (Scott Mayhew) [RHEL-59704]
  - SUNRPC: Add a trace point in svc_xprt_deferred_close (Scott Mayhew) [RHEL-59704]
  - lockd: Use *-y instead of *-objs in Makefile (Scott Mayhew) [RHEL-59704]
  - svcrdma: Handle ADDR_CHANGE CM event properly (Scott Mayhew) [RHEL-59704]
  - svcrdma: Refactor the creation of listener CMA ID (Scott Mayhew) [RHEL-59704]
  - NFSD: remove unused structs 'nfsd3_voidargs' (Scott Mayhew) [RHEL-59704]
  - NFSD: harden svcxdr_dupstr() and svcxdr_tmpalloc() against integer overflows (Scott Mayhew) [RHEL-59704]
  - nfs: don't reuse partially completed requests in nfs_lock_and_join_requests (Scott Mayhew) [RHEL-59704]
  - nfs: move nfs_wait_on_request to write.c (Scott Mayhew) [RHEL-59704]
  - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Scott Mayhew) [RHEL-59704]
  - nfs: fold nfs_folio_find_and_lock_request into nfs_lock_and_join_requests (Scott Mayhew) [RHEL-59704]
  - nfs: simplify nfs_folio_find_and_lock_request (Scott Mayhew) [RHEL-59704]
  - nfs: remove nfs_folio_private_request (Scott Mayhew) [RHEL-59704]
  - nfs: remove dead code for the old swap over NFS implementation (Scott Mayhew) [RHEL-59704]
  - nfs: Block on write congestion (Scott Mayhew) [RHEL-59704]
  - nfs: Properly initialize server->writeback (Scott Mayhew) [RHEL-59704]
  - nfs: Drop pointless check from nfs_commit_release_pages() (Scott Mayhew) [RHEL-59704]
  - nfs/blocklayout: SCSI layout trace points for reservation key reg/unreg (Scott Mayhew) [RHEL-59704]
  - nfs/blocklayout: Report only when /no/ device is found (Scott Mayhew) [RHEL-59704]
  - nfs/blocklayout: Fix premature PR key unregistration (Scott Mayhew) [RHEL-59704]
  - NFSv4/pNFS: Do layout state recovery upon reboot (Scott Mayhew) [RHEL-59704]
  - NFSv4/pNFS: Remove redundant call to unhash the layout (Scott Mayhew) [RHEL-59704]
  - NFSv4/pnfs: Give nfs4_proc_layoutreturn() a flags argument (Scott Mayhew) [RHEL-59704]
  - NFSv4/pNFS: Retry the layout return later in case of a timeout or reboot (Scott Mayhew) [RHEL-59704]
  - NFSv4/pNFS: Handle server reboots in pnfs_poc_release() (Scott Mayhew) [RHEL-59704]
  - NFSv4/pNFS: Add a helper to defer failed layoutreturn calls (Scott Mayhew) [RHEL-59704]
  - NFSv4/pnfs: Add support for the PNFS_LAYOUT_FILE_BULK_RETURN flag (Scott Mayhew) [RHEL-59704]
  - pNFS: Add a flag argument to pnfs_destroy_layouts_byclid() (Scott Mayhew) [RHEL-59704]
  - NFSv4: Clean up encode_nfs4_stateid() (Scott Mayhew) [RHEL-59704]
  - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Scott Mayhew) [RHEL-59704]
  - NFSv4/pnfs: Remove redundant list check (Scott Mayhew) [RHEL-59704]
  - NFSv4: Don't send delegation-related share access modes to CLOSE (Scott Mayhew) [RHEL-59704]
  - Return the delegation when deleting sillyrenamed files (Scott Mayhew) [RHEL-59704]
  - NFSv4: Ask for a delegation or an open stateid in OPEN (Scott Mayhew) [RHEL-59704]
  - NFSv4: Add support for OPEN4_RESULT_NO_OPEN_STATEID (Scott Mayhew) [RHEL-59704]
  - NFSv4: Detect support for OPEN4_SHARE_ACCESS_WANT_OPEN_XOR_DELEGATION (Scott Mayhew) [RHEL-59704]
  - NFSv4: Add support for the FATTR4_OPEN_ARGUMENTS attribute (Scott Mayhew) [RHEL-59704]
  - NFSv4: Don't request atime/mtime/size if they are delegated to us (Scott Mayhew) [RHEL-59704]
  - NFSv4: Fix up delegated attributes in nfs_setattr (Scott Mayhew) [RHEL-59704]
  - NFSv4: Delegreturn must set m/atime when they are delegated (Scott Mayhew) [RHEL-59704]
  - NFSv4: Enable attribute delegations (Scott Mayhew) [RHEL-59704]
  - NFSv4: Add a capability for delegated attributes (Scott Mayhew) [RHEL-59704]
  - NFSv4: Add recovery of attribute delegations (Scott Mayhew) [RHEL-59704]
  - NFSv4: Add support for delegated atime and mtime attributes (Scott Mayhew) [RHEL-59704]
  - NFSv4: Add a flags argument to the 'have_delegation' callback (Scott Mayhew) [RHEL-59704]
  - NFSv4: Add CB_GETATTR support for delegated attributes (Scott Mayhew) [RHEL-59704]
  - NFSv4: Plumb in XDR support for the new delegation-only setattr op (Scott Mayhew) [RHEL-59704]
  - NFSv4: Add new attribute delegation definitions (Scott Mayhew) [RHEL-59704]
  - NFSv4: Refactor nfs4_opendata_check_deleg() (Scott Mayhew) [RHEL-59704]
  - NFSv4: Clean up open delegation return structure (Scott Mayhew) [RHEL-59704]
  - fs: nfs: add missing MODULE_DESCRIPTION() macros (Scott Mayhew) [RHEL-59704]
  - NFS: remove unused struct 'mnt_fhstatus' (Scott Mayhew) [RHEL-59704]
  - xprtrdma: Remove temp allocation of rpcrdma_rep objects (Scott Mayhew) [RHEL-59704]
  - xprtrdma: Clean up synopsis of frwr_mr_unmap() (Scott Mayhew) [RHEL-59704]
  - xprtrdma: Handle device removal outside of the CM event handler (Scott Mayhew) [RHEL-59704]
  - rpcrdma: Implement generic device removal (Scott Mayhew) [RHEL-59704]
  - xprtrdma: removed asm-generic headers from verbs.c (Scott Mayhew) [RHEL-59704]
  - nfs: drop usage of folio_file_pos (Scott Mayhew) [RHEL-59704]
  - nfs: Avoid flushing many pages with NFS_FILE_SYNC (Scott Mayhew) [RHEL-59704]
  - nfs: propagate readlink errors in nfs_symlink_filler (Scott Mayhew) [RHEL-59704]
  - pNFS: rework pnfs_generic_pg_check_layout to check IO range (Scott Mayhew) [RHEL-59704]
  - pNFS/filelayout: check layout segment range (Scott Mayhew) [RHEL-59704]
  - NFS: Don't enable NFS v2 by default (Scott Mayhew) [RHEL-59704]
  - SUNRPC: fix handling expired GSS context (Scott Mayhew) [RHEL-59704]
  - NFSv4: Fixup smatch warning for ambiguous return (Scott Mayhew) [RHEL-59704]
  - NFS: make sure lock/nolock overriding local_lock mount option (Scott Mayhew) [RHEL-59704]
  - pNFS/filelayout: Specify the layout segment range in LAYOUTGET (Scott Mayhew) [RHEL-59704]
  - pNFS/filelayout: Remove the whole file layout requirement (Scott Mayhew) [RHEL-59704]
  - NFS/knfsd: Remove the invalid NFS error 'NFSERR_OPNOTSUPP' (Scott Mayhew) [RHEL-59704]
  - nfsd: set security label during create operations (Scott Mayhew) [RHEL-59704]
  - NFSD: Add COPY status code to OFFLOAD_STATUS response (Scott Mayhew) [RHEL-59704]
  - NFSD: Record status of async copy operation in struct nfsd4_copy (Scott Mayhew) [RHEL-59704]
  - SUNRPC: Remove comment for sp_lock (Scott Mayhew) [RHEL-59704]
  - NFSD: add listener-{set,get} netlink command (Scott Mayhew) [RHEL-59704]
  - SUNRPC: add a new svc_find_listener helper (Scott Mayhew) [RHEL-59704]
  - SUNRPC: introduce svc_xprt_create_from_sa utility routine (Scott Mayhew) [RHEL-59704]
  - NFSD: add write_version to netlink command (Scott Mayhew) [RHEL-59704]
  - NFSD: convert write_threads to netlink command (Scott Mayhew) [RHEL-59704]
  - NFSD: allow callers to pass in scope string to nfsd_svc (Scott Mayhew) [RHEL-59704]
  - NFSD: move nfsd_mutex handling into nfsd_svc callers (Scott Mayhew) [RHEL-59704]
  - lockd: host: Remove unnecessary statements＇host = NULL;＇ (Scott Mayhew) [RHEL-59704]
  - nfsd: optimise recalculate_deny_mode() for a common case (Scott Mayhew) [RHEL-59704]
  - nfsd: add tracepoint in mark_client_expired_locked (Scott Mayhew) [RHEL-59704]
  - nfsd: new tracepoint for check_slot_seqid (Scott Mayhew) [RHEL-59704]
  - nfsd: drop extraneous newline from nfsd tracepoints (Scott Mayhew) [RHEL-59704]
  - nfsd: trivial GET_DIR_DELEGATION support (Scott Mayhew) [RHEL-59704]
  - NFSD: Move callback_wq into struct nfs4_client (Scott Mayhew) [RHEL-59704]
  - nfsd: drop st_mutex before calling move_to_close_lru() (Scott Mayhew) [RHEL-59704]
  - nfsd: replace rp_mutex to avoid deadlock in move_to_close_lru() (Scott Mayhew) [RHEL-59704]
  - nfsd: move nfsd4_cstate_assign_replay() earlier in open handling. (Scott Mayhew) [RHEL-59704]
  - nfsd: perform all find_openstateowner_str calls in the one place. (Scott Mayhew) [RHEL-59704]
  - Revert "NFSD: Convert the callback workqueue to use delayed_work" (Scott Mayhew) [RHEL-59704]
  - Revert "NFSD: Reschedule CB operations when backchannel rpc_clnt is shut down" (Scott Mayhew) [RHEL-59704]
  - nfs: Handle error of rpc_proc_register() in nfs_net_init(). (Scott Mayhew) [RHEL-59704]
  - SUNRPC: add a missing rpc_stat for TCP TLS (Scott Mayhew) [RHEL-59704]
  - NFSD: Clean up nfsd4_encode_replay() (Scott Mayhew) [RHEL-59704]
  - NFS: trace the uniquifier of fscache (Scott Mayhew) [RHEL-59704]
  - NFS: remove unused variable nfs_rpcstat (Scott Mayhew) [RHEL-59704]
  - nfs: properly protect nfs_direct_req fields (Scott Mayhew) [RHEL-59704]
  - NFS: enable nconnect for RDMA (Scott Mayhew) [RHEL-59704]
  - NFSv4: nfs4_do_open() is incorrectly triggering state recovery (Scott Mayhew) [RHEL-59704]
  - NFS: avoid infinite loop in pnfs_update_layout. (Scott Mayhew) [RHEL-59704]
  - nfs: make the rpc_stat per net namespace (Scott Mayhew) [RHEL-59704]
  - nfs: expose /proc/net/sunrpc/nfs in net namespaces (Scott Mayhew) [RHEL-59704]
  - sunrpc: add a struct rpc_stats arg to rpc_create_args (Scott Mayhew) [RHEL-59704]
  - nfs: remove unused NFS_CALL macro (Scott Mayhew) [RHEL-59704]
  - NFSv4.1: add tracepoint to trunked nfs4_exchange_id calls (Scott Mayhew) [RHEL-59704]
  - NFSD: send OP_CB_RECALL_ANY to clients when number of delegations reaches its limit (Scott Mayhew) [RHEL-59704]
  - NFSD: Document nfsd_setattr() fill-attributes behavior (Scott Mayhew) [RHEL-59704]
  - nfsd: Fix NFSv3 atomicity bugs in nfsd_setattr() (Scott Mayhew) [RHEL-59704]
  - NFSD: OP_CB_RECALL_ANY should recall both read and write delegations (Scott Mayhew) [RHEL-59704]
  - NFSD: handle GETATTR conflict with write delegation (Scott Mayhew) [RHEL-59704]
  - NFSD: add support for CB_GETATTR callback (Scott Mayhew) [RHEL-59704]
  - nfsd: clean up comments over nfs4_client definition (Scott Mayhew) [RHEL-59704]
  - svcrdma: Post WRs for Write chunks in svc_rdma_sendto() (Scott Mayhew) [RHEL-59704]
  - svcrdma: Post the Reply chunk and Send WR together (Scott Mayhew) [RHEL-59704]
  - svcrdma: Move write_info for Reply chunks into struct svc_rdma_send_ctxt (Scott Mayhew) [RHEL-59704]
  - svcrdma: Post Send WR chain (Scott Mayhew) [RHEL-59704]
  - svcrdma: Fix retry loop in svc_rdma_send() (Scott Mayhew) [RHEL-59704]
  - svcrdma: Prevent a UAF in svc_rdma_send() (Scott Mayhew) [RHEL-59704]
  - svcrdma: Fix SQ wake-ups (Scott Mayhew) [RHEL-59704]
  - svcrdma: Increase the per-transport rw_ctx count (Scott Mayhew) [RHEL-59704]
  - svcrdma: Update max_send_sges after QP is created (Scott Mayhew) [RHEL-59704]
  - svcrdma: Report CQ depths in debugging output (Scott Mayhew) [RHEL-59704]
  - svcrdma: Reserve an extra WQE for ib_drain_rq() (Scott Mayhew) [RHEL-59704]
  - nfsd: allow layout state to be admin-revoked. (Scott Mayhew) [RHEL-59704]
  - nfsd: allow delegation state ids to be revoked and then freed (Scott Mayhew) [RHEL-59704]
  - nfsd: allow open state ids to be revoked and then freed (Scott Mayhew) [RHEL-59704]
  - nfsd: allow lock state ids to be revoked and then freed (Scott Mayhew) [RHEL-59704]
  - nfsd: allow admin-revoked NFSv4.0 state to be freed. (Scott Mayhew) [RHEL-59704]
  - nfsd: report in /proc/fs/nfsd/clients/*/states when state is admin-revoke (Scott Mayhew) [RHEL-59704]
  - nfsd: allow state with no file to appear in /proc/fs/nfsd/clients/*/states (Scott Mayhew) [RHEL-59704]
  - nfsd: prepare for supporting admin-revocation of state (Scott Mayhew) [RHEL-59704]
  - nfsd: split sc_status out of sc_type (Scott Mayhew) [RHEL-59704]
  - nfsd: avoid race after unhash_delegation_locked() (Scott Mayhew) [RHEL-59704]
  - nfsd: don't call functions with side-effecting inside WARN_ON() (Scott Mayhew) [RHEL-59704]
  - nfsd: hold ->cl_lock for hash_delegation_locked() (Scott Mayhew) [RHEL-59704]
  - nfsd: remove stale comment in nfs4_show_deleg() (Scott Mayhew) [RHEL-59704]
  - NFSD: Remove redundant cb_seq_status initialization (Scott Mayhew) [RHEL-59704]
  - SUNRPC: Remove EXPORT_SYMBOL_GPL for svc_process_bc() (Scott Mayhew) [RHEL-59704]
  - nfsd: make svc_stat per-network namespace instead of global (Scott Mayhew) [RHEL-59704]
  - nfsd: remove nfsd_stats, make th_cnt a global counter (Scott Mayhew) [RHEL-59704]
  - nfsd: make all of the nfsd stats per-network namespace (Scott Mayhew) [RHEL-59704]
  - nfsd: expose /proc/net/sunrpc/nfsd in net namespaces (Scott Mayhew) [RHEL-59704]
  - nfsd: rename NFSD_NET_* to NFSD_STATS_* (Scott Mayhew) [RHEL-59704]
  - sunrpc: use the struct net as the svc proc private (Scott Mayhew) [RHEL-59704]
  - sunrpc: remove ->pg_stats from svc_program (Scott Mayhew) [RHEL-59704]
  - sunrpc: pass in the sv_stats struct through svc_create_pooled (Scott Mayhew) [RHEL-59704]
  - nfsd: stop setting ->pg_stats for unused stats (Scott Mayhew) [RHEL-59704]
  - sunrpc: don't change ->sv_stats if it doesn't exist (Scott Mayhew) [RHEL-59704]
  - nfsd: use __fput_sync() to avoid delayed closing of files. (Scott Mayhew) [RHEL-59704]
  - nfsd: Don't leave work of closing files to a work queue (Scott Mayhew) [RHEL-59704]
  - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int (Scott Mayhew) [RHEL-59704]
  - nfs: fix regression in handling of fsc= option in NFSv4 (Scott Mayhew) [RHEL-59704]
  - pnfs/filelayout: add tracepoint to getdeviceinfo (Scott Mayhew) [RHEL-59704]
  - NFS: Display the "fsc=" mount option if it is set (Scott Mayhew) [RHEL-59704]
  - SUNRPC: add xrpt id to rpc_stats_latency tracepoint (Scott Mayhew) [RHEL-59704]
  - SUNRPC: Add a transport callback to handle dequeuing of an RPC request (Scott Mayhew) [RHEL-59704]
  - SUNRPC: Don't try to send when the connection is shutting down (Scott Mayhew) [RHEL-59704]
  - SUNRPC: Don't retry using the same source port if connection failed (Scott Mayhew) [RHEL-59704]
  - SUNRPC: change the back-channel queue to lwq (Scott Mayhew) [RHEL-59704]
  - SUNRPC: discard sp_lock (Scott Mayhew) [RHEL-59704]
  - SUNRPC: change sp_nrthreads to atomic_t (Scott Mayhew) [RHEL-59704]
  - SUNRPC: use lwq for sp_sockets - renamed to sp_xprts (Scott Mayhew) [RHEL-59704]
  - SUNRPC: only have one thread waking up at a time (Scott Mayhew) [RHEL-59704]
  - SUNRPC: rename some functions from rqst_ to svc_thread_ (Scott Mayhew) [RHEL-59704]
  - lib: add light-weight queuing mechanism. (Scott Mayhew) [RHEL-59704]
  - redhat/configs: add CONFIG_LWQ_TEST (Scott Mayhew) [RHEL-59704]
  - llist: add llist_del_first_this() (Scott Mayhew) [RHEL-59704]
  - SUNRPC: change service idle list to be an llist (Scott Mayhew) [RHEL-59704]
  - llist: add interface to check if a node is on a list. (Scott Mayhew) [RHEL-59704]
  - SUNRPC: discard SP_CONGESTED (Scott Mayhew) [RHEL-59704]
  - SUNRPC: add list of idle threads (Scott Mayhew) [RHEL-59704]
  - SUNRPC: change how svc threads are asked to exit. (Scott Mayhew) [RHEL-59704]
  - nfsd: convert to ctime accessor functions (Scott Mayhew) [RHEL-59704]
  - nfs: convert to ctime accessor functions (Scott Mayhew) [RHEL-59704]
  - fs: drop the timespec64 arg from generic_update_time (Scott Mayhew) [RHEL-59704]
  - fs: convert to ctime accessor functions (Scott Mayhew) [RHEL-59704]
  - mptcp: pm: do not remove closing subflows (Davide Caratti) [RHEL-62871]
  - mptcp: pm: fix ID 0 endp usage after multiple re-creations (Davide Caratti) [RHEL-58839 RHEL-62871] {CVE-2024-46711}
  - mptcp: pm: do not remove already closed subflows (Davide Caratti) [RHEL-62871]
  - mptcp: pm: reset MPC endp ID when re-added (Davide Caratti) [RHEL-62871]
  - mptcp: pm: skip connecting to already established sf (Davide Caratti) [RHEL-62871]
  - mptcp: pm: send ACK on an active subflow (Davide Caratti) [RHEL-62871]
  - mptcp: pm: update add_addr counters after connect (Davide Caratti) [RHEL-62871]
  - selftests: mptcp: join: cannot rm sf if closed (Davide Caratti) [RHEL-62871]
  - selftests: mptcp: add evts_get_info helper (Davide Caratti) [RHEL-62871]
  - selftests: mptcp: update userspace pm test helpers (Davide Caratti) [RHEL-62871]
  - mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (Davide Caratti) [RHEL-62871 RHEL-66074] {CVE-2024-45009}
  - selftests: mptcp: join: restrict fullmesh endp on 1st sf (Davide Caratti) [RHEL-62871]
  - mptcp: pm: ADD_ADDR 0 is not a new address (Davide Caratti) [RHEL-62871]
  - mptcp: avoid duplicated SUB_CLOSED events (Davide Caratti) [RHEL-62871]
  - selftests: mptcp: join: check removing ID 0 endpoint (Davide Caratti) [RHEL-62871]
  - mptcp: pm: fix RM_ADDR ID for the initial subflow (Davide Caratti) [RHEL-62871]
  - mptcp: pm: reuse ID 0 after delete and re-add (Davide Caratti) [RHEL-62871]
  - mptcp: pr_debug: add missing \n at the end (Davide Caratti) [RHEL-62871]
  - mptcp: sched: check both backup in retrans (Davide Caratti) [RHEL-62871]
  - mptcp: close subflow when receiving TCP+FIN (Davide Caratti) [RHEL-62871]
  - mptcp: pm: avoid possible UaF when selecting endp (Davide Caratti) [RHEL-62871]
  - selftests: mptcp: join: validate fullmesh endp on 1st sf (Davide Caratti) [RHEL-62871]
  - mptcp: pm: fullmesh: select the right ID later (Davide Caratti) [RHEL-62871]
  - mptcp: pm: only in-kernel cannot have entries with ID 0 (Davide Caratti) [RHEL-62871]
  - mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR (Davide Caratti) [RHEL-62871]
  - mptcp: pm: only decrement add_addr_accepted for MPJ req (Davide Caratti) [RHEL-62871 RHEL-66074] {CVE-2024-45009}
  - mptcp: pm: only mark 'subflow' endp as available (Davide Caratti) [RHEL-62871 RHEL-66083] {CVE-2024-45010}
  - mptcp: pm: remove mptcp_pm_remove_subflow() (Davide Caratti) [RHEL-62871]
  - mptcp: pm: re-using ID of unused flushed subflows (Davide Caratti) [RHEL-62871]
  - selftests: mptcp: join: check re-using ID of closed subflow (Davide Caratti) [RHEL-62871]
  - mptcp: pm: re-using ID of unused removed subflows (Davide Caratti) [RHEL-62871]
  - mptcp: pm: re-using ID of unused removed ADD_ADDR (Davide Caratti) [RHEL-62871]
  - mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size (Davide Caratti) [RHEL-62871]
  - selftests: mptcp: join: test both signal & subflow (Davide Caratti) [RHEL-62871]
  - selftests: mptcp: join: ability to invert ADD_ADDR check (Davide Caratti) [RHEL-62871]
  - mptcp: pm: do not ignore 'subflow' if 'signal' flag is also set (Davide Caratti) [RHEL-62871]
  - mptcp: pm: don't try to create sf if alloc failed (Davide Caratti) [RHEL-62871]
  - mptcp: pm: reduce indentation blocks (Davide Caratti) [RHEL-62871]
  - mptcp: pm: deny endp with signal + subflow + port (Davide Caratti) [RHEL-62871]
  - mptcp: fully established after ADD_ADDR echo on MPJ (Davide Caratti) [RHEL-62871]
  - mptcp: fix duplicate data handling (Davide Caratti) [RHEL-62871]
  - mptcp: fix bad RCVPRUNED mib accounting (Davide Caratti) [RHEL-62871]
  - selftests: mptcp: join: check backup support in signal endp (Davide Caratti) [RHEL-62871]
  - mptcp: pm: fix backup support in signal endpoints (Davide Caratti) [RHEL-62871]
  - selftests: mptcp: join: validate backup in MPJ (Davide Caratti) [RHEL-62871]
  - mptcp: mib: count MPJ with backup flag (Davide Caratti) [RHEL-62871]
  - mptcp: pm: only set request_bkup flag when sending MP_PRIO (Davide Caratti) [RHEL-62871]
  - mptcp: distinguish rcv vs sent backup flag in requests (Davide Caratti) [RHEL-62871]
  - mptcp: sched: check both directions for backup (Davide Caratti) [RHEL-62871]
  - selftests: mptcp: always close input's FD if opened (Davide Caratti) [RHEL-62871]
  - selftests: mptcp: fix error path (Davide Caratti) [RHEL-62871]
  - mptcp: fix NL PM announced address accounting (Davide Caratti) [RHEL-62871]
  - mptcp: fix user-space PM announced address accounting (Davide Caratti) [RHEL-62871]
  - mptcp: add validity check for sending RM_ADDR (Davide Caratti) [RHEL-62871]
  - mptcp: pm: inc RmAddr MIB counter once per RM_ADDR ID (Davide Caratti) [RHEL-62871]
  - mptcp: include inet_common in mib.h (Davide Caratti) [RHEL-62871]
  - mptcp: move mptcp_pm_gen.h's include (Davide Caratti) [RHEL-62871]
  - mptcp: remove unnecessary else statements (Davide Caratti) [RHEL-62871]
  - mptcp: prefer strscpy over strcpy (Davide Caratti) [RHEL-62871]
  - mptcp: sockopt: info: stop early if no buffer (Davide Caratti) [RHEL-62871]
  - mptcp: fix full TCP keep-alive support (Davide Caratti) [RHEL-62871]
  - mptcp: SO_KEEPALIVE: fix getsockopt support (Davide Caratti) [RHEL-62871]
  - tcp: set TCP_DEFER_ACCEPT locklessly (Davide Caratti) [RHEL-62871]
  - tcp: set TCP_LINGER2 locklessly (Davide Caratti) [RHEL-62871]
  - tcp: set TCP_KEEPCNT locklessly (Davide Caratti) [RHEL-62871]
  - tcp: set TCP_KEEPINTVL locklessly (Davide Caratti) [RHEL-62871]
  - tcp: set TCP_USER_TIMEOUT locklessly (Davide Caratti) [RHEL-62871]
  - tcp: set TCP_SYNCNT locklessly (Davide Caratti) [RHEL-62871]
  - tcp: annotate data-races around fastopenq.max_qlen (Davide Caratti) [RHEL-62871]
  - tcp: annotate data-races around icsk->icsk_user_timeout (Davide Caratti) [RHEL-62871]
  - tcp: annotate data-races around tp->notsent_lowat (Davide Caratti) [RHEL-62871]
  - tcp: annotate data-races around rskq_defer_accept (Davide Caratti) [RHEL-62871]
  - tcp: annotate data-races around tp->linger2 (Davide Caratti) [RHEL-62871]
  - tcp: annotate data-races around icsk->icsk_syn_retries (Davide Caratti) [RHEL-62871]
  - tcp: annotate data-races around tp->keepalive_probes (Davide Caratti) [RHEL-62871]
  - tcp: annotate data-races around tp->keepalive_intvl (Davide Caratti) [RHEL-62871]
  - tcp: annotate data-races around tp->keepalive_time (Davide Caratti) [RHEL-62871]
  - tcp: annotate data-races around tp->tsoffset (Davide Caratti) [RHEL-62871]
  - tcp: annotate data-races around tp->tcp_tx_delay (Davide Caratti) [RHEL-62871]
  - net: do not delay dst_entries_add() in dst_release() (Paolo Abeni) [RHEL-62849]
  - net: add more sanity checks to qdisc_pkt_len_init() (Paolo Abeni) [RHEL-62849 RHEL-64328] {CVE-2024-49948}
  - net: Fix gso_features_check to check for both dev->gso_{ipv4_,}max_size (Paolo Abeni) [RHEL-62849]
  - net: busy-poll: use ktime_get_ns() instead of local_clock() (Paolo Abeni) [RHEL-62849]
  - pktgen: use cpus_read_lock() in pg_net_init() (Paolo Abeni) [RHEL-62849]
  - net: linkwatch: use system_unbound_wq (Paolo Abeni) [RHEL-62849]
  - rtnetlink: Don't ignore IFLA_TARGET_NETNSID when ifname is specified in rtnl_dellink(). (Paolo Abeni) [RHEL-62849]
  - net: page_pool: fix warning code (Paolo Abeni) [RHEL-62849]
  - net: give more chances to rcu in netdev_wait_allrefs_any() (Paolo Abeni) [RHEL-62849]
  - bpf: Fix a kernel verifier crash in stacksafe() (CKI Backport Bot) [RHEL-66098] {CVE-2024-45020}
  - bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() (Viktor Malik) [RHEL-63330] {CVE-2024-47675}
  - bpf: Fix out-of-bounds write in trie_get_next_key() (CKI Backport Bot) [RHEL-66876] {CVE-2024-50262}
  - selftests/bpf: Add return value checks for failed tests (Viktor Malik) [RHEL-63343]
  - selftests/bpf: Workaround strict bpf_lsm return value check. (Viktor Malik) [RHEL-63343]
  - bpf: Fix compare error in function retval_range_within (Viktor Malik) [RHEL-63343]
  - bpf, lsm: Add check for BPF LSM return value (CKI Backport Bot) [RHEL-63343] {CVE-2024-47703}
  - scsi: sd: Fix off-by-one error in sd_read_block_characteristics() (Ewan D. Milne) [RHEL-62151]
  - scsi: scsi_debug: Remove a useless memset() (Ewan D. Milne) [RHEL-62151]
  - scsi: sd: Retry START STOP UNIT commands (Ewan D. Milne) [RHEL-62151]
  - scsi: sd: Remove duplicate included header file linux/bio-integrity.h (Ewan D. Milne) [RHEL-62151]
  - scsi: core: Remove obsoleted declaration for scsi_driverbyte_string() (Ewan D. Milne) [RHEL-62151]
  - scsi: core: Simplify an alloc_workqueue() invocation (Ewan D. Milne) [RHEL-62151]
  - scsi: ufs: Simplify alloc*_workqueue() invocation (Ewan D. Milne) [RHEL-62151]
  - scsi: stex: Simplify an alloc_ordered_workqueue() invocation (Ewan D. Milne) [RHEL-62151]
  - scsi: scsi_transport_fc: Simplify alloc_workqueue() invocations (Ewan D. Milne) [RHEL-62151]
  - scsi: snic: Simplify alloc_workqueue() invocations (Ewan D. Milne) [RHEL-62151]
  - scsi: qedi: Simplify an alloc_workqueue() invocation (Ewan D. Milne) [RHEL-62151]
  - scsi: qedf: Simplify alloc_workqueue() invocations (Ewan D. Milne) [RHEL-62151]
  - scsi: myrs: Simplify an alloc_ordered_workqueue() invocation (Ewan D. Milne) [RHEL-62151]
  - scsi: myrb: Simplify an alloc_ordered_workqueue() invocation (Ewan D. Milne) [RHEL-62151]
  - scsi: mpt3sas: Simplify an alloc_ordered_workqueue() invocation (Ewan D. Milne) [RHEL-62151]
  - scsi: mpi3mr: Simplify an alloc_ordered_workqueue() invocation (Ewan D. Milne) [RHEL-62151]
  - scsi: ibmvscsi_tgt: Simplify an alloc_workqueue() invocation (Ewan D. Milne) [RHEL-62151]
  - scsi: fcoe: Simplify alloc_ordered_workqueue() invocations (Ewan D. Milne) [RHEL-62151]
  - scsi: esas2r: Simplify an alloc_ordered_workqueue() invocation (Ewan D. Milne) [RHEL-62151]
  - scsi: bfa: Simplify an alloc_ordered_workqueue() invocation (Ewan D. Milne) [RHEL-62151]
  - scsi: be2iscsi: Simplify an alloc_workqueue() invocation (Ewan D. Milne) [RHEL-62151]
  - scsi: mptfusion: Simplify the alloc*_workqueue() invocations (Ewan D. Milne) [RHEL-62151]
  - scsi: Expand all create*_workqueue() invocations (Ewan D. Milne) [RHEL-62151]
  - scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress (Ewan D. Milne) [RHEL-62151]
  - scsi: sd: Do not attempt to configure discard unless LBPME is set (Ewan D. Milne) [RHEL-62151]
  - scsi: core: Fix the return value of scsi_logical_block_count() (Ewan D. Milne) [RHEL-62151]
  - scsi: sd: Keep the discard mode stable (Ewan D. Milne) [RHEL-62151]
  - minmax: scsi: fix mis-use of 'clamp()' in sr.c (Ewan D. Milne) [RHEL-62151]
  - scsi: scsi_debug: Fix create target debugfs failure (Ewan D. Milne) [RHEL-62151]
  - scsi: core: Fix an incorrect comment (Ewan D. Milne) [RHEL-62151]
  - scsi: core: Disable CDL by default (Ewan D. Milne) [RHEL-62151]
  - scsi: sd: Use READ(16) when reading block zero on large capacity disks (Ewan D. Milne) [RHEL-62151]
  - scsi: core: Pass sdev to blk_mq_alloc_queue() (Ewan D. Milne) [RHEL-62151]
  - scsi: sr: Fix unintentional arithmetic wraparound (Ewan D. Milne) [RHEL-62151]
  - scsi: core: alua: I/O errors for ALUA state transitions (Ewan D. Milne) [RHEL-62151]
  - scsi: core: Improve the code for showing commands in debugfs (Ewan D. Milne) [RHEL-62151]
  - scsi: core: Introduce scsi_cmd_list_info() (Ewan D. Milne) [RHEL-62151]
  - scsi: scsi_transport_srp: Fix a couple of kernel-doc warnings (Ewan D. Milne) [RHEL-62151]
  - scsi: scsi_transport_fc: Add kernel-doc for function return (Ewan D. Milne) [RHEL-62151]
  - scsi: core: Add function return kernel-doc for 2 functions (Ewan D. Milne) [RHEL-62151]
  - scsi: libfcoe: Fix a slew of kernel-doc warnings (Ewan D. Milne) [RHEL-62151]
  - scsi: iser: Fix @read_stag kernel-doc warning (Ewan D. Milne) [RHEL-62151]
  - scsi: core: Add kernel-doc for scsi_msg_to_host_byte() (Ewan D. Milne) [RHEL-62151]
  - scsi: st: Drop driver owner initialization (Ewan D. Milne) [RHEL-62151]
  - scsi: sr: Drop driver owner initialization (Ewan D. Milne) [RHEL-62151]
  - scsi: ses: Drop driver owner initialization (Ewan D. Milne) [RHEL-62151]
  - scsi: sd: Drop driver owner initialization (Ewan D. Milne) [RHEL-62151]
  - scsi: core: Store owner from modules with scsi_register_driver() (Ewan D. Milne) [RHEL-62151]
  - scsi: devinfo: Replace strncpy() and manual pad (Ewan D. Milne) [RHEL-62151]
  - scsi: sd: Have pr commands retry UAs (Ewan D. Milne) [RHEL-62151]
  - scsi: Fix sshdr use in scsi_cdl_enable (Ewan D. Milne) [RHEL-62151]
  - scsi: Add support for block PR read keys/reservation (Ewan D. Milne) [RHEL-62151]
  - scsi: Move sd_pr_type to scsi_common (Ewan D. Milne) [RHEL-62151]
  - scsi: Rename sd_pr_command (Ewan D. Milne) [RHEL-62151]
  - scsi: core: Remove scsi_execute_req()/scsi_execute() functions (Ewan D. Milne) [RHEL-62151]
  - scsi: Adjust recently added fields to SCSI and FC structures (Ewan D. Milne) [RHEL-62151]
  - dpll: add Embedded SYNC feature for a pin (CKI Backport Bot) [RHEL-57743]
  - dpll: fix return value check for kmemdup (CKI Backport Bot) [RHEL-57743]
  - sched: sch_cake: fix bulk flow accounting logic for host fairness (CKI Backport Bot) [RHEL-60755] {CVE-2024-46828}
  - mm/huge_memory: don't unpoison huge_zero_folio (Aristeu Rozanski) [RHEL-47802] {CVE-2024-40914}


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-534.el9]
changelog:
  - block: fix integer overflow in BLKSECDISCARD (Ming Lei) [RHEL-64512] {CVE-2024-49994}
  - fsnotify: clear PARENT_WATCHED flags lazily (CKI Backport Bot) [RHEL-62134] {CVE-2024-47660}
  - thunderbolt: Fix KASAN reported stack out-of-bounds read in tb_retimer_scan() (Desnes Nunes) [RHEL-59051]
  - usb: typec: tcpm: restrict SNK_WAIT_CAPABILITIES_TIMEOUT transitions to non self-powered devices (Desnes Nunes) [RHEL-59051]
  - drm/test: fix the gem shmem test to map the sg table. (Desnes Nunes) [RHEL-59051]
  - dt-bindings: usb: qcom,dwc3: Update ipq5332 interrupt info (Desnes Nunes) [RHEL-59051]
  - minmax: improve macro expansion and type checking (Desnes Nunes) [RHEL-59051]
  - minmax: simplify min()/max()/clamp() implementation (Desnes Nunes) [RHEL-59051]
  - minmax: don't use max() in situations that want a C constant expression (Desnes Nunes) [RHEL-59051]
  - minmax: make generic MIN() and MAX() macros available everywhere (Desnes Nunes) [RHEL-59051]
  - minmax: simplify and clarify min_t()/max_t() implementation (Desnes Nunes) [RHEL-59051]
  - minmax: add a few more MIN_T/MAX_T users (Desnes Nunes) [RHEL-59051]
  - minmax: avoid overly complicated constant expressions in VM code (Desnes Nunes) [RHEL-59051]
  - mm: set pageblock_order to HPAGE_PMD_ORDER in case with !CONFIG_HUGETLB_PAGE but THP enabled (Desnes Nunes) [RHEL-59051]
  - minmax: fix indentation of __cmp_once() and __clamp_once() (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Fix busy loop on ASUS VivoBooks (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Remove useless error check from ucsi_read_error() (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Call CANCEL from single location (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Common function for the GET_PD_MESSAGE command (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Only assign the identity structure if the PPM supports it (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Don't truncate the reads (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Remove unused fields from struct ucsi_connector_status (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Fix cable registration (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Fix the partner PD revision (Desnes Nunes) [RHEL-59051]
  - usb: dwc3: core: update LC timer as per USB Spec V3.2 (Desnes Nunes) [RHEL-59051]
  - usb: dwc3: Avoid waking up gadget during startxfer (Desnes Nunes) [RHEL-59051]
  - USB: serial: option: add MeiG Smart SRM825L (Desnes Nunes) [RHEL-59051]
  - usb: cdnsp: fix for Link TRB with TC (Desnes Nunes) [RHEL-59051]
  - usb: dwc3: ep0: Don't reset resource alloc flag (including ep0) (Desnes Nunes) [RHEL-59051]
  - usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes() (Desnes Nunes) [RHEL-59051]
  - usb: typec: fsa4480: Relax CHIP_ID check (Desnes Nunes) [RHEL-59051]
  - dt-bindings: usb: microchip,usb2514: Fix reference USB device schema (Desnes Nunes) [RHEL-59051]
  - cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller (Desnes Nunes) [RHEL-59051]
  - usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function (Desnes Nunes) [RHEL-59051]
  - usb: dwc3: core: Prevent USB core invalid event buffer address access (Desnes Nunes) [RHEL-59051] {CVE-2024-46675}
  - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration (Desnes Nunes) [RHEL-59051]
  - Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET" (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Fix the return value of ucsi_run_command() (Desnes Nunes) [RHEL-59051]
  - usb: xhci: fix duplicate stall handling in handle_tx_event() (Desnes Nunes) [RHEL-59051]
  - usb: xhci: Check for xhci->interrupters being allocated in xhci_mem_clearup() (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Fix a deadlock in ucsi_send_command_common() (Desnes Nunes) [RHEL-59051]
  - usb: typec: tcpm: avoid sink goto SNK_UNATTACHED state if not received source capability message (Desnes Nunes) [RHEL-59051]
  - thunderbolt: Mark XDomain as unplugged when router is removed (Desnes Nunes) [RHEL-59051]
  - phy: fsl-imx8mq-usb: fix tuning parameter name (Desnes Nunes) [RHEL-59051]
  - thunderbolt: Fix memory leaks in {port|retimer}_sb_regs_write() (Desnes Nunes) [RHEL-59051]
  - USB: serial: debug: do not echo input by default (Desnes Nunes) [RHEL-59051]
  - usb: typec: tipd: Delete extra semi-colon (Desnes Nunes) [RHEL-59051]
  - usb: typec: tipd: Fix dereferencing freeing memory in tps6598x_apply_patch() (Desnes Nunes) [RHEL-59051]
  - usb: typec: tcpci: Fix error code in tcpci_check_std_output_cap() (Desnes Nunes) [RHEL-59051]
  - usb: typec: fsa4480: Check if the chip is really there (Desnes Nunes) [RHEL-59051]
  - usb: gadget: core: Check for unset descriptor (Desnes Nunes) [RHEL-59051] {CVE-2024-44960}
  - dt-bindings: usb: microchip,usb2514: Add USB2517 compatible (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Fix custom control mapping probing (Desnes Nunes) [RHEL-59051]
  - USB: uas: Implement the new shutdown callback (Desnes Nunes) [RHEL-59051]
  - USB: core: add 'shutdown' callback to usb_driver (Desnes Nunes) [RHEL-59051]
  - usb: typec: Drop explicit initialization of struct i2c_device_id::driver_data to 0 (Desnes Nunes) [RHEL-59051]
  - usb: dwc3: enable CCI support for AMD-xilinx DWC3 controller (Desnes Nunes) [RHEL-59051]
  - usb: gadget: Use u16 types for 16-bit fields (Desnes Nunes) [RHEL-59051]
  - pinctrl: tegra: Use scope based of_node_put() cleanups (Desnes Nunes) [RHEL-59051]
  - of: Introduce for_each_*_child_of_node_scoped() to automate of_node_put() handling (Desnes Nunes) [RHEL-59051]
  - of: Add cleanup.h based auto release via __free(device_node) markings (Desnes Nunes) [RHEL-59051]
  - writing_musb_glue_layer.rst: Fix broken URL (Desnes Nunes) [RHEL-59051]
  - redhat: configs: Drop CONFIG_MEMSTICK_REALTEK_PCI config option (Desnes Nunes) [RHEL-59051]
  - memstick: rtsx_pci_ms: Remove Realtek PCI memstick driver (Desnes Nunes) [RHEL-59051]
  - USB: serial: garmin_gps: use struct_size() to allocate pkt (Desnes Nunes) [RHEL-59051]
  - USB: serial: garmin_gps: annotate struct garmin_packet with __counted_by (Desnes Nunes) [RHEL-59051]
  - USB: serial: add missing MODULE_DESCRIPTION() macros (Desnes Nunes) [RHEL-59051]
  - USB: serial: spcp8x5: remove unused struct 'spcp8x5_usb_ctrl_arg' (Desnes Nunes) [RHEL-59051]
  - usb: dwc3: core: Check all ports when set phy suspend (Desnes Nunes) [RHEL-59051]
  - usb: typec: tcpci: add support to set connector orientation (Desnes Nunes) [RHEL-59051]
  - dt-bindings: usb: Convert fsl-usb to yaml (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: reorder operations in ucsi_run_command() (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: extract common code for command handling (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: inline ucsi_read_message_in (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: rework command execution functions (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: split read operation (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: simplify command sending API (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: move ucsi_acknowledge() from ucsi_read_error() (Desnes Nunes) [RHEL-59051]
  - phy: core: Fix documentation of of_phy_get (Desnes Nunes) [RHEL-59051]
  - redhat/configs: Adding CONFIG_UCSI_LENOVO_YOGA_C630 (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: add Lenovo Yoga C630 glue driver (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: UCSI2.0 Get Error Status changes (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: UCSI2.0 Get Error Status data structure changes (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Only set number of plug altmodes after registration (Desnes Nunes) [RHEL-59051]
  - xhci: sort out TRB Endpoint ID bitfield macros (Desnes Nunes) [RHEL-59051]
  - xhci: Apply XHCI_RESET_TO_DEFAULT quirk to TGL (Desnes Nunes) [RHEL-59051]
  - usb: xhci: add 'goto' for halted endpoint check in handle_tx_event() (Desnes Nunes) [RHEL-59051]
  - usb: xhci: move process TD code out of the while loop (Desnes Nunes) [RHEL-59051]
  - usb: xhci: remove infinite loop prevention (Desnes Nunes) [RHEL-59051]
  - usb: xhci: remove false xhci_giveback_urb_in_irq() header comment (Desnes Nunes) [RHEL-59051]
  - usb: xhci: ensure skipped isoc TDs are returned when isoc ring is stopped (Desnes Nunes) [RHEL-59051]
  - xhci: rework xhci internal endpoint halt state detection. (Desnes Nunes) [RHEL-59051]
  - usb: xhci: remove obsolete sanity check debug messages (Desnes Nunes) [RHEL-59051]
  - usb: xhci: improve error message for targetless transfer event (Desnes Nunes) [RHEL-59051]
  - usb: xhci: move untargeted transfer event handling to a separate function (Desnes Nunes) [RHEL-59051]
  - usb: xhci: move all segment re-numbering to xhci_link_rings() (Desnes Nunes) [RHEL-59051]
  - usb: xhci: move link chain bit quirk checks into one helper function. (Desnes Nunes) [RHEL-59051]
  - usb: xhci: remove unused argument from handle_port_status() (Desnes Nunes) [RHEL-59051]
  - usb: xhci: remove unused argument from xhci_handle_cmd_config_ep() (Desnes Nunes) [RHEL-59051]
  - usb: xhci: remove unused 'xhci' argument (Desnes Nunes) [RHEL-59051]
  - usb: xhci: remove 'num_trbs' from struct 'xhci_td' (Desnes Nunes) [RHEL-59051]
  - xhci: dbc: Allow users to modify DbC poll interval via sysfs (Desnes Nunes) [RHEL-59051]
  - xhci: Set correct transferred length for cancelled isoc transfers (Desnes Nunes) [RHEL-59051]
  - xhci: show usb device name in xhci urb tracing (Desnes Nunes) [RHEL-59051]
  - xhci: Remove dead code in xhci_move_dequeue_past_td() (Desnes Nunes) [RHEL-59051]
  - usb: chipidea: ci_hdrc_imx: Switch to RUNTIME/SYSTEM_SLEEP_PM_OPS() (Desnes Nunes) [RHEL-59051]
  - usb: misc: onboard_usb_dev: Add match function (Desnes Nunes) [RHEL-59051]
  - usb: uas: set host status byte on data completion error (Desnes Nunes) [RHEL-59051]
  - media: b2c2: flexcop-usb: fix flexcop_usb_memory_req (Desnes Nunes) [RHEL-59051]
  - media: flexcop-usb: Use min macro (Desnes Nunes) [RHEL-59051]
  - media: cx231xx: Constify struct vb2_ops (Desnes Nunes) [RHEL-59051]
  - dt-bindings: usb: Add the binding example for the Genesys Logic GL3523 hub (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: psy: Add support for the charge type property (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Changing the driver data type to void (Desnes Nunes) [RHEL-59051]
  - dt-bindings: usb: qcom,dwc3: Add SC8180X compatibles (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: don't retrieve PDOs if not supported (Desnes Nunes) [RHEL-59051]
  - usb: host: xhci-plat: Add support for XHCI_WRITE_64_HI_LO (Desnes Nunes) [RHEL-59051]
  - xhci: Add a quirk for writing ERST in high-low order (Desnes Nunes) [RHEL-59051]
  - usb: dwc3: Support quirk for writing high-low order (Desnes Nunes) [RHEL-59051]
  - usb: typec: tipd: use min() to set tps6598x firmware packet size (Desnes Nunes) [RHEL-59051]
  - usb: typec: tipd: add error log to provide firmware name and size (Desnes Nunes) [RHEL-59051]
  - usb: typec: tipd: drop second firmware name read (Desnes Nunes) [RHEL-59051]
  - usb: typec: tcpm: use 'time_left' variable with wait_for_completion_timeout() (Desnes Nunes) [RHEL-59051]
  - usb: misc: Drop explicit initialization of struct i2c_device_id::driver_data to 0 (Desnes Nunes) [RHEL-59051]
  - usb: add missing MODULE_DESCRIPTION() macros (Desnes Nunes) [RHEL-59051]
  - usb: common: add missing MODULE_DESCRIPTION() macros (Desnes Nunes) [RHEL-59051]
  - usb: host: add missing MODULE_DESCRIPTION() macros (Desnes Nunes) [RHEL-59051]
  - usb: misc: add missing MODULE_DESCRIPTION() macros (Desnes Nunes) [RHEL-59051]
  - dt-bindings: usb: cdns,usb3: use common usb-drd yaml (Desnes Nunes) [RHEL-59051]
  - thunderbolt: debugfs: Use FIELD_GET() (Desnes Nunes) [RHEL-59051]
  - thunderbolt: Add receiver lane margining support for retimers (Desnes Nunes) [RHEL-59051]
  - thunderbolt: Make margining functions accept target and retimer index (Desnes Nunes) [RHEL-59051]
  - thunderbolt: Split out margining from USB4 port (Desnes Nunes) [RHEL-59051]
  - thunderbolt: Add sideband register access to debugfs (Desnes Nunes) [RHEL-59051]
  - thunderbolt: Make usb4_port_sb_read/write() available outside of usb4.c (Desnes Nunes) [RHEL-59051]
  - thunderbolt: Move usb4_port_margining_caps() declaration into correct place (Desnes Nunes) [RHEL-59051]
  - thunderbolt: Mention Thunderbolt/USB4 debugging tools in Kconfig (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Remove mappings form uvc_device_info (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Remove PLF device quirking (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Cleanup version-specific mapping (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Probe the PLF characteristics (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Refactor Power Line Frequency limit selection (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Allow custom control mapping (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Fix the bandwdith quirk on USB 3.x (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Force UVC version to 1.0a for 0408:4035 (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Override default flags (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Enforce alignment of frame and interval (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Add quirk for invalid dev_sof in Logitech C920 (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Fix integer overflow calculating timestamp (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Fix hw timestamp handling for slow FPS (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Refactor clock circular buffer (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Allow hw clock updates with buffers not full (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Quirk for invalid dev_sof in Logitech C922 (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Ignore empty TS packets (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Support timestamp lists of any size (Desnes Nunes) [RHEL-59051]
  - redhat/configs: Adding CONFIG_PHY_FSL_IMX8QM_HSIO (Desnes Nunes) [RHEL-59051]
  - phy: freescale: imx8qm-hsio: Add i.MX8QM HSIO PHY driver support (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Enable UCSI v2.0 notifications (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Add new capability bits (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Always set number of alternate modes (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Delay alternate mode discovery (Desnes Nunes) [RHEL-59051]
  - usb: typec: Update sysfs when setting ops (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Fix null pointer dereference in trace (Desnes Nunes) [RHEL-59051]
  - usb: typec: tcpm: print error on hard reset (Desnes Nunes) [RHEL-59051]
  - usb: typec: tcpm: avoid resets for missing source capability messages (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Add new notification bits (Desnes Nunes) [RHEL-59051]
  - usb: cdns3-ti: Add workaround for Errata i2409 (Desnes Nunes) [RHEL-59051]
  - usb: cdns3: Add quirk flag to enable suspend residency (Desnes Nunes) [RHEL-59051]
  - usb-storage: Optimize scan delay more precisely (Desnes Nunes) [RHEL-59051]
  - gnss: add USB support (Desnes Nunes) [RHEL-59051]
  - xfs: fix finding a last resort AG in xfs_filestream_pick_ag (CKI Backport Bot) [RHEL-66904] {CVE-2024-50216}
  - ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() (Mark Langsdorf) [RHEL-64502] {CVE-2024-49962}
  - parport: Proper fix for array out-of-bounds access (CKI Backport Bot) [RHEL-65181] {CVE-2024-50074}
  - scsi: target: core: Fix null-ptr-deref in target_alloc_device() (CKI Backport Bot) [RHEL-66470] {CVE-2024-50153}
  - blk-mq: setup queue ->tag_set before initializing hctx (CKI Backport Bot) [RHEL-65152] {CVE-2024-50081}
  - udf: fix uninit-value use in udf_get_fileshortad (CKI Backport Bot) [RHEL-66420] {CVE-2024-50143}
  - block: fix potential invalid pointer dereference in blk_add_partition (Ming Lei) [RHEL-63267] {CVE-2024-47705}
  - xfs: dquot recovery does not validate the recovered dquot (Bill O'Donnell) [RHEL-62760]
  - block: update the stable_writes flag in bdev_add (Bill O'Donnell) [RHEL-62760]
  - xfs: clean up dqblk extraction (Bill O'Donnell) [RHEL-62760]
  - xfs: respect the stable writes flag on the RT device (Bill O'Donnell) [RHEL-62760]
  - filemap: add a per-mapping stable writes flag (Bill O'Donnell) [RHEL-62760]
  - xfs: clean up FS_XFLAG_REALTIME handling in xfs_ioctl_setattr_xflags (Bill O'Donnell) [RHEL-62760]
  - xfs: inode recovery does not validate the recovered inode (Bill O'Donnell) [RHEL-62760]
  - xfs: up(ic_sema) if flushing data device fails (Bill O'Donnell) [RHEL-62760]
  - xfs: only remap the written blocks in xfs_reflink_end_cow_extent (Bill O'Donnell) [RHEL-62760]
  - xfs: abort intent items when recovery intents fail (Bill O'Donnell) [RHEL-62760]
  - xfs: factor out xfs_defer_pending_abort (Bill O'Donnell) [RHEL-62760]
  - xfs: allow read IO and FICLONE to run concurrently (Bill O'Donnell) [RHEL-62760]
  - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Bill O'Donnell) [RHEL-62760]
  - xfs: introduce protection for drop nlink (Bill O'Donnell) [RHEL-62760]
  - xfs: don't look for end of extent further than necessary in xfs_rtallocate_extent_near() (Bill O'Donnell) [RHEL-62760]
  - xfs: don't try redundant allocations in xfs_rtallocate_extent_near() (Bill O'Donnell) [RHEL-62760]
  - xfs: limit maxlen based on available space in xfs_rtallocate_extent_near() (Bill O'Donnell) [RHEL-62760]
  - xfs: return maximum free size from xfs_rtany_summary() (Bill O'Donnell) [RHEL-62760]
  - xfs: invert the realtime summary cache (Bill O'Donnell) [RHEL-62760]
  - xfs: simplify rt bitmap/summary block accessor functions (Bill O'Donnell) [RHEL-62760]
  - xfs: simplify xfs_rtbuf_get calling conventions (Bill O'Donnell) [RHEL-62760]
  - xfs: cache last bitmap block in realtime allocator (Bill O'Donnell) [RHEL-62760]
  - xfs: consolidate realtime allocation arguments (Bill O'Donnell) [RHEL-62760]
  - xfs: use accessor functions for summary info words (Bill O'Donnell) [RHEL-62760]
  - xfs: create helpers for rtsummary block/wordcount computations (Bill O'Donnell) [RHEL-62760]
  - xfs: use accessor functions for bitmap words (Bill O'Donnell) [RHEL-62760]
  - xfs: create a helper to handle logging parts of rt bitmap/summary blocks (Bill O'Donnell) [RHEL-62760]
  - xfs: create helpers for rtbitmap block/wordcount computations (Bill O'Donnell) [RHEL-62760]
  - xfs: convert rt summary macros to helpers (Bill O'Donnell) [RHEL-62760]
  - xfs: convert open-coded xfs_rtword_t pointer accesses to helper (Bill O'Donnell) [RHEL-62760]
  - xfs: remove XFS_BLOCKWSIZE and XFS_BLOCKWMASK macros (Bill O'Donnell) [RHEL-62760]
  - xfs: convert the rtbitmap block and bit macros to static inline functions (Bill O'Donnell) [RHEL-62760]
  - xfs: use shifting and masking when converting rt extents, if possible (Bill O'Donnell) [RHEL-62760]
  - xfs: create rt extent rounding helpers for realtime extent blocks (Bill O'Donnell) [RHEL-62760]
  - xfs: convert do_div calls to xfs_rtb_to_rtx helper calls (Bill O'Donnell) [RHEL-62760]
  - xfs: create helpers to convert rt block numbers to rt extent numbers (Bill O'Donnell) [RHEL-62760]
  - xfs: create a helper to convert extlen to rtextlen (Bill O'Donnell) [RHEL-62760]
  - xfs: create a helper to compute leftovers of realtime extents (Bill O'Donnell) [RHEL-62760]
  - xfs: create a helper to convert rtextents to rtblocks (Bill O'Donnell) [RHEL-62760]
  - xfs: convert rt extent numbers to xfs_rtxnum_t (Bill O'Donnell) [RHEL-62760]
  - xfs: rename xfs_verify_rtext to xfs_verify_rtbext (Bill O'Donnell) [RHEL-62760]
  - xfs: convert rt bitmap extent lengths to xfs_rtbxlen_t (Bill O'Donnell) [RHEL-62760]
  - xfs: convert rt bitmap/summary block numbers to xfs_fileoff_t (Bill O'Donnell) [RHEL-62760]
  - xfs: convert xfs_extlen_t to xfs_rtxlen_t in the rt allocator (Bill O'Donnell) [RHEL-62760]
  - xfs: move the xfs_rtbitmap.c declarations to xfs_rtbitmap.h (Bill O'Donnell) [RHEL-62760]
  - xfs: make sure maxlen is still congruent with prod when rounding down (Bill O'Donnell) [RHEL-62760]
  - xfs: rt stubs should return negative errnos when rt disabled (Bill O'Donnell) [RHEL-62760]
  - xfs: prevent rt growfs when quota is enabled (Bill O'Donnell) [RHEL-62760]
  - xfs: hoist freeing of rt data fork extent mappings (Bill O'Donnell) [RHEL-62760]
  - xfs: bump max fsgeom struct version (Bill O'Donnell) [RHEL-62760]
  - xfs: move xfs_xattr_handlers to .rodata (Bill O'Donnell) [RHEL-62760]
  - cgroup/cpuset: Correct invalid remote parition prs (Waiman Long) [RHEL-36267]
  - cgroup: Fix incorrect WARN_ON_ONCE() in css_release_work_fn() (Waiman Long) [RHEL-36267]
  - cgroup: Show # of subsystem CSSes in cgroup.stat (Waiman Long) [RHEL-36267]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-535.el9]
changelog:
  - redhat: create 'crashkernel=' addons for UKI (Vitaly Kuznetsov) [RHEL-33051]
  - redhat: avoid superfluous quotes in UKI cmdline addones (Vitaly Kuznetsov) [RHEL-33051]
  - x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y (Baoquan He) [RHEL-39727]
  - netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (CKI Backport Bot) [RHEL-66855] {CVE-2024-50251}
  - cxl/port: Fix use-after-free, permit out-of-order decoder shutdown (CKI Backport Bot) [RHEL-66836] {CVE-2024-50226}
  - fs/netfs/fscache_cookie: add missing "n_accesses" check (CKI Backport Bot) [RHEL-57214] {CVE-2024-45000}
  - ACPI: sysfs: validate return type of _STR method (CKI Backport Bot) [RHEL-63262] {CVE-2024-49860}
  - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (CKI Backport Bot) [RHEL-65117] {CVE-2024-50073}
  - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-64453] {CVE-2024-49935}
  - ext4: avoid use-after-free in ext4_ext_show_leaf() (CKI Backport Bot) [RHEL-64591] {CVE-2024-49889}
  - kthread: unpark only parked kthread (Radostin Stoyanov) [RHEL-63788] {CVE-2024-50019}
  - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66968] {CVE-2024-50192}
  - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66968] {CVE-2024-50192}
  - selftests: fib_nexthops: Test 16-bit next hop weights (Ivan Vecera) [RHEL-68365]
  - selftests: router_mpath_nh_res: Test 16-bit next hop weights (Ivan Vecera) [RHEL-68365]
  - selftests: router_mpath_nh: Test 16-bit next hop weights (Ivan Vecera) [RHEL-68365]
  - selftests: router_mpath: Sleep after MZ (Ivan Vecera) [RHEL-68365]
  - net: nexthop: Increase weight to u16 (Ivan Vecera) [RHEL-68365]
  - net: nexthop: Add flag to assert that NHGRP reserved fields are zero (Ivan Vecera) [RHEL-68365]
  - mm, slub: avoid zeroing kmalloc redzone (Waiman Long) [RHEL-64035] {CVE-2024-49885}
  - mm/slub: avoid zeroing outside-object freepointer for single free (Waiman Long) [RHEL-64035]
  - slub, kasan: improve interaction of KASAN and slub_debug poisoning (Waiman Long) [RHEL-64035]
  - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error (CKI Backport Bot) [RHEL-64518] {CVE-2024-49959}
  - page_pool: export page_pool_disable_direct_recycling() (Felix Maurer) [RHEL-57765]
  - page_pool: fix &page_pool_params kdoc issues (Felix Maurer) [RHEL-57765]
  - xsk: use generic DMA sync shortcut instead of a custom one (Felix Maurer) [RHEL-57765]
  - page_pool: check for DMA sync shortcut earlier (Felix Maurer) [RHEL-57765]
  - page_pool: don't use driver-set flags field directly (Felix Maurer) [RHEL-57765]
  - page_pool: make sure frag API fields don't span between cachelines (Felix Maurer) [RHEL-57765]
  - page_pool: add DMA-sync-for-CPU inline helper (Felix Maurer) [RHEL-57765]
  - page_pool: constify some read-only function arguments (Felix Maurer) [RHEL-57765]
  - page_pool: try direct bulk recycling (Felix Maurer) [RHEL-57765]
  - page_pool: check for PP direct cache locality later (Felix Maurer) [RHEL-57765]
  - net: page_pool: factor out page_pool recycle check (Felix Maurer) [RHEL-57765]
  - net: page_pool: fix recycle stats for system page_pool allocator (Felix Maurer) [RHEL-57765]
  - page_pool: disable direct recycling based on pool->cpuid on destroy (Felix Maurer) [RHEL-57765]
  - scsi: lpfc: Update lpfc version to 14.4.0.5 (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Support loopback tests with VMID enabled (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Revise TRACE_EVENT log flag severities from KERN_ERR to KERN_WARNING (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Restrict support for 32 byte CDBs to specific HBAs (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Update phba link state conditional before sending CMF_SYNC_WQE (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd() (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Remove trailing space after \n newline (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Update lpfc version to 14.4.0.4 (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Update PRLO handling in direct attached topology (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Fix unintentional double clearing of vmid_flag (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Remove redundant vport assignment when building an abort request (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Change diagnostic log flag during receipt of unknown ELS cmds (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Update lpfc version to 14.4.0.3 (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Fix incorrect request len mbox field when setting trunking via sysfs (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Relax PRLI issue conditions after GID_FT response (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Allow DEVICE_RECOVERY mode after RSCN receipt if in PRLI_ISSUE state (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Cancel ELS WQE instead of issuing abort when SLI port is inactive (Dick Kennedy) [RHEL-53595]
  - dm-raid: Fix WARN_ON_ONCE check for sync_thread in raid_resume (CKI Backport Bot) [RHEL-54875] {CVE-2024-43820}
  - ACPI: PRM: Clean up guid type in struct prm_handler_info (Mark Langsdorf) [RHEL-66520] {CVE-2024-50141}
  - ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context (CKI Backport Bot) [RHEL-66520] {CVE-2024-50141}
  - ext4: force disable fscrypt feature (Brian Foster) [RHEL-41061]
  - exfat: fix memory leak in exfat_load_bitmap() (CKI Backport Bot) [RHEL-63633] {CVE-2024-50013}
  - nbd: fix race between timeout and normal completion (Ming Lei) [RHEL-55992]
  - nfsd: map the EBADMSG to nfserr_io to avoid warning (Olga Kornievskaia) [RHEL-63586] {CVE-2024-49875}
  - bpf: Use nla_ok() instead of checking nla_len directly (Petr Oros) [RHEL-57755]
  - devlink: use kvzalloc() to allocate devlink instance resources (Petr Oros) [RHEL-57755]
  - Documentation: Add documentation for eswitch attribute (Petr Oros) [RHEL-57755]
  - devlink: fix port new reply cmd type (Petr Oros) [RHEL-57755]
  - tools: ynl: add header guards for nlctrl (Petr Oros) [RHEL-57755]
  - devlink: Add comments to use netlink gen tool (Petr Oros) [RHEL-57755]
  - net/netlink: Add getsockopt support for NETLINK_LISTEN_ALL_NSID (Petr Oros) [RHEL-57755]
  - netlink: specs: support generating code for genl socket priv (Petr Oros) [RHEL-57755]
  - tools: ynl: remove trailing semicolon (Petr Oros) [RHEL-57755]
  - netlink: specs: support unterminated-ok (Petr Oros) [RHEL-57755]
  - tools: ynl-gen: support using pre-defined values in attr checks (Petr Oros) [RHEL-57755]
  - ynl: samples: fix recycling rate calculation (Petr Oros) [RHEL-57755]
  - tools: ynl: Fix spelling mistake "Constructred" -> "Constructed" (Petr Oros) [RHEL-57755]
  - doc/netlink/specs: Add spec for nlctrl netlink family (Petr Oros) [RHEL-57755]
  - doc/netlink: Allow empty enum-name in ynl specs (Petr Oros) [RHEL-57755]
  - tools/net/ynl: Add nest-type-value decoding (Petr Oros) [RHEL-57755]
  - tools/net/ynl: Fix c codegen for array-nest (Petr Oros) [RHEL-57755]
  - tools/net/ynl: Fix extack decoding for netlink-raw (Petr Oros) [RHEL-57755]
  - tools: ynl: check for overflow of constructed messages (Petr Oros) [RHEL-57755]
  - tools: ynl: add --dbg-small-recv for easier kernel testing (Petr Oros) [RHEL-57755]
  - tools: ynl: support debug printing messages (Petr Oros) [RHEL-57755]
  - tools: ynl: allow setting recv() size (Petr Oros) [RHEL-57755]
  - tools: ynl: move the new line in NlMsg __repr__ (Petr Oros) [RHEL-57755]
  - tools: ynl: remove __pycache__ during clean (Petr Oros) [RHEL-57755]
  - tools: ynl: add distclean to .PHONY in all makefiles (Petr Oros) [RHEL-57755]
  - tools: ynl: rename make hardclean -> distclean (Petr Oros) [RHEL-57755]
  - genetlink: fit NLMSG_DONE into same read() as families (Petr Oros) [RHEL-57755]
  - netdev: let netlink core handle -EMSGSIZE errors (Petr Oros) [RHEL-57755]
  - netlink: handle EMSGSIZE errors in the core (Petr Oros) [RHEL-57755]
  - tools: ynl: use MSG_DONTWAIT for getting notifications (Petr Oros) [RHEL-57755]
  - tools: ynl: remove the libmnl dependency (Petr Oros) [RHEL-57755]
  - tools: ynl: stop using mnl socket helpers (Petr Oros) [RHEL-57755]
  - tools: ynl: switch away from MNL_CB_* (Petr Oros) [RHEL-57755]
  - tools: ynl: switch away from mnl_cb_t (Petr Oros) [RHEL-57755]
  - tools: ynl: stop using mnl_cb_run2() (Petr Oros) [RHEL-57755]
  - tools: ynl: use ynl_sock_read_msgs() for ACK handling (Petr Oros) [RHEL-57755]
  - tools: ynl: wrap recv() + mnl_cb_run2() into a single helper (Petr Oros) [RHEL-57755]
  - tools: ynl-gen: remove unused parse code (Petr Oros) [RHEL-57755]
  - tools: ynl: make yarg the first member of struct ynl_dump_state (Petr Oros) [RHEL-57755]
  - tools: ynl: create local ARRAY_SIZE() helper (Petr Oros) [RHEL-57755]
  - tools: ynl: create local nlmsg access helpers (Petr Oros) [RHEL-57755]
  - tools: ynl: create local for_each helpers (Petr Oros) [RHEL-57755]
  - tools: ynl: create local attribute helpers (Petr Oros) [RHEL-57755]
  - tools: ynl: give up on libmnl for auto-ints (Petr Oros) [RHEL-57755]
  - tools: ynl: protect from old OvS headers (Petr Oros) [RHEL-57755]
  - tools: ynl: fix header guards (Petr Oros) [RHEL-57755]
  - genetlink: make info in GENL_REQ_ATTR_CHECK() const (Petr Oros) [RHEL-57755]
  - tools: ynl: allow user to pass enum string instead of scalar value (Petr Oros) [RHEL-57755]
  - tools: ynl: process all scalar types encoding in single elif statement (Petr Oros) [RHEL-57755]
  - tools: ynl: allow user to specify flag attr with bool values (Petr Oros) [RHEL-57755]
  - tools: ynl: don't access uninitialized attr_space variable (Petr Oros) [RHEL-57755]
  - tools: ynl: add support for encoding multi-attr (Petr Oros) [RHEL-57755]
  - doc: netlink: specs: tc: add multi-attr to tc-taprio-sched-entry (Petr Oros) [RHEL-57755]
  - tools: ynl: correct typo and docstring (Petr Oros) [RHEL-57755]
  - Documentation: Fix counter name of mlx5 vnic reporter (Petr Oros) [RHEL-57755]
  - net: make dev_unreg_count global (Petr Oros) [RHEL-57755]
  - tools: ynl: auto-gen for all genetlink families (Petr Oros) [RHEL-57755]
  - tools: ynl: generate code for ovs families (Petr Oros) [RHEL-57755]
  - tools: ynl: include dpll and mptcp_pm in C codegen (Petr Oros) [RHEL-57755]
  - tools/net/ynl: Add type info to struct members in generated docs (Petr Oros) [RHEL-57755]
  - doc/netlink: Describe nested structs in netlink raw docs (Petr Oros) [RHEL-57755]
  - tools/net/ynl: Add support for nested structs (Petr Oros) [RHEL-57755]
  - tools/net/ynl: Move formatted_string method out of NlAttr (Petr Oros) [RHEL-57755]
  - tools/net/ynl: Rename _fixed_header_size() to _struct_size() (Petr Oros) [RHEL-57755]
  - tools/net/ynl: Combine struct decoding logic in ynl (Petr Oros) [RHEL-57755]
  - tools/net/ynl: Encode default values for binary blobs (Petr Oros) [RHEL-57755]
  - tools/net/ynl: Add support for encoding sub-messages (Petr Oros) [RHEL-57755]
  - tools/net/ynl: Refactor fixed header encoding into separate method (Petr Oros) [RHEL-57755]
  - doc/netlink: Describe sub-message selector resolution (Petr Oros) [RHEL-57755]
  - tools/net/ynl: Support sub-messages in nested attribute spaces (Petr Oros) [RHEL-57755]
  - netlink: Return unsigned value for nla_len() (Petr Oros) [RHEL-57755]
  - tools: ynl: move private definitions to a separate header (Petr Oros) [RHEL-57755]
  - tools: ynl: remove generated user space code from git (Petr Oros) [RHEL-57755]
  - ice: document RDMA devlink parameters (Petr Oros) [RHEL-57755]
  - tracing: devlink: Use static array for string in devlink_trap_report event (Petr Oros) [RHEL-57755]
  - net: get rid of rtnl_lock_unregistering() (Petr Oros) [RHEL-57755]
  - netfilter: br_netfilter: Use nested-BH locking for brnf_frag_data_storage. (Michal Schmidt) [RHEL-59089]
  - locking/local_lock: Add local nested BH locking infrastructure. (Michal Schmidt) [RHEL-59089]
  - locking/local_lock: Introduce guard definition for local_lock. (Michal Schmidt) [RHEL-59089]
  - vhost_vdpa: assign irq bypass producer token correctly (Cindy Lu) [RHEL-63364] {CVE-2024-47748}
  - nfsd: call cache_put if xdr_reserve_space returns NULL (Olga Kornievskaia) [RHEL-63382] {CVE-2024-47737}


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-536.el9]
changelog:
  - gfs2: Get rid of demote_ok checks (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Remove freeze_go_demote_ok (Andreas Gruenbacher) [RHEL-67675]
  - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Add GL_NOBLOCK flag (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Remove outdated comment in glock_work_func (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Update glocks documentation (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: dynamically allocate the gfs2-qd shrinker (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: dynamically allocate the gfs2-glock shrinker (Andreas Gruenbacher) [RHEL-67675]
  - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change (CKI Backport Bot) [RHEL-63971] {CVE-2024-50044}
  - selftests/mm: relax test to fail after 100 migration failures (Radostin Stoyanov) [RHEL-62703]
  - perf dso: Fix symtab_type for kmod compression (Michael Petlan) [RHEL-62198]
  - Bluetooth: HCI: Fix potential null-ptr-deref (CKI Backport Bot) [RHEL-38466] {CVE-2024-36011}
  - RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (Mohammad Heib) [RHEL-67317]
  - RDMA/bnxt_re: Remove some dead code (Mohammad Heib) [RHEL-67317]
  - RDMA/bnxt_re: Fix some error handling paths in bnxt_re_probe() (Mohammad Heib) [RHEL-67317]
  - RDMA/bnxt_re: synchronize the qp-handle table array (Mohammad Heib) [RHEL-67317]
  - RDMA/bnxt_re: Fix the usage of control path spin locks (Mohammad Heib) [RHEL-67317]
  - bnxt_re: Fix imm_data endianness (Mohammad Heib) [RHEL-67317]
  - Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (CKI Backport Bot) [RHEL-66803] {CVE-2024-50255}
  - Revert "ixgbe: Manual AN-37 for troublesome link partners for X550 SFI" (Ivan Vecera) [RHEL-44950]
  - Bluetooth: hci_core: Fix calling mgmt_device_connected (Bastien Nocera) [RHEL-63624] {CVE-2024-49950}
  - Bluetooth: L2CAP: Fix uaf in l2cap_connect (CKI Backport Bot) [RHEL-63624] {CVE-2024-49950}
  - Bluetooth: SCO: Fix UAF on sco_sock_timeout (CKI Backport Bot) [RHEL-65927] {CVE-2024-50125}
  - Bluetooth: hci_sync: Fix UAF in hci_acl_create_conn_sync (Bastien Nocera) [RHEL-63875] {CVE-2024-50029}
  - Bluetooth: hci_sync: Fix UAF on create_le_conn_complete (Bastien Nocera) [RHEL-63875] {CVE-2024-50029}
  - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (Bastien Nocera) [RHEL-63875] {CVE-2024-50029}
  - Bluetooth: hci_sync: Attempt to dequeue connection attempt (Bastien Nocera) [RHEL-63875] {CVE-2024-50029}
  - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (Bastien Nocera) [RHEL-63875] {CVE-2024-50029}
  - Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync (Bastien Nocera) [RHEL-63875] {CVE-2024-50029}
  - Bluetooth: hci_conn: Always use sk_timeo as conn_timeout (Bastien Nocera) [RHEL-63875] {CVE-2024-50029}
  - Bluetooth: Remove pending ACL connection attempts (Bastien Nocera) [RHEL-63875] {CVE-2024-50029}
  - Bluetooth: hci_conn: Only do ACL connections sequentially (Bastien Nocera) [RHEL-63875] {CVE-2024-50029}
  - Bluetooth: hci_event: Use HCI error defines instead of magic values (Bastien Nocera) [RHEL-63875] {CVE-2024-50029}
  - Bluetooth: Remove superfluous call to hci_conn_check_pending() (Bastien Nocera) [RHEL-63875] {CVE-2024-50029}
  - Bluetooth: Call iso_exit() on module unload (CKI Backport Bot) [RHEL-65144] {CVE-2024-50078}
  - Bluetooth: ISO: Fix multiple init when debugfs is disabled (CKI Backport Bot) [RHEL-65135] {CVE-2024-50077}
  - Bluetooth: bnep: fix wild-memory-access in proto_unregister (CKI Backport Bot) [RHEL-66364] {CVE-2024-50148}
  - fsdax: dax_unshare_iter needs to copy entire blocks (Brian Foster) [RHEL-64959]
  - fsdax: remove zeroing code from dax_unshare_iter (Brian Foster) [RHEL-64959]
  - iomap: turn iomap_want_unshare_iter into an inline function (Brian Foster) [RHEL-64959]
  - iomap: share iomap_unshare_iter predicate code with fsdax (Brian Foster) [RHEL-64959]
  - iomap: constrain the file range passed to iomap_file_unshare (Brian Foster) [RHEL-64959]
  - iomap: don't bother unsharing delalloc extents (Brian Foster) [RHEL-64959]
  - iomap: improve shared block detection in iomap_unshare_iter (Brian Foster) [RHEL-64959]
  - iomap: convert iomap_unshare_iter to use large folios (Brian Foster) [RHEL-64959]
  - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-64959]
  - xfs: don't free cowblocks from under dirty pagecache on unshare (Brian Foster) [RHEL-64959]
  - xfs: skip background cowblock trims on inodes open for write (Brian Foster) [RHEL-64959]
  - uprobe: avoid out-of-bounds memory access of fetching args (Oleg Nesterov) [RHEL-64995] {CVE-2024-50067}
  - uprobes: encapsulate preparation of uprobe args buffer (Oleg Nesterov) [RHEL-64995] {CVE-2024-50067}


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-2
changelog:
  - Rebuild with openssl3, presumably in a buildroot with xmlsec1
    linked against openssl3
  - Resolves: rhbz#1962052 - lasso: Port to OpenSSL 3.0


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Petr Menšík <pemensik@redhat.com> - 1.7.1-2
changelog:
  - Use make_build and make_install macro instead of make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Lescak <rlescak@redhat.com> - 1.7.1-9
changelog:
  - Fix for CVE-2020-19860 ldns: heap overread vulnerability (#2051211)
  - Added also patch for deprecated distutils Python module used in build


author: Dominik 'Rathann' Mierzejewski <rpm@greysector.net> 1.0.12-1
changelog:
  - update to 1.0.12 (#1827949)
  - drop obsolete patch
  - fixes CVE-2020-11863, CVE-2020-11864, CVE-2020-11865, CVE-2020-11866


author: Dodji Seketeli <dodji@redhat.com> - 2.1-1
changelog:
  - Update to upstream 2.1 release.
  - Remove the now useless text about getting the source from git.
  - Update the license reference.
  - Resolves: rhbz#1944096


author: Dodji Seketeli <dodji@redhat.com> - 2.3-1
changelog:
  - Update to upstream 2.3
  - Remove the dos2unix surgery as it's now useless
  - Update for the soname bump
  - Resolves: RHELPLAN-154803


author: Dodji Seketeli <dodji@redhat.com> - 2.4-1
changelog:
  - Update to upstream 2.4
  - Use SPDX licensing naming
  - Build BTF support
  - Add BuildRequires: libbpf-devel
  - Update for SONAME bump
  - Show details about the check and check-self-targets targets
    separatly.
  - Resolves: RHEL-12491


author: Dodji Seketeli <dodji@redhat.com> - 2.4-2
changelog:
  - Apply patch: 0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    Resolves: https://issues.redhat.com/browse/RHEL-16614
  - Apply patch: 0002-suppression-Add-has_strict_flexible_array_data_membe.patch
    Resolves: https://issues.redhat.com/browse/RHEL-16629
  - Add git as a build requirement as we need git to apply the patches
    aboves that apply binaries.
  - Use %autosetup to handle applying the patches using git.
  - autoreconf after the patches touched at least one Makefile.am file.


author: Dodji Seketeli <dodji@redhat.com> - 2.5-1
changelog:
  - Update to upstream 2.5 tarball
  - Drop patches (as they are now upstream):
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    0002-suppression-Add-has_strict_flexible_array_data_membe.patch
  - Add BuildRequires: python3-devel
  - Remove BuildRequires: %{_bindir}/python3


author: Dodji Seketeli <dodji@redhat.com> - 2.6.1
changelog:
  - Update to upstream 2.6 tarball
  - Update to changing SONAME (libabigail.so.5.0.0)
  - Add BuildRequires xxhash-devel
  - Disable abidb as its dependencies are not present in RHEL 9.6
  - Resolves https://issues.redhat.com/browse/RHEL-64069


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.16-1
changelog:
  - Update to 0.7.15
  - Add UPL short name to SPDX conversion
  - Allow parsing desktop files using as_app_parse_data()
  - Do not preserve restrictive permissions when installing AppStream files
  - Modernize the validation requirements
  - Remove relative path from icon names
  - Support loading YAML from as_store_from_bytes()
  - Update list of allowed metadata licences
  - Update the SPDX license list to v3.5


author: Richard Hughes <richard@hughsie.com> 0.7.17-1
changelog:
  - New upstream release
  - Add "icon-theme" as recognised component type
  - Fix CI by moving 'future' back a bit
  - Make default content rating values match OARS semantics
  - Properly initialize unique_id_mutex


author: Richard Hughes <richard@hughsie.com> 0.7.18-1
changelog:
  - New upstream release
  - Add content rating system APIs from gnome-software
  - Add "validate-version" command
  - Allow timestamp in the future in validate-relax
  - Don't ignore localized strings that are the same as original
  - Fix crash with invalid children of <ul/>
  - Properly initialize mutexes
  - Test launchable tags in validation


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.3.0 base"


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Lukas Hrazky <lhrazky@redhat.com> - 0.69.0-1
changelog:
  - Update to 0.69.0
  - Expose librepo max_downloads_per_mirror configuration
  - Fix listing a repository without cpeid (RhBug:2066334)
  - Gracefully handle failure to open repo primary file
  - context: Fix doc dnf_context_install/remove/update/distrosync
  - context: dnf_context_remove accepts `<package-spec>` as dnf, unify code
  - dnf-context: Disconnect signal handler before dropping file monitor ref


author: Jaroslav Rohel <jrohel@redhat.com> - 0.69.0-7
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-12123)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279, RHEL-6304)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-12124)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-9
changelog:
  - Grow memory if applying a query after increasing a number of available
    packages (RHEL-27657)
  - Fix a memory leak in get_best_solution() (RHEL-26226)
  - Fix destructing libdnf::TransactionItem from a base class (RHEL-26240)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-11
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-1454)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.67.0-2
changelog:
  - Add obsoletes to filtering for advisory candidates
  - advisory upgrade: filter out advPkgs with different arch


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040454


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Laszlo Ersek <lersek@redhat.com> - 1:1.46.1-2
changelog:
  - Add detection support for Rocky Linux
    resolves: rhbz#2030709
  - Resolve conflict between manual and libvirt-assigned PCI addresses
    resolves: rhbz#2034160


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.48.4-2
changelog:
  - Rebase to new stable branch version 1.48.4
    resolves: rhbz#2059285
  - Disable 5-level page tables when using -cpu max
    resolves: rhbz#2084568
  - SELinux relabelling should not stop on ext4 immutable bits
    resolves: rhbz#1794518
  - Ignore "iface" in add-drive variants
    resolves: rhbz#1844341
  - Lift protocol limit on guestfs_readdir()
    resolves: rhbz#1674392
  - Check return values from librpm calls (2089623)
  - Document limitations of encrypted RBD disks
    resolves: rhbz#2033247
  - Fix lvm-set-filter failed in guestfish with the latest lvm2 package
    resolves: rhbz#1965941
  - Enable PHP bindings
    resolves: rhbz#2097718
  - Add support for Clevis & Tang
    resolves: rhbz#1809453
  - Fix CVE-2022-2211 Denial of Service in --key parameter
    resolves: rhbz#2101281
  - Add clevis-luks to BRs, required for Clevis & Tang
    related: rhbz#1809453
  - Add zstd support to guestfs_file_architecture
    resolves: rhbz#2117004


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.48.4-4
changelog:
  - New API: guestfs_inspect_get_build_id
  - Add support for detecting Windows >= 10, returned through osinfo
    resolves: rhbz#2012658


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-4
changelog:
  - Rebase libguestfs to 1.50.1
    resolves: rhbz#2168625
  - Use q35 machine type for libguestfs appliance
    resolves: rhbz#2168578
  - Run SELinux relabelling in parallel [for virt-v2v]
    resolves: rhbz#2190276


author: Laszlo Ersek <lersek@redhat.com> - 1:1.50.1-5
changelog:
  - let "guestfish -i" recognize "--key /dev/mapper/VG-LV:key:password"
  - reenable quickcheck; we now use "-cpu max" (upstream 30f74f38bd6e)
    resolves: rhbz#2209279


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-7
changelog:
  - Add --key all:... selector
    resolves: RHEL-19367
  - Add miscellaneous other upstream fixes since 1.50.1


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-2
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56809
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62935


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-3
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56809
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62935
  - Replace Jansson with json-c
    resolves: RHEL-65292


author: Richard Hughes <richard@hughsie.com> 0.3.2-1
changelog:
  - New upstream version
  - Do not use deprecated libusb API
  - Use a 1ms timeout in the Windows event thread


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Peter Robinson <pbrobinson@fedoraproject.org> - 4.2-2
changelog:
  - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package)
  - Drop/obsolete eepromer subpackage, deprecated for 6 years
  - Drop python2 conditionals
  - Minor cleanups


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.18-1
changelog:
  - New upstream release
  - Add ability to change crypto configuration at runtime without
    restarting knet and without packet drop
  - Add compatibility support for openssl 3.0
  - Add functional testing framework and new test cases
  - Minor build fixes
  - Fix BuildRequires to use libqb doxygen2man vs internal copy


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.19-1
changelog:
  - New upstream release
  - Add native support for openssl 3.0 (drop API COMPAT macros).
  - Code cleanup of public APIs. Lots of lines of code moved around, no
    functional changes.
  - Removed kronosnetd unsupported code completely
  - Removed unused poc-code from the source tree
  - Make sure to initialize epoll events structures


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.20-1
changelog:
  - New upstream release
  - Fix TX/RX stats collections
  - Minor test suite improvements
  - Minor build fixes


author: Christine Caulfield <ccaulfie@redhat.com> - 1.24-2
changelog:
  - Fix libnozzle tests failing & covscan warning on api_knet_handle_new test
    Resolves: rhbz#2024090


author: Christine Caulfield <ccaulfie@redhat.com> - 1.28-1
changelog:
  Rebase to 1.28 for startup and performance fixes
     threads: add config check to match min value with pong timeouts
     rx: allow links to be active faster
     links: fix ping interval and pong timeout value checking
     crypto: Try crypt and decrypt on crypto_init
     tx: Remove expensive memsets
     log: Add a TRACE log level
    Resolves: #RHEL-11787


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Michal Ruprich <mruprich@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64
  - Fix for CVE-2020-28241


author: Remi Collet <remi@remirepo.net> - 1.1.0-5
changelog:
  - fix missing HAVE_SSIZE_T macro using patch from
    https://github.com/awesomized/libmemcached/pull/117


author: Remi Collet <remi@remirepo.net> - 1.1.0-2
changelog:
  - remove internal AES implementation and use libcrypto
    https://github.com/awesomized/libmemcached/pull/114
  - fix build ussing upstream patch to update catch version


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.8.2-2
changelog:
  - Fix nbdcopy progress bar.
  - Add nbdinfo --map --totals and --can/--is options.
    resolves: rhbz#1950630


author: Richard W.M. Jones <rjones@redhat.com> - 1.10.5-1
changelog:
  - Rebase to new stable branch version 1.10.5
    resolves: rhbz#2011708
  - Map uint32_t to OCaml int64 to avoid signedness problems
    resolves: rhbz#2040610
  - CVE-2022-0485 nbdcopy destination image corruption
  - New upstream API to control initialization of pread buffer
    resolves: rhbz#2046194


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.6-1
changelog:
  - Rebase to new stable branch version 1.12.6
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660
  - Fix remote TLS failures
    resolves: rhbz#2111524
    (and 2111813)


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Adrian Reber <areber@redhat.com> - 1.2-5
changelog:
  - Repack tarball to remove problematic license from unused code
  - Apply fixes for warnings found by gcc -fanalyzer


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.5-100
changelog:
  - resolves: rhbz#2222895 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: Andreas Schneider <asn@redhat.com> - 4.18.6-100
changelog:
  - related: rhbz#2190415 - Update to version 4.18.6
  - resolves: rhbz#2211617 - Fix the rpcclient dfsgetinfo command


author: Andreas Schneider <asn@redhat.com> - 4.19.3-100
changelog:
  - resolves: RHEL-16476 - Update to version 4.19.3
  - resolves: RHEL-11362 - Fix security issues:
    CVE-2023-4091 CVE-2023-42669
  - resolves: RHEL-18030 - Logging Format Enhancement
  - resolves: RHEL-1960 - Fix smbget issues with DFS shares
  - resolves: RHEL-2118 - Fix force user/group issues with 'allow trusted domains = yes'
  - resolves: RHEL-16875 - Fix memory corruption in libnss_winbind
  - resolves: RHEL-19243 - Fix smbget password interactive authentication


author: Andreas Schneider <asn@redhat.com> - 4.19.4-100
changelog:
  - related: RHEL-16476 - Update to version 4.19.4
  - resolves: RHEL-2109 - Add support for certificate auto enrollment
  - resolves: RHEL-20761 - Add missing requirements for samba-gpupdate
  - resolves: RHEL-19566 - Fix smbget interactive authentication
  - resolves: RHEL-21001 - Fix samba-gpupdate paths for RHEL


author: Andreas Schneider <asn@redhat.com> - 4.19.4-102
changelog:
  - resolves: RHEL-22157 - Don't require NDES for samba-gpupdate
  - resolves: RHEL-20897 - Fix site name fetching for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.0-102
changelog:
  - resolves: RHEL-2109  - Support Certificate Auto Enrollment in Samba
  - resolves: RHEL-22157 - Fix root cert import for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.1-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.1
  - resolves: RHEL-26337 - Fix site lookup for samba-gpupdate
  - resolves: RHEL-5846 - Fix warning messages while upgrading libwbclient


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.2-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.2
  - resolves: RHEL-45841 - Fix KDC IP address lookup in case of trusted domain
  - resolves: RHEL-23814 - Fix smbclient to enumerate the printers


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Steve Dickson <steved@redhat.com> 2.5.4-15
changelog:
  - Fix uninstall warnings (bz 2048023)
  - rpc-statd.service: Stop rpcbind and rpc.stat in an exit race (bz 2112941)


author: Steve Dickson <steved@redhat.com> 2.5.4-16
changelog:
  - nfsd.man: Explain that setting nfsv4=n turns off all v4 versions (bz 2042362)
  - mount.nfs: fix NULL pointer derefernce in nfs_parse_square_bracket (bz 2136807)


author: Steve Dickson <steved@redhat.com> 2.5.4-19
changelog:
  - Don't allow junction tests to trigger automounts (bz 2148353)
  - Fix typo in man page nfs.conf.man (bz 2203092)


author: Steve Dickson <steved@redhat.com> 2.5.4-21
changelog:
  - gssd: fix handling DNS lookup failure (RHEL-15035)
  - gssd: handle KRB5_AP_ERR_BAD_INTEGRITY errors (RHEL-15034)


author: Steve Dickson <steved@redhat.com> 2.5.4-22
changelog:
  - nfsmount.conf: Fix typo of the attribute name (RHEL-7904)
  - Update to support for the NFS RPC-with-TLS (RHEL-14754)


author: Steve Dickson <steved@redhat.com> 2.5.4-23
changelog:
  - Typos and documentation fixes (RHEL-22654)
  - blkmapd: fix coredump in bl_add_disk (RHEL-7941)
  - rpcdebug: avoid buffer underflow (RHEL-7931)


author: Steve Dickson <steved@redhat.com> 2.5.4-28
changelog:
  -  Makefile.am: allow mount.nfs to be writeable by owner (RHEL-68701)
  -  mount.nfs: retry NFSv3 mount after NFSv4 failure in auto negotiation (RHEL-68574)


author: Phil Sutter <psutter@redhat.com> [1.2.6-1.el9]
changelog:
  - set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
  - Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]


author: Phil Sutter <psutter@redhat.com> [1.2.6-3.el9]
changelog:
  - tests: Fix objref test case (Phil Sutter) [RHEL-28515]
  - expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
  - obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
  - obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
  - obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - obj: Return value on setters (Phil Sutter) [RHEL-28515]
  - object: getters take const struct (Phil Sutter) [RHEL-28515]
  - utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
  - obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
  - obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
  - set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
  - obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
  - flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
  - chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
  - expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
  - expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
  - expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
  - expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
  - obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
  - set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
  - set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
  - expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Remi Collet <remi@remirepo.net> - 0.11.0-1
changelog:
  - update to 0.11.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/665


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.8.1-8
changelog:
  - Resolves: rhbz#2134759 Untrusted Macros
  - Resolves: rhbz#2134757 Weak Master Keys
  - Resolves: rhbz#2134755 Static Initialization Vector
  - Resolves: rhbz#2134761 Macro URL arbitrary script execution


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Nicola Sella <nsella@redhat.com> - 1.13.0-1
changelog:
  - Update to 1.13.0
  - Add support for working with certificates used with proxy
  - Drop Python 2 support
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for pkcs11 certificate and key for repository authorization
  - Fix default value for LRO_SSLVERIFYSTATUS
  - Don't use max_ranges to determine if we expect zchunk callback
  - Prefer HTTP over FTP mirrors when zchunk is enabled
  - Fixed mem leaks and typos


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-8
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    Resolves: rhbz#1970826 rhbz#1970839 rhbz#1970857 rhbz#1970847


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.31-6
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985029)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-14427 - Expected cn in RDN, got uid
  - Resolves: RHEL-12229 - HANA validation on RHEL 9.2 issue possibly related to libc/nss_sss behaviour
  - Resolves: RHEL-3925 - SSSD goes offline when, while reading a single user, misses a required attribute (i.e. SID)
  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users
  - Resolves: RHEL-4146 - Incorrect handling of reverse IPv6 update results in update failure
  - Resolves: RHEL-4971 - sssd-kcm does not appear to expire Kerberos tickets (RFE: sssd_kcm should have the option to automatically delete the expired tickets)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-18395 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users
  - Resolves: RHEL-17498 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') [rhel-9]
  - Resolves: RHEL-21079 - SSSD GPO lacks group resolution on hosts [rhel-9]
  - Resolves: RHEL-19211 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-12503 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. 
  - Resolves: RHEL-22288 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd
  - Resolves: RHEL-22194 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-6
changelog:
  - Resolves: RHEL-27209 - Race condition during authorization leads to GPO policies functioning inconsistently [rhel-9.4.0]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-1
changelog:
  - Resolves: RHEL-36586 - Rebase SSSD for RHEL 9.5
  - Resolves: RHEL-27716 - SSSD fails to process AD groups with 'Global Scope' correctly causing incomplete group-membership on RHEL if cache is empty
  - Resolves: RHEL-17659 - [RfE] SSSD Failover Enhancements
  - Resolves: RHEL-35781 - Passkey errors when handling multiple altSecurityIdentities values
  - Resolves: RHEL-30142 - sssd_pac is crashing
  - Resolves: RHEL-22206 - Errors in krb5_child.log every time a user authenticates - Pre-authentication failed: No pkinit_anchors supplied
  - Resolves: RHEL-32595 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest
  - Resolves: RHEL-28666 - sssctl config-check is reporting false positive error msg
  - Resolves: RHEL-29454 - NULL dereference in inotify handling
  - Resolves: RHEL-1654 - Improve documentation for allowing e-mail address as username


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-2
changelog:
  - Resolves: RHEL-40742 - passkey_child with wrong owner
  - Resolves: RHEL-41047 - sssd is skipping GPO evaluation with auto_private_groups
  - Resolves: RHEL-40570 - GPO access the wrong memory location


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4
changelog:
  - Resolves: RHEL-49711 - SYSDB: remove index on dataExpireTimestamp
  - Resolves: RHEL-49811 - 2FA is being enforced after upgrading 2.9.1->2.9.4


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4.1
changelog:
  - Resolves: RHEL-59876 - EL9/CentOS Stream 9 lost offline smart card authentication
  - Resolves: RHEL-50912 - possible regression of rhbz#2196521


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Matej Mužila <mmuzila@redhat.com> 4.4.0-2
changelog:
  - Update to version 4.4.0
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354
    CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-8
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188916)
  - tests: Use stronger passphrases for LUKS tests (#2188750,#2188752)
  - integration-test: Fix scsi_debug cd drive read-only detection (#2211191)
  - lvm2: Improve uevent processing (#2031673)
  - tests: Mark test_job.UdisksJobTest.test_job as unstable (#2148844)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-4
changelog:
  - Fix a couple of issues found by Coverity (#1938890)
  - Ignore systemd "Extended Boot Loader" GPT partition


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-1
changelog:
  - Version 2.9.4 (#2010363)
  - CVE-2021-3802: Harden the default mount options for ext filesystems (#2004423)
  - Fix double free on daemon exit (unaligned fastbin chunk) (#2001549)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Tomas Halman <thalman@redhat.com> - 0.63-5
changelog:
  - Enable audit library in the build
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Tomas Halman <thalman@redhat.com>
changelog:
  - Renaming python package according to the standard
  - Resolves: rhbz#1951968

  =======
  >>>>>>> 96fbb4a91a8471e931d872e7b696d176fc351605


author: Tomas Halman <thalman@redhat.com>
changelog:
  - Enable audit library in the build 
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Jiri Denemark <jdenemar@redhat.com> - 9.10.0-1
changelog:
  - Rebased to libvirt-9.10.0 (rhbz#RHEL-15267)
  - The rebase also fixes the following bugs:
      rhbz#RHEL-16878, rhbz#RHEL-14611, rhbz#RHEL-7384, rhbz#RHEL-16870, rhbz#RHEL-18439
      rhbz#RHEL-16751, rhbz#RHEL-4452, rhbz#RHEL-17841, rhbz#RHEL-15288, rhbz#RHEL-7040


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-1
changelog:
  - Rebased to libvirt-10.0.0 (RHEL-15267)
  - The rebase also fixes the following bugs:
      RHEL-18782, RHEL-735, RHEL-18165, RHEL-4607, RHEL-700
      RHEL-7100, RHEL-15480, RHEL-7416, RHEL-20609, RHEL-7570
      RHEL-20444, RHEL-17596, RHEL-7569


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-2
changelog:
  - tests: Add hostcpudata for machine with CPU clusters (RHEL-7043)
  - conf: Report CPU clusters in capabilities XML (RHEL-7043)
  - conf: Allow specifying CPU clusters (RHEL-7043)
  - qemu: Introduce QEMU_CAPS_SMP_CLUSTERS (RHEL-7043)
  - qemu: Use CPU clusters for guests (RHEL-7043)
  - tests: Add test case for CPU clusters (RHEL-7043)
  - qemu: Make monitor aware of CPU clusters (RHEL-7043)
  - tests: Verify handling of CPU clusters in QMP data (RHEL-7043)
  - build: Make daemons depend on generated *_protocol.[ch] (RHEL-15267)
  - domain_validate: Check for domain address conflicts fully (RHEL-4452)
  - qemu_hotplug: Don't lose 'created' flag in qemuDomainChangeNet() (RHEL-22714)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-3
changelog:
  - remote_driver: Restore special behavior of remoteDomainGetBlockIoTune() (RHEL-22800)
  - conf: Introduce dynamicMemslots attribute for virtio-mem (RHEL-15316)
  - qemu_capabilities: Add QEMU_CAPS_DEVICE_VIRTIO_MEM_PCI_DYNAMIC_MEMSLOTS capability (RHEL-15316)
  - qemu_validate: Check capability for virtio-mem dynamicMemslots (RHEL-15316)
  - qemu_command: Generate cmd line for virtio-mem dynamicMemslots (RHEL-15316)
  - qemu_snapshot: fix detection if non-leaf snapshot isn't in active chain (RHEL-23212)
  - qemu_snapshot: create: refactor external snapshot detection (RHEL-22797)
  - qemu_snapshot: create: don't require disk-only flag for offline external snapshot (RHEL-22797)
  - remoteDispatchAuthPolkit: Fix lock ordering deadlock if client closes connection during auth (RHEL-20337)
  - util: virtportallocator: Add VIR_DEBUG statements for port allocations and release (RHEL-21543)
  - qemu: migration: Properly handle reservation of manually specified NBD port (RHEL-21543)
  - qemuMigrationDstStartNBDServer: Refactor cleanup (RHEL-21543)
  - virPCIVPDResourceIsValidTextValue: Adjust comment to reflect actual code (RHEL-22314)
  - util: pcivpd: Refactor virPCIVPDResourceIsValidTextValue (RHEL-22314)
  - virNodeDeviceCapVPDFormatCustom*: Escape unsanitized strings (RHEL-22314)
  - virNodeDeviceCapVPDFormat: Properly escape system-originated strings (RHEL-22314)
  - schema: nodedev: Adjust allowed characters in 'vpdFieldValueFormat' (RHEL-22314)
  - tests: Test the previously mishandled PCI VPD characters (RHEL-22314)
  - Don't overwrite error message from 'virXPathNodeSet' (RHEL-22314)
  - tests: virpcivpdtest: Remove 'testVirPCIVPDReadVPDBytes' case (RHEL-22314)
  - util: virpcivpd: Unexport 'virPCIVPDReadVPDBytes' (RHEL-22314)
  - util: pcivpd: Unexport virPCIVPDParseVPDLargeResourceFields (RHEL-22314)
  - tests: virpcivpd: Remove 'testVirPCIVPDParseVPDStringResource' case (RHEL-22314)
  - util: virpcivpd: Unexport 'virPCIVPDParseVPDLargeResourceString' (RHEL-22314)
  - virPCIVPDResourceGetKeywordPrefix: Fix logging (RHEL-22314)
  - util: virpcivpd: Remove return value from virPCIVPDResourceCustomUpsertValue (RHEL-22314)
  - conf: virNodeDeviceCapVPDParse*: Remove pointless NULL checks (RHEL-22314)
  - virpcivpdtest: testPCIVPDResourceBasic: Remove tests for uninitialized 'ro'/'rw' section (RHEL-22314)
  - util: virPCIVPDResourceUpdateKeyword: Remove impossible checks (RHEL-22314)
  - conf: node_device: Refactor 'virNodeDeviceCapVPDParseCustomFields' to fix error reporting (RHEL-22314)
  - virNodeDeviceCapVPDParseXML: Fix error reporting (RHEL-22314)
  - util: virpcivpd: Remove return value from virPCIVPDResourceUpdateKeyword (RHEL-22314)
  - virPCIDeviceHasVPD: Refactor "debug" messages (RHEL-22314)
  - virPCIDeviceGetVPD: Fix multiple error handling bugs (RHEL-22314)
  - virPCIDeviceGetVPD: Handle errors in callers (RHEL-22314)
  - virPCIVPDReadVPDBytes: Refactor error handling (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceString: Properly report errors (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Merge logic conditions (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Remove impossible 'default' switch case (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Refactor processing of read data (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Refactor return logic (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Report proper errors (RHEL-22314)
  - virPCIVPDParse: Do reasonable error reporting (RHEL-22314)
  - virt-admin: Add warning when connection to default daemon fails (RHEL-23170)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-4
changelog:
  - Set stubDriverName from hostdev driver model attribute during pci device setup (RHEL-25858)
  - qemuMigrationDstPrepareStorage: Use 'switch' statement to include all storage types (RHEL-24825)
  - qemuMigrationDstPrepareStorage: Properly consider path for 'vdpa' devices (RHEL-24825)
  - domain_validate: Account for NVDIMM label size properly when checking for memory conflicts (RHEL-4452)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-5
changelog:
  - cpu: x86: Add support for adding features to existing CPU models (RHEL-25995)
  - qemu: domain: Check arch in qemuDomainMakeCPUMigratable (RHEL-25995)
  - conf: cpu: Introduce virCPUDefListFeatures (RHEL-25995)
  - qemu: domain: Drop added features from migratable CPU (RHEL-25995)
  - Add vmx-* features to Broadwell* (RHEL-25995)
  - Add vmx-* features to Cascadelake* (RHEL-25995)
  - Add vmx-* features to Conroe (RHEL-25995)
  - Add vmx-* features to Cooperlake (RHEL-25995)
  - Add vmx-* features to core{,2}duo (RHEL-25995)
  - Add vmx-* features to Haswell* (RHEL-25995)
  - Add vmx-* features to Icelake* (RHEL-25995)
  - Add vmx-* features to IvyBridge* (RHEL-25995)
  - Add vmx-* features to kvm* (RHEL-25995)
  - Add vmx-* features to Nehalem* (RHEL-25995)
  - Add vmx-* features to Penryn (RHEL-25995)
  - Add vmx-* features to SandyBridge* (RHEL-25995)
  - Add vmx-* features to SapphireRapids (RHEL-25995)
  - Add vmx-* features to Skylake* (RHEL-25995)
  - Add vmx-* features to Snowridge (RHEL-25995)
  - Add vmx-* features to Westmere* (RHEL-25995)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-7
changelog:
  - qemu: virtiofs: do not crash if cgroups are missing
  - qemu: virtiofs: set correct label when creating the socket
  - qemu: virtiofs: error out if getting the group or user name fails
  - Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)
  - remote: check for negative array lengths before allocation (CVE-2024-2494)
  - qemu: Fix migration with custom XML (RHEL-30622)


author: Jiri Denemark <jdenemar@redhat.com> - 10.3.0-1
changelog:
  - Rebased to libvirt-10.3.0 (RHEL-29642)
  - The rebase also fixes the following bugs:
      RHEL-25993, RHEL-7101, RHEL-7461, RHEL-16333, RHEL-7343
      RHEL-28808, RHEL-32880, RHEL-35879, RHEL-34112, RHEL-30373
      RHEL-23416, RHEL-23608, RHEL-26276, RHEL-22728


author: Jiri Denemark <jdenemar@redhat.com> - 10.4.0-1
changelog:
  - Rebased to libvirt-10.4.0 (RHEL-7489)
  - The rebase also fixes the following bugs:
      RHEL-29642, RHEL-30373, RHEL-32182, RHEL-33044, RHEL-33082
      RHEL-34615, RHEL-35948, RHEL-36565, RHEL-36721, RHEL-39271
      RHEL-39400


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-1
changelog:
  - Rebased to libvirt-10.5.0 (RHEL-21381)
  - The rebase also fixes the following bugs:
      RHEL-23833, RHEL-29642, RHEL-37542, RHEL-39969, RHEL-40899
      RHEL-43309


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-2
changelog:
  - vmx: Do not require all ID data for VMWare Distributed Switch (RHEL-46099)
  - tests: vhostuser: add virtiofsd json descriptor (RHEL-7108, RHEL-40135)
  - tests: qemuxmlconf: adjust test case to new virtiofsd (RHEL-7108, RHEL-40135)
  - qemu: fill capabilities for virtiofsd (RHEL-7108, RHEL-40135)
  - qemu: do not use deprecated options for new virtiofsd (RHEL-7108)
  - qemu: migration: allow migration for virtiofs (RHEL-40135)
  - virt-host-validate: Drop extra "PASS" (RHEL-46868)
  - qemu: Don't leave beingDestroyed=true on inactive domain (RHEL-43309)


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-5
changelog:
  - qemu: virtiofs: cache: use 'never' instead of 'none' (RHEL-50329)
  - qemu_domain: Strip <acpi/> from s390(x) definitions (RHEL-49516)
  - qemuxmlconftest: Add tests for the ACPI stripping hack on s390 (RHEL-49516)
  - vsh: Allow vshReadlineInit() to be called multiple times (RHEL-53560)


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-1
changelog:
  - Rebased to libvirt-10.8.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-688, RHEL-7122, RHEL-19379, RHEL-22166, RHEL-24746
      RHEL-28827, RHEL-45200, RHEL-45952, RHEL-53964, RHEL-54550
      RHEL-56611, RHEL-58446


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-2
changelog:
  - Revert "network: *un*set the firewalld zone while shutting down a network" (RHEL-61576)
  - Revert "network: support setting firewalld zone for bridge device of open networks" (RHEL-61576)
  - network: call network(Add|Remove)FirewallRules() for forward mode='open' (RHEL-61576)
  - network: a different way of supporting firewalld zone for mode='open' networks (RHEL-61576)
  - network: a different implementation of *un*setting firewalld zone when network is destroyed (RHEL-61576)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-2
changelog:
  - domain_conf: Format <defaultiothread/> more often (rhbz#2059511)
  - domain_conf: Format iothread IDs more often (rhbz#2059511)
  - qemu: Make IOThread changing more robust (rhbz#2059511)
  - qemuDomainSetIOThreadParams: Accept VIR_DOMAIN_AFFECT_CONFIG flag (rhbz#2059511)
  - virsh: Implement --config for iothreadset (rhbz#2059511)
  - docs: Document TPM portion of domcaps (rhbz#2103119)
  - virtpm: Introduce TPM-1.2 and TPM-2.0 capabilieis (rhbz#2103119)
  - domcaps: Introduce TPM backendVersion (rhbz#2103119)
  - qemu: Report supported TPM version in domcaps (rhbz#2103119)
  - vircpi: Add PCIe 5.0 and 6.0 link speeds (rhbz#2105231)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-3
changelog:
  - qemu: introduce capability QEMU_CAPS_MIGRATION_BLOCKED_REASONS (rhbz#2092833)
  - qemu: new function to retrieve migration blocker reasons from QEMU (rhbz#2092833)
  - qemu: query QEMU for migration blockers before our own harcoded checks (rhbz#2092833)
  - qemu: remove hardcoded migration fail for vDPA devices if we can ask QEMU (rhbz#2092833)
  - qemu_migration: Use EnterMonitorAsync in qemuDomainGetMigrationBlockers (rhbz#2092833)
  - qemu: don't try to query QEMU about migration blockers during offline migration (rhbz#2092833)
  - qemu_migration: Acquire correct job in qemuMigrationSrcIsAllowed (rhbz#2092833)
  - virsh: Require --xpath for *dumpxml (rhbz#2103524)
  - qemu: skip hardcoded hostdev migration check if QEMU can do it for us (rhbz#1497907)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-4
changelog:
  - qemu: Pass migration flags to qemuMigrationParamsApply (rhbz#2111070)
  - qemu_migration_params: Replace qemuMigrationParamTypes array (rhbz#2111070)
  - qemu_migration: Pass migParams to qemuMigrationSrcResume (rhbz#2111070)
  - qemu_migration: Apply max-postcopy-bandwidth on post-copy resume (rhbz#2111070)
  - qemu: Always assume support for QEMU_CAPS_MIGRATION_PARAM_XBZRLE_CACHE_SIZE (rhbz#2107892)
  - qemu_migration: Store original migration params in status XML (rhbz#2107892)
  - qemu_migration_params: Refactor qemuMigrationParamsApply (rhbz#2107892)
  - qemu_migration_params: Refactor qemuMigrationParamsReset (rhbz#2107892)
  - qemu_migration_params: Avoid deadlock in qemuMigrationParamsReset (rhbz#2107892)
  - qemu: Restore original memory locking limit on reconnect (rhbz#2107424)
  - qemu: Properly release job in qemuDomainSaveInternal (rhbz#1497907)
  - qemu: don't call qemuMigrationSrcIsAllowedHostdev() from qemuMigrationDstPrepareFresh() (rhbz#1497907)


author: Jiri Denemark <jdenemar@redhat.com> - 8.7.0-1
changelog:
  - Rebased to libvirt-8.7.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2084046, rhbz#2108483, rhbz#2123371, rhbz#2101633, rhbz#1988211
      rhbz#2086677, rhbz#2103132, rhbz#2078805, rhbz#2111301, rhbz#2094641


author: Jiri Denemark <jdenemar@redhat.com> - 8.8.0-1
changelog:
  - Rebased to libvirt-8.8.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2122534, rhbz#2121262, rhbz#2130089, rhbz#2121276, rhbz#2121627
      rhbz#2125111, rhbz#2129239, rhbz#1964855, rhbz#2114866


author: Jiri Denemark <jdenemar@redhat.com> - 8.9.0-1
changelog:
  - Rebased to libvirt-8.9.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2074559, rhbz#2134009, rhbz#1777212, rhbz#2013523, rhbz#2114866
      rhbz#1964855


author: Jiri Denemark <jdenemar@redhat.com> - 8.9.0-2
changelog:
  - RHEL: rpminspect: Disable abidiff inspection (rhbz#2124466)
  - spec: Fix python3-libvirt requirement in client-qemu package (rhbz#2124466)


author: Jiri Denemark <jdenemar@redhat.com> - 8.10.0-1
changelog:
  - Rebased to libvirt-8.10.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2128993, rhbz#2143235, rhbz#2143840, rhbz#1874163, rhbz#2000075
      rhbz#2143838, rhbz#2104919, rhbz#2072204, rhbz#2137298


author: Jiri Denemark <jdenemar@redhat.com> - 8.10.0-2
changelog:
  - qemu_process: Document qemuProcessPrepare{Domain,Host}() order (rhbz#2150760)
  - qemu_extdevice: Init paths in qemuExtDevicesPrepareDomain() (rhbz#2150760)
  - qemu_extdevice: Expose qemuExtDevicesInitPaths() (rhbz#2150760)
  - qemu: Init ext devices paths on reconnect (rhbz#2150760)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-1
changelog:
  - Rebased to libvirt-9.0.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2151064, rhbz#1874163, rhbz#2130192, rhbz#2111948, rhbz#1824722
      rhbz#2150455, rhbz#2063723, rhbz#1717611, rhbz#2160448, rhbz#2151869
      rhbz#2040272, rhbz#2144738, rhbz#2159851, rhbz#2156289, rhbz#2033879
      rhbz#1820437, rhbz#2151202


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-2
changelog:
  - vircgroupv2: fix cpu.weight limits check (rhbz#2037998)
  - domain_validate: drop cpu.shares cgroup check (rhbz#2037998)
  - docs: document correct cpu shares limits with both cgroups v1 and v2 (rhbz#2037998)
  - qemu_interface: Fix managed='no' case when creating an ethernet interface (rhbz#2144738)
  - conf: clarify some external TPM error messages (rhbz#2063723)
  - qemu: hotplug: Remove legacy quirk for 'dimm' address generation (rhbz#2158701)
  - qemu: alias: Remove 'oldAlias' argument of qemuAssignDeviceMemoryAlias (rhbz#2158701)
  - qemu: Remove 'memAliasOrderMismatch' field from VM private data (rhbz#2158701)
  - rpc: Fix error message in virNetServerSetClientLimits (rhbz#2033879)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-3
changelog:
  - src: Don't use virReportSystemError() on virProcessGetStatInfo() failure (rhbz#2148266)
  - qemu: Provide virDomainGetCPUStats() implementation for session connection (rhbz#2148266)
  - virsh: Make domif-setlink work more than once (rhbz#2165466)
  - qemu_fd: Remove declaration for 'qemuFDPassNewDirect' (rhbz#2040272)
  - qemuStorageSourcePrivateDataFormat: Rename 'tmp' to 'objectsChildBuf' (rhbz#2040272)
  - qemu: command: Handle FD passing commandline via qemuBuildBlockStorageSourceAttachDataCommandline (rhbz#2040272)
  - qemuFDPassTransferCommand: Mark that FD was passed (rhbz#2040272)
  - qemu: fd: Add helpers allowing storing FD set data in status XML (rhbz#2040272)
  - qemu: domain: Store fdset ID for disks passed to qemu via FD (rhbz#2040272)
  - qemu: block: Properly handle FD-passed disk hot-(un-)plug (rhbz#2040272)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-4
changelog:
  - qemuProcessStop: Fix detection of outgoing migration for external devices (rhbz#2161557)
  - qemuExtTPMStop: Restore TPM state label more often (rhbz#2161557)
  - qemuProcessLaunch: Tighten rules for external devices wrt incoming migration (rhbz#2161557)
  - qemu_process: Produce better debug message wrt domain namespaces (rhbz#2167302)
  - qemu_namespace: Deal with nested mounts when umount()-ing /dev (rhbz#2167302)
  - qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (rhbz#2166411)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-5
changelog:
  - qemu_extdevice: Do cleanup host only for VIR_DOMAIN_TPM_TYPE_EMULATOR (rhbz#2168762)
  - qemu: blockjob: Handle 'pending' blockjob state only when we need it (rhbz#2168769)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-6
changelog:
  - rpc: client: Don't check return value of virNetMessageNew (rhbz#2145188)
  - rpc: Don't warn about "max_client_requests" in single-threaded daemons (rhbz#2145188)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-7
changelog:
  - qemu_snapshot: remove memory snapshot when deleting external snapshot (rhbz#2170826)
  - qemu_snapshot: refactor qemuSnapshotDeleteExternalPrepare (rhbz#2170826)


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-2
changelog:
  - Drop libwacom-show-stylus, it's a debugging tool that requires extra
    dependencies that we shouldn't pull in everywhere (#2044710)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.8-17
changelog:
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update flags, enable LTO
  - Remove RANDFILE and increase default bits in ssleay.conf


author: Richard Hughes <richard@hughsie.com> 0.1.14-1
changelog:
  - New upstream release
  - Do not use libuuid
  - Ignore adaptors added with xb_builder_source_add_converter()


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Remi Collet <remi@remirepo.net> - 1.7.2-1
changelog:
  - update to 1.7.2
  - fix installation layout using merged patch from
    https://github.com/nih-at/libzip/pull/190


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "i686-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j40  
    cd -


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "x86_64-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j40  
    cd -


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-5
changelog:
  - Revert the CMake change regarding the in-source builds for now
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug buildchnages to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers the CMAKE_INSTALL_PREFIX="%{_prefix}" option
  - Default to %cmake commands instead fo %make commands
  - Update the WITH_UNITTEST macro to the one upstream use now
  - Introduce macro to enable / disable testusite (and building of the *-test subpackage)


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.78.0-1
changelog:
  - Bump glib2 version 2.78.0
  - Drop DesktopQE gating 
  - Fix CVEs: CVE-2023-32636, CVE-2023-29499, CVE-2023-32611, CVE-2023-32665, DoS
  - Resolves: RHEL-5019
  - Resolves: RHEL-5020
  - Resolves: RHEL-5092
  - Resolves: RHEL-5093
  - Resolves: RHEL-5094


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 0.42.2-3
changelog:
  - Bump pixman version 0.42.2
  - Drop DesktopQE gating 
  - Fix CVEs: CVE-2022-44638
  - Resolves: RHEL-5013


author: Sandro Mani <manisandro@gmail.com> - 115-1
changelog:
  - Add -fstack-protector to LDFLAGS (since we carry -D_FORTIFY_SOURCE=2 in cflags, see https://sourceforge.net/p/mingw-w64/bugs/818/)


author: Sandro Mani <manisandro@gmail.com> - 140-1
changelog:
  - Don't unset _PREFIX in mingw-env macro, it leads to ${_PREFIX}
    being empty when evaluated the lines above


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 0.5.13-6
changelog:
  - updating line in /usr/lib/tmpfiles.d/munge.conf: /var/run/munge → /run/munge
  - add license tag
  - add requires logrotate


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Ray Strode <rstrode@redhat.com> - 40.9-18
changelog:
  - Don't allow applications on other workspaces to steal
    focus, unless their timestamps are pristine
    Resolves: RHEL-29537


author: Jonas Ådahl <jadahl@redhat.com>) - 40.9-20
changelog:
  - Fix positioning when using always-on-top windows
    Resolves: RHEL-45998
  - Improve handling of always-on-visible-workspace windows
    Resolves: RHEL-45366


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-22
changelog:
  - Fix crash when moving window while switching workspace
    Resolves: RHEL-62997
  - Improve app discovery for workspace logic
    Resolves: RHEL-63000


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, OpenSSL 3, s390 and robin hood
  - Add a new plugin


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.34-1
changelog:
  - Update to MySQL 8.0.34
  - Add patch from upstream bug#110569
  - Add patch to fix binlog format issue
  - Use --skip-combinations over --binlog-format=mixed
  - Add alignment patch upstream bug#110752


author: Richard W.M. Jones <rjones@redhat.com> - 1.28.5-1
changelog:
  - Rebase to new stable branch version 1.28.5
    resolves: rhbz#2011709
  - Move nbdkit-null-plugin to nbdkit-server package
    resolves: rhbz#2021154
  - Add asynchronous support in nbdkit-vddk-plugin
  - Drop obsolete documentation related to thread model in vddk plugin
    resolves: rhbz#2018463
  - Switch to xorriso (instead of genisoimage)
  - Distribute README.VDDK in nbdkit-vddk-plugin subpackage
  - Fix nbdkit-cow-filter cow-block-size=4096
  - file: Fix implementation of cache=none for writes
    resolves: rhbz#2029751
  - vddk: Implement VMDK creation


author: Richard W.M. Jones <rjones@redhat.com> - 1.30.8-1
changelog:
  - Rebase to new stable branch version 1.30.8
    resolves: rhbz#2059289
  - Add automatic provides generator and subpackage nbdkit-srpm-macros
    resolves: rhbz#2059291
  - New filters: blocksize-policy, protect, retry-request
  - Fix license of bash-completion subpackage
  - vddk: Fix use of uninitialized memory when computing block size
    resolves: rhbz#2066655
  - Skip vsock tests unless the vsock_loopback module is loaded
    resolves: rhbz#2069558
  - Add support for ssh create remote file.
  - Suppress excess messages from nbdkit-nbd-plugin
    resolves: rhbz#2083498
  - Suppress incorrect VDDK error when converting guests from vCenter
    resolves: rhbz#2083617
  - Backport new readahead filter from 1.32.
  - Backport new LUKS filter from 1.32.
  - Backport new scan filter from 1.32.
  - Add new Python binding for nbdkit_parse_size from 1.32
  - Add new rate filter burstiness setting from 1.32
  - vddk: Suppress new VDDK "phone home" messages
    resolves: rhbz#2104720
  - vddk: Clearer error message when thumbprint is wrong
    resolves: rhbz#1905772
  - Fix memory allocator=malloc,mlock=true
    resolves: rhbz#2044432
  - Fix multiple Coverity problems
  - Fix bounds error in nbdkit-checkwrite-filter
    resolves: rhbz#2108545


author: Richard W.M. Jones <rjones@redhat.com> - 1.32.5-4
changelog:
  - Rebase to new stable branch version 1.32.5
    resolves: rhbz#2135765
  - Move stats filter to new subpackage.
  - Improve error message when PasswordAuthentication is set to 'no'
    resolves: rhbz#2158300
  - luks: Avoid crash when image does not contain a LUKS header
    resolves: rhbz#2159581
  - curl: Enable multi-conn for read-only connections
    resolves: rhbz#2166686


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Phil Sutter <psutter@redhat.com> [1.0.4-2.el9]
changelog:
  - intervals: Do not sort cached set elements over and over again (Phil Sutter) [1917398]
  - intervals: do not empty cache for maps (Phil Sutter) [1917398]
  - intervals: do not report exact overlaps for new elements (Phil Sutter) [1917398]
  - rule: collapse set element commands (Phil Sutter) [1917398]
  - tests: shell: runtime set element automerge (Phil Sutter) [1917398]


author: Phil Sutter <psutter@redhat.com> [1.0.4-8.el9]
changelog:
  - monitor: Sanitize startup race condition (Phil Sutter) [2130721]
  - evaluate: set eval ctx for add/update statements with integer constants (Phil Sutter) [2094894]
  - src: allow anon set concatenation with ether and vlan (Phil Sutter) [2094887]
  - evaluate: search stacked header list for matching payload dep (Phil Sutter) [2094887]
  - netlink_delinearize: also postprocess OP_AND in set element context (Phil Sutter) [2094887]
  - tests: add a test case for ether and vlan listing (Phil Sutter) [2094887]
  - debug: dump the l2 protocol stack (Phil Sutter) [2094887]
  - proto: track full stack of seen l2 protocols, not just cumulative offset (Phil Sutter) [2094887]
  - netlink_delinearize: postprocess binary ands in concatenations (Phil Sutter) [2094887]
  - netlink_delinearize: allow postprocessing on concatenated elements (Phil Sutter) [2094887]
  - intervals: check for EXPR_F_REMOVE in case of element mismatch (Phil Sutter) [2115627]
  - intervals: fix crash when trying to remove element in empty set (Phil Sutter) [2115627]
  - scanner: don't pop active flex scanner scope (Phil Sutter) [2113874]
  - parser: add missing synproxy scope closure (Phil Sutter) [2113874]
  - tests/py: Add a test for failing ipsec after counter (Phil Sutter) [2113874]
  - doc: Document limitations of ipsec expression with xfrm_interface (Phil Sutter) [1806431]


author: Phil Sutter <psutter@redhat.com> [1.0.4-9.el9]
changelog:
  - tests: add a test case for map update from packet path with concat (Phil Sutter) [2094894]
  - netlink_linearize: fix timeout with map updates (Phil Sutter) [2094894]
  - netlink_delinearize: fix decoding of concat data element (Phil Sutter) [2094894]


author: Phil Sutter <psutter@redhat.com> [1.0.4-10.el9]
changelog:
  - netlink_delinearize: Sanitize concat data element decoding (Phil Sutter) [2160049]
  - optimize: Clarify chain_optimize() array allocations (Phil Sutter) [2160049]
  - optimize: Do not return garbage from stack (Phil Sutter) [2160049]
  - netlink: Fix for potential NULL-pointer deref (Phil Sutter) [2160049]
  - meta: parse_iso_date() returns boolean (Phil Sutter) [2160049]
  - mnl: dump_nf_hooks() leaks memory in error path (Phil Sutter) [2160049]
  - owner: Fix potential array out of bounds access (Phil Sutter) [2160049]


author: Phil Sutter <psutter@redhat.com> [1.0.4-11.el9]
changelog:
  - rule: check address family in set collapse (Phil Sutter) [RHEL-5908]
  - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-13
changelog:
  - tests: extend dtype test case to cover expression with integer type
  - evaluate: set evaluation context for set elements


author: Phil Sutter <psutter@redhat.com> [1.0.9-1.el9]
changelog:
  - spec: Utilize pyproject-rpm-macros for the python sub-package (Phil Sutter) [RHEL-14191]
  - Rebase onto version 1.0.9 (Phil Sutter) [RHEL-14191]


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-5
changelog:
  - Add -mod-devel subpackage for building external nginx modules
    Resolves: rhbz#1991720 (Neal Gompa)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-10
changelog:
  - Resolves: #1975747 - CVE-2021-3618 nginx: ALPACA: Application Layer Protocol
    Confusion - Analyzing and Mitigating Cracks in TLS Authentication


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-16
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-17
changelog:
  - bump package epoch to resolve RHEL-33939
  - Resolves: RHEL-33939 - Update path for nginx broken for existing CS
    installations


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-1
changelog:
  - new version 1.20.1
  - Resolves: #1964814 - CVE-2021-23017 nginx: Off-by-one in ngx_resolver_copy()
    when labels are followed by a pointer to a root domain name


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Gris Ge <fge@redhat.com> - 2.2.27-1
changelog:
  - N/A

   - Support TCP congestion window(cwnd) in route. (59f99632)
   - Support query interface driver. (67817c23)
   - New API to generate changed state. (fe5327a2)

   - Include driver information for `persist-nic-names` subcommand. (1129e46b)
   - nm: Protect global DNS config in checkpoint. (881373ba)
   - route rule: Append rule instead of overriding when iface defined. (88d3d3ef)
  - Resolves RHEL-19409


author: Gris Ge <fge@redhat.com> - 2.2.33-1
changelog:
  - Upgrade to 2.2.33
  - Fix validation of controller overbook. RHEL-40683
  - Support DNS and route in kernel mode. RHEL-37665


author: Gris Ge <fge@redhat.com> - 2.2.35-1
changelog:
  - Upgrade to 2.2.35
  - Fix gen_diff on VLAN ID change. RHEL-38623
  - Fix Nmpolicy on mac-address identifier. RHEL-54292
  - Fix reapply. RHEL-50556


author: Gris Ge <fge@redhat.com> - 2.2.36-1
changelog:
  - Upgrade to 2.2.36
  - Support route source. RHEL-56258
  - Fix setting empty MPTCP flags. RHEL-38607
  - Fix gc mode on blackhole route. RHEL-56727
  - Support ipsec require-id-on-certificate. RHEL-50696
  - Reselect iface DNS if desired. RHEL-56557


author: Gris Ge <fge@redhat.com> - 2.2.38-1
changelog:
  - Upgrade to 2.2.38
  - Preserve current IP setting for multiconnect profile. RHEL-61890
  - Fix profile name changing. RHEL-59239
  - IPvlan support. RHEL-43438
  - Handle ipv6.method: ignore. RHEL-58406


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Than Ngo <than@redhat.com> - 3.18.0-4
changelog:
  - Related: #2044179, do not touch opencryptoki.conf if it is in place already and even if it is unchanged


author: Than Ngo <than@redhat.com> - 3.19.0-1
changelog:
  - Resolves: #2126294, opencryptoki fails after generating > 500 RSA keys
  - Resolves: #2110314, rebase to 3.19.0
  - Resolves: #2110989, openCryptoki key generation with expected MKVP only on CCA and EP11 tokens
  - Resolves: #2110476, openCryptoki ep11 token: master key consistency
  - Resolves: #2018458, openCryptoki ep11 token: vendor specific key derivation


author: Than Ngo <than@redhat.com> - 3.21.0-3
changelog:
  - Resolves: #2110497, concurrent MK rotation for cca token
  - Resolves: #2110498, concurrent MK rotation for ep11 token
  - Resolves: #2110499, ep11 token: PKCS #11 3.0 - support AES_XTS
  - Resolves: #2111010, cca token: protected key support 
  - Resolves: #2160061, rebase to 3.21.0
  - Resolves: #2160105, pkcsslotd hardening
  - Resolves: #2160107, p11sak support Dilithium and Kyber keys
  - Resolves: #2160109, ica and soft tokens: PKCS #11 3.0 - support AES_XTS


author: Than Ngo <than@redhat.com> - 3.21.0-8
changelog:
  - Resolves: #2222592, p11sak tool: slot option does not accept argument 0 for slot index 0
  - Resolves: #2222596, p11sak fails as soon as there reside non-key objects


author: Than Ngo <than@redhat.com> - 3.22.0-2
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22792


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-50064, update to 3.24.0
  - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le
  - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-50056, openCryptoki cca token SHA3 support
  - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support


author: Ondřej Sloup <osloup@redhat.com> - 1.3.2-71
changelog:
  - Add %verify to ignore modified socket file after install
  - Remove unused OpenSP-1.5 from sources
    Related: rhbz#2193429


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-72
changelog:
  - Add an environment variable to prevent gating from complaining about rpaths  (rhbz#2193429)
    Related: RHEL-11772


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2109485)
  - Remove oscap-remediate service (rhbz#2111358)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159286)
  - Fix error when processing OVAL filters (rhbz#2126883)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2138884)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217442)
  - Fix systemd* probes unit enumeration (rhbz#2219532)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-11
changelog:
  - Initialize crypto API only once (rhbz#2020044)
  - Add support for Blueprint remediations (rhbz#2020052)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-12
changelog:
  - Allow using local files instead of remote resources (rhbz#2015518)
  - Add an alternative source of hostname (rhbz#2021509)
  - Lower memory limits and improve their checking (rhbz#2022362)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041782)
  - Select and exclude groups of rules on the command line (rhbz#2020580, rhbz#2020581)
  - The boot-time remediation service for systemd's Offline Update mode


author: Colin Walters <walters@verbum.org> - 2024.4-3
changelog:
  - Backport
    https://github.com/ostreedev/ostree/pull/3205/commits/e47b37096343efa3bea8295f3f44c4dc90cc04e2


author: Alex Macdonald <almacdon@redhat.com> - 1.2.2-3
changelog:
  - Remove osgi metadata patch0 that previously added a manifest
  - Include patch (courtesy of jkang) to package as a bundle instead of a jar
  - Update maven-compiler-plugin source/target version for builds in f33


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.42.2-3
changelog:
  - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use
    cairomm1.0, which may be a virtual Provides, in the manual lib Requires


author: Brian C. Lane <bcl@redhat.com> - 3.4-4
changelog:
  - Fix issues that covscan classifies as important
    Resolves: rhbz#1938836
  - Work around a mkswap bug


author: Brian C. Lane <bcl@redhat.com> - 3.5-1
changelog:
  - Rebase to upstream release 3.5
  - Drop patches included in new upstream tar
  - Add upstream patches for new type command
  - Add upstream patch for swap flag on DASD
    Resolves: rhbz#1999333


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Jakub Jelen <jjelen@redhat.com> - 1.9.4-1
changelog:
  - Rebase to current version from Fedora (#2017828)
  - Use of upstrea polkit policy preventing unneeded prompts


author: Paul Howarth <paul@city-fan.org> - 7.17-1
changelog:
  - Update to 7.17
    - Work around antique openssl version in RHEL-7 by formatting dh parameters
      differently
    - Add t/13_weaken.t


author: Petr Pisar <ppisar@redhat.com> - 7.17-6
changelog:
  - Conditionalize POE support
  - Conditionalize Tk support
  - Conditionalize Glib support
  - Conditionalize Event support


author: Paul Howarth <paul@city-fan.org> - 2.13-1
changelog:
  - Update to 2.13
    - Bypass prototypes when testing for lvalue attribute
    - Fixed a class name in tests to avoid conflicting with a core module


author: Paul Howarth <paul@city-fan.org> - 1.6-1
changelog:
  - Update to 1.6
    - Fixed confusing Changes entry about Perl's licensing terms (CPAN RT#132843)
    - Added optional Changes testing (skipped unless AUTHOR_TESTING)
    - Reformatted Changes file as per CPAN::Changes::Spec
    - Added optional POD coverage testing (skipped unless AUTHOR_TESTING)
    - Added optional Perl::Critic testing (skipped unless AUTHOR_TESTING)
    - Made code Perl::Critic clean
    - Added optional POD testing (skipped unless AUTHOR_TESTING)
    - Included GitHub repository URLs in metadata now that source code has been
      uploaded to GitHub (as of version 1.5)
    - Included META.json file in addition to META.yml
    - Set minimum required ExtUtils::MakeMaker version to 6.64 to ensure that all
      parameters used are supported, to save jumping through hoops to support
      earlier versions (this should not be a problem since ExtUtils::MakeMaker
      6.64 is easily installed into Perl 5.8.1 and above, that being the whole
      point of the new choice of minimum supported Perl version)
    - Set minimum required Perl version to 5.8.1; this is in line with the
      minimum requirement of the "Perl Toolchain"
    - Corrected typo in a comment (CPAN RT#86336)
  - Use author-independent source URL
  - Specify all build dependencies
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely
  - Package Artistic, Copying and LICENCE licence files


author: Emmanuel Seyman <emmanuel@seyman.fr> - 0.318-1
changelog:
  - Update to 0.318
  - Add perl(File::Slurper) as a dependency
  - Use /usr/bin/perl instead of perl
  - Use %{make_install} instead of make pure_install
  - Use %{make_build} instead of make


author: Paul Howarth <paul@city-fan.org> - 2:1.52-1
changelog:
  - Update to 1.52
    - Added a $dt->is_between($dt1, $dt2) method (based on GH#97)
    - Simplify the calculation of leap seconds in XS (GH#91); this is a little
      more efficient for most use cases (anything with future or recent past
      datetimes)


author: Paul Howarth <paul@city-fan.org> - 0.8200-4
changelog:
  - Fix License: tag to reflect content of actual shipped files, not just what
    the LICENSE file says (#1600504, CPAN RT#125832)


author: Paul Howarth <paul@city-fan.org> - 1:1.77-1
changelog:
  - Update to 1.77
    - When the parsed string contained an invalid time zone offset (parsed with
      "%z") like "-9999", the error handling set in the parser's constructor was
      ignored and an exception was always thrown (GH#25)
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1:1.78-1
changelog:
  - Update to 1.78
    - Fix tests for new failure caused by locale data changes in DateTime::Locale
      1.29 (GH#28)
    - Added a warning about using locale-specific patterns; some of these patterns
      can change quite a bit as the locale data is updated, so using them for
      parsing does not produce stable results across time - this is what caused
      the test failures that this release fixes


author: Michal Josef Spacek <mspacek@redhat.com> - 1:1.79-1
changelog:
  - Update to 1.79
    - Fix too-strict type checking for time zones: this module now uses the same
      check as DateTime itself, which allows for things that don't subclass
      DateTime::TimeZone as long as they provide the same API (GH#30) (rhbz#1964546)


author: Paul Howarth <paul@city-fan.org> - 0.11-18
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Drop support for building with Test::More < 0.88
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license where possible


author: Paul Howarth <paul@city-fan.org> - 0.3.4-1
changelog:
  - Update to 0.3.4
    - Now at https://github.com/shlomif/perl-file-find-object
    - tidyall
    - Add *~ files to MANIFEST.SKIP (GH#1)


author: Paul Howarth <paul@city-fan.org> - 0.3.5-1
changelog:
  - Update to 0.3.5
    - Rebuild for order of 'NAME' and 'VERSION' sections in the generated POD
      documentation (VERSION used to appear before NAME)
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.14-1
changelog:
  - Update to 1.14
    - Remove MAP_TARGET from Makefile.PL (CPAN RT#91590)
    - Fix for Solaris setuid when root running as other user (CPAN RT#88271)
    - Add strict/warnings to Tty.pm
    - Fix pod errors
    - Typo: s/dependend/dependent/
    - Prevent spurious warning from get_winsize()
    - Fix usage of setsid
    - Github actions testing; Windows is off of course
    - Make README.md
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.14-5
changelog:
  - Fix FTBFS due to false detection of strlcpy() and _getpty()
    https://github.com/toddr/IO-Tty/pull/24
  - Modernize spec using %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.15-1
changelog:
  - Update to 1.15
    - Skip winsize test on Solaris and QNX NTO (GH#22)
    - Make function tests more robust (GH#24)
    - Work around a header name collision on util.h; this is breaking on recent
      OSX (GH#26)


author: Paul Howarth <paul@city-fan.org> - 1.16-1
changelog:
  - Update to 1.16
    - Switch to GitHub for issue tracker
    - Switch to testsuite CI workflow
    - Tidy


author: Paul Howarth <paul@city-fan.org> - 2.112-1
changelog:
  - Update to 2.112
    - Added the change log from any prior source that could be found, and
      formatted the log to fit metacpan.org loose standards
    - Change use vars qw() to our $whatever instead
    - Hide IO::WrapTie subclasses from PAUSE
    - Rebuild Makefile.PL to contain all of the prerequisites
    - Convert README to README.md
    - Fix the documentation in the main module, IO::Stringy to better indicate
      where to get info and how to use the module
    - Fix the dist's META information to indicate the original author and license
    - Add a LICENSE file
    - Add AppVeyor CI testing
    - Add Travis CI testing
    - Update t/IO_InnerFile.t to use Test::More and a proper TEMP file
      (CPAN RT#103895)
  - Use author-independent source URL
  - Simplify find command using -delete
  - Add Provides: for perl-IO-Stringy
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.113-1
changelog:
  - Update to 2.113
    - Get rid of use of Common and TBone in all tests
    - Convert to Dist::Zilla for authoring
    - Cleaned up some of the docs (needs more)


author: Paul Howarth <paul@city-fan.org> - 20200505.0-1
changelog:
  - Update to 20200505.0
    - Fix syntax errors in POD examples (GH#125)
    - Switch Readonly testing requirement to a recommends (GH#127)
    - Fix full_result to always return $? (GH#129)
    - kill_kill: Immediately KILL the child process as documented for Win32 (GH#136)
    - Switch to GitHub actions for CI testing
    - Re-structure shipped files into eg/
    - Move author tests into xt/ and test them separately


author: Paul Howarth <paul@city-fan.org> - 2.18-1
changelog:
  - Update to 2.18
    - Update with newest data
    - Mojo 6.0 changed types() into mapping()
    - Mojo 7.94 adds experimental file_type()
    - Mojo 7.94 adds experimental content_type()


author: Paul Howarth <paul@city-fan.org> - 0.39-1
changelog:
  - Update to 0.39
    - Updated distribution metadata and packaging
    - Configuration phase now uses ExtUtils::HasCompiler


author: Paul Howarth <paul@city-fan.org> - 0.112-1
changelog:
  - Update to 0.112
    - Another test fix on Windows, possibly due to a behavior change in
      Cwd::getdcwd


author: Paul Howarth <paul@city-fan.org> - 0.118-1
changelog:
  - Update to 0.118
    - Skip symlink tests on Windows by actually testing symlinks, as Perl 5.33.5
      adds notional support but it's not possible without elevated privileges


author: Paul Howarth <paul@city-fan.org> - 0.008-1
changelog:
  - Update to 0.008
    - Make unread by :crlf on top of :utf8_strict reliable
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.47-1
changelog:
  - Update to 0.47
    - Change Specio constraint object's stringification overloading to return the
      type name rather than the default Perl object stringification, which gives
      you something like
      "Specio::Constraint::Parameterized=HASH(0x564d258efb48)"; anonymous are
      special cased to return something you can print
    - All types now overload the 'eq' comparison operator: Moose expects types to
      be comparable in this manner when doing role summation (GH#18)


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - %DB::sub is now populated correctly for sub names with wide characters or
      nulls (GH#9)
    - Better Perl 5.6 compatibility by lowering prereqs of core modules
    - Test for renaming lexical subs, which should work on Perl 5.22+ (GH#10)
    - Small internal changes to bring implementation in line with changes to
      Sub::Util
    - Fix "Undefined symbol "DPPP_my_croak_xs_usage"" error on some perls
      (CPAN RT#125158)
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.130-1
changelog:
  - Update to 1.128
    - Allow 'use Test::Deep' while other modules use Test::Deep::NoTest (GH#76)
    - Added true/false optional imports (GH#41, GH#44)
    - Documentation fixes (GH#79)
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.016-1
changelog:
  - Update to 0.016
    - Add default descriptions to tests
    - Work on ancient Test::Builder code
  - Use author-independent source URL
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.11-1
changelog:
  - Update to 0.11
    - Re-packaging
  - Drop running of extra tests at package build time to avoid need for
    bootstrapping
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 0.027-1
changelog:
  - Update to 0.027
    - New :fail_on_warning feature, for more easily seeing where the surprising
      warning appeared during testing
  - Use author-independent source URL
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.029-1
changelog:
  - Update to 0.029
    - New :report_warnings feature, for printing all of the (unexpected) warning
      content when had_no_warnings() is called (GH#10)


author: Paul Howarth <paul@city-fan.org> - 0.030-1
changelog:
  - Update to 0.030
    - Fix tests that can fail when there is already an installed module named
      Foo::Bar::Baz (CPAN RT#132140)


author: Paul Howarth <paul@city-fan.org> - 1.01-1
changelog:
  - Update to 1.01
    - Implement Types::Serialiser::as_bool
    - Slight documentation tweaks
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.002-2
changelog:
  - Incorporate feedback from package review (#1776513)
    - BR: findutils
    - BR: perl(CPAN::Meta::Prereqs)
    - Need perl(ExtUtils::MakeMaker) >= 6.76
    - Add reference to upstream ticket about unnecessary build requirements
      https://github.com/atoomic/XString/issues/2
    - Add run-time dependency on perl(XSLoader)


author: Paul Howarth <paul@city-fan.org> - 0.005-1
changelog:
  - Update to 0.005
    - Fix cstring for Perl 5.32 (GH#6, GH#7)
    - Remove unneeded module dependencies (GH#2)
    - Add compatibility with Perl 5.8 (GH#9)


author: Jitka Plesnikova <jplesnik@redhat.com> - 1:0.81-1
changelog:
  - Update to 0.81
    - Breaking Change: Set $YAML::XS::LoadBlessed default to false to make it
      more secure


author: Paul Howarth <paul@city-fan.org> - 1:0.82-1
changelog:
  - Update to 0.82
    - Updated libyaml sources to 0.2.4; changes affecting YAML::XS are:
      - Output '...' at the stream end after a block scalar with trailing empty
        lines
      - Accept '%YAML 1.2' directives (they are ignored and do not change
        behaviour though)


author: Paul Howarth <paul@city-fan.org> - 3.7.5-1
changelog:
  - Update to 3.75
    - Make build (more) reproducible
    - Removed "portable" from the warnings list, as 32-bit perls (as opposed to
      32-bit platforms) are practically extinct and it warns about a weird subset
      of operations, e.g. 64-bit hex() is not ok, 64-bit addition is fine, makes
      no sense; additionally, other than hex/oct etc. harassment, there is
      nothing in this category that otherwise could be useful
  - Specify all build dependencies
  - Drop ancient obsoletes/provides for removed tests sub-package
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.29-1
changelog:
  - Update to 0.29
    - Switch from Test::Requires to Test::Needs
    - Report on the installed versions of more optional modules


author: Mat Booth <mat.booth@redhat.com> - 0.0.7-29
changelog:
  - Unecessary restriction on plexus-util, with the patch it's actually still
    source compatible with older versions


author: Marek Kasik <mkasik@redhat.com> - 21.01.0-11
changelog:
  - Backport fixes for issues found by Coverity Scan
  - and fix some of the new issues
  - Resolves: #1967967


author: Honza Horak <hhorak@redhat.com> - 13.3-6
changelog:
  - Do not provide pkgconfig(libpq) to not trick packages that actually require
    libpq-devel
    Resolves: #1980992


author: Filip Januš <fjanus@redhat.com> - 13.3-9
changelog:
  - Remove tests failing with openssl3, now pgp is tested only with
    supported ciphers
    Add postgresql-pgcrypto-openssl3-init.patch - Correctly init ciphers
    Add postgresql-pgcrypto-openssl3-tests.patch - disable unsupported
    ciphers in the test suite
    Related discussion: #2008773
    Resolves: #1964848


author: Marek Kulik <mkulik@redhat.com> - 13.5-1
changelog:
  - Update to 13.5 (#2023301)
    Remove patch postgresql-pgcrypto-openssl3-init.patch - Already in upstream


author: Masahiro Matsuya <mmatsuya@redhat.com> - 13.13-1
changelog:
  - Update to 13.13
  - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, and CVE-2023-39417
  - Resolves: RHEL-5567


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-6
changelog:
  - free: backport new 'used' calculation
  - sysctl: backport support of systemd glob patterns
  - Resolves: rhbz#2003033
  - Resolves: rhbz#2052536


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-7
changelog:
  - sysctl: backport - keys with dots instead of slashes again
  - Resolves: rhbz#2116977
  - Related: rhbz#2052536


author: Adrian Reber <adrian@lisas.de> - 3.14.0-6
changelog:
  - Reintroduce the emacs subpackage to avoid file conflicts between
    protobuf-compiler.x86_64 and protobuf-compiler.i686
  - Disable LTO to fix annobin errors


author: Adrian Reber <areber@redhat.com> - 3.14.0-14
changelog:
  - Applied patch for CVE-2022-1941 (#RHEL-40872)
  - Applied patch to make emacs dependency optional (#RHEL-40572)


author: Petr Viktorin <pviktori@redhat.com> - 1.1-1
changelog:
  - Update to 1.1 to fix Python 3.8 compatibility in tests
    https://bugzilla.redhat.com/show_bug.cgi?id=1758446


author: Miro Hrončok <mhroncok@redhat.com> - 2.6.2-6
changelog:
  - Introduce epoch to pybind11-devel to sort newer than python3.11-pybind11-devel
  - Resolves: RHEL-38108


author: Tomas Orsava <torsava@redhat.com> - 2.6.2-4
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Manually add Provides and Obsoletes for python39-pybind11-devel
  - Related: rhbz#1990421


author: Lumír Balhar <lbalhar@redhat.com> - 1.6.3-1
changelog:
  - Remove .dist-info directory at the end of %pyproject_buildrequires
  - An incomplete .dist-info directory in $PWD can confuse tests in %check


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.0-1
changelog:
  - %pyproject_buildrequires: Redirect stdout to stderr via Shell
  - Dependencies are recorded to a text file that is catted at the end


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.0-1
changelog:
  - %pyproject_buildrequires: Add support for self-referential extras requirements
  - Deprecate the provisional %{pyproject_build_lib} macro
    See https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/HMLOPAU3RZLXD4BOJHTIPKI3I4U6U7OE/


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.1-1
changelog:
  - On Python older than 3.11, use tomli instead of deprecated toml
  - Fix literal % handling in %{pyproject_files} on RPM 4.19


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.1-1
changelog:
  - Add a temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Related: rhbz#2284187


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-1
changelog:
  - Properly escape weird characters from paths in %{pyproject_files} (RPM 4.19+ only)
  - Revert the temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Fixes: rhbz#1990879


author: Python Maint <python-maint@redhat.com> - 1.15.0-1
changelog:
  - Add a possibility to read runtime requirements from pyproject.toml [project] table
  - Fixes: rhbz#2261939
  - Don't generate a dependency on pip when %pyproject_buildrequires -N is used
  - Fixes: rhbz#2294510
  - Even when %_auto_set_build_flags is disabled, set all compiler flags when building wheels
  - Fixes: rhbz#2293616


author: Miro Hrončok <mhroncok@redhat.com> - 1.16.0-1
changelog:
  - %pyproject_buildrequires: Add support for dependency groups (PEP 735), via the -g flag
  - This is implied when used tox testenvs depend on dependency groups (requires tox 4.22+)
  - Fixes: rhbz#2318849


author: Miro Hrončok <miro@hroncok.cz> - 1.16.1-1
changelog:
  - Support for setuptools 70+
  - wheel is no longer generated as a dependency of the default build system


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.0-1
changelog:
  - %pyproject_buildrequires: Add provisional -w flag for build backends without
    prepare_metadata_for_build_wheel hook
    When used, the wheel is built in %pyproject_buildrequires
    and information about runtime requires and extras is read from that wheel.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.2-1
changelog:
  - Update %pyproject_build_lib to support setuptools 62.1.0 and later
  - %pyproject_buildrequires: When extension modules are built,
    support https://fedoraproject.org/wiki/Changes/Package_information_on_ELF_objects


author: Python Maint <python-maint@redhat.com> - 1.4.0-1
changelog:
  - %pyproject_save_files: Support License-Files installed into the *Root License Directory* from PEP 369
  - %pyproject_check_import: Import only the modules whose top-level names
    match any of the globs provided to %pyproject_save_files


author: Miro Hrončok <mhroncok@redhat.com> - 1:2.8.0-7
changelog:
  - Subpackage python2-dateutil has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Charalampos Stratakis <cstratak@redhat.com> - 1:3.4.3-7
changelog:
  - Obsolete and provide the python-sphinx-locale package to fix the upgrade path
  Related: rhbz#1985219


author: Jerry James <loganjerry@gmail.com> - 0.5.0-1
changelog:
  - Version 0.5.0
  - Drop upstreamed -script patch
  - Do not even link to fonts; modify the CSS to point to system fonts
  - Remove all traces of html5shiv


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.19-1
changelog:
  - Update to 3.9.19
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix tests for XMLPullParser with Expat with fixed CVE
  Resolves: RHEL-33679, RHEL-33691


author: Tomas Popela <tpopela@redhat.com> - 1.20.1-1
changelog:
  - Update to 1.20.1
  - Resolves: rhbz#2016905
  - Ship python3-cairo-devel in CRB
  - Resolves: rhbz#2053665


author: Miro Hrončok <mhroncok@redhat.com> - 3.9.0-5
changelog:
  - Initial package for RHEL 9
  - Resolves: RHEL-12338
  - Fedora+EPEL contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <gotmax@e.email>
        Michel Alexandre Salim <salimma@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Mukundan Ragavan <nonamedotc@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Miro Hrončok <mhroncok@redhat.com> - 0.4.14-5
changelog:
  - Subpackages python2-greenlet, python2-greenlet-devel have been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-8
changelog:
  - Resolves: RHEL-12143 'ipa vault-add is failing with ipa: ERROR: an internal error has occurred in FIPS mode
  - Resolves: RHEL-25738 ipa-kdb: Cannot determine if PAC generator is available


author: Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-9
changelog:
  - Resolves: RHEL-28258 vault fails on non-fips client if server is in FIPS mode
  - Resolves: RHEL-26154 ipa: freeipa: specially crafted HTTP requests potentially lead to DoS or data exposure


author: Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-10
changelog:
  - Resolves: RHEL-23377 Enforce OTP for ldap bind (in some scenarios)
  - Resolves: RHEL-29745 Unable to re-add broken AD trust - NT_STATUS_INVALID_PARAMETER
  - Resolves: RHEL-30905 Backport latest test fixes in ipa


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-1
changelog:
  - Resolves: RHEL-39140 Rebase ipa to the latest 4.12 version for RHEL 9.5
  - Resolves: RHEL-34757 The change for preventing deletion of the admin user caused a regression in disable
  - Resolves: RHEL-30553 Depend on nfsv4-client-utils or nfs-utils
  - Resolves: RHEL-29762 IPA sidgen fails to create SID for manually set ID for a new range [rhel-9.5.0]
  - Resolves: RHEL-26261 Fix replica connection check for use with AD administrator
  - Resolves: RHEL-18062 ipa ca-show NAME --certificate-out=file creates empty file when NAME does not exist
  - Resolves: RHEL-12149 traceback in ipaserver/dcerpc.py
  - Resolves: RHEL-4810 [RFE] FreeIPA-to-FreeIPA migration
  - Resolves: RHEL-4807 [RFE] Support in IPA for HSM boxes


author: Julien Rische <jrische@redhat.com> - 4.12.0-4
changelog:
  - Resolves: RHEL-29928 CVE-2024-3183 freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force
  - Resolves: RHEL-29691 CVE-2024-2698 freeipa: delegation rules allow a proxy service to impersonate any user to access another target service


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-5
changelog:
  - Resolves: RHEL-37285 IPA Web UI not showing replication agreement for non-admin users
  - Resolves: RHEL-42703 PSKC.xml issues with ipa_otptoken_import.py
  - Resolves: RHEL-41194 ipa-client rpm post script creates always ssh_config.orig even if nothing needs to be changed
  - Resolves: RHEL-39477 kdc.crt certificate not getting automatically renewed by certmonger in IPA Hidden replica
  - Resolves: RHEL-46559 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-22188 [RFE] Allow IPA SIDgen task to continue if it finds an entity that SID can't be assigned to


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-6
changelog:
  - Resolves: RHEL-47292 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-47146 Syntax error uninstalling the selinux-luna subpackage
  - Resolves: RHEL-46009 ipa-migrate with -Z option fails with ValueError: option error
  - Resolves: RHEL-46003 ipa-migrate -V options fails to display version
  - Resolves: RHEL-45463 ipa-migrate stage-mode is failing with error: Modifying a mapped attribute in a managed entry is not allowed
  - Resolves: RHEL-40890 ipa-server-install: token_password_file read in kra.install_check after calling hsm_validator in ca.install_check
  - Resolves: RHEL-40661 Adjust "ipa config-mod --addattr ipaconfigstring=EnforceLDAPOTP" to allow for non OTP users in some cases


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-7
changelog:
  - Resolves: RHEL-53500 adtrustinstance only prints issues in check_inst() and does not log them
  - Resolves: RHEL-52306 Unconditionally add MS-PAC to global config
  - Resolves: RHEL-52300 RFE - Keep the configured value for the "nsslapd-ignore-time-skew" after a "force-sync"
  - Resolves: RHEL-52222 ipa-replica/server-install with softhsm needs to check permission/ownership of /var/lib/softhsm/tokens to avoid install failure
  - Resolves: RHEL-51944 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-50804 ipa-migrate -Z with invalid cert options fails with 'ValueError: option error'
  - Resolves: RHEL-49602 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
  - Resolves: RHEL-27856 'Unable to log in as uid=admin-replica.testrealm.test,ou=people,o=ipaca' during replica install


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-1
changelog:
  - Resolves: RHEL-54546 Covscan issues: Resource Leak
  - Resolves: RHEL-49602 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
  - Resolves: RHEL-40359 With unreachable AD, ipa trust returns an internal error


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-2
changelog:
  - Related: RHEL-59788 Rebase Samba to the latest 4.21.x release
  - Resolves: RHEL-61642 Uninstall ACME separately during PKI uninstallation
  - Resolves: RHEL-56963 SSSD offline causing test-adtrust-install failure
  - Resolves: RHEL-56473 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-48104 Default hbac rules are duplicated on remote server post ipa-migrate in prod-mode
  - Resolves: RHEL-45330 [RFE] add a tool to quickly detect and fix issues with IPA ID ranges
  - Resolves: RHEL-40376 SID generation task is failing when SELinux is in Enforcing mode
  - Resolves: RHEL-4915 Last expired OTP token would be considered as still assigned to the user


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-5
changelog:
  - Resolves: RHEL-67414 ipa dns-zone --allow-query '!198.18.2.0/24;any;' fails with Unrecognized IPAddress flags
  - Resolves: RHEL-67410 ipa-migrate should also migrate DNS forward zones
  - Resolves: RHEL-67409 ipa-migrate in stage mode fails with TypeError: 'NoneType' object is not iterable
  - Resolves: RHEL-66964 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-64135 IDP configuration in the IdM WebUI shows Organization is required


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-6
changelog:
  - Resolves: RHEL-68448 ipa trust-add fails in FIPS mode with an internal error has occurred
  - Resolves: RHEL-69301 Support GSSAPI in Cockpit on IPA servers


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Tomas Orsava <torsava@redhat.com> - 5.8.0-5
changelog:
  - Remove unnecessary test dependency on python3-mock
  - Remove unnecessary macro __provides_exclude_from


author: Charalampos Stratakis <cstratak@redhat.com> - 6.2.2-2
changelog:
  - Disable tests and documentation generation on RHEL9 to avoid pulling in dependencies
  - Drop redundant build dependency on wcwidth (unused since 6.0.0rc1)


author: Dan Čermák <dan.cermak@cgc-instruments.com> - 0.7.1-5
changelog:
  - BuildRequire python3-setuptools besides python3-devel
    (see https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/GCPGM34ZGEOVUHSBGZTRYR5XKHTIJ3T7/)


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.4-101
changelog:
  - resolves: rhbz#2216712 - Fix broken symlink for libwbclient
  - resolves: rhbz#2214327 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes`
  - resolves: rhbz#2211605 - Fix access of Samba share with veto files = /.*/
  - resolves: rhbz#2207692 - Fix Python tarfile extraction to avoid a warning


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.4-3
changelog:
  - Update runtime and buildtime dependencies
  - Remove sqlalchemy, whoosh and xapian dependencies from RHEL9


author: Tomas Orsava <torsava@redhat.com> - 1:0.36.2-5
changelog:
  - Make the python-wheel-wheel subpackage versioned (python3-wheel-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 1:0.36.2-6
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.9-1
changelog:
  - Rebase to 3.11.9
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix expat tests for the latest expat security release
  Resolves: RHEL-33677, RHEL-33689


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.5-1
changelog:
  - Rebase to 3.11.5
  - Security fixes for CVE-2023-40217 and CVE-2023-41105
  Resolves: RHEL-3045, RHEL-3269


author: Charalampos Stratakis <cstratak@redhat.com> - 0.29.32-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alex Cobb <alex.cobb@smart.mit.edu>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        nbecker <ndbecker2@gmail.com>
        Neal D. Becker <ndbecker2@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        serge-sans-paille <sguelton@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio くらとみ <toshio@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 22.1.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tomas Hrnciar <thrnciar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.0.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Thomas Moschny <thm@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim GÜNDÜZ <devrim@fedoraproject.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.10.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Jonathan <jonathan@knownhost.com>
        jonathanspw <jonathan@almalinux.org>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Susi Lehtola <jussilehtola@fedoraproject.org>
        Tom Stellard <tstellar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.0.7-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alan Pevec <alan.pevec@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David King <amigadave@amigadave.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        José Abílio Oliveira Matos <jamatos@fedoraproject.org>
        José Matos <jamatos@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Terje Røsten <terje.rosten@ntnu.no>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        yatin <ykarel@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 7.2.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Viktorin <pviktori@redhat.com>
        Richard Shaw <hobbes1069@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Thomas Moschny <thm@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.8.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Davide Cavalca <dcavalca@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Javier Pena <jpena@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.5.2-1
changelog:
  - Initial import
  - Fedora contributions by:
        Christian Heimes <cheimes@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 0.38.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.2-3
changelog:
  - Move all test modules to the python3-test package, namely:
     - __phello__
     - _xxsubinterpreters
     - xxlimited
     - xxlimited_35
     - xxsubtype


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 0.29.35-2
changelog:
  - Initial package
  - Fedora contributions by:
        Alex Cobb <alex.cobb@smart.mit.edu>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <i.gnatenko.brain@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Neal D. Becker <ndbecker2@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        serge-sans-paille <sguelton@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio くらとみ <toshio@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Mukundan Ragavan <nonamedotc@gmail.com>
        Tomas Hrcka <thrcka@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.1.1-1
changelog:
  - Initial package
  - Fedora contributions by:
       Lumir Balhar <lbalhar@redhat.com>
       Miro Hrončok <miro@hroncok.cz>
       Tomas Hrnciar <thrnciar@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 23.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeroen van Meeuwen (Kolab Systems) <vanmeeuwen@kolabsys.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.2.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Thomas Moschny <thm@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.6-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim Gündüz <devrim@gunduz.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Jonathan <jonathan@knownhost.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Pavel Šimovec <psimovec@redhat.com>
        Susi Lehtola <jussilehtola@fedoraproject.org>
        Tom Stellard <tstellar@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 7.4.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Viktorin <pviktori@redhat.com>
        Richard Shaw <hobbes1069@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Thomas Moschny <thm@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.7.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Christian Heimes <cheimes@redhat.com>
        Fabio Valentini <decathorpe@gmail.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Tomáš Hrnčiar <thrnciar@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 68.2.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Konstantin Ryabitsev <icon@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Petr Viktorin <pviktori@redhat.com>
        Pierre-Yves Chibon <pingou@pingoured.fr>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 0.41.2-1
changelog:
  - Initial package.
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>


author: Vladis Dronov <vdronov@redhat.com> - 21.05.0-1
changelog:
  - Update to qatlib 21.05 with openssl-3 support (bz 1920444, bz 1953498)
  - Add documentation files to a package


author: Vladis Dronov <vdronov@redhat.com> - 24.02.0-1
changelog:
  - Update to qatlib 24.02.0 (RHEL-20174)
  - Add zuc_sample to qatlib-tests package
  - Use proper SPDX license identifiers


author: Vladis Dronov <vdronov@redhat.com> - 24.09.0-1
changelog:
  - Update to qatlib 24.09.0 @ 36fb0903 (RHEL-40255)
  - Add pciutils as a dependency of the qatlib-service subpackage
  - Add numactl-devel as a dependency since it is required by qatlib-24.09.0


author: Vladis Dronov <vdronov@redhat.com> - 1.0.7-1
changelog:
  - Rebuild for qatzip v1.0.7
  - Fix snprintf truncation check (bz 2046925)
  - Add -fstack-protector-strong build option (bz 2044889)


author: Vladis Dronov <vdronov@redhat.com> - 1.0.9-1
changelog:
  - Rebuild for qatzip v1.0.9 (bz 2047744)
  - Update to require qatlib-devel >= 22.07.0 due to soversion bump


author: Vladis Dronov <vdronov@redhat.com> - 1.1.2-1
changelog:
  - Update to qatzip 1.1.2 (bz 2082438)
  - Update README, update driver configure files
  - Fix some bugs
  - Add support for pkgconfig


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-4
changelog:
  - Fix specific overflow in qtextlayout
  - Fix incorrect parsing of the strict-transport-security (HSTS) header
  - Fix buffer over-read via a crafted reply from a DNS server
    Resolves: bz#2209492


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-5
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-6
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410) (version #2)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-27
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch patches
    - validate configure results (base, egl-x11)

    Resolves: bz#2014991


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-9
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch fixes
    - pull in candidate fix QTBUG-83890
    Resolves: bz#1988934


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-4
changelog:
  - Rebuild (LLVM-15)
    Resolves: bz#2119003

  - Add versioned dependencies between subpackages
    Resolves: bz#2088352


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Alba Hita Catala <ahitacat@redhat.com> - 0.2.4-1
changelog:
  - Configure proxy for http connections (RHBZ#2227018)
  - Failling to get system profile is not an error but a warning (RHBZ#2227012)
  - Prevent message content being logged at any level (RHBZ#2227010)
  - Added bash completion (RHBZ#2145198)


author: Link Dupont <link@redhat.com> - 0.2.4-5
changelog:
  - Update embedded yggdrasil-worker-package-manager to 0.1.3 (RHEL-17179)
  - Update embedded yggdrasil to 0.2.4 (RHEL-17179)


author: Pavel Valena <pvalena@redhat.com> - 3.0.1-154
changelog:
  - Upgrade to Ruby 3.0.2.
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810
  - Fix StartTLS stripping vulnerability in Net::IMAP
    Resolves: CVE-2021-32066
  - Fix dependencies of gems with explicit source installed from a
    different source.
    Resolves: CVE-2020-36327
  - Pass ldflags to gem install via CONFIGURE_ARGS.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.4-160
changelog:
  - Upgrade to Ruby 3.0.4.
    Resolves: rhbz#2096347
  - OpenSSL test suite fixes due to disabled SHA1.
    Resolves: rbhz#2107696
  - Fix double free in Regexp compilation.
    Resolves: CVE-2022-28738
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739


author: Jun Aruga <jaruga@redhat.com> - 3.0.4-160
changelog:
  - Bypass git submodule test failure on Git >= 2.38.1.
  - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b.
  - Fix for tzdata-2022g.
  - Fix File.utime test.


author: Jun Aruga <jaruga@redhat.com> - 3.0.4-161
changelog:
  - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS.
    Resolves: RHEL-12724
  - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters
    Related: RHEL-12724


author: Jun Aruga <jaruga@redhat.com> - 3.0.7-162
changelog:
  - Upgrade to Ruby 3.0.7.
    Resolves: RHEL-35740
  - Fix HTTP response splitting in CGI.
    Resolves: RHEL-35741
  - Fix ReDoS vulnerability in URI.
    Resolves: RHEL-35742
  - Fix ReDoS vulnerability in Time.
    Resolves: RHEL-35743
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-35744
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-35746
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-35747


author: Pavel Valena <pvalena@redhat.com> - 3.10.1-7
changelog:
  - Re-add Requires: rubygem(rake), as it's needed for runtime.
    Resolves: rhbz#1982410
    Resolves: rhbz#1982419


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.16.1-1
changelog:
  - New version
    Resolves: rhbz#1853885
  - Dropped smtp-session-reuse-fix, openssl-1.1.0-fix, openssl-1.1.0-ecdhe-fix,
    gethostbyname2, fix-covscan-issues, gcc-10-fix patches (not needed)
  - Dropped format-security patch (upstreamed)
  - Updated patches


author: Tomas Bzatek <tbzatek@redhat.com> - 1.47-7
changelog:
  - Fix sg_inq parsing in rescan-scsi-bus.sh (#2036005,#2035362)
  - Fix rescan-scsi-bus.sh summary print (#2035382)
  - sg_readcap --zbc man page switch fix (#2036718)
  - Various Covscan fixes (#2044433)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-7
changelog:
  - useradd: check if subid range exists for user. Resolves: #2179987
  - find_new_[gu]id: Skip over IDs that are reserved for legacy reasons. Resolves: #2179988


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.8.1-9
changelog:
  - libsubid: creation and nsswitch support. Resolves: #1859252
  - Creation of subid and subid-devel subpackages
  - man: mention NSS in new[ug]idmap manpages
  - libsubid: move development header to shadow folder
  - libsubid: don't print error messages on stderr by default
  - libsubid: libsubid_init return false if out of memory
  - useradd: fix SUB_UID_COUNT=0
  - libsubid: don't return owner in list_owner_ranges API call
  - libsubid: libsubid_init don't print messages on error
  - libsubid: fix newusers when nss provides subids
  - man: clarify subid delegation
  - libsubid: make shadow_logfd not extern
  - login.defs: include HMAC_CRYPTO_ALGO key


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-1
changelog:
  - Rebase to version 4.9. Resolves: #1989556
  - usermod: allow all group types with -G option. Resolves: #1975329
  - useradd: avoid generating an empty subid range
  - Clean spec file


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-3
changelog:
  - getsubids: provide system binary and man page. Resolves: #2013015
  - useradd: generate home and mail directories with selinux user attribute. Resolves: #1993081
  - useradd: revert fix memleak of grp. Resolves: #2020238
  - groupdel: fix SIGSEGV when passwd does not exist. Resolves: #2024834
  - pwck: fix segfault when calling fprintf()
  - newgrp: fix segmentation fault
  - Clean spec file: organize dependencies and move License location


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-4
changelog:
  - useradd: modify check ID range for system users. Resolves: #2004911
  - Fix release sources
  - Add subid requirement for subid-devel


author: Peter Jones <pjones@redhat.com> - 15.3-0~1
changelog:
  - Update to shim 15.3
    - Support for revocations via the ".sbat" section and SBAT EFI variable
    - A new unit test framework and a bunch of unit tests
    - No external gnu-efi dependency
    - Better CI
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Peter Jones <pjones@redhat.com> - 15.4-1
changelog:
  - Update to shim 15.4
    - Support for revocations via the ".sbat" section and SBAT EFI variable
    - A new unit test framework and a bunch of unit tests
    - No external gnu-efi dependency
    - Better CI
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Peter Jones <pjones@redhat.com> - 15.4-2
changelog:
  - Fix the ia32 build.
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Peter Jones <pjones@redhat.com> - 15.4-3
changelog:
  - Build with the correct certificate trust list for this OS.
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Peter Jones <pjones@redhat.com> - 15.4-4
changelog:
  - Fix the sbat data to actually match /this/ product.
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Matej Matuska <mmatuska@redhat.com> - 0.18.0-4
changelog:
  - Bump leapp-framework to 6.0
  - Bump leapp-framework-dependencies to 6
  - Require python3-PyYAML
  - [Technical preview] Introduce configurability for leapp actors
  - Resolves: RHEL-57042


author: Martin Gieseking <martin.gieseking@uos.de> - 1.1.8-1
changelog:
  - Updated to new release.
  - Dropped version-related patch which has been applied upstream (BZ #1527850).


author: Tomas Korbar <tkorbar@redhat.com> - 1.2.0-11
changelog:
  - CVE-2020-23903 speex: divide by zero in read_samples() via crafted WAV file
  - Resolves: CVE-2020-23903


author: Orion Poplawski <orion@nwra.com> - 5.4.0-1
changelog:
  - Update to 5.4.0
  - Use upstream shared library builds
  - Build with metis
  - Explicitly list libraries and soname versions


author: Tom Stellard <tstellar@redhat.com> - 4.0.2-2
changelog:
  - Use make macros
    https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Disable Go tests


author: Robert-André Mauchin <zebob.m@gmail.com> - 4.0.2-16
changelog:
  - Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
    CVE-2022-29526, CVE-2022-30629


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.7-4
changelog:
  - Move texlive-tex files to more approriate location again, this
    time in sync with dropping texlive-texinfo from texlive
    Resolves: #1719379


author: Than Ngo <than@redhat.com> - 9:20200327-19
changelog:
  - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs


author: Štěpán Horáček <shoracek@redhat.com> - 3.2.2-1
changelog:
  - Rebase to 3.2.2
  - Use systemd-sysusers to create user
    Resolves: CVE-2023-22745
    Resolves: rhbz#2095479
    Resolves: rhbz#2160307
    Resolves: rhbz#2162613


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Hans de Goede <hdegoede@redhat.com> - 1:3.2.7b-1
changelog:
  - New upstream release 3.2.7b
  - Add patch fixing CVE-2019-19746 (rhbz#1787040)
  - Add patch fixing CVE-2019-19797 (rhbz#1786726)


author: Ondrej Dubaj <odubaj@redhat.com> - 1:3.2.7b-7
changelog:
  - Fixed CVE-2020-21681 (#1998350)
  - Fixed CVE-2020-21683 (#1998594)
  - Fixed CVE-2020-21680 (#1998306)
  - Fixed CVE-2020-21684 (#2000747)
  - Fixed CVE-2020-21678 (#2000741)
  - Fixed CVE-2020-21676 (#2000751)
  - Fixed CVE-2020-21682 (#2000738)


author: Ondrej Dubaj <odubaj@redhat.com> - 1:3.2.7b-8
changelog:
  - Fixed CVE-2020-21529 (#2005518)
  - Fixed CVE-2020-21532 (#2006007)
  - Fixed CVE-2020-21531 (#2006002)


author: Andreas Schneider <asn@redhat.com> - 1.2.7-1
changelog:
  - Update to version 1.2.7
    * Fix unsetting initial XIDs
    * Fix manpage installation
    * Fix cmake-config installation
    * Fixed running with sanitizers
  - resolves: #1690028 - Allow running without RTLD_DEEPBIND


author: Artem Egorenkov <aegorenk@redhat.com> - 1.13.1-4
changelog:
  - Don't start unbound-anchor before unbound service if DISABLE_UNBOUND_ANCHOR
    environment variable equals to "yes"
  - Resolves: rhbz#1951923


author: Artem Egorenkov <aegorenk@redhat.com> - 1.13.1-5
changelog:
  - Option --enable-linux-ip-local-port-range added to use system configured port range for libunbound on Linux
  - Resolves: rhbz#1952814


author: Tomas Korbar <tkorbar@redhat.com> - 1.16.2-6
changelog:
  - Fix KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387
  - Fix Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868
  - Resolves: RHEL-25671
  - Resolves: RHEL-25643


author: Christian Kellner <ckellner@redhat.com> - 0.99.11-2
changelog:
  - Add systemd service snippets
  - Use macros for _unitdir and _udevrulesdir
  - Mark _datadir/gtk-doc as directory


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Rebase to latest upstream: 0.13.0
  - Keeps usbredirserver binary (removed upstream)
    Related: rhbz#2135760


author: Victor Toso <victortoso@redhat.com> - 0.13.0-2
changelog:
  - Fixes 100% CPU usage when usbredirect used as TCP server
    Related: rhbz#2157520
  - Fixes USB redirection of identical devices
    Resolves: rhbz#2157520


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.12.1-5
changelog:
  - Replace arch-dependent /usr/include/urcu/config.h with arch-independent
    stub when needed. (bz# 1951223)
  - Added CI gating tests
  - Resolves: bz #1951223


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 6.5.1-2
changelog:
  - Pulled support for el6
  - Pulled support for sysvinit
  - aarch64 builds now with jemalloc again on el7


author: Luboš Uhliarik <luhliari@redhat.com> - 6.5.2-1
changelog:
  - new version 6.5.2
  - Resolves: #1984185 - Rebase varnish to 6.5.2
  - Resolves: #1982858 - CVE-2021-36740 varnish: HTTP/2 request smuggling attack
    via a large Content-Length header for a POST request


author: Tomas Korbar <tkorbar@redhat.com> - 6.6.2-5
changelog:
  - Add parameters h2_rst_allowance and h2_rst_allowance_period to mitigate CVE-2023-44487
  - Resolves: RHEL-12818


author: Luboš Uhliarik <luhliari@redhat.com> - 6.6.2-6
changelog:
  - Resolves: RHEL-30337 - varnish: HTTP/2 Broken Window Attack may result
    in denial of service (CVE-2024-30156)


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.0.7-5
changelog:
  - Remove LVM2 "devices file" during conversion
    resolves: rhbz#2112801
  - Add support for Zstandard compressed kernel modules
    resolves: rhbz#2116811


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.2.0-5
changelog:
  - Rebase to virt-v2v 2.2.0
    resolves: rhbz#2135762
  - Copy drivers for Windows 11, Windows 2019 & Windows 2022
    resolves: rhbz#2149811
  - Fix Description field for Windows >= 10 in -o rhv/vdsm modes
    resolves: rhbz#2149863
  - Fix UEFI fallback boot loader if broken
    resolves: rhbz#2149629
  - Document Windows system on Dynamic Disk is not supported (2140548 comment 5)
  - Include the BOCHS DRM driver in the initial ram disk
    resolves: rhbz#2131123
  - windows_virtio: favor "fwcfg" over "qemufwcfg"
    resolves: rhbz#2151752
  - -o rhv-upload: set ovirt:id correctly
    resolves: rhbz#2152465
  - Enable the %check tests
  - -o kubevirt: Fix position of cpu field
    resolves: rhbz#2162331
  - -o kubevirt: Fix incorrect error message
    resolves: rhbz#2162441
  - -o kubevirt: Error if invalid guest name on target
    resolves: rhbz#2162332
  - -o kubevirt: Enable -oo compressed option
    resolves: rhbz#2162444
  - Remove -oo qemu-boot option completely
    resolves: rhbz#2166565
  - Remove warning when converting Rocky Linux
    resolves: rhbz#2166618
  - Fix kernel panic after converting Rocky Linux 9
    resolves: rhbz#2166619


author: Laszlo Ersek <lersek@redhat.com> - 1:2.2.0-6
changelog:
  - cope with kernel-core / kernel-modules-core subpackage split in RHEL-9.2 guests
    resolves: rhbz#2184970


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.3.4-2
changelog:
  - Rebase to virt-v2v 2.3.4
    resolves: rhbz#2187961, rhbz#2175703, rhbz#2172075, rhbz#2168082,
    rhbz#1986386
  - Remove --block-driver option downstream
    resolves: rhbz#2190387


author: Laszlo Ersek <lersek@redhat.com> - 1:2.3.4-3
changelog:
  - recognize "--key /dev/mapper/VG-LV:key:password"
  - enable the %check tests for real
    resolves: rhbz#2168506


author: Laszlo Ersek <lersek@redhat.com> - 1:2.3.4-5
changelog:
  - improve UX when running as root and we can't chown v2v tmpdir or socks
  - make the appliance kernel UP in %check, for working around RHBZ#2216496
    resolves: rhbz#2182024


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.4.0-2
changelog:
  - Rebase to virt-v2v 2.4.0
  - -it ssh: Double quote ssh command which tests remote file exists
    resolves: RHEL-12105
  - Implement --key all:...
    resolves: RHEL-18142
  - Fix off-by-one error causing rare crash
    resolves: RHEL-19061
  - Improve the error message for -i vmx with a .vmdk file
    resolves: RHEL-19564
  - Fix -i vmx when remote filename contains literal '*'
    resolves: RHEL-21365
  - Fix virt-v2v --version output
    resolves: RHEL-22262


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.5.2-1
changelog:
  - Rebase to virt-v2v 2.5.2
  - Add missing firmware types and enhance -o kubevirt
    resolves: RHEL-28197


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.5.4-1
changelog:
  - Rebase to virt-v2v 2.5.4
  - Add missing firmware types and enhance -o kubevirt
    resolves: RHEL-28197
  - Fix RHV JSON transfer bug
    resolves: RHEL-32105
  - docs: Add VDDK prereq that server must not be in maintenance mode
    resolves: RHEL-33699
  - convert: windows: Install blnsvr from virtio-win
    resolves: RHEL-36591


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.5.4-2
changelog:
  - Package virt-v2v-in-place in libexec as unsupported tool
  - Add warning about virt-v2v-in-place not being supported
    resolves: RHEL-40903
  - Add more fields to virt-inspector output
    related: MTV-1079
  - Revert "docs: Remove paragraph about -ip passwords and ssh/scp"
    resolves: RHEL-45527


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.5.6-1
changelog:
  - Further fixes for QEMU Guest Agent
    resolves: RHEL-49761
  - Place Windows firstboot files under C:\Program Files\Guestfs\Firstboot
  - Improve debugging output


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.5.6-3
changelog:
  - Further fixes for QEMU Guest Agent install & VMware Tools removal
    resolves: RHEL-49761, RHEL-51169


author: Debarshi Ray <rishi@fedoraproject.org> - 0.64.2-1
changelog:
  - Update to 0.64.2
  - Add missing _VTE_CXX_NOEXCEPT to downstream patches (#1973174)
  - Fix the License fields and ship the correct license texts (#1973299)


author: Michal Ruprich <mruprich@redhat.com> - 1:3.4.10-4
changelog:
  - Resolves: #2152064 - CVE-2022-3190 wireshark: f5ethtrailer Infinite loop in legacy style dissector


author: Michal Ruprich <mruprich@redhat.com> - 1:3.4.10-5
changelog:
  - Resolves: #2210864 - Candump log file parser crash
    Resolves: #2210865 - VMS TCPIPtrace file parser crash
    Resolves: #2210868 - NetScaler file parser crash
    Resolves: #2210870 - RTPS dissector crash
    Resolves: #2210871 - IEEE C37.118 Synchrophasor dissector crash


author: Tomas Popela <tpopela@redhat.com> - 1.0.2-8
changelog:
  - Package woff2_decompress, woff2_compress and woff2_info in a tools subpackage.
    Thanks to Tomasz Gąsior <kontakt@tomaszgasior.pl>


author: Mat Booth <mat.booth@redhat.com> - 4.15-5
changelog:
  - Remove springframework conditionals, the deps are a long time removed from
    Fedora and this simplifies the spec a bit
  - Disable unused modules that can't build on JDK 11


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.29-7
changelog:
  - compile without sha1 and md5
  - Resolves: rhbz#1936682 - xmlsec1 implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Merlin Mathesius <mmathesi@redhat.com> - 0:2.7.0-6
changelog:
  - Fix FTBFS by patching ValueAssertTest to adjust for changed format of
    mismatched string exception


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.1-2
changelog:
  - xf86-input-libinput 1.0.1 (#1951879)
  - Fix the upstream source URL
  - Use autosetup instead of manual patch handling


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.9-5
changelog:
  Fix for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408, CVE-2024-0409


author: Peter Hutterer <peter.hutterer@redhat.com> - 21.1.3-5
changelog:
  - CVE fix for: CVE-2022-4283 (#2151803), CVE-2022-46340 (#2151778),
    CVE-2022-46341 (#2151783), CVE-2022-46342 (#2151786),
    CVE-2022-46343 (#2151793), CVE-2022-46344 (#2151796)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.20.11-13
changelog:
  - Drop dependency on xorg-x11-font-utils, it was only there for one pkgconfig
    query for a variable that never changes value (#2148292)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.20.11-14
changelog:
  - CVE fix for: CVE-2022-4283 (#2151801), CVE-2022-46340 (#2151776),
    CVE-2022-46341 (#2151781), CVE-2022-46342 (#2151788),
    CVE-2022-46343 (#2151791), CVE-2022-46344 (#2151798)


author: José Expósito <jexposit@redhat.com> - 1.20.11-22
changelog:
  - CVE fix for: CVE-2023-6377, CVE-2023-6478
    Resolves: https://issues.redhat.com/browse/RHEL-18322
    Resolves: https://issues.redhat.com/browse/RHEL-18329


author: José Expósito <jexposit@redhat.com> - 1.20.11-23
changelog:
  - CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408 and CVE-2024-0409
    Resolves: https://issues.redhat.com/browse/RHEL-21203
    Resolves: https://issues.redhat.com/browse/RHEL-20531
    Resolves: https://issues.redhat.com/browse/RHEL-20380
    Resolves: https://issues.redhat.com/browse/RHEL-20386
    Resolves: https://issues.redhat.com/browse/RHEL-21193
    Resolves: https://issues.redhat.com/browse/RHEL-21200


author: José Expósito <jexposit@redhat.com> - 1.20.11-25
changelog:
  - CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and
    CVE-2024-31083
  - Add util-linux as a dependency of Xvfb
  - Fix compilation error on i686


author: Vladis Dronov <vdronov@redhat.com> - 0.8.2-1
changelog:
  - Update to version 0.8.2
  - Drop patch 1-fix-man-page-installation.patch
  - Use SPDX license identifiers


author: Kalev Lember <klember@redhat.com> - 2:40~beta-2
changelog:
  - Drop libtool as-needed hack as as-needed is in default LDFLAGS now
  - Remove unneeded ldconfig_scriptlets macro call
  - Tighten soname globs


author: Patrik Novotný <panovotn@redhat.com> - 1.2.11-28
changelog:
  - IBM CRC32 optimalization rhbz#1959423
  - Enabled Z hardware-accelerated deflate for compression levels 1 through 6 (#1972057)


author: Matej Mužila <mmuzila@redhat.com> - 1.2.11-34
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.11-37
changelog:
  - Rebased Power 8 optimization patches
  - Fix for Unnecessary IFUNC resolver for crc32_z
  - Fix for python3.11 broken libxml2 and lxml on s390x


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-1
changelog:
  - Rebase to 0.13.71
  - Drop the CVE patches, they are now part of the upstream package
  - Build no longer requires python2
  - Resolves: 1807565


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-7
changelog:
  - Remove the doc/zzipdoc/{options,match}.py scritps from the original tar
  - Replace them with a current github version
  - The original version of the files contains autogenerated header with incompatible license
  - This build thus uses modified tar archive
  Resolves: rhbz#1982241


