# changelog

author: Caolán McNamara <caolanm@redhat.com> - 2.4.1-5
changelog:
  - disable building BOX2D_BUILD_UNIT_TESTS due to "SIGSTKSZ ... no
    longer constant on Linux ... redefined to sysconf(_SC_SIGSTKSZ)"
    https://github.com/bminor/glibc/blob/master/NEWS causing build failure


author: Paul Howarth <paul@city-fan.org> - 1.0.5-23
changelog:
  - Don't pass gcc-only compiler flags to other compilers, e.g. clang
    (based on https://src.fedoraproject.org/rpms/Judy/pull-request/3 from
    Timm Baeder)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.37.3-1
changelog:
  - Upgrade to 1.37.3 release (development)
  - core: allow reapply on autoconnect-slaves property change (rh #2065049)
  - wifi: do not advertise channels outside regulatory domain (rh #2062785)
  - wifi: warn about WEP being phased out (rh #2030997)
  - bond: reject reapply when fail_over_mac was changed (rh #2003214)


author: Ana Cabral <acabral@redhat.com> - 1:1.39.0-1
changelog:
  - Upgrade to 1.39.0 release (development)
  - Include a migration tool for ifcfg configuration to NM keyfiles
    (rh #2059608)


author: Thomas Haller <thaller@redhat.com> - 1:1.39.2-1
changelog:
  - Update to 1.39.2 release (development)
  - dhcp: set "src" attribute for DHCP routes (rh #1995372)
  - dhcp: drop internal DHCPv4 client based on systemd code (rh #2073067)
  - core: delay startup complete for DNS update (rh #2049421)
  - nmcli: support offline mode to create and edit keyfiles (rh #1361145)


author: Wen Liang <wenliang@redhat.com> - 1:1.39.3-1
changelog:
  - Update to 1.39.3 release (development)
  - l3cfg: drop NM_L3_CFG_COMMIT_TYPE_ASSUME and assume_config_once (rh #2050216)


author: Ana Cabral <acabral@redhat.com> - 1:1.39.5-1
changelog:
  - Update to 1.39.5 release (development)
  - dhcp: fix ignoring addresses with DHCPv6 otherconf (O flag) (rh #2083968)
  - cloud-setup: reorder addresses to honor "primary_ip_address" (rh #2079849)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.39.6-1
changelog:
  - Update to 1.39.6 release (development)
  - Implement ACD (address conflict detection) for DHCPv4 (rh #1713380)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.39.7-1
changelog:
  - Update to 1.39.7 release (development)
  - core: cancel the IP check on deactivation (rh #2080928)
  - core: ensure DHCP is restarted every time the link goes up (rh #2079406)
  - core: fix a leak of L3 configuration memory (rh #2083453)
  - ppp: fix a race with pppd when removing addresses (rh #2085382)
  - wifi: fix a crash when checking WEP supplicant capability (rh #2092782)


author: Thomas Haller <thaller@redhat.com> - 1:1.39.7-2
changelog:
  - fix priority of IPv6 addresses to prefer manual over DHCPv6 over SLAAC (rh #2097293)
  - reverse order of priority for static IPv6 addresses in "ipv6.addresses" (rh #2097293)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.39.8-1
changelog:
  - Update to 1.39.8 release (development)
  - core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
  - dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
  - core: add connection.wait-activation-delay property (rh #2008337)


author: Vojtech Bubela <vbubela@redhat.com> - 1:1.39.10-1
changelog:
  - Update to 1.39.10 release (development)
  - add support for {rto_min,quickack,advmss} route attributes (rh #2068525)
  - fix empty hostname for "SaveHostname" and make setting hostname async (rh #2090946)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-2
changelog:
  - Resolve issues found by rpmdiff
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-3
changelog:
  - Add a patch to resolve one more issue found by rpmdiff/rpminspect:
    fix getaddrinfo detection to avoid using gethostbyname.


author: Richard Hughes <rhughes@redhat.com> - 1.2.2-1
changelog:
  - New upstream release
  - Notify systemd when beginning to shutdown
  - Fix possible information disclosure


author: Richard Hughes <rhughes@redhat.com> - 1.2.3-1
changelog:
  - New upstream release
  - Add support for coercing upgrade to distupgrade
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon disappears
  - Remove large transaction size sanity check


author: Milan Crha <mcrha@redhat.com> - 1.2.4-1
changelog:
  - New upstream release
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Honor install_weak_deps=False
  - Improve thread safety on an operation cancellation
  - Let the finish understand the 'cancelled' exit code
  - Only set polkit interactive flag if method call has too
  - Read update information also when getting list of updates
  - Use 'hy_query_get_advisory_pkgs', if available


author: Neal Gompa <ngompa@centosproject.org> - 2.0.18-1
changelog:
  - Update to 2.0.18
    Resolves: rhbz#2028076
  - Fix multilib conflict with SDL_revision.h (rhbz#2008838)
  - Backport fix for building against wayland-1.20+
  - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0.2-1
changelog:
  - Rebase to 2.3.0.2 [bz#1972101]
  - Resolves: bz#1972101
    ([Azure][RHEL-9]Rebase WALinuxAgent to 2.3.0.2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0.2-2
changelog:
  - wala-Require-iptables-package.patch [bz#1978572]
  - Resolves: bz#1978572
    ([Azure][WALA][RHEL-9] WALA needs iptables package)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-1
changelog:
  - Rebase to 2.7.0.6-1 [bz#2083464]
  - Adding restart_if implementation for RHEL [bz#2081944]
  - Resolves: bz#2083464
    ([Azure][RHEL-9]Rebase WALinuxAgent to v2.7.0.6)
  - Resolves: bz#2081944
    ([Azure][WALA][9.0] WALA provisions VM failed because of no "ifdown")


author: Jindrich Novy <jnovy@redhat.com> - 2:1-32
changelog:
  - build rust packages with RUSTFLAGS set to make ExecShield happy (Lokesh Mandvekar)
  - Related: #2000051


author: Ray Strode <rstrode@redhat.com> - 0.6.55-10
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations.
    Resolves: #2057576


author: Kalev Lember <klember@redhat.com> - 3.28-12
changelog:
  - Split highcontrast-icon-theme out to a new subpackage
  - Explicitly require cursor and icon themes required for the gtk2 themes


author: Sohan Kunkerkar <skunkerk@redhat.com> - 4.6.0-2
changelog:
  - Rebuild because of Fedora infra issues last week to see if a new build fixes some 
    problems we are seeing.


author: Zoltan Fridrich <zfridric@redhat.com> - 0.16-19
changelog:
  - use gating and config file from rhel-8.5
  - remove check of periodically changing files
    Resolves: rhbz#1957656
  - config cleanup
    Resolves: rhbz#1957654


author: Zoltan Fridrich <zfridric@redhat.com> - 0.16-20
changelog:
  - fix configuration option with-dbhmactype
  - do not use sha1 and md5 by default
    Resolves: rhbz#1935457
  - fix important static analysis issues
    Resolves: rhbz#1938676


author: Vendula Poncova <vponcova@redhat.com> - 34.25.0.27-1
changelog:
  - Use cache when fetching organization data from the GUI (mkolman)
    Resolves: rhbz#2044258
  - Bump subscription-manager version (mkolman)
    Related: rhbz#2048449
  - Improve UX in Simple Content Access mode (mkolman)
    Resolves: rhbz#2048449
  - Add IsSimpleContentAccessEnabled property (mkolman)
    Related: rhbz#2048449
  - Add support for SCA mode detection from registration data (mkolman)
    Related: rhbz#2048449


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.1.1-1
changelog:
  - Make failure in generating of dracut arguments for iSCSI device non-fatal.
    (rvykydal)
    Resolves: rhbz#2065171
  - Do not generate dracut arguments multiple times for some storage devices
    (rvykydal)
    Related: rhbz#2065171
  - Skip /etc/machine-info during live installs (awilliam)
    Resolves: rhbz#2065170


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.1.3-1
changelog:
  - Run restorecon in chroot when handling home dirs (vslavik)
    Resolves: rhbz#2072426
  - Move restorecon calls in Tasks to a helper function (vslavik)
    Related: rhbz#2072426
  - Add Virtuozzo Linux profile to Anaconda (dsilakov)
    Resolves: rhbz#2067195


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.1.6-1
changelog:
  - Report registration errors from kickstart (mkolman)
    Resolves: rhbz#2000652
  - GUI: Show the dialog for a missing passphrase in an enlight box (vponcova)
    Related: rhbz#2087218
  - GUI: Ask for a missing passphrase during automated installations (vponcova)
    Resolves: rhbz#2087218
  - Create functions for a missing passphrase in pyanaconda.ui.lib (vponcova)
    Related: rhbz#2087218
  - Add missing period when concatenating password error strings (jkonecny)
    Resolves: rhbz#2075417
  - Enable bootloader hiding on RHEL (rharwood)
    Resolves: rhbz#2059414


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.1.7-1
changelog:
  - tests: update the order of commands (rootpw) in generated kickstart
    (rvykydal)
    Related: rhbz#2033849
  - dnf: apply the /etc/dnf/dnf.conf configuration file in the installer
    (rvykydal)
    Resolves: rhbz#2053710
  - Add support for rootpw --allow-ssh (rvykydal)
    Resolves: rhbz#2033849


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.1.8-1
changelog:
  - bootloader: do not consider non-ibft iscsi disk as usable for bootloader
    (rvykydal)
    Resolves: rhbz#2003519
  - Fix kickstart command order in new version (vslavik)
    Resolves: rhbz#2100463
  - TUI software spoke is ready with failing repos, too (vslavik)
    Resolves: rhbz#2020299


author: Martin Kolman <mkolman@redhat.com> - 34.25.1.9-1
changelog:
  - Allow to omit WWPN and LUN for NPIV-enabled zFCP devices (jstodola)
    Resolves: rhbz#1937032
  - Reduce the width of the zFCP dialog (jstodola)
    Related: rhbz#1937032
  - Fix product config product_name for Rocky Linux (tucklesepk)
    Resolves: rhbz#2096046
  - Add Circle Linux profile to Anaconda(rhel-9) (bella)
    Resolves: rhbz#2095351


author: Martin Kolman <mkolman@redhat.com> - 8.2.1-1
changelog:
  - initial help content update for RHEL 8.2
  - add help content for the "Connect to Red Hat" spoke
  - drop content for the superseded "System Purpose" spoke
    Resolves: rhbz#1788855


author: Nick Clifton <nickc@redhat.com> - 10.57-1
changelog:
  - Rebuild to work with LLVM14.  (#2061050)
  - Annocheck: Update documentation and fix typo in annocheck.  (#2061291)
  - Annocheck: Add option to enable/disable following symbolic links.
  - Always identify Rust binaries, even if built on a host that does not know about Rust.  (#2057737)


author: Nick Clifton <nickc@redhat.com> - 10.68-1
changelog:
  - Annocheck: Add more glibc exceptions + check PT_TLS segments.  (#2081131)
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled by golang.
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled in LTO mode.
  - gcc-plugin: Add support for CLVC_INTEGER options.
  - Annocheck: Even more special cases for AArch64 glibc on RHEL-8.  (#2072082)
  - Annocheck: Add more special cases for AArch64 glibc on RHEL-8.  (#2072082)
  - llvm-plugin: Fix a thinko in the sources.
  - gcc-plugin: Add remap of OPT_Wall.
  - configure: Fix typo in top level configure.ac.
  - Add support for building using meson+ninja.
  - Annocheck: Fix test for AArch64 property notes.  (#2068657)


author: Nick Clifton <nickc@redhat.com> - 10.70-1
changelog:
  - Annocheck: Add another special case for glibc rpms.  (#2083070)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries if compiled using LTO.  (#2082146)


author: Nick Clifton <nickc@redhat.com> - 10.73-1
changelog:
  - Annocheck: Fix handling of command line options that take arguments.  (#2086850)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)


author: Sergei Petrosian <spetrosi@redhat.com> - 1.0.12-2
changelog:
  - Copy fix for RHEL 7 builds from rhel-system-roles
    Link to the original fix:
    https://src.fedoraproject.org/rpms/linux-system-roles/c/093981119f99ac51a6e06a2714b587e4e2fe287c


author: Sergei Petrosian <spetrosi@redhat.com> - 1.1.1-1
changelog:
  - Insert the "Ansible managed" comment to the /var/opt/mssql/mssql.conf file
    Resolves rhbz#2064690 (EL9)


author: Sergei Petrosian <spetrosi@redhat.com> - 1.1.1-3
changelog:
  - Fix inserting ansible_managed
    Resolves: rhbz#2057652
  - Users now can provide a custom URLs to pull packages and RPM key from
    Resolves: rhbz#2070452
  - Add "Requires: ansible-core or ansible"
    Resolves: rhbz#2067496


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.0-1
changelog:
  - Add MVP HA functionality to the server role
    Resolves: rhbz#2066337
  - Add mssql_tls_remote_src to the server role
    Resolves: rhbz#2098212
  - Add Requires: linux-system-roles or rhel-system-roles
  - Add downstream values to galaxy.yml


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.0-2
changelog:
  - Update mssql commit
    Resolves: rhbz#2066337
  - Add condition for upstream spec build for galaxy_transform
  - Replace extra-mapping with replacing in the legacy format with sed


author: Tom Stellard <tstellar@redhat.com> - 1.6.1-13
changelog:
  - Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Kalev Lember <klember@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1
  - Switch to meson build system
  - Update source URLs
  - Tighten -devel subpackage deps
  - Tighten soname globs


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3.13
changelog:
  - Sync with rhel 8.3 + cleanup
  - Add new subpackages - z{14,15}
  - Unlike in rhel8, the base subpackage still needs to be build for z12.
  - Covscan related bugfixes
  - Spec and git cleanup (remove unused patches/sources)


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-100
changelog:
  - New upstream release, 3.0.7
    Resolves: rhbz#2019929 - capability=unknown-capability(39) in audit messages


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-101
changelog:
  - Adjust sample-rules dir permissions
    Resolves: rhbz#2054432 - /usr/share/audit/sample-rules is no longer readable by non-root users


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-102
changelog:
  - Fix path normalization in auparse
    Resolves: rhbz#2062824 - auparse missing information when used with --format-text


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-103
changelog:
  - Drop ProtectHome from auditd.service as it interferes with rules
    Resolves: rhbz#2071725 - Default systemd service config blocks audit watch rules in some directories [rhel-9.1.0]


author: Richard W.M. Jones <rjones@redhat.com> - 1.13.0-2
changelog:
  - Parse auto_reset_crashkernel in kdump
    resolves: rhbz#2042772
  - Add new directives and options for chrony


author: Pavel Březina <pbrezina@redhat.com> - 1.2.5-1
changelog:
  - Rebase to 1.2.5 (RHBZ #2080239)
  - backup-restore now works correctly (RHBZ #2070541)
  - add with-subid to sssd profile (RHBZ #2075192)
  - add with-gssapi to sssd profile (RHBZ #2077893)


author: Pavel Cahyna <pcahyna@redhat.com> - 11.0.1-5
changelog:
  - Make nagios-plugin build conditional and disabled on RHEL to avoid
    generating this subpackage that has missing dependencies
  - Fix flags for annobin in Qt tools (bat & tray-monitor) build
  - Add a forgotten RHEL 8 patch to use openssl crypto (random numbers, hmac,
    hashing functions)
    Resolves: rhbz#1935458


author: Jerome Marchand <jmarchan@redhat.com> - 0.20.0-4
changelog:
  - Don't require bcc-tools by default (#1967550)
  - Add explicit bcc requirement to bcc-tools
  - Build bcc from standard sources


author: Jerome Marchand <jmarchan@redhat.com> - 0.20.0-7
changelog:
  - Sync with latest libbpf (fixes BPF_F_BROADCAST breakages of rhbz#1992430)
  - Fix cpudist, mdflush, readahead and threadsnoop (rhbz#1992430)
  - Handle the renaming of task_struct_>state field
  - Drop tools that relies on features disabled on RHEL


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-3
changelog:
  - Tighten cache protection against record from forwarders (CVE-2021-25220)
  - Include test of forwarders


author: Peng Wu <pwu@redhat.com> - 0.3-33
changelog:
  - Provide OpenType Bitmap fonts
  - Use bitmapfonts2otb.py to combine bitmap fonts
  - Add bitmap-*-opentype-fonts sub packages


author: Vojtech Trefny <vtrefny@redhat.com> - 3.4.0-6
changelog:
  - Remove "Revert Terminology cleanups" patch
    Resolves: rhbz#1990982
  - Fix running tests in gating
    Resolves: rhbz#1990237
  - Opt out from using LVM devices file in 9 Beta
    Resolves: rhbz#1984851


author: Vojtech Trefny <vtrefny@redhat.com> - 3.4.0-8
changelog:
  - Improve error message printed for missing dependecies
    Resolves: rhbz#2012121
  - Use bigger chunk size for thinpools bigger than ~15.88 TiB
    Resolves: rhbz#1971516


author: Vojtech Trefny <vtrefny@redhat.com> - 3.4.0-12
changelog:
  - Fix log message for the LVM devices filter
    Resolves: rhbz#2034277
  - Exclude unusable disks from PartitionFactory
    Resolves: rhbz#2017432


author: Jan Pokorny <japokorn@redhat.com> - 3.4.0-13
changelog:
  - Fix getting PV info in LVMPhysicalVolume from the cache
    Resolves: rhbz#2079221
  - Do not crash when changing disklabel on disks with active devices
    Resolves: rhbz#2078803
  - ActionDestroyDevice should not obsolete ActionRemoveMember
    Resolves: rhbz#2076956
  - Correctly set vg_name after adding/removing a PV from a VG
    Resolves: rhbz#2081278
  - Add support for creating LVM cache pools
    Resolves: rhbz#2055200
  - Use LVM PV format current_size in LVMVolumeGroupDevice._remove
    Related: rhbz#2081278


author: Jan Pokorny <japokorn@redhat.com> - 3.4.0-15
changelog:
  - Add a very simple NVMe module
    Resolves: rhbz#2073008
  - Add support for NPIV-enabled zFCP devices
    Resolves: rhbz#1937030
  - Fix removing zFCP SCSI devices
    Related: rhbz#1937030
  - tests: Mark "fake" disks in test_get_related_disks as non-existing
    Resolves: rhbz#2062690


author: Hans de Goede <hdegoede@redhat.com> - 5.56-3
changelog:
  - Drop obsolete udev rule + systemd service to call btattach on BT-HCIs
    connected via UART from userspace, this is all handled in the kernel now
  - Add the btmgmt util to the packaged files


author: Adrian Reber <adrian@lisas.de> - 1.2.5-1
changelog:
  - Updated to 1.2.5
  - No longer necessary to re-package sources: All problematic files have
    been re-licensed
  - All 19 patches are part of the 1.2.5 release and have been removed


author: Jonathan Wakely <jwakely@redhat.com> - 1.75.0-7
changelog:
  - Build with zstd support (#2091041)
  - Fix rpminspect CI warnings about missing versioned dependencies


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:1.24.2-2
changelog:
  - Add patch to fix bash symtax for gating tests
  - Upstream PR: https://github.com/containers/buildah/pull/3792
  - Related: #2000051


author: Jerry James <loganjerry@gmail.com> - 1.10.14-1
changelog:
  - Version 1.10.14
  - Remove no longer needed no-unixsocket.patch
  - Add workaround for compiling tests with JDK 11


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 4.0.11-1
changelog:
  - Upgrated to latest upstream version 4.0.11
  - Added a patch to fix rpm build issue caused due to misconfiguration in upstream
  - Added required additional plugins required for build


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-5
changelog:
  - Resolves: rhbz#2014523 - c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-9]


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-3
changelog:
  - Switch from autotools to meson; enable the tests, since the meson build system
    permits us to use a shared boost library
  - Install examples in the -doc subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-4
changelog:
  - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual
    Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name
    of a future package that continues to provide API/ABI version 1.0 after the
    upgrade.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-7
changelog:
  - Working (but weak, dependent on SHA1) source signature verification
  - Added API/ABI version to descriptions


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-5
changelog:
  - Certmonger SCEP renewal should not use old challenges (#1990926)
  - Certmonger certificates stuck in NEED_GUIDANCE (#2001082)
  - certmonger creates CSRs with invalid DER syntax for X509v3 extensions
    with critical=FALSE (#2012261)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-14
changelog:
  - ci-cloudinit-net-handle-two-different-routes-for-the-sa.patch [bz#2028031]
  - Resolves: bz#2028031
    ([RHEL-9] Above 19.2 of cloud-init fails to configure routes when configuring static and default routes to the same destination IP)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-15
changelog:
  - ci-Add-gdisk-and-openssl-as-deps-to-fix-UEFI-Azure-init.patch [bz#2032524]
  - Resolves: bz#2032524
    ([RHEL9] [Azure] cloud-init fails to configure the system)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-16
changelog:
  - ci-Datasource-for-VMware-953.patch [bz#2040090]
  - ci-Change-netifaces-dependency-to-0.10.4-965.patch [bz#2040090]
  - ci-Update-dscheck_VMware-s-rpctool-check-970.patch [bz#2040090]
  - ci-Revert-unnecesary-lcase-in-ds-identify-978.patch [bz#2040090]
  - ci-Add-netifaces-package-as-a-Requires-in-cloud-init.sp.patch [bz#2040090]
  - Resolves: bz#2040090
    ([cloud-init][RHEL9] Support for cloud-init datasource 'cloud-init-vmware-guestinfo')


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-17
changelog:
  - ci-Add-flexibility-to-IMDS-api-version-793.patch [bz#2042351]
  - ci-Azure-helper-Ensure-Azure-http-handler-sleeps-betwee.patch [bz#2042351]
  - ci-azure-Removing-ability-to-invoke-walinuxagent-799.patch [bz#2042351]
  - ci-Azure-eject-the-provisioning-iso-before-reporting-re.patch [bz#2042351]
  - ci-Azure-Retrieve-username-and-hostname-from-IMDS-865.patch [bz#2042351]
  - ci-Azure-Retry-net-metadata-during-nic-attach-for-non-t.patch [bz#2042351]
  - ci-Azure-adding-support-for-consuming-userdata-from-IMD.patch [bz#2042351]
  - Resolves: bz#2042351
    ([RHEL-9] Support for provisioning Azure VM with userdata)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-18
changelog:
  - ci-Add-_netdev-option-to-mount-Azure-ephemeral-disk-121.patch [bz#1998445]
  - Resolves: bz#1998445
    ([Azure][RHEL-9] ordering cycle exists after reboot)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-19
changelog:
  - ci-Fix-IPv6-netmask-format-for-sysconfig-1215.patch [bz#2053546]
  - ci-Adding-_netdev-to-the-default-mount-configuration.patch [bz#1998445]
  - ci-Setting-highest-autoconnect-priority-for-network-scr.patch [bz#2036060]
  - Resolves: bz#2053546
    (cloud-init writes route6-$DEVICE config with a HEX netmask. ip route does not like : Error: inet6 prefix is expected rather than "fd00:fd00:fd00::/ffff:ffff:ffff:ffff::".)
  - Resolves: bz#1998445
    ([Azure][RHEL-9] ordering cycle exists after reboot)
  - Resolves: bz#2036060
    ([cloud-init][ESXi][RHEL-9] Failed to config static IP according to VMware Customization Config File)


author: Miroslav Rezanina <mrezanin@redhat.com> - 22.1-2
changelog:
  - ci-Add-native-NetworkManager-support-1224.patch [bz#2056964]
  - ci-Use-Network-Manager-and-Netplan-as-default-renderers.patch [bz#2056964]
  - ci-Revert-Setting-highest-autoconnect-priority-for-netw.patch [bz#2056964]
  - ci-Align-rhel-custom-files-with-upstream-1431.patch [bz#2088448]
  - ci-Remove-rhel-specific-files.patch [bz#2088448]
  - Resolves: bz#2056964
    ([RHEL-9]Rebase cloud-init from Fedora so it can configure networking using NM keyfiles)
  - Resolves: bz#2088448
    (Align cloud.cfg file and systemd with cloud-init upstream .tmpl files)


author: Miroslav Rezanina <mrezanin@redhat.com> - 22.1-3
changelog:
  - ci-Support-EC2-tags-in-instance-metadata-1309.patch [bz#2091640]
  - ci-cc_set_hostname-do-not-write-localhost-when-no-hostn.patch [bz#1980403]
  - Resolves: bz#2091640
    ([cloud][init] Add support for reading tags from instance metadata)
  - Resolves: bz#1980403
    ([RHV] RHEL 9 VM with cloud-init without hostname set doesn't result in the FQDN as hostname)


author: Jon Maloy <jmaloy@redhat.com> - 22.1-4
changelog:
  - ci-Honor-system-locale-for-RHEL-1355.patch [bz#2061604]
  - ci-cloud-init.spec-adjust-path-for-66-azure-ephemeral.r.patch [bz#2096270]
  - ci-setup.py-adjust-udev-rules-default-path-1513.patch [bz#2096270]
  - Resolves: bz#2061604
    (cloud-config will change /etc/locale.conf back to en_US.UTF-8 on rhel-guest-image-9.0)
  - Resolves: bz#2096270
    (Adjust udev/rules default path[rhel-9])


author: Jacob Kozol <jacobdkozol@gmail.com> - 28-1
changelog:
  - Use sentence case rather than title case
  - Add and update tests
  - Update translations from weblate
  - Update minor NPM dependencies


author: Jacob Kozol <jkozol@redhat.com> - 31-1
changelog:
  - Add new ostree image types
  - Improve loading state when waiting for api responses
  - Improve notification system
  - Improve test stability
  - Update NPM dependencies
  - Update translations


author: Jacob Kozol <jkozol@redhat.com> - 32-1
changelog:
  - Add Edge Raw, RHEL Installer, Edge Simplified Installer image types
  - Improve user account modal responsiveness
  - Update tests
  - Update minor NPM dependencies
  - Update translation files


author: Packit <hello@packit.dev> - 270-1
changelog:
  - Services: User-created timer deletion
  - System Diagnostics: Working with diagnostic reports has been improved


author: Packit <hello@packit.dev> - 272-1
changelog:
  - Firewall: Edit custom services
  - Services: Pin services as favorites
  - Login: Dark mode
  - Unprivileged cockpit/ws container mode


author: Packit <hello@packit.dev> - 273-1
changelog:
  - Metrics: Display CPU temperature
  - Networking: Suggest netmask and gateway addresses
  - Software Updates: Optionally reboot after updating
  - cockpit/ws container: Support modern SSH keys


author: Justin Stephenson <jstephen@redhat.com> - 11-1
changelog:
  - Avoid crash in unmount if journal is null
  - Sync Makefile closer to starter-kit
  - Use current babel/eslint integration
  - Use Flex layout for spacing the two config cards in the config page
  - Use Page/PageSection/Breadcrumb patternfly components
  - Move to xz dist tarballs
  - Remove unused slider.html file
  - package.json: explicitely depend on @patternfly/react-icons
  - webpack: Use relative resolve path for npm 7 compatibility
  - package.json: update patternfly packages
  - package.json: use sass instead of node-sass
  - Fetch pkg/lib automatically from cockpit instead of keeping a local copy
  - Update Docker image and TEST_OS run to Fedora 35
  - Tests: Test SSSD exclude_users and exclude_groups
  - Config: Add SSSD exclude_users and exclude_groups
  - TESTS: Fix testSessionRecordingConf cleanup issue
  - TESTS: Restart SSSD after restoring config


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Drop moment.js dependency
  - Tests: Assert pause state with a later command in rec1
  - CI: Update image to ubuntu 20.04


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-2
changelog:
  - Remove support for building FIPS mode binaries for the
    compat libraries
  - Ships openssl11.cnf as the configuration file.
  - Resolves: rhbz#1993795
  - Related: rhbz#1947584


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-4
changelog:
  - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    Resolves: rhbz#2063148
  - Disable FIPS mode; it does not work and will not be certified
    Resolves: rhbz#2013669


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20141121-15
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Jindrich Novy <jnovy@redhat.com> - 2:2.1.2-2
changelog:
  - update to latest content of https://github.com/containers/conmon/releases/tag/2.1.2
    (https://github.com/containers/conmon/commit/2bc95ee697e87d5f7b77063cf83fc32739addafe)
  - Related: #2061316


author: Kelvin Fan <kfan@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Require util-linux >= 2.36-1
  - Remove files related to the issuegen and motdgen executables


author: Jindrich Novy <jnovy@redhat.com> - 3:2.176.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.176.0
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 3:2.177.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.177.0
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 3:2.178.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.178.0
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 3:2.179.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.179.1
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 3:2.180.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.180.0
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 3:2.181.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.181.0
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 3:2.183.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.183.0
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 3:2.187.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.187.0
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 3:2.188.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.188.0
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 3:2.189.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.189.0
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.1-4
changelog:
  - revert back to https://github.com/containernetworking/plugins/releases/tag/v1.0.1
  - Related: #2000051


author: Sohan Kunkerkar <skunkerk@redhat.com> - 0.11.0-1
changelog:
  - New release
  - Fix inadvertent inclusion of coreos-installer-dracut in -bootinfra on RHEL
  - Have -dracut own 51coreos-installer directory on RHEL


author: Jan Friesse <jfriesse@redhat.com> - 3.1.4-1
changelog:
  - Related: rhbz#1948974
  - Resolves: rhbz#1967485

  - New upstream release (rhbz#1948974)
  - stats: fix crash when iterating over deleted keys (rhbz#1967485)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-3
changelog:
  - Resolves: rhbz#2024652
  - Resolves: rhbz#2024657

  - totem: Add cancel_hold_on_retransmit config option (rhbz#2024652)
  - merge upstream commit cdf72925db5a81e546ca8e8d7d8291ee1fc77be4 (rhbz#2024652)
  - totemsrp: Switch totempg buffers at the right time (rhbz#2024657)
  - merge upstream commit e7a82370a7b5d3ca342d5e42e25763fa2c938739 (rhbz#2024657)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-4
changelog:
  - Resolves: rhbz#2070623

  - logrotate: Use copytruncate method by default (rhbz#2070623)
  - merge upstream commit 04362046c4a9d7307feb5b68341d567b7d0b94d6 (rhbz#2070623)


author: Marek Polacek <polacek@redhat.com> 11.2.1-8
changelog:
  - update from releases/gcc-11-branch (#2047296)
    - PRs ada/103538, analyzer/101962, bootstrap/103688, c++/85846, c++/95009,
  	c++/98394, c++/99911, c++/100493, c++/101715, c++/102229, c++/102933,
  	c++/103012, c++/103198, c++/103480, c++/103703, c++/103714,
  	c++/103758, c++/103783, c++/103831, c++/103912, c++/104055, c/97548,
  	c/101289, c/101537, c/103587, c/103881, d/103604, debug/103838,
  	debug/103874, fortran/67804, fortran/83079, fortran/101329,
  	fortran/101762, fortran/102332, fortran/102717, fortran/102787,
  	fortran/103411, fortran/103412, fortran/103418, fortran/103473,
  	fortran/103505, fortran/103588, fortran/103591, fortran/103606,
  	fortran/103607, fortran/103609, fortran/103610, fortran/103692,
  	fortran/103717, fortran/103718, fortran/103719, fortran/103776,
  	fortran/103777, fortran/103778, fortran/103782, fortran/103789,
  	ipa/101354, jit/103562, libfortran/103634, libstdc++/100017,
  	libstdc++/102994, libstdc++/103453, libstdc++/103501,
  	libstdc++/103549, libstdc++/103877, libstdc++/103919,
  	middle-end/101751, middle-end/102860, middle-end/103813, objc/103639,
  	preprocessor/89971, preprocessor/102432, rtl-optimization/102478,
  	rtl-optimization/103837, rtl-optimization/103860,
  	rtl-optimization/103908, sanitizer/102911, target/102347,
  	target/103465, target/103661, target/104172, target/104188,
  	tree-optimization/101615, tree-optimization/103523,
  	tree-optimization/103603, tree-optimization/103995


author: Marek Polacek <polacek@redhat.com> 11.2.1-9
changelog:
  - update from releases/gcc-11-branch (#2047296)
    - PRs fortran/104127, fortran/104212, fortran/104227, target/101529
  - fix up va-opt-6.c testcase


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.2
changelog:
  - add support for relocation of the PCH data (pch/71934, #2044917)
  - remove 30_threads/future/members/poll.cc (#2050090)
  - avoid overly-greedy match in dejagnu regexp (#2050089)


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.3
changelog:
  - use _thread_db_sizeof_pthread to obtain struct pthread size (#2034494)
  - add --enable-host-pie, build the compilers as PIE (#2044917)


author: David Malcolm <dmalcolm@redhat.com> - 11.2.1-10
changelog:
  - update from releases/gcc-11-branch (#2063255)
    - PRs ada/98724, ada/104258, ada/104767, ada/104861, c++/58646, c++/59950,
  	c++/61611, c++/95036, c++/100468, c++/101030, c++/101095, c++/101371,
  	c++/101515, c++/101767, c++/102045, c++/102123, c++/102538,
  	c++/102740, c++/102990, c++/103057, c++/103186, c++/103291,
  	c++/103299, c++/103337, c++/103711, c++/103769, c++/103968,
  	c++/104107, c++/104108, c++/104284, c++/104410, c++/104472,
  	c++/104513, c++/104568, c++/104667, c++/104806, c++/104847,
  	c++/104944, c++/104994, c++/105035, c++/105061, c/82283, c/84685,
  	c/104510, c/104711, d/104659, d/105004, debug/104337, debug/104517,
  	debug/104557, fortran/66193, fortran/99585, fortran/100337,
  	fortran/103790, fortran/104211, fortran/104311, fortran/104331,
  	fortran/104430, fortran/104619, fortran/104811, go/100537,
  	libgomp/104385, libstdc++/101231, libstdc++/102358, libstdc++/103904,
  	libstdc++/104442, lto/104237, lto/104333, lto/104617,
  	middle-end/95115, middle-end/99578, middle-end/100464,
  	middle-end/100680, middle-end/100775, middle-end/100786,
  	middle-end/104307, middle-end/104402, middle-end/104446,
  	middle-end/104786, middle-end/104971, middle-end/105032,
  	preprocessor/104147, rtl-optimization/104544, rtl-optimization/104589,
  	rtl-optimization/104777, rtl-optimization/104814, sanitizer/102656,
  	sanitizer/104449, sanitizer/105093, target/79754, target/87496,
  	target/99708, target/99754, target/100784, target/101324,
  	target/102140, target/102952, target/102957, target/103307,
  	target/103627, target/103925, target/104090, target/104208,
  	target/104219, target/104253, target/104362, target/104448,
  	target/104451, target/104453, target/104458, target/104462,
  	target/104469, target/104502, target/104674, target/104681,
  	target/104688, target/104775, target/104890, target/104910,
  	target/104923, target/104963, target/104998, target/105000,
  	target/105052, target/105058, target/105068, testsuite/103556,
  	testsuite/103586, testsuite/104730, testsuite/104759,
  	testsuite/105055, tree-optimization/45178, tree-optimization/100834,
  	tree-optimization/101636, tree-optimization/102819,
  	tree-optimization/102893, tree-optimization/103169,
  	tree-optimization/103361, tree-optimization/103489,
  	tree-optimization/103544, tree-optimization/103596,
  	tree-optimization/103641, tree-optimization/103864,
  	tree-optimization/104263, tree-optimization/104288,
  	tree-optimization/104511, tree-optimization/104601,
  	tree-optimization/104675, tree-optimization/104782,
  	tree-optimization/104931, tree-optimization/105094
  - fix x86 vector initialization expansion fallback (PR target/105123)
  - drop patch 22 (gcc11-libsanitizer-pthread.patch;
    upstreamed as r11-9607-ga8dd74bfb921ed)


author: Jakub Jelinek <jakub@redhat.com> 11.3.1-2
changelog:
  - update from releases/gcc-11-branch (#2077536)
    - GCC 11.3 release
    - PRs c++/98249, c++/99893, c++/100608, c++/101051, c++/101532, c++/101677,
  	c++/101717, c++/101894, c++/102869, c++/103105, c++/103328,
  	c++/103341, c++/103455, c++/103706, c++/103885, c++/103943,
  	c++/104008, c++/104079, c++/104225, c++/104507, c++/104565,
  	c++/105003, c++/105064, c++/105143, c++/105186, c++/105256, c/101585,
  	debug/105203, fortran/102992, fortran/104210, fortran/104228,
  	fortran/104570, fortran/105138, gcov-profile/105282, ipa/103083,
  	ipa/103432, jit/100613, libstdc++/90943, libstdc++/100516,
  	libstdc++/103630, libstdc++/103638, libstdc++/103650,
  	libstdc++/103955, libstdc++/104098, libstdc++/104301,
  	libstdc++/104542, libstdc++/104859, libstdc++/105021,
  	libstdc++/105027, middle-end/104497, middle-end/105165,
  	rtl-optimization/104985, rtl-optimization/105028,
  	rtl-optimization/105211, target/80556, target/100106, target/104117,
  	target/104474, target/104853, target/104894, target/105214,
  	target/105257, tree-optimization/99121, tree-optimization/104880,
  	tree-optimization/105053, tree-optimization/105070,
  	tree-optimization/105189, tree-optimization/105198,
  	tree-optimization/105226, tree-optimization/105232,
  	tree-optimization/105235
  - fix bogus -Wuninitialized warning on va_arg with complex types on x86_64
    (PR target/105331)
  - remove bogus assertion in std::from_chars (PR libstdc++/105324)


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.0-3
changelog:
  - Fix segmentation fault caused by crash extension modules
  - Support the overflow stack exception handling on aarch64


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.0-5
changelog:
  - Fix segfault on aarch64 for "bt -a|-c" command
  - Fix segfault for the "l" command of gdb
  - Fix HZ calculation on Linux 5.14 and later
  - Fix for other issues


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.2-1
changelog:
  - Update to 0.17.2
  - Fix Python deprecation (PY_SSIZE_T_CLEAN) (RhBug:1891785)
  - Revert back to old c API for destination file of cr_compress_file_with_stat and cr_compress_file to prevent a memory leak
  - Never leave behind .repodata lock on exit (RhBug:1906831)
  - Disable drpm for RHEL >= 9 (RhBug:1914828)
  - Setting updated/issued_date to None doesn't produce garbage values (RhBug:1921715)
  - Allow taking __repr__ (__str__) of closed xmlfile and sqlite (RhBug:1913465)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-1
changelog:
  - Update to 0.17.7
  - Remove insecure hashes SHA-1 and MD5 from the default build (RhBug:1935486)
  - Fix error when updating repo with removed modules metadata
  - Exit with status code 1 when loading of repo's metadata fails
  - Fix memory leaks (RhBug:1998426)
  - Fix valgrind warnings caused by subprocess calls


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-2
changelog:
  - Switch default of --keep-all-metadata to TRUE and add --discard-additional-metadata (RhBug:2055032)


author: Adrian Reber <areber@redhat.com> - 3.15-11
changelog:
  - Remove unnecessary Requires: criu-libs
  - Remove wrong BR nftables-devel
  - Bump release for rebuild


author: Radostin Stoyanov <radostin@redhat.com> - 3.15-12
changelog:
  - Increase release number from 11 to 12
  - Disable podman test when crun doesn't support checkpoint/restore


author: Vladis Dronov <vdronov@redhat.com> - 15.9-10
changelog:
  - Bring in important patches from the upstream (39fb38..eaea31 in a git repo)
  - Fix the upstream tarball URL
  - Remove outdated patch files


author: Vladis Dronov <vdronov@redhat.com> - 15.9-14
changelog:
  - Add distrubution patches which were not upstreamed (bz 2072635)
  - Add self-tests
  - Add OSCI harness


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-1
changelog:
  - 1.28.7, urftopdf nor pdftoopvp aren't compiled anymore
  - 1904405 - HP M281fdw: čžš characters printed as squares with "driverless" driver


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-11
changelog:
  - Set default sasldb database to GDBM instead of BerkeleyDB
  - Add the migration tool from BerkeleyDB
  - Add some PLAIN auth tests
  - Resolves rhbz#1947971


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Bryan Gurney <bgurney@redhat.com> - 71.1-7
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
  - Fix enable-namespace all reporting errors incorrectly
  - Add support for inject-smart on papr scm
  - Related: rhbz#2040075
  - Related: rhbz#1873851
  - Related: rhbz#1880578
  - Related: rhbz#1922538
  - Related: rhbz#2087707


author: Bryan Gurney <bgurney@redhat.com> - 1.10-8.el9
changelog:
  - Supersede uninitialized value patch with upstream version
  - Add upstream patch: common: fix mismatch between prototype and body
  - Makefile: bypass check-doc in check target
  - Related: rhbz#1985096


author: Bryan Gurney <bgurney@redhat.com> - 1.10.1-1
changelog:
  - Update to PMDK version 1.10.1
  - Related: rhbz#1874208
  - Remove BuildRequires line for libfabric-devel
  - Related: rhbz#2009502


author: Eugene Syromiatnikov <esyr@redhat.com> - 3.6-13
changelog:
  - Change "Requires: genisoimage" dependency to "Requires: /usr/bin/mkisofs"
    to enable xorriso-provided drop-in replacement implementation usage.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.1-3
changelog:
  - Fix some rpmlint issues, add comments, add license and doc,
    gpg verification, use pkgconfig BuildRequires, enable _hardened_build


author: Mark Wielaard <mjw@redhat.com> - 5.0-1
changelog:
  - Upgrade to upstream 5.0 release.
    - Removes find-debuginfo .sh suffix.
    - This release still has a find-debuginfo.sh -> find-debuginfo symlink.


author: Petr Menšík <pemensik@redhat.com> - 2.85-3
changelog:
  - Send queries only to best domain-specific server (#2047510)
  - Offer alternate DHCPv6 address if requested is already leased (#1998448)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.15-1
changelog:
  - dovecot updated to 2.3.15, pigeonhole updated to 0.5.15
  - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in
    JWT tokens. This may be used to supply attacker controlled keys to
    validate tokens, if attacker has local access (#1979833)
  - CVE-2021-33515: On-path attacker could have injected plaintext commands
    before STARTTLS negotiation that would be executed after STARTTLS
    finished with the client
  - Add TSLv1.3 support to min_protocols.


author: Timothy Redaelli <tredaelli@redhat.com> - 19.11.1-1
changelog:
  - Rebase DPDK to 19.11.1 (#1824905)
  - Remove dpdk-pmdinfo.py (#1801361)
  - Add Requires: rdma-core-devel libmnl-devel on x86_64 for dpdk-devel (#1813252)


author: Lukas Nykryn <lnykryn@redhat.com> - 055-6.git20210709
changelog:
  - fix(network-manager): don't pull in systemd-udev-settle
  - fix(dracut.sh): handle '-i' option to include files beginning with '.'
  - fix(dracut.sh): handle symlinks appropriately while using '-i' option
  - fix(squash): create relative symlinks
  - feat(squash): install umount util


author: Lukas Nykryn <lnykryn@redhat.com> - 055-9.git20210812
changelog:
  - fix(kernel-modules): add blk_mq_alloc_disk and
  - fix(network-manager): check for nm-initrd-generator in both
  - fix(cms): reload NetworkManager connections


author: Pavel Valena <pvalena@redhat.com> - 055-30.git20220216
changelog:
  - fix(shutdown): be robust against forced shutdown
  - 95resume: only exclude this module, when swap is netdev
  - fix(qeth_rules): check the existence of
  - fix(fips): handle s390x OSTree systems
  - fix(network): add errors and warnings when network interface
  - fix(url-lib): make pre-pivot hook separetely per
  - fix(dracut-shutdown): add cleanup handler on failure
  - fix(multipath): get config. dir from configuration
  - Do not use recommends for base packages
  - 95nfs: set correct ownership and permissions for statd


author: Pavel Valena <pvalena@redhat.com> - 057-10.git20220721
changelog:
  - fix(dracut.sh): do not fail on irregular files
  - fix(98dracut-systemd): partly revert "emergency mode: use


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.18-1
changelog:
  - New release: 1.18
  - Use debugging info to pretty print raw data
  - Store percpu variables in vmlinux BTF.
  - Fixes to address segfaults on the gdb testsuite binaries
  - Bail out on partial units for now, avoiding segfaults and providing warning to user.


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.19-1
changelog:
  - New release: 1.19
  - Split BTF
  - DWARF workarounds for DW_AT_declaration
  - Support cross-compiled ELF binaries with different endianness
  - Support showing typedefs for anonymous types
  - Speedups using libbpf algorithms
  - See changes-v1.19 for a complete and more detailed list of changes


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.20-1
changelog:
  - New release: v1.20
  - btf_encoder:
  - Improve ELF error reporting using elf_errmsg(elf_errno())
  - Improve objcopy error handling.
  - Fix handling of 'restrict' qualifier, that was being treated as a 'const'.
  - Support SHN_XINDEX in st_shndx symbol indexes
  - Cope with functions without a name
  - Fix BTF variable generation for kernel modules
  - Fix address size to match what is in the ELF file being processed.
  - Use kernel module ftrace addresses when finding which functions to encode.
  - libbpf:
  - Allow use of packaged version.
  - dwarf_loader:
  - Support DW_AT_data_bit_offset
  - DW_FORM_implicit_const in attr_numeric() and attr_offset()
  - Support DW_TAG_GNU_call_site, standardized rename of DW_TAG_GNU_call_site.
  - build:
  - Fix compilation on 32-bit architectures.


author: Jiri Olsa <jolsa@redhat.com> - 1.21-1
changelog:
  - remove ftrace filter
  - New release: v1.21
  - DWARF loader:
  - Handle DWARF5 DW_OP_addrx properly
  - Handle subprogram ret type with abstract_origin properly
  - Check .notes section for LTO build info
  - Check .debug_abbrev for cross-CU references
  - Permit merging all DWARF CU's for clang LTO built binary
  - Factor out common code to initialize a cu
  - Permit a flexible HASHTAGS__BITS
  - Use a better hashing function, from libbpf
  - btf_encoder:
  - Add --btf_gen_all flag
  - Match ftrace addresses within ELF functions
  - Funnel ELF error reporting through a macro
  - Sanitize non-regular int base type
  - Add support for the floating-point types
  - Pretty printer:
  - Honour conf_fprintf.hex when printing enumerations


author: Jiri Olsa <jolsa@redhat.com> - 1.22-1
changelog:
  - New release: v1.22
  - Resolves: rhbz#2010414
  - Introduce -j/--jobs option to specify the number of threads to use.
  - Multithreaded DWARF loading, requires elfutils >= 0.178.
  - Preparatory work for multithreaded BTF encoding, the focus for 1.23.
  - Allow encoding BTF to a separate file.
  - Show all different types with the same name, not just the first one found.
  - Stop assuming that reading from stdin means pretty, add --prettify.
  - Improve type resolution for the --header command line option.
  - Do not consider the ftrace filter when encoding BTF for kernel functions.
  - Lock calls to non-thread safe elfutils' dwarf_decl_file() and dwarf_decl_line().
  - Change hash table size to one that performs better with current typical vmlinux files.
  - Allow tweaking the hash table size from the command line.
  - Add --kabi_prefix to avoid deduplication woes when using _RH_KABI_REPLACE().
  - Add --with_flexible_array to show just types with flexible arrays.
  - Support btfdiff with a detached BTF file.
  - Introduce sorted type output (--sort).
  - Disable incomplete CTF encoder.


author: Jakub Jelinek <jakub@redhat.com> 0.13-6
changelog:
  - DW_FORM_implicit_const handling fixes (sw#27212, sw#27213)
  - temporarily build odr tests with -gdwarf-4 as they are incompatible with
    DWARF 5


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-7
changelog:
  - edk2-fix-tpm-build-options.patch [bz#2000396]
  - Resolves: bz#2000396
    ([aarch64][RHEL9] The lack of TPMFinalLog in efi causes the tpm self-test in the guest to fail)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-8
changelog:
  - edk2-Revert-advertise-OpenSSL-on-TianoCore-splash-screen-.patch [bz#2027286]
  - Resolves: bz#2027286
    (Remove the customized boot splash logo patch)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-1
changelog:
  - Rebase to latest upstream release [bz#2018388]
  - Resolves: bz#2018388
    ([rebase] update edk2 to nov '21 release (edk2-stable202111xx))


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-2
changelog:
  - edk2-OvmfPkg-remove-unused-TPM-options-from-MicrovmX64.ds.patch [bz#1935497]
  - edk2-OvmfPkg-move-tcg-configuration-to-dsc-and-fdf-includ.patch [bz#1935497]
  - edk2-OvmfPkg-drop-TPM_CONFIG_ENABLE.patch [bz#1935497]
  - edk2-OvmfPkg-create-Tcg12ConfigPei.inf.patch [bz#1935497]
  - edk2-OvmfPkg-rework-TPM-configuration.patch [bz#1935497]
  - edk2-spec-adapt-specfile-to-build-option-changes-disable-.patch [bz#1935497]
  - Resolves: bz#1935497
    (edk2  implements and/or uses the deprecated MD5 and SHA-1 algorithms by default)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-3
changelog:
  - edk2-spec-build-amdsev-variant.patch [bz#2054661]
  - edk2-OvmfPkg-AmdSev-SecretPei-Mark-SEV-launch-secret-area.patch [bz#2041755]
  - Resolves: bz#2054661
    (RFE:  Support measured AMD SEV boot with kernel/initrd/cmdline in OVMF)
  - Resolves: bz#2041755
    (Mark SEV launch secret area as reserved)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-4
changelog:
  - edk2-Revert-OvmfPkg-Remove-NvmExpressDxe-device-driver-RH.patch [bz#2044196]
  - edk2-Revert-ArmVirtPkg-Remove-NvmExpressDxe-device-driver.patch [bz#2044196]
  - Resolves: bz#2044196
    (RFE: [nvme-vfio] The virt-install interface throws info "Failed to set new efi boot target"  when install a vm on a hostdev nvme disk)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220221gitb24306f15d-1
changelog:
  - Rebae to edk-stable-202202 [bz#2056910]
  - Resolves: bz#2056910
    ([rebase] update edk2 to feb '22 release (edk2-stable202202xx))


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220221gitb24306f15d-2
changelog:
  - edk2-Revert-ArmVirtPkg-Remove-QemuRamfbDxe-display-device.patch [bz#2087220]
  - edk2-Revert-OvmfPkg-Remove-QemuRamfbDxe-display-device-dr.patch [bz#2087220]
  - Resolves: bz#2087220
    (VNC display show "Guest has not initialized the display" when using ramfb + ovmf)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220526git16779ede2d36-1
changelog:
  - Rebase to edk2-stable-202205 [bz#2074831]
  - Resolves: bz#2074831
    (rebase edk2 to May 2022 release (edk2-stable202205))


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220526git16779ede2d36-2
changelog:
  - edk2-OvmfPkg-Update-target-machines-config.patch [bz#2090752]
  - Resolves: bz#2090752
    (Add RHEL 8.5, 8,6 and 9.x machine types to firmware descriptor files 50-edk2-ovmf-{amdsev,cc}.json)


author: Petr Pisar <ppisar@redhat.com> - 37-14
changelog:
  - Fix XML ABI dumps that were generated with a faulty GCC and missed the
    variadic arguments when building without LTO (bug #1863475)


author: Mark Wielaard <mjw@redhat.com> - 0.186-1
changelog:
  - Upgrade to upstream 0.186
    - debuginfod-client: Default $DEBUGINFOD_URLS is computed from
      drop-in files /etc/debuginfod/*.urls rather than
      hardcoded into the /etc/profile.d/debuginfod*
      scripts.
      Add $DEBUGINFOD_MAXSIZE and $DEBUGINFOD_MAXTIME settings
      for skipping large/slow transfers.
      Add $DEBUGINFOD_RETRY for retrying aborted lookups.
    - debuginfod: Supply extra HTTP response headers, describing
      archive/file names that satisfy the requested buildid content.
      Support -d :memory: option for in-memory databases.
      Protect against loops in federated server configurations.
      Add -r option to use -I/-X regexes for grooming stale files.
      Protect against wasted CPU from duplicate concurrent requests.
      Limit the duration of groom ops roughly to rescan (-t) times.
      Add --passive mode for serving from read-only database.
      Several other performance improvements & prometheus metrics.
    - libdw: Support for the NVIDIA Cuda line map extensions.
      DW_LNE_NVIDIA_inlined_call and DW_LNE_NVIDIA_set_function_name
      are defined in dwarf.h. New functions dwarf_linecontext and
      dwarf_linefunctionname.
    - translations: Update Japanese translation.


author: Mark Wielaard <mjw@redhat.com> - 0.187-4
changelog:
  - Upgrade to elfutils 0.187
    - debuginfod: Support -C option for connection thread pooling.
    - debuginfod-client: Negative cache file are now zero sized instead
      of no-permission files.
    - addr2line: The -A, --absolute option, which shows file names
      includingthe full compilation directory is now the
      default.  To get theold behavior use the new option --relative.
    - readelf, elflint: Recognize FDO Packaging Metadata ELF notes
    - libdw, debuginfo-client: Load libcurl lazily only when files need
      to be fetched remotely. libcurl is now never loaded when
      DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set,
      libcurl is only loaded when the debuginfod_begin function is
      called.
  - Add elfutils-0.187-csh-profile.patch
  - Add elfutils-0.187-debuginfod-client-fd-leak.patch
  - Add elfutils-0.187-mhd_no_dual_stack.patch
  - Add elfutils-0.187-mhd_epoll.patch


author: Frank Ch. Eigler <fche@redhat.com> - 0.187-5
changelog:
  - rhbz2088774: ship /etc/profile.d/debuginfod* files even without
                 default DEBUGINFOD_URLS.


author: Bhavin Gandhi <bhavin7392@gmail.com> - 1:27.1-1
changelog:
  - emacs-27.1 is available (#1867841)
  - Add systemd-devel to support Type=notify in unit file
  - Build with Cairo and Jansson support
  - Remove ImageMagick dependency as it's no longer used


author: Jan Synáček <jsynacek@redhat.com> - 1:27.1-2
changelog:
  - use make macros (original patch provided by Tom Stellard)
  - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Jacek Migacz <jmigacz@redhat.com> - 12.3-1
changelog:
  - Fix build failure on CentOS Stream. Related: rhbz#1951306
  - Revert patch for FSF addresses (it became obsolete with 12.2)
  - Remove Obsoletes and Provides tetex-preview


author: Jeff Law <law@redhat.com> - 1.1.2-7
changelog:
  - Force C++14 as this code is not C++17 ready
  - Fix sprintf format issue
  - Fix ordered comparison of a pointer against zero issue
  -


author: Jack Magne <jmagne@redhat.com> - 1.1.2-14
changelog:
  Resolves: rhbs #2007544,2000928,2000929
  - Bugzilla Bug  2007544 - The esc provides outdated configuration for opensc
  - Bugzilla Bug  2000928 - ESC does not detect smart cards and crashes upon launch [rhel-9.0.0]
  - Bugzilla Bug  2000929 - [RHEL-9][AppStream] esc present in comps but missing from repository [rhel-9.0.0]


author: Jack Magne <jmagne@redhat.com> - 1.1.2-16
changelog:
  Resolves: rhbs #2050849
  - Bug 2050849 - Volkswagen Siemens CardOS M4.4 and 5.0 cards display incorrect status in ESC [RHEL 9.1]


author: Marek Kasik <mkasik@redhat.com> - 40.1-5
changelog:
  - Use tmp dir as containing folder for non-native files
  - Backport fixes for issues found by Coverity Scan
  - Fix some other issues found by Coverity Scan
  - Resolves: #1975150


author: Milan Crha <mcrha@redhat.com> - 3.40.4-4
changelog:
  - Resolves: #2071056 (Addressbook: Switch from GData Contacts API to CardDAV API for Google books)
  - Resolves: #2071742 (Add patch to use correct colors in mail preview with webkit2gtk3 2.36.x)


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-4
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993247

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993284


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018421

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003670


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-6
changelog:
  - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
  - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
  - CVE-2022-22825 Integer overflow in lookup in xmlparse.c
  - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
  - CVE-2022-22823 Integer overflow in build_model in xmlparse.c
  - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
  - Resolves: CVE-2022-22827
  - Resolves: CVE-2022-22826
  - Resolves: CVE-2022-22825
  - Resolves: CVE-2022-22824
  - Resolves: CVE-2022-22823
  - Resolves: CVE-2022-22822


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-8
changelog:
  - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
  - Resolves: CVE-2021-45960


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-10
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Tomas Korbar <tkorbar@redhat.com> - 2.4.7-1
changelog:
  - Rebase to version 2.4.7
  - Resolves: rhbz#2067201
  - Resolves: CVE-2022-25313
  - Resolves: CVE-2022-25314
  - Resolves: CVE-2022-25236


author: Radovan Sroka <rsroka@redhat.com> - 1.0.1-1
changelog:
  - rebase to 1.0.1
  - introduced uthash dependency
  - SELinux prevents the fapolicyd process from writing to /run/dbus/system_bus_socket
  Resolves: rhbz#1874491
  - SELinux prevents the fapolicyd process from writing to /var/lib/rpm directory
  Resolves: rhbz#1876538


author: Radovan Sroka <rsroka@redhat.com> - 1.0.3-3
changelog:
  RHEL 9 BETA
  - SELinux prevents fapolicyd from watch_mount/watch_with_perm on /dev/shm
  Resolves: rhbz#1932225
  Resolves: rhbz#1977731


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.4-101
changelog:
  RHEL 9.0.0 ERRATUM
  - rebase to 1.0.4
  - added rpm_sha256_only option
  - added trust.d directory
  - allow file names with whitespaces in trust files
  - use full paths in trust files
  Resolves: rhbz#2032408
  - fix libc.so getting identified as application/x-executable
  Resolves: rhbz#2015307
  - fix selinux DSP module definition in spec file
  Resolves: rhbz#2014449


author: Radovan Sroka <rsroka@redhat.com> - 1.1-100
changelog:
  RHEL 9.0.0 ERRATUM
  - rebase to 1.1
  Resolves: rhbz#2032408
  - introduce rules.d
  Resolves: rhbz#2054740
  - remove pretrans scriptlet
  Resolve: rhbz#2051481


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-23
changelog:
  - fence_ibm_vpc: remove unused instance parameter and make limit
    optional
    Resolves: rhbz#2081235


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-25
changelog:
  - all agents: unify ssl parameters to avoid having to use --ssl when
    using --ssl-secure/--ssl-insecure for some agents
    Resolves: rhbz#2072420


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-27
changelog:
  - fence_ibm_powervs: add support for proxy, private API servers and
    get token via API key
    Resolves: rhbz#2093216


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #2005307, #1999276


author: Eric Sandeen <sandeen@redhat.com> 3.25-3
changelog:
  - Fix segfault with external IO engines and multiple threads
  - Enable dev-dax, pmemblk, libpmem engines for ppc64le


author: Eric Garver <egarver@redhat.com> - 1.0.0-0.3.alpha
changelog:
  - remove dead symlink (firewalld.conf) left over from old package versions
    before installing new file


author: Richard Hughes <richard@hughsie.com> 1.2-7
changelog:
  - Disable JLink support to remove one extra dep we are not going to support
  - Resolves: rhbz#1948597


author: Debarshi Ray <rishi@fedoraproject.org> - 1.12.4-2
changelog:
  - Don't try to add Fedora's OCI Flatpak repository on RHEL
  - Remove an obsolete Fedora-specific update path
  Resolves: #2051697


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Adam Jackson <ajax@redhat.com> - 1.3.5-9
changelog:
  - Remove BuildRequires xprop entirely. If present, the configure script will call
    it looking for a property on the root window that Fedora's X server does not
    set, and which would not work anyway since there is no X server running in the
    buildroot, so we can just remove the dependency.


author: Fabio Alessandro Locati <fale@fedoraproject.org> - 5.13.1-2
changelog:
  - Provide the right font configuration
  - Drop ttf format since upstream affirms that otf is to be preferred


author: Akira TAGOH <tagoh@redhat.com> - 2.13.93-4
changelog:
  - cherry pick some upstream patches
    - Skip leading white space in style.
    - Remove abort from FcCompareSize.
    - Fix memory leaks
    - Check qual and compare for family tests.
  -


author: Akira TAGOH <tagoh@redhat.com> - 2.13.94-2
changelog:
  - Fix the score calculation on matching for multiple values.
  - Enable 11-lcdfilter-default.conf.
    Resolves: rhbz#1965684
  - Rebase to the latest release.
    Resolves: rhbz#2023161


author: Akira TAGOH <tagoh@redhat.com> - 2.13.95-1
changelog:
  - New upstream release.
  - Update deps to font(notosans)
    https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts


author: Akira TAGOH <tagoh@redhat.com> - 2.14.0-1
changelog:
  - New upstream release.
  - Rebase to 2.14 and revert Noto Default change happened in f36.
    Resolves: rhbz#2075393


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Benjamin Berg <bberg@redhat.com> - 1.94.0-3
changelog:
  - Use GFDL abbreviation as GFDLv1.1+ is not listed
  - Install PAM module into /usr
  - Pull in further test fixes


author: Antonio Torres <antorres@redhat.com> - 3.0.21-25
changelog:
  - Revert "Allow to connect to partially open LDAP handle"
  - Use infinite timeout (openldap default) when using LDAP+start-TLS
  - Update openssl dependency to not check epoch (was causing detection issues)
    Related: rhbz#1992551


author: Antonio Torres <antorres@redhat.com> - 3.0.21-31
changelog:
  - Update OpenSSL 3.0 support backport to current v3.0.x branch state
  - Add "--enable-fips-workaround" to build options
    Related: rhbz#2083699


author: Antonio Torres <antorres@redhat.com> - 3.0.21-34
changelog:
  - Use GID / UID 95 as it's reserved for FreeRADIUS (https://pagure.io/setup/blob/07f8debf03dfb0e5ed36051c13c86c8cd00cd241/f/uidgid#_107)
    Resolves: #2095403


author: Marek Kasik <mkasik@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Test bitmap size earlier for PNGs
  - Fix memory leak in pngshim.c
  - Enable man pages for demos
  - Resolves: #1887084, #1890211


author: Akira TAGOH <tagoh@redhat.com> - 2.10.4-3
changelog:
  - Enable HarfBuzz support
  - Add bootstrap without HarfBuzz
  - Resolves: #1853937
  - Resolves: #1906714


author: Akira TAGOH <tagoh@redhat.com> - 1.0.10-6.el9.2
changelog:
  - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310
    Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063


author: Michal Ruprich <mruprich@redhat.com> - 0.17-85
changelog:
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Hughes <richard@hughsie.com> 1.5.2-1
changelog:
  - New upstream release
  - Add a flag to indicate if packages are supported
  - Add a plugin for the Pinebook Pro laptop
  - Allow components to set the icon from the metadata
  - Fall back to FAT32 internal partitions for detecting ESP
  - Fix detection of ColorHug version on older firmware versions
  - Fix reading BCM57XX vendor and device ids from firmware
  - Fix replugging the MSP430 device
  - Fix sync method when called from threads without a context
  - Ignore an invalid vendor-id when adding releases for display
  - Improve synaptics-mst reliability when writing data
  - Install modules-load configs in the correct directory
  - Notify the service manager when idle-quitting
  - Only download the remote metadata as required
  - Remove HSI update and attestation suffixes
  - Restore recognizing GPG and PKCS7 signature types in libfwupd
  - Set the SMBIOS chassis type to portable if a DT battery exists
  - Switch from libsoup to libcurl for downloading data


author: Richard Hughes <richard@hughsie.com> 1.5.3-1
changelog:
  - New upstream release
  - Add a UEFI quirk for Star Labs Lite Mk III
  - Add the device firmare ID for serio class hardware
  - Allow setting the GMainContext when used for sync methods
  - Allow the client to send legacy PKCS7 and GPG signatures
  - Export the driver name from FuUdevDevice
  - Fix a possible critical warning due to missing retval
  - Fix the endianness for the CRC check in bcm57xx
  - Make sure the correct interface number is used for QMI
  - Mark more user-visible strings as translatable
  - Restrict loading component types of firmware
  - Validate ModemManager firmware update method combinations


author: Richard Hughes <richard@hughsie.com> 1.5.4-1
changelog:
  - New upstream release
  - Add Maple Ridge Thunderbolt firmware parsing support
  - Allow creating FMAP and Synaptics firmware using builder.xml
  - Allow using fwupdtool as non-root for firmware commands
  - Do not trust the Block.HintSystem boolean for ESP filtering
  - Fix a memory leak when parsing Synaptics firmware
  - Fix a possible crash when reading the Goodix MOC USB request
  - Fix possible crashes when parsing invalid firmware


author: Richard Hughes <richard@hughsie.com> 1.5.5-1
changelog:
  - New upstream release
  - Add a plugin to update PixArt RF devices
  - Add new hardware to use the elantp and rts54hid plugins
  - Detect the AMD TSME encryption state for HSI-4
  - Detect the AMI PK test key is not installed for HSI-1
  - Fix flashing a fingerprint reader that is in use
  - Fix several critical warnings when parsing invalid firmware
  - Fix updating DFU devices that use DNLOAD_BUSY
  - Ignore the legacy UEFI OVMF dummy GUID
  - Make libfwupd more thread safe to fix a crash in gnome-software
  - Never show unprintable chars from invalid firmware in the logs


author: Michal Schorm <mschorm@redhat.com> - 26.4.8-2
changelog:
  - Switch from SCONS build tooling to CMAKE build tooling
  - Use upstream variants of Systemd service file and Systemd service file wrapper srcipt


author: Lukas Javorsky <ljavorsk@redhat.com> - 26.4.9-2
changelog:
  - Explicitly require the 'procps-ng' package
  - Otherwise it will not require it in the lightweight systems (e.g. containers)
  - and Galera won't work properly


author: Nick Clifton <nickc@redhat.com> - 10.69-1
changelog:
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries if compiled using LTO.  (#2082146)


author: Nick Clifton <nickc@redhat.com> - 10.75-1
changelog:
  - Annocheck: Fix covscan detected race condition between stat() and open().
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)


author: Nick Clifton <nickc@redhat.com> - 10.76-1
changelog:
  - Spec file: Correct the Provides for the annobin-doc subpackage.  (#2097065)
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.
  - Annocheck: Fix covscan detected race condition between stat() and open().


author: Marek Polacek <polacek@redhat.com> 12.1.1-3
changelog:
  - update from releases/gcc-12 branch
    - PRs c++/49387, c++/102307, c++/102651, c++/104470, c++/105491, c++/105589,
  	c++/105623, c++/105652, c++/105655, c++/105725, c++/105734,
  	c++/105756, c++/105761, c++/105779, c++/105795, c++/105852,
  	c++/105871, c++/105885, c++/105908, c++/105925, c++/105931,
  	c++/105964, c++/106001, c/105635, d/105544, fortran/105230,
  	gcov-profile/105535, ipa/100413, ipa/105600, ipa/105639, ipa/105739,
  	libgomp/105745, libgomp/106045, libstdc++/104731, libstdc++/105284,
  	libstdc++/105671, libstdc++/105681, middle-end/105537,
  	middle-end/105604, middle-end/105711, middle-end/105951,
  	middle-end/105998, middle-end/106030, other/105527,
  	preprocessor/105732, rtl-optimization/105455, rtl-optimization/105559,
  	rtl-optimization/105577, sanitizer/105714, sanitizer/105729,
  	target/101891, target/104871, target/105162, target/105209,
  	target/105292, target/105472, target/105556, target/105599,
  	target/105854, target/105879, target/105953, target/105960,
  	target/105970, target/105981, target/106096, tree-optimization/103116,
  	tree-optimization/105431, tree-optimization/105458,
  	tree-optimization/105528, tree-optimization/105562,
  	tree-optimization/105618, tree-optimization/105726,
  	tree-optimization/105736, tree-optimization/105786,
  	tree-optimization/105940
  - enable tsan and lsan on s390x (#2101610)
  - fix up libtsan on s390x
  - fix nvptx build (PRs bootstrap/105551, target/105938)


author: Kevin Buettner - 11.2-2
changelog:
  - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
    (This is a workaround for the bogus warning/error that we now see
    on i686 regarding a "may write a terminating nul past the end of
    the destination" message for the sprintf() call in
    global_symbol_searcher::search() in gdb/symtab.c.)


author: Kevin Buettner - 11.2-3
changelog:
  - Backport upstream patch which removes sizes from debuginfod download
    messages when the size is not available (RHBZ 2068280, Aaron Merey).


author: Filip Januš <fjanus@redhat.com> - 2.2.5-12
changelog:
  - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src)
  - Resolves: #1599032


author: Filip Januš <fjanus@redhat.com> - 2.3.1-1
changelog:
  - Upstream released new version 2.3.1
  - patch bug615 is no more needed - fixed by upstream in release
  - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on
    x390s - XFAIL_TEST definition for x390s is no more necessary


author: Filip Januš <fjanus@redhat.com> - 2.3.2-1
changelog:
  - Add condition if fedora for packages not available in RHEL
  - enable avif support
  - use bcond
  - rebase to version 2.3.2


author: Keith Seitz <keiths@redhat.com> - 10.2-2
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903375)
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Fix crash when expanding partial symtab..."
    (Tom Tromey. gdb/27743)


author: Keith Seitz <keiths@redhat.com> - 10.2-3.el8
changelog:
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnez, RH BZ 1903375)


author: Keith Seitz <keiths@redhat.com> - 10.2-4.el8
changelog:
  - Backport "Fix gdb.fortran/array-slices.exp with -m32"
    (Tom de Vries, testsuite/269970)
  - Backport "adjust gdb.python/flexible-array-member.exp expected pattern"
    (Simon Marchi)


author: Keith Seitz <keiths@redhat.com> - 10.2-5.el9
changelog:
  - Backport five patches to support glibc 2.34 with merged libpthread.
    (Simon Marchi and Kevin Buettner, RH BZ 1971095)


author: Keith Seitz <keiths@redhat.com> - 10.2-6.el9
changelog:
  - Backport "PowerPC remove 512 bytes region limit if 2nd DAWR is available"
    (Rogerio Alves, RHBZ 1870029)
  - Backport patches for "Support prefixed instructions in GDB"
    (Will Schmidt and Luis Machado, RHBZ 1870031)


author: Ray Strode <rstrode@redhat.com> - 40.1-7
changelog:
  - Don't use gdm-disable-wayland binary in udev rules.
    It doesn't exist anymore.
    Related: #1985099


author: Ray Strode <rstrode@redhat.com> - 40.1-9
changelog:
  - Synchronize permission and group ownership for log dir between
    rpm file manifest and daemon expectations.
    Resolves: #1999586


author: Ray Strode <rstrode@redhat.com> - 40.1-12
changelog:
  - More fixes from RHEL 8:
    - Fix DisallowTCP=false
    - Fix crash when both wayland and xorg are unavailable
    Related: #2056931


author: Ray Strode <rstrode@redhat.com> - 40.1-15
changelog:
  - Fix accountsservice user templates
    Resolves: #2062827
  - Properly force Xorg on matrox cards
    Related: #2074013
  - Fix typo that prevents the correct session type from being
    used when user switching.
    Resolves: #2074014


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Elliott Sales de Andrade <quantum.analyst@gmail.com> - 2.12.0-1
changelog:
  - Update to latest version (#1874604)
  - Remove duplicate docs/man directory (#1852765)
  - Add an option to disable modifying the git filter config (#1768060)


author: Carlos O'Donell <carlos@redhat.com> - 2.34-30
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 71326f1f2fd09dafb9c34404765fb88129e94237:
  - nptl: Fix pthread_cancel cancelhandling atomic operations
  - mips: Fix mips64n32 64 bit time_t stat support (BZ#29069)
  - hurd: Fix arbitrary error code
  - nptl: Handle spurious EINTR when thread cancellation is disabled (BZ#29029)
  - S390: Add new s390 platform z16.
  - NEWS: Update fixed bug list for LD_AUDIT backports.
  - hppa: Fix bind-now audit (BZ #28857)
  - elf: Replace tst-audit24bmod2.so with tst-audit24bmod2
  - Fix elf/tst-audit25a with default bind now toolchains
  - elf: Fix runtime linker auditing on aarch64 (BZ #26643)
  - elf: Issue la_symbind for bind-now (BZ #23734)
  - elf: Fix initial-exec TLS access on audit modules (BZ #28096)
  - elf: Add la_activity during application exit
  - elf: Do not fail for failed dlmopen on audit modules (BZ #28061)
  - elf: Issue audit la_objopen for vDSO
  - elf: Add audit tests for modules with TLSDESC
  - elf: Avoid unnecessary slowdown from profiling with audit (BZ#15533)
  - elf: Add _dl_audit_pltexit
  - elf: Add _dl_audit_pltenter
  - elf: Add _dl_audit_preinit
  - elf: Add _dl_audit_symbind_alt and _dl_audit_symbind
  - elf: Add _dl_audit_objclose
  - elf: Add _dl_audit_objsearch
  - elf: Add _dl_audit_activity_map and _dl_audit_activity_nsid
  - elf: Add _dl_audit_objopen
  - elf: Move la_activity (LA_ACT_ADD) after _dl_add_to_namespace_list() (BZ #28062)
  - elf: Move LAV_CURRENT to link_lavcurrent.h
  - elf: Fix elf_get_dynamic_info() for bootstrap
  - elf: Fix dynamic-link.h usage on rtld.c
  - elf: Fix elf_get_dynamic_info definition
  - elf: Avoid nested functions in the loader [BZ #27220]
  - powerpc: Delete unneeded ELF_MACHINE_BEFORE_RTLD_RELOC
  - hppa: Use END instead of PSEUDO_END in swapcontext.S
  - hppa: Implement swapcontext in assembler (bug 28960)


author: Carlos O'Donell <carlos@redhat.com> - 2.34-31
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 55640ed3fde48360a8e8083be4843bd2dc7cecfe:
  - i386: Regenerate ulps
  - linux: Fix missing internal 64 bit time_t stat usage
  - x86: Optimize L(less_vec) case in memcmp-evex-movbe.S
  - x86: Don't set Prefer_No_AVX512 for processors with AVX512 and AVX-VNNI
  - x86-64: Use notl in EVEX strcmp [BZ #28646]
  - x86: Shrink memcmp-sse4.S code size
  - x86: Double size of ERMS rep_movsb_threshold in dl-cacheinfo.h
  - x86: Optimize memmove-vec-unaligned-erms.S
  - x86-64: Replace movzx with movzbl
  - x86-64: Remove Prefer_AVX2_STRCMP
  - x86-64: Improve EVEX strcmp with masked load
  - x86: Replace sse2 instructions with avx in memcmp-evex-movbe.S
  - x86: Optimize memset-vec-unaligned-erms.S
  - x86: Optimize memcmp-evex-movbe.S for frontend behavior and size
  - x86: Modify ENTRY in sysdep.h so that p2align can be specified
  - x86-64: Optimize load of all bits set into ZMM register [BZ #28252]
  - scripts/glibcelf.py: Mark as UNSUPPORTED on Python 3.5 and earlier
  - dlfcn: Do not use rtld_active () to determine ld.so state (bug 29078)
  - INSTALL: Rephrase -with-default-link documentation
  - misc: Fix rare fortify crash on wchar funcs. [BZ 29030]
  - Default to --with-default-link=no (bug 25812)
  - scripts: Add glibcelf.py module


author: Carlos O'Donell <carlos@redhat.com> - 2.34-32
changelog:
  - Sync with upstream branch release/2.34/master,
    commit c66c92181ddbd82306537a608e8c0282587131de:
  - posix/glob.c: update from gnulib (BZ#25659)
  - linux: Fix fchmodat with AT_SYMLINK_NOFOLLOW for 64 bit time_t (BZ#29097)


author: Florian Weimer <fweimer@redhat.com> - 2.34-33
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 91c2e6c3db44297bf4cb3a2e3c40236c5b6a0b23:
  - dlfcn: Implement the RTLD_DI_PHDR request type for dlinfo
  - manual: Document the dlinfo function
  - x86: Fix fallback for wcsncmp_avx2 in strcmp-avx2.S [BZ #28896]
  - x86: Fix bug in strncmp-evex and strncmp-avx2 [BZ #28895]
  - x86: Set .text section in memset-vec-unaligned-erms
  - x86-64: Optimize bzero
  - x86: Remove SSSE3 instruction for broadcast in memset.S (SSE2 Only)
  - x86: Improve vec generation in memset-vec-unaligned-erms.S
  - x86-64: Fix strcmp-evex.S
  - x86-64: Fix strcmp-avx2.S
  - x86: Optimize strcmp-evex.S
  - x86: Optimize strcmp-avx2.S
  - manual: Clarify that abbreviations of long options are allowed
  - Add HWCAP2_AFP, HWCAP2_RPRES from Linux 5.17 to AArch64 bits/hwcap.h
  - aarch64: Add HWCAP2_ECV from Linux 5.16
  - Add SOL_MPTCP, SOL_MCTP from Linux 5.16 to bits/socket.h
  - Update kernel version to 5.17 in tst-mman-consts.py
  - Update kernel version to 5.16 in tst-mman-consts.py
  - Update syscall lists for Linux 5.17
  - Add ARPHRD_CAN, ARPHRD_MCTP to net/if_arp.h
  - Update kernel version to 5.15 in tst-mman-consts.py
  - Add PF_MCTP, AF_MCTP from Linux 5.15 to bits/socket.h


author: Florian Weimer <fweimer@redhat.com> - 2.34-34
changelog:
  - Sync with upstream branch release/2.34/master,
    commit ede8d94d154157d269b18f3601440ac576c1f96a:
  - csu: Implement and use _dl_early_allocate during static startup
  - Linux: Introduce __brk_call for invoking the brk system call
  - Linux: Implement a useful version of _startup_fatal
  - ia64: Always define IA64_USE_NEW_STUB as a flag macro
  - Linux: Define MMAP_CALL_INTERNAL
  - i386: Honor I386_USE_SYSENTER for 6-argument Linux system calls
  - i386: Remove OPTIMIZE_FOR_GCC_5 from Linux libc-do-syscall.S
  - elf: Remove __libc_init_secure
  - Linux: Consolidate auxiliary vector parsing (redo)
  - Linux: Include <dl-auxv.h> in dl-sysdep.c only for SHARED
  - Revert "Linux: Consolidate auxiliary vector parsing"
  - Linux: Consolidate auxiliary vector parsing
  - Linux: Assume that NEED_DL_SYSINFO_DSO is always defined
  - Linux: Remove DL_FIND_ARG_COMPONENTS
  - Linux: Remove HAVE_AUX_SECURE, HAVE_AUX_XID, HAVE_AUX_PAGESIZE
  - elf: Merge dl-sysdep.c into the Linux version
  - elf: Remove unused NEED_DL_BASE_ADDR and _dl_base_addr
  - x86: Optimize {str|wcs}rchr-evex
  - x86: Optimize {str|wcs}rchr-avx2
  - x86: Optimize {str|wcs}rchr-sse2
  - x86: Cleanup page cross code in memcmp-avx2-movbe.S
  - x86: Remove memcmp-sse4.S
  - x86: Small improvements for wcslen
  - x86: Remove AVX str{n}casecmp
  - x86: Add EVEX optimized str{n}casecmp
  - x86: Add AVX2 optimized str{n}casecmp
  - x86: Optimize str{n}casecmp TOLOWER logic in strcmp-sse42.S
  - x86: Optimize str{n}casecmp TOLOWER logic in strcmp.S
  - x86: Remove strspn-sse2.S and use the generic implementation
  - x86: Remove strpbrk-sse2.S and use the generic implementation
  - x86: Remove strcspn-sse2.S and use the generic implementation
  - x86: Optimize strspn in strspn-c.c
  - x86: Optimize strcspn and strpbrk in strcspn-c.c
  - x86: Code cleanup in strchr-evex and comment justifying branch
  - x86: Code cleanup in strchr-avx2 and comment justifying branch
  - x86_64: Remove bcopy optimizations
  - x86-64: Remove bzero weak alias in SS2 memset
  - x86_64/multiarch: Sort sysdep_routines and put one entry per line
  - x86: Improve L to support L(XXX_SYMBOL (YYY, ZZZ))
  - fortify: Ensure that __glibc_fortify condition is a constant [BZ #29141]


author: Arjun Shankar <arjun@redhat.com> - 2.34-35
changelog:
  - Sync with upstream branch release/2.34/master,
    commit ff450cdbdee0b8cb6b9d653d6d2fa892de29be31:
  - Fix deadlock when pthread_atfork handler calls pthread_atfork or dlclose
  - x86: Fallback {str|wcs}cmp RTM in the ncmp overflow case [BZ #29127]
  - string.h: fix __fortified_attr_access macro call [BZ #29162]
  - linux: Add a getauxval test [BZ #23293]
  - rtld: Use generic argv adjustment in ld.so [BZ #23293]
  - S390: Enable static PIE


author: Florian Weimer <fweimer@redhat.com> - 2.34-36
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 4c92a1041257c0155c6aa7a182fe5f78e477b0e6:
  - powerpc: Fix VSX register number on __strncpy_power9 [BZ #29197]
  - socket: Fix mistyped define statement in socket/sys/socket.h (BZ #29225)
  - iconv: Use 64 bit stat for gconv_parseconfdir (BZ# 29213)
  - catgets: Use 64 bit stat for __open_catalog (BZ# 29211)
  - inet: Use 64 bit stat for ruserpass (BZ# 29210)
  - socket: Use 64 bit stat for isfdtype (BZ# 29209)
  - posix: Use 64 bit stat for fpathconf (_PC_ASYNC_IO) (BZ# 29208)
  - posix: Use 64 bit stat for posix_fallocate fallback (BZ# 29207)
  - misc: Use 64 bit stat for getusershell (BZ# 29204)
  - misc: Use 64 bit stat for daemon (BZ# 29203)


author: Arjun Shankar <arjun@redhat.com> - 2.34-38
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 94ab2088c37d8e4285354af120b7ed6b887b9e53:
  - nss: handle stat failure in check_reload_and_get (BZ #28752)
  - nss: add assert to DB_LOOKUP_FCT (BZ #28752)
  - nios2: Remove _dl_skip_args usage (BZ# 29187)
  - hppa: Remove _dl_skip_args usage (BZ# 29165)
  - nptl: Fix __libc_cleanup_pop_restore asynchronous restore (BZ#29214)


author: Tamar Shacked <tshacked@redhat.com> - 6.0-56.3
changelog:
  - Rebase with latest RHGS-3.5.4
  - Fix changlog chronological order by removing unneeded changelogs
  - fixes bug bz#1939340


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Kalev Lember <klember@redhat.com> - 40~rc-1
changelog:
  - Update to 40.rc
  - Make -extras subpackage require the main package
  - Drop move-adwaita-backgrounds.patch
  - Remove old obsoletes


author: Bastien Nocera <bnocera@redhat.com> - 3.34.3-4
changelog:
  + gnome-bluetooth-3.34.3-4
  - Revert “Require PulseAudio _or_ Pipewire for Bluetooth audio”
  - Closes: #1928166


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.0-1
changelog:
  - Update to 3.40.0
  - Disable the Facebook, Flickr and Foursquare providers
  - Remove Photos support from the Google provider
  Resolves: #1913641


author: Ray Strode <rstrode@redhat.com> - 40.8-3
changelog:
  - Backport latest, working, version of ChoiceList extension
  - Regenerate stylesheet patch
    Related: #1993954


author: Florian Müllner <fmuellner@redhat.com> - 40.9-3
changelog:
  - Fix markup handling in highlighter
    Resolves: #2049194
  - Fix warning on restacking
    Resolves: #2053638


author: Milan Crha <mcrha@redhat.com> - 41.0-2
changelog:
  - Resolves: #2012699 (Backport changes from Fedora 35)
  - Add patch to mark compulsory only repos, not apps from it
  - Resolves: #2011176 (flathub repo can't be added through gnome-software)
  - Resolves: #2010660 (gs-repos-dialog: Can show also desktop applications)
  - Resolves: #2010353 (Optional repos cannot be disabled)
  - Resolves: #2010740 (Refresh on repository setup change)
  - Resolves: #2009063 (Correct update notifications)


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.1-1
changelog:
  - Update to 3.40.1
  - Rebase the patches
  - Backport yet-to-be-released patches from upstream to avoid translation
    conflicts
  Resolves: #1959384


author: Peter Jones <pjones@redhat.com> - 3.0.9-3
changelog:
  - Fix some minor rpmlint complaints
  - Pull recent patches from upstream
  - Add support for ELF constructors and destructors
  - Fix a minor licensing problem


author: Peter Jones <pjones@redhat.com> - 3.0.11-1
changelog:
  - Update to 3.0.11 (via patches generated from git)
  - Plus newer upstream fixes (also via patches generated from git)
  - Fix shell exit failures in make
  - Fix .reloc section generation
  - Fix CHAR8 definition
  - Fix "make DESTDIR=..."
  - Change the installed .a/.o layout
  - Provide makefiles for consumers to use.
  - Make the -devel noarch since it's just headers.
  - Add a bunch of compatibility symlinks for the 3.0.8 filesystem layout
    These will go away once we've migrated everything using them in fedora
    to use the newer make system...


author: Peter Jones <pjones@redhat.com> - 3.0.11-2
changelog:
  - Make a compat subpackage to provide the old paths to our libraries, linker
    script, and includes.


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-4
changelog:
  - Specify FIPS140-3 module name and version
  - fips: allow a few more primes in RSA key generation
  - fips: tighten PKCS#12 algorithm checks
  - Correct return value of KTLS stub API


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-7
changelog:
  - Increase GNUTLS_MAX_ALGORITHM_NUM for allowlisting (#2033220)
  - Ensure allowlisting API is called before priority string is constructed (#2042532)
  - Use dlopen for loading libtss2* to avoid OpenSSL dependency (#2057490)


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-9
changelog:
  - Stop using typeof keyword for tss2 function prototypes (#2057490)
  - Ensure allowlist API is called before priority string construction (#1975421)


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-10
changelog:
  - Use only the first component of VERSION from /etc/os-release (#2070249)
  - Don't run power-on self-tests on DSA (#2061325)


author: David Benoit <dbenoit@redhat.com> 3.0.9-5
changelog:
  - Remove fedora-specific Go dependency automation macros
  - Remove dependency on golist
  - Temporarily remove incompatible template spec files
  - Update gobuild flags
  - Resolves: rhbz#1982298


author: David Benoit <dbenoit@redhat.com> 3.0.9-9
changelog:
  - Delete remove-fedora-dependency-automation.patch
  - Bundle golist in /usr/libexec
  - Related: rhbz#2043107


author: Derek Parker <deparker@redhat.com> - 1.16.6-1
changelog:
  - Rebase to 1.16.6
  - Resolves: rhbz#1984124
  - Replace symbols no longer present in OpenSSL 3.0 ABI
  - Resolves: rhbz#1984110
  - Fix TestBoringServerCurves failing when ran by itself
  - Resolves: rhbz#1977914


author: Alejandro Sáez <asm@redhat.com> - 1.17.2-1
changelog:
  - Rebase to Go 1.17.2
  - Related: rhbz#2014087
  - Remove favicon.ico and robots.txt references
  - Exclude TestEd25519Vectors test
  - Update patch rhbz1952381
  - Remove rhbz1904567 patch
  - Remove rhbz1939923 patch


author: Alejandro Sáez <asm@redhat.com> - 1.17.5-1
changelog:
  - Rebase to Go 1.17.5
  - Add remove_waitgroup_misuse_tests patch
  - Add remove_ed25519vectors_test.patch
  - Remove FIPS checks to avoid issues in the CI
  - Related: rhbz#2031116
  - Resolves: rhbz#2022829
  - Resolves: rhbz#2024687
  - Resolves: rhbz#2030851
  - Resolves: rhbz#2031253


author: David Benoit <dbenoit@redhat.com> - 1.18.2-1
changelog:
  - Rebase to Go 1.18.2
  - Move to github.com/golang-fips/go
  - Resolves: rhbz#2075169
  - Resolves: rhbz#2060769
  - Resolves: rhbz#2067531
  - Resolves: rhbz#2067536
  - Resolves: rhbz#2067552
  - Resolves: rhbz#2025637


author: David Benoit <dbenoit@redhat.com> - 1.18.2-2
changelog:
  - Update deprecated openssl algorithms patch
  - Rebuild against openssl-3.0.1-33
  - Resolves: rhbz#2092136
  - Related: rhbz#2092016


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20200215-5
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Mike FABIAN <mfabian@redhat.com> - 20200402-1
changelog:
  - Update to upstream snapshot tarball (fixes U+1F9D1 U+200D U+1F3A8 "artist"
    and many other sequences)


author: Akira TAGOH <tagoh@redhat.com> - 20201206-1
changelog:
  - Updates to 20201206.
    Resolves: rhbz#1899847
  - Refactoring spec file.
  - Fix invalid metainfo files.
    Resolves: rhbz#1830709


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.20.7-20
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Add upstream commits for git master which contains patches 9, 10 and 11
  - Add GCC10 fix
  - Cleanups


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.8-1
changelog:
  - update to 7.5.8 tagged upstream community sources, see CHANGELOG
  - remove unused dependencies selfsigned, http-signature and gofpdf


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.11-2
changelog:
  - resolve CVE-2021-44716 golang: net/http: limit growth of header canonicalization cache
  - resolve CVE-2021-43813 grafana: directory traversal vulnerability for *.md files


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.11-3
changelog:
  - use HMAC-SHA-256 instead of SHA-1 to generate password reset tokens
  - update FIPS tests in check phase


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-1
changelog:
  - update to 7.5.15 tagged upstream community sources, see CHANGELOG
  - resolve CVE-2022-21673 grafana: Forward OAuth Identity Token can allow users to access some data sources
  - resolve CVE-2022-21702 grafana: XSS vulnerability in data source handling
  - resolve CVE-2022-21703 grafana: CSRF vulnerability can lead to privilege escalation
  - resolve CVE-2022-21713 grafana: IDOR vulnerability can lead to information disclosure
  - resolve CVE-2021-23648 sanitize-url: XSS
  - resolve CVE-2022-21698 prometheus/client_golang: Denial of service using InstrumentHandlerCounter
  - declare Node.js dependencies of subpackages
  - make vendor and webpack tarballs reproducible


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.0.0-1
changelog:
  - update to 3.0.0 tagged upstream community sources, see CHANGELOG
  - bundle golang dependencies and (optionally) node.js dependencies


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.1.0-1
changelog:
  - update to 3.1.0 tagged upstream community sources, see CHANGELOG
  - remove unused cryptographic implementations


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.44.0-19
changelog:
  - Conditionalized guile support
    Resolves: rhbz#1953974
  - Updated RHEL macros
    Resolves: rhbz#1957653


author: Jose Noguera <jnoguera@redhat.com> - 0.12.0-1
changelog:
  - Update to 0.12.0
  - Add ability to configure maximum number of boot attempts via env var and config file.
  - Add How does it work section to README.
  - Add CI via GitHub Actions and unit testing with BATS.
  - Add update platforms DNS resolutiona and connection checker as health checks out of the box


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.14.0-1
changelog:
  - Release 0.14.0 (Peter Robinson)
  - Updated testing documentation (Jose Noguera)
  - README updated with TOC and improved explanations (Jose Noguera)
  - Add watchdog-triggered boot check #2 (Jose Noguera)
  - Update specfile and README to reflect changes in subpackage layout. (Jose Noguera)
  - Ensure all required health checks are run #52 (Jose Noguera)


author: Wim Taymans <wtaymans@redhat.com> - 1.18.4-5
changelog:
  - Handle both compressed and uncompressed man pages
  - Fix build with small patch
  - Resolves: rhbz#2005247


author: Daniel P. Berrangé <berrange@redhat.com> - 1.2.0-1
changelog:
  - Update to 1.2.0 release
  - Drop outdated conditionals
  - Drop outdated ldconfig script
  - Use versioned obsoletes tags
  - Resolves: rhbz#1949474


author: Kalev Lember <klember@redhat.com> - 3.24.3-1
changelog:
  - Update to 3.24.3
  - Use https source URLs
  - Re-enable LTO now that we have upstream fix in place (#1898054)
  - Switch to meson build system
  - Tighten soname globs


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-6
changelog:
  - Clean up NetworkManager connection files
  - Add the copy-patches.sh script from virt-v2v
    resolves: rhbz#1980922


author: Richard W.M. Jones <rjones@redhat.com> - 1.48.2-5
changelog:
  - Rebase to guestfs-tools 1.48.2
    resolves: rhbz#2059286
  - Default to --selinux-relabel in various tools
    resolves: rhbz#2075718, rhbz#2089748
  - Add lvm system.devices cleanup operation to virt-sysprep
    resolves: rhbz#2072493
  - Refactor virt-customize --install, --update options in common submodule
  - Add support for Clevis & Tang
    resolves: rhbz#1809453
  - Fix CVE-2022-2211 Denial of Service in --key parameter
    resolves: rhbz#2102721
  - Fix virt-sysprep and LUKS-on-LVM guests
    resolves: rhbz#2106286


author: Tom Stellard <tstellar@redhat.com> - 5.3.3-3
changelog:
  - Fix warning building with clang
  - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type]


author: Ryan O'Hara <rohara@redhat.com> - 2.4.7-1
changelog:
  - Update to 2.4.7 (#1966688)
  - Fix domain parts in :scheme and :path fields (CVE-2021-39240, #1998196)
  - Fix spaces in the :method field (CVE-2021-39241, #1998198)
  - Fix mismatch between :authority and Host fields (CVE-2021-39242, #1998200)
  - Fix request smuggling attack or response splitting (CVE-2021-40346, #2000621)


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Filip Januš <fjanus@redhat.com> - 1.5-1
changelog:
  - Nwe upstream version 1.5
  - Add patch to solve inconsistency between configure.ac and filename
  - Add Build requirement autoconf


author: Davide Caratti <dcaratti@redhat.com> - 2.9-15
changelog:
  - Disable 'badfuncs' in rpminspect tests
  - Build with -fPIE, and enable verbose build log
  - enable CONFIG_SUITEB192


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-4
changelog:
  - 1912147 - Enable matching for '<model>_series' drivers in PPD search algorithm
  - rework optional gui messages


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-5
changelog:
  - 1925259 - %pre scriptlet enables and starts cups.service, which is unnecessary
  - 1919556 - hp-fab crashed: QFileDialog.getOpenFileName is not used correctly


author: Neal Gompa <ngompa@centosproject.org> - 2.4.51-4
changelog:
  - Use NAME from os-release(5) for vendor string
    Resolves: #2029071 - httpd on CentOS identifies as RHEL


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.51-5
changelog:
  - Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
    when parsing multipart content


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.51-7
changelog:
  - Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
    vulnerability in Apache HTTP Server 2.4.52 and earlier
  - Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
    in forward proxy configurations


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-1
changelog:
  - new version 2.4.53
  - Resolves: #2079939 - httpd rebase to 2.4.53
  - Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
    with core


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-3
changelog:
  - Resolves: #2065677 - httpd minimisation for ubi-micro
  - minimize httpd dependencies (new httpd-core package)
  - mod_systemd and mod_brotli are now packaged in the main httpd package


author: Parag Nemade <pnemade AT redhat DOT com> - 5.1-3
changelog:
  - Resolves:rhbz#1967646 - Correct the License: tag to LGPLv3+ based on LICENSE.txt file
  - Added gating tests


author: Parag Nemade <pnemade AT redhat DOT com> - 1.0.3-21
changelog:
  - Remove the duplicate source file committed to this package git repository
  - Update URL tag and files section to be more verbose


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.36.20190303git
changelog:
  - Synchronize RHEL 8 changes [rhbz#1957651]
  - Resolves: rhbz#1957651
    ([Hyper-V][RHEL-9] Update build to rhel format and syncup RHEL 8 content for hyperv-daemons.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.38.20190303git
changelog:
  - hpvd-Enable-build-on-aarch64.patch [bz#2020148]
  - Resolves: bz#2020148
    ([Hyper-V][RHEL9.0][ARM] No hyperv-daemons package built for aarch64 platform)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.39.20190303git
changelog:
  - hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [bz#2026371]
  - hpvd-Use-filename-for-connection-profile.patch [bz#2026371]
  - Resolves: bz#2026371
    ([RHEL9][Hyper-V]The /usr/libexec/hypervkvpd/hv_set_ifconfig need update for RHEL9 since the ifdown/ifup was not supported on RHEL9)


author: Peter Robinson <pbrobinson@fedoraproject.org> - 4.2-2
changelog:
  - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package)
  - Drop/obsolete eepromer subpackage, deprecated for 6 years
  - Drop python2 conditionals
  - Minor cleanups


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.24-5
changelog:
  - Fix covscan reviews. Related: rhbz#1963071

  - Implement ibus_im_context_set_surrounding_with_selection()


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.11-10
changelog:
  - Replace kasumi with kausmi-unicode
  - Delete to require intltool
  - Delete to call gettext.bind_textdomain_codeset()


author: Mike FABIAN <mfabian@redhat.com> - 1.4.2-1
changelog:
  - Update to  1.4.2
  - New translations: tr (Turkish) 100%, uk (Ukrainian) 100%,
    id (Indonesian) 100%, ja_JP (Japanese) 100%.
  - Translation updates: zh_CN, pt_BR


author: Mike FABIAN <mfabian@redhat.com> - 1.12.4-1
changelog:
  - Update to 1.12.4
  - Update translations from Weblate (updated es, cs, fa, pt_BR, zh_CN).
    zh_CN is 100% complete now.


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-1
changelog:
  - Update to 1.12.5
  - Return False in _execute_command_commit_candidate_number(self, number)
    if number out of range
  - Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/21
  - remove Use-from-unittest-import-mock-instead-of-just-import.patch
    (included upstream)
  - Update translations from Weblate (New translation for Sinhala (si) started)


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-3
changelog:
  - Resolves: rhbz#1974631 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE
    Resolves: https://github.com/definite/ibus-table-chinese/pull/14
  - Add SUGGESTION_MODE = TRUE to the wubi tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/15
  - Support pinyin mode also for stroke5 table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/12
  - Use nicer values for symbol and status prompt
    Resolves: https://github.com/definite/ibus-table-chinese/pull/8
  - update jyutping table; add cantonyale table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/11
  - Update jyutping and cantonese tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/9


author: Mike FABIAN <mfabian@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Use “from unittest import mock” instead of just “import mock”.
  - Update emoji annotations from CLDR
  - Translation update from Weblate for zh_CN (still 100% complete)


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-1
changelog:
  - Update to 2.10.5
  - Run the voikko tests only for libvoikko version >= 4.3
  - Adapt voikko test cases to the newest voikko version
    libvoikko-4.3-3, python3-libvoikko-4.3-3, voikko-fi-2.4-3
  - Log a warning when language is “fi” and “import libvoikko” failed
  - Return an empty list [] in spellcheck_suggest_voikko() when libvoikko was not imported
  - Update emoji annotations from CLDR, switching “no” and “nb”
    See: https://unicode-org.atlassian.net/browse/CLDR-2698
  - Remove icon in emoji-picker.appdata.xml (to avoid warnings
    from appstream-util and appstreamcli).


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-2
changelog:
  - Use the voikko build requires only for Fedora. They are only
    needed to run the voikko test cases during build.


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-3
changelog:
  - Remove gnome-desktop-testing and ibus-desktop-testing from the requires
    of the ibus-typing-booster-tests subpackage


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-1
changelog:
  - Update to 2.11.0
  - Use sensitivity feature of buttons in the setup tool tab where shortcuts are defined
  - Don’t let dialog action area of setup tool expand.
  - Improve the setup tool to make it possible to enter multi-line expansions of shortcuts
  - Resolves https://github.com/mike-fabian/ibus-typing-booster/issues/158
  - Elide extremely long candidates in the lookup table in the middle.
  - If a candidate contains newlines, replace the newlines with arrows in the lookup table.
  - If a commit string contains new-lines, commit it in several chunks
    and forward Return between the chunks.
  - Update emoji annotations from CLDR
  - Put the remote icon back in emoji-picker.appdata.xml, it was a
    false positive by appstreamcli
  - Translation update from Weblate (pt_PT updated, 100% complete now)
  - Skip the inscript2 test cases if these transliterations are not available.


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-3
changelog:
  - Resolves: rhbz#1974636 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.2-1
changelog:
  - Rebase to JSS 5.0.2
  - Bug 2029838 - SHA1withRSA being listed in signing certificates while approving certificate via Agent page in browser


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.3-1
changelog:
  - Rebase to JSS 5.0.3
  - Bug 2046023 - CVE-2021-4213 jss: memory leak in TLS connection leads to OOM [rhel-9.0]


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.3-1
changelog:
  - Bug #2033109 Invalid certificates with creation of subCA (pkispawn single step)[rhel-9.0.0]
  - Bug #2013141 kra-key-retrieve failed to accept xml input format to generate .p12 key through cli
  - Bug #2029838 SHA1withRSA being listed in signing certificates while approving certificate via Agent page in browser


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-0.4.beta3
changelog:
  - Rebase to PKI 11.2.0-beta3
  - Bug #2062808 Drop SHA-1 use from authentication challenges [rhel-9.1.0]


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-1
changelog:
  - Rebase to PKI 11.2.0
  - Bug #2084639 ipa cert-request ssl error
  - Bug #2099312 SKI field is not reflected back in generated CSR
  - Bug #2095197 PKI cert-fix operation failing


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Benjamin Gilbert <bgilbert@redhat.com> - 2.9.0-4
changelog:
  - Drop Git commit hash from Release
  - Correctly enable IMDS patch
  - Switch to %autosetup
  - Set ExclusiveArch from %go_arches
  - Drop mention of networkd in package description


author: Sohan Kunkerkar <skunkerk@redhat.com> - 2.12.0-1
changelog:
  - Suppress hardcoded library path warning
  - Fix go-mods-to-bundled-provides script to parse correct rpm version
  - Import specfile from Fedora


author: Sohan Kunkerkar <skunkerk@redhat.com> - 2.13.0-2
changelog:
  - Rename -validate-nonlinux subpackage to -validate-redistributable
  - Add static Linux binaries to -redistributable
  - Fix macro invocation in comment
  - Avoid kernel lockdown on VMware when running with secure boot


author: Benjamin Gilbert <bgilbert@redhat.com> - 2.14.0-1
changelog:
  - New release
  - Add ignition-apply symlink
  - Add ignition-rmcfg symlink and ignition-delete-config.service


author: Martin Kolman <mkolman@redhat.com> - 0.3.84-1
changelog:
  - Adjust to logging command changes in Anaconda (#1891621) (mkolman)
  - Make sure the output from custom_getpass() is serialized after stdout (lkundrak)


author: Martin Kolman <mkolman@redhat.com> - 0.3.86-1
changelog:
  - Drop python-nose from the dependencies (#1916799) (vponcova)
  - Add the makeupdates script (vponcova)
  - Remove deprecated support for add-ons (vponcova)
  - Don't run installation tasks of add-ons in a meta task (vponcova)
  - Migrate COPR builds from Jenkins to Packit (jkonecny)
  - Add documentation for the new test solution (jkonecny)
  - Add support for custom Anaconda COPR repository (jkonecny)
  - Use `make test` to run TMT tests locally (jkonecny)
  - Add TMT configuration to get Anaconda COPR build (jkonecny)
  - Add Packit support for initial-setup (jkonecny)
  - Update and use setup.py for archive creation (jkonecny)
  - Fix ChangeLog generation in Makefile (jkonecny)


author: Martin Kolman <mkolman@redhat.com> - 0.3.89-1
changelog:
  - Include scripts in the updates image (vponcova)
  - Drop build time dependency on the anaconda package (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.1-1
changelog:
  - Add gnome-kiosk to window managers usable by initial-setup (#1962198) (vponcova)
    Resolves: rhbz#1962198


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.2-1
changelog:
  - Disable multi TTY handler when running in SSH session (#1951577) (mkolman)
    Resolves: rhbz#1951577


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.8-3
changelog:
  - Resolves: rhbz#2050540 Unable to join RHEL 8.5 Replica to RHEL 7.9 Master for migration purposes
    - Don't always override the port in import_included_profiles
  - Resolves: rhbz#2051582 Enable ipa-ccache-sweep.timer during server installation
    - Test ipa-ccache-sweep.timer enabled by default during installation
    - Enable the ccache sweep timer during installation
  - Resolves: rhbz#2051844 ipa-join tests are failing due to changes in expected output
    - Remove ipa-join errors from behind the debug option


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.9.8-4
changelog:
  - Resolves: rhbz#2053586 IPA LDAP plugin ipa-cldap memory leak
    - fix memory leak in CLDAP responder


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.8-6
changelog:
  - Resolves: rhbz#2057467 Backport latest test fixes in python3-ipatests
    - ipatests: Tests for Autoprivate group.
    - mark xfail for test_idoverride_with_auto_private_group[hybrid]
    - Mark xfail test_gidnumber_not_corresponding_existing_group[true,hybrid]


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.8-7
changelog:
  - Resolves: rhbz#2067971 Consequences of FIPS crypto policy tightening in RHEL 9
    - KRB instance: make provision to work with crypto policy without SHA-1 HMAC types
    - tests: ensure AD-SUPPORT subpolicy is active
    - ipatests: extend AES keyset to SHA2-based ones
    - freeipa.spec: bump crypto-policies dependency for CentOS 9 Stream
    - Kerberos instance: default to AES256-SHA2 for master key encryption
    - test_otp: do not use paramiko unless it is really needed
    - test_krbtpolicy: skip SPAKE-related tests in FIPS mode
    - Support AES for KRA archival wrapping
    - Set AES as default for KRA archival wrapping


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.8-8
changelog:
  - Resolves: rhbz#2067971 Consequences of FIPS crypto policy tightening in RHEL 9
    - tests: ensure AD-SUPPORT subpolicy is active in more cases
    - ipatests: fix check for AD topology being present


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.10-1
changelog:
  - Resolves: rhbz#2079469 [Rebase] Rebase ipa to latest 4.9.x release
  - Resolves: rhbz#2012911 named journalctl logs shows 'zone testrealm.test/IN: serial (serialnumber) write back to LDAP failed.'
  - Resolves: rhbz#2069202 [RFE] add support for authenticating against external IdP services using OAUTH2 preauthenticaiton mechanism provided by SSSD
  - Resolves: rhbz#2083218 ipa-dnskeysyncd floods /var/log/messages with DEBUG messages
  - Resolves: rhbz#2089750 RFE: Improve error message with more detail for ipa-replica-install command
  - Resolves: rhbz#2091988 [RFE] Add code to check password expiration on ldap bind
  - Resolves: rhbz#2094400 [RFE] ipa-client-install should provide option to enable subid: sss in /etc/nsswitch.conf
  - Resolves: rhbz#2096922 secret in ipa-pki-proxy.conf is not changed if new requiredSecret value is present in /etc/pki/pki-tomcat/server.xml


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.10.0-1
changelog:
  - Resolves: rhbz#747959 [RFE] Support random serial numbers in IPA certificates
  - Resolves: rhbz#2100227 [UX] Preserving a user account produces output saying it was deleted


author: Rob Crittenden <rcritten@redhat.com> - 0.8-7.1
changelog:
  - Switch from tox to pytest as the test runner. tox is being deprecated
    in some distros. (#1942157)


author: Phil Sutter <psutter@redhat.com> - 1.8.7-25
changelog:
  - ebtables: Dump atomic waste
  - doc: ebtables-nft.8: Adjust for missing atomic-options
  - nft: Use xtables_malloc() in mnl_err_list_node_add()


author: Phil Sutter <psutter@redhat.com> - 1.8.7-29
changelog:
  - libxtables: Boost rule target checks by announcing chain names
  - libxtables: Implement notargets hash table
  - nft: Reject standard targets as chain names when restoring
  - xshared: Merge and share parse_chain()
  - xshared: Prefer xtables_chain_protos lookup over getprotoent
  - nft: Speed up immediate parsing
  - nft: Simplify immediate parsing


author: Cole Robinson <aintdiscole@gmail.com> - 20200823-1.git4bd064de.git
changelog:
  - Update to newer git snapshot, synced with qemu.git
  - Re-enable HTTPS support, with edk2 fix included (bz 1820836)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-4.git4bd064de
changelog:
  - ipxe-Skip-some-QEMU-ROMs-when-building-for-RHEL.patch [bz#1956931]
  - ipxe-spec-combine-BIOS-and-EFI-roms-using-util-catrom.pl.patch [bz#1957246]
  - Resolves: bz#1956931
    (ipxe-roms-qemu list: Clean out old ROMs)
  - Resolves: bz#1957246
    (boot vm from pxe failed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-5.git4bd064de
changelog:
  - ipxe-Disable-SHA-1.patch [bz#1935932]
  - ipxe-Replace-genisoimage-with-xorriso.patch [bz#1971981]
  - ipxe-spec-Drop-disabled-efi-ia32-build-infrastructure.patch [bz#1980138]
  - ipxe-spec-Generate-qemu-compatible-rom-filenames.patch [bz#1980138]
  - Resolves: bz#1935932
    (ipxe implements and/or uses the deprecated SHA-1 algorithm by default ()
  - Resolves: bz#1971981
    (Please replace genisoimage with xorriso)
  - Resolves: bz#1980138
    (install qemu rom symlinks so qemu doesn't have to)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-6.git4bd064de
changelog:
  - ipxe-Add-ping-command-support.patch [bz#1985658]
  - ipxe-Add-VLAN-tagging-support.patch [bz#1985658]
  - ipxe-netdevice-Strip-802.Q-VLAN-0-priority-tags.patch [bz#1985658]
  - ipxe-Provide-snponly.efi-rom.patch [bz#1985658]
  - ipxe-Build-hwcert-subpackage.patch [bz#1985658]
  - Resolves: bz#1985658
    (carry forward rhel8 ipxe packaging changes)


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 2.11.4-6
changelog:
  - Drop jackson-module-afterburner, jackson-module-guice, jackson-module-mrbean,
    jackson-module-osgi, jackson-module-paranamer, and jackson-module-javadoc


author: Fabio Valentini <decathorpe@gmail.com> - 1.2.2-1
changelog:
  - Update to version 1.2.2.
  - Drop custom maven-compiler-plugin overrides in favor of upstream settings.


author: Marian Koncek <mkoncek@redhat.com> - 2.3.3-4
changelog:
  - Avoid possible NullPointerException
  - Resolves: rhbz#1993889
  - Load native library from the correct location
  - Resolves: rhbz#1994935


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-4
changelog:
  - Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent
  - Resolves: rhbz#2052821


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.322.b06-6
changelog:
  - Storing and restoring alternatives during update manually
  - Family extracted to globals
  - Fixing Bug 2001567 - update of JDK/JRE is removing its manually selected alterantives and select (as auto) system JDK/JRE
  -- The move of alternatives creation to posttrans to fix:
  -- Bug 1200302 - dnf reinstall breaks alternatives
  -- Had caused the alternatives to be removed, and then created again,
  -- instead of being added, and then removing the old, and thus persisting
  -- the selection in family
  -- Thus this fix, is storing the family of manually selected master, and if
  -- stored, then it is restoring the family of the master
  - Resolves: rhbz#2008202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-7
changelog:
  - Detect NSS at runtime for FIPS detection
  - Turn off build-time NSS linking and go back to an explicit Requires on NSS
  - Resolves: rhbz#2052833


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-9
changelog:
  - Remove 'java --version' test as this is not supported on java-1.8.0-openjdk
  - Resolves: rhbz#2058487


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.ea
changelog:
  - Update to shenandoah-jdk8u332-b01 (EA)
  - Update release notes for shenandoah-8u332-b01.
  - Switch to EA mode.
  - Related: rhbz#2050457


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.ea
changelog:
  - Update to shenandoah-jdk8u332-b06 (EA)
  - Update release notes for shenandoah-8u332-b06.
  - Resolves: rhbz#2050457


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1
changelog:
  - Update to shenandoah-jdk8u332-b09 (GA)
  - Update release notes for 8u332-b09.
  - Switch to GA mode for final release.
  - Resolves: rhbz#2074650


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:1.8.0.332.b09-2
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2102435


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-6
changelog:
  - Detect NSS at runtime for FIPS detection
  - Turn off build-time NSS linking and go back to an explicit Requires on NSS
  - Resolves: rhbz#2052831


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.15.0+1
  - Update release notes to 11.0.15.0+1
  - Switch to EA mode for 11.0.15 pre-release builds.
  - Related: rhbz#2050458


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.ea
changelog:
  - Update to jdk-11.0.15.0+8
  - Update release notes to 11.0.15.0+8
  - Rebase RH1996182 FIPS patch after JDK-8254410
  - Resolves: rhbz#2050458


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.10-1
changelog:
  - Update to jdk-11.0.15.0+10
  - Update release notes to 11.0.15.0+10
  - Switch to GA mode for release
  - Resolves: rhbz#2073595


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:11.0.15.0.10-3
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2102434


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.10-4
changelog:
  - Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Resolves: rhbz#2099839
  - Resolves: rhbz#2100676


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.7-0.1.ea
changelog:
  - Add additional patch during tarball generation to align tests with ECC changes
  - Related: rhbz#2083325


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.7-0.1.ea
changelog:
  - Update to jdk-11.0.16+7
  - Update release notes to 11.0.16+7
  - Switch to EA mode for 11.0.16 pre-release builds.
  - Use same tarball naming style as java-17-openjdk and java-latest-openjdk
  - Drop JDK-8257794 patch now upstreamed
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Make use of the vendor version string to store our version & release rather than an upstream release date
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Resolves: rhbz#2083325


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.3.0.1-0.1.ea
changelog:
  - Update to jdk-17.0.3.0+1
  - Update release notes to 17.0.3.0+1
  - Switch to EA mode for 17.0.3 pre-release builds.
  - Add JDK-8283911 to fix bad DEFAULT_PROMOTED_VERSION_PRE value
  - Related: rhbz#2050460


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.3.0.7-1
changelog:
  - April 2022 security update to jdk 17.0.3+6
  - Update to jdk-17.0.3.0+6 pre-release tarball (17usec.17.0.3+5-220408)
  - Add JDK-8284548 regression fix missing from pre-release tarball but in jdk-17.0.3+6/jdk-17.0.3-ga
  - Update release notes to 17.0.3.0+6
  - Add missing README.md and generate_source_tarball.sh
  - Switch to GA mode for release
  - JDK-8283911 patch no longer needed now we're GA...
  - Resolves: rhbz#2073579


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.3.0.7-2
changelog:
  - Rebase FIPS patches from fips-17u branch and simplify by using a single patch from that repository
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - RH2023467: Enable FIPS keys export
  - RH2094027: SunEC runtime permission for FIPS
  - Resolves: rhbz#2029657
  - Resolves: rhbz#2096117


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.3.0.7-3
changelog:
  - Update FIPS support to bring in latest changes
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Resolves: rhbz#2099844
  - Resolves: rhbz#2100677


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:17.0.3.0.7-4
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2102433


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.3.0.7-5
changelog:
  - Turn on system security properties as part of the build's install section
  - Move cacerts replacement to install section and retain original of this and tzdb.dat
  - Run tests on the installed image, rather than the build image
  - Introduce variables to refer to the static library installation directories
  - Use relative symlinks so they work within the image
  - Run debug symbols check during build stage, before the install strips them
  - Related: rhbz#2100677


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.3.0.7-5
changelog:
  - Sequence spec file sections as they are run by rpmbuild (build, install then test)
  - Related: rhbz#2100677


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.1-0.1.ea
changelog:
  - Update to jdk-17.0.4.0+1
  - Update release notes to 17.0.4.0+1
  - Switch to EA mode for 17.0.4 pre-release builds.
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Move EA designator check to prep so failures can be caught earlier
  - Make EA designator check non-fatal while upstream is not maintaining it
  - Related: rhbz#2084218


author: Orion Poplawski <orion@nwra.com> - 0.19-3
changelog:
  - Use autoreconf -f to remove rpath
  - Use --disable-static to disable static builds
  - Use current make macros


author: Jiri Vanek <jvanek@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - criu-devel moved to BR
  - now requires criu-libs
  - enabled debuginfo generation
  - excluded i686 build as criu is 64b only
  - .so file moved out of jar. Required teo patches:
  - added and applied patch0 output_loc.patch
  - added and applied patch1 load_library.patch
  - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.3.20210802a3007aa
changelog:
  - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9.
  - This also ensures use of the standard build flags and installs the jar in the expected location.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.4.20210807b2d3751
changelog:
  - Update to latest upstream version with renamed package and consistent use of "jigawatts"
  - Drop library patch which is no longer needed.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.0~SNAPSHOT^20210827.a5f8e31-1
changelog:
  - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.21.0.0.0-4
changelog:
  - Bump release number to make RHEL 9.1 build later than RHEL 9 Beta & RHEL 9 GA builds
  - Resolves: rhbz#2071920


author: Zamir SUN <zsun@fedoraproject.org> - 0-0.17.20191127gitbd56a60
changelog:
  - Workaround "multiple definition of `yyin'"
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=1799559


author: Cestmir Kalina <ckalina@redhat.com> - 0.24
changelog:
  - Fix annocheck failures
  - Fix osci tier0 test reference
  - Fix ET_DYN vmlinux namespace support
  - Resolves: rhbz#2038913
  - Resolves: rhbz#2045976
  - Resolves: rhbz#2038892


author: Akira TAGOH <tagoh@redhat.com> - 2.5-35
changelog:
  - Drop gtk2 dependency completely.
  - Make anthy build conditionally for Fedora release only.
    Resolves: rhbz#1939777
  - Fix build fail without anthy-devel.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.4.0-4
changelog:
  - Fix layout->keymap conversion broken by change in xkeyboard-config
    (patch by Peter Hutterer)
    Resolves: #1950406


author: Kairui Song <kasong@redhat.com> - 006-4.20210721gitd046d22
changelog:
  - Update to latest git snapshot (20210721). Resolves: bz1937035, bz1959203
  - Apply RHEL only patch to enable kdump by default


author: Kairui Song <kasong@redhat.com> - 006-5.20210805gitce26db0
changelog:
  - Update to latest git snapshot, automated installation won't be blocked. Resolves: bz1986969
  - Update RHEL only patch, fix inst.kdump_addon=0 not working issue. Resolves: bz1986942


author: Kairui Song <kasong@redhat.com> - 006-7.20210812git5b74c1d
changelog:
  - Update to latest git snapshot, fix kdump spoke is incomplete after luks device is deleted. Resolves: bz1937035


author: Kairui Song <kasong@redhat.com> - 006-8.20210818git400359b
changelog:
  - Update to latest git snapshot, fix installation failure when reuse old partition. Resolves: bz1937035


author: Kairui Song <kasong@redhat.com> - 006-9.20210819git2026d20
changelog:
  - Update to latest git snapshot, fix encryption warning still present after disabling encryption. Resolves: bz1937035


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-125.el9]
changelog:
  - cifs: fix bad fids sent over wire (Ronnie Sahlberg) [2088775]
  - SMB3: EBADF/EIO errors in rename/open caused by race condition in smb2_compound_op (Ronnie Sahlberg) [2088775]
  - i40e: Fix call trace in setup_tx_descriptors (Ivan Vecera) [2037980]
  - i40e: Fix calculating the number of queue pairs (Ivan Vecera) [2037980]
  - i40e: Fix adding ADQ filter to TC0 (Ivan Vecera) [2037980]
  - i40e: i40e_main: fix a missing check on list iterator (Ivan Vecera) [2037980]
  - i40e, xsk: Get rid of redundant 'fallthrough' (Ivan Vecera) [2037980]
  - i40e, xsk: Diversify return values from xsk_wakeup call paths (Ivan Vecera) [2037980]
  - i40e, xsk: Terminate Rx side of NAPI when XSK Rx queue gets full (Ivan Vecera) [2037980]
  - i40e: Add Ethernet Connection X722 for 10GbE SFP+ support (Ivan Vecera) [2037980]
  - i40e: Add vsi.tx_restart to i40e ethtool stats (Ivan Vecera) [2037980]
  - i40e: Add tx_stopped stat (Ivan Vecera) [2037980]
  - i40e: Add support for MPLS + TSO (Ivan Vecera) [2037980]
  - i40e: little endian only valid checksums (Ivan Vecera) [2037980]
  - i40e: stop disabling VFs due to PF error responses (Ivan Vecera) [2037980]
  - Revert "i40e: Fix reset bw limit when DCB enabled with 1 TC" (Ivan Vecera) [2037980]
  - i40e: remove dead stores on XSK hotpath (Ivan Vecera) [2037980]
  - i40e: Add a stat for tracking busy rx pages (Ivan Vecera) [2037980]
  - i40e: Add a stat for tracking pages waived (Ivan Vecera) [2037980]
  - i40e: Add a stat tracking new RX page allocations (Ivan Vecera) [2037980]
  - i40e: Aggregate and export RX page reuse stat (Ivan Vecera) [2037980]
  - i40e: Remove rx page reuse double count (Ivan Vecera) [2037980]
  - i40e: Fix race condition while adding/deleting MAC/VLAN filters (Ivan Vecera) [2037980]
  - i40e: Add new version of i40e_aq_add_macvlan function (Ivan Vecera) [2037980]
  - i40e: Add new versions of send ASQ command functions (Ivan Vecera) [2037980]
  - i40e: Add sending commands in atomic context (Ivan Vecera) [2037980]
  - i40e: Remove unused RX realloc stat (Ivan Vecera) [2037980]
  - i40e: Disable hw-tc-offload feature on driver load (Ivan Vecera) [2037980]
  - i40e: Fix reset path while removing the driver (Ivan Vecera) [2037980]
  - i40e: Fix reset bw limit when DCB enabled with 1 TC (Ivan Vecera) [2037980]
  - i40e: respect metadata on XSK Rx to skb (Ivan Vecera) [2037980]
  - i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Ivan Vecera) [2037980]
  - i40e: Remove useless DMA-32 fallback configuration (Ivan Vecera) [2037980]
  - i40e: fix unsigned stat widths (Ivan Vecera) [2037980]
  - i40e: Fix for failed to init adminq while VF reset (Ivan Vecera) [2037980]
  - i40e: Fix queues reservation for XDP (Ivan Vecera) [2037980]
  - i40e: Fix issue when maximum queues is exceeded (Ivan Vecera) [2037980]
  - i40e: Increase delay to 1 s after global EMP reset (Ivan Vecera) [2037980]
  - i40e: remove variables set but not used (Ivan Vecera) [2037980]
  - i40e: Remove non-inclusive language (Ivan Vecera) [2037980]
  - i40e: Update FW API version (Ivan Vecera) [2037980]
  - i40e: Minimize amount of busy-waiting during AQ send (Ivan Vecera) [2037980]
  - i40e: Add ensurance of MacVlan resources for every trusted VF (Ivan Vecera) [2037980]
  - i40e: Fix incorrect netdev's real number of RX/TX queues (Ivan Vecera) [2037980]
  - i40e: Fix for displaying message regarding NVM version (Ivan Vecera) [2037980]
  - i40e: fix use-after-free in i40e_sync_filters_subtask() (Ivan Vecera) [2037980]
  - i40e: Fix to not show opcode msg on unsuccessful VF MAC change (Ivan Vecera) [2037980]
  - i40e: switch to napi_build_skb() (Ivan Vecera) [2037980]
  - i40e: Use irq_update_affinity_hint() (Ivan Vecera) [2037980]
  - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc (Ivan Vecera) [2037980]
  - i40e: Fix pre-set max number of queues for VF (Ivan Vecera) [2037980]
  - i40e: Fix failed opcode appearing if handling messages from VF (Ivan Vecera) [2037980]
  - i40e: Fix display error code in dmesg (Ivan Vecera) [2037980]
  - i40e: Fix creation of first queue by omitting it if is not power of two (Ivan Vecera) [2037980]
  - i40e: Fix warning message and call stack during rmmod i40e driver (Ivan Vecera) [2037980]
  - i40e: Fix ping is lost after configuring ADq on VF (Ivan Vecera) [2037980]
  - i40e: Fix changing previously set num_queue_pairs for PFs (Ivan Vecera) [2037980]
  - i40e: Fix NULL ptr dereference on VSI filter sync (Ivan Vecera) [2037980]
  - i40e: Fix correct max_pkt_size on VF RX queue (Ivan Vecera) [2037980]
  - i40e: Simplify bool conversion (Ivan Vecera) [2037980]
  - i40e: Fix freeing of uninitialized misc IRQ vector (Ivan Vecera) [2037980]
  - i40e: Use the xsk batched rx allocation interface (Ivan Vecera) [2037980]
  - i40e: Fix spelling mistake "dissable" -> "disable" (Ivan Vecera) [2037980]
  - i40e: add support for PTP external synchronization clock (Ivan Vecera) [2037980]
  - i40e: improve locking of mac_filter_hash (Ivan Vecera) [2037980]
  - time: Handle negative seconds correctly in timespec64_to_ns() (Íñigo Huguet) [2097394]
  - iavf: Fix issue with MAC address of VF shown as zero (Petr Oros) [2037976]
  - Revert "iavf: Fix deadlock occurrence during resetting VF interface" (Petr Oros) [2037976]
  - iavf: Fix hang during reboot/shutdown (Petr Oros) [2037976]
  - iavf: Fix double free in iavf_reset_task (Petr Oros) [2037976]
  - iavf: Fix adopting new combined setting (Petr Oros) [2037976]
  - iavf: Fix handling of vlan strip virtual channel messages (Petr Oros) [2037976]
  - iavf: Fix __IAVF_RESETTING state usage (Petr Oros) [2037976]
  - iavf: Fix missing check for running netdev (Petr Oros) [2037976]
  - iavf: Fix deadlock in iavf_reset_task (Petr Oros) [2037976]
  - iavf: Fix race in init state (Petr Oros) [2037976]
  - iavf: Fix locking for VIRTCHNL_OP_GET_OFFLOAD_VLAN_V2_CAPS (Petr Oros) [2037976]
  - iavf: Fix init state closure on remove (Petr Oros) [2037976]
  - iavf: Add waiting so the port is initialized in remove (Petr Oros) [2037976]
  - iavf: Rework mutexes for better synchronisation (Petr Oros) [2037976]
  - iavf: Remove non-inclusive language (Petr Oros) [2037976]
  - iavf: Fix incorrect use of assigning iavf_status to int (Petr Oros) [2037976]
  - iavf: stop leaking iavf_status as "errno" values (Petr Oros) [2037976]
  - iavf: remove redundant ret variable (Petr Oros) [2037976]
  - iavf: Add usage of new virtchnl format to set default MAC (Petr Oros) [2037976]
  - iavf: refactor processing of VLAN V2 capability message (Petr Oros) [2037976]
  - iavf: Add support for 50G/100G in AIM algorithm (Petr Oros) [2037976]
  - iavf: Remove useless DMA-32 fallback configuration (Petr Oros) [2037976]
  - iavf: Use irq_update_affinity_hint() (Petr Oros) [2037976]
  - iavf: remove an unneeded variable (Petr Oros) [2037976]
  - iavf: Fix limit of total number of queues to active queues of VF (Petr Oros) [2037976]
  - iavf: switch to napi_build_skb() (Petr Oros) [2037976]
  - iavf: Restrict maximum VLAN filters for VIRTCHNL_VF_OFFLOAD_VLAN_V2 (Petr Oros) [2037976]
  - iavf: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 offload enable/disable (Petr Oros) [2037976]
  - iavf: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 hotpath (Petr Oros) [2037976]
  - iavf: Add support VIRTCHNL_VF_OFFLOAD_VLAN_V2 during netdev config (Petr Oros) [2037976]
  - iavf: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 negotiation (Petr Oros) [2037976]
  - iavf: do not override the adapter state in the watchdog task (again) (Petr Oros) [2037976]
  - iavf: missing unlocks in iavf_watchdog_task() (Petr Oros) [2037976]
  - iavf: Fix reporting when setting descriptor count (Petr Oros) [2037976]
  - iavf: restore MSI state on reset (Petr Oros) [2037976]
  - iavf: Fix displaying queue statistics shown by ethtool (Petr Oros) [2037976]
  - iavf: Refactor string format to avoid static analysis warnings (Petr Oros) [2037976]
  - iavf: Refactor text of informational message (Petr Oros) [2037976]
  - iavf: Fix static code analysis warning (Petr Oros) [2037976]
  - iavf: Refactor iavf_mac_filter struct memory usage (Petr Oros) [2037976]
  - iavf: Enable setting RSS hash key (Petr Oros) [2037976]
  - iavf: Add trace while removing device (Petr Oros) [2037976]
  - iavf: return errno code instead of status code (Petr Oros) [2037976]
  - iavf: Log info when VF is entering and leaving Allmulti mode (Petr Oros) [2037976]
  - iavf: Add change MTU message (Petr Oros) [2037976]
  - iavf: Fix VLAN feature flags after VFR (Petr Oros) [2037976]
  - iavf: Fix refreshing iavf adapter stats on ethtool request (Petr Oros) [2037976]
  - iavf: Fix deadlock occurrence during resetting VF interface (Petr Oros) [2037976]
  - iavf: Prevent changing static ITR values if adaptive moderation is on (Petr Oros) [2037976]
  - iavf: Restore VLAN filters after link down (Petr Oros) [2037976]
  - iavf: Fix for setting queues to 0 (Petr Oros) [2037976]
  - iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset (Petr Oros) [2037976]
  - iavf: validate pointers (Petr Oros) [2037976]
  - iavf: prevent accidental free of filter structure (Petr Oros) [2037976]
  - iavf: Fix failure to exit out from last all-multicast mode (Petr Oros) [2037976]
  - iavf: don't clear a lock we don't hold (Petr Oros) [2037976]
  - iavf: free q_vectors before queues in iavf_disable_vf (Petr Oros) [2037976]
  - iavf: check for null in iavf_fix_features (Petr Oros) [2037976]
  - iavf: Fix return of set the new channel count (Petr Oros) [2037976]
  - iavf: Fix kernel BUG in free_msi_irqs (Petr Oros) [2037976]
  - iavf: Add helper function to go from pci_dev to adapter (Petr Oros) [2037976]
  - iavf: Combine init and watchdog state machines (Petr Oros) [2037976]
  - iavf: Add __IAVF_INIT_FAILED state (Petr Oros) [2037976]
  - iavf: Refactor iavf state machine tracking (Petr Oros) [2037976]
  - iavf: fix double unlock of crit_lock (Petr Oros) [2037976]
  - iavf: use mutexes for locking of critical sections (Petr Oros) [2037976]
  - iavf: fix locking of critical sections (Petr Oros) [2037976]
  - iavf: do not override the adapter state in the watchdog task (Petr Oros) [2037976]
  - bnxt_en: parse and report result field when NVRAM package install fails (Ken Cox) [2042819 2043783]
  - bnxt_en: Enable packet timestamping for all RX packets (Ken Cox) [2042819 2043783]
  - bnxt_en: Configure ptp filters during bnxt open (Ken Cox) [2042819 2043783]
  - bnxt_en: Update firmware interface to 1.10.2.95 (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix unnecessary dropping of RX packets (Ken Cox) [2042819 2043783]
  - bnxt_en: Initiallize bp->ptp_lock first before using it (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag (Ken Cox) [2042819 2043783]
  - bnxt: add page_pool support for aggregation ring when using xdp (Ken Cox) [2042819 2043783]
  - bnxt: change receive ring space parameters (Ken Cox) [2042819 2043783]
  - bnxt: rename bnxt_rx_pages to bnxt_rx_agg_pages_skb (Ken Cox) [2042819 2043783]
  - bnxt: refactor bnxt_rx_pages operate on skb_shared_info (Ken Cox) [2042819 2043783]
  - bnxt: add flag to denote that an xdp program is currently attached (Ken Cox) [2042819 2043783]
  - bnxt: refactor bnxt_rx_xdp to separate xdp_init_buff/xdp_prepare_buff (Ken Cox) [2042819 2043783]
  - bnxt_en: Prevent XDP redirect from running when stopping TX queue (Ken Cox) [2042819 2043783]
  - bnxt_en: reserve space inside receive page for skb_shared_info (Ken Cox) [2042819 2043783]
  - bnxt_en: Synchronize tx when xdp redirects happen on same ring (Ken Cox) [2042819 2043783]
  - net: bnxt_ptp: fix compilation error (Ken Cox) [2042819 2043783]
  - bnxt: revert hastily merged uAPI aberrations (Ken Cox) [2042819 2043783]
  - bnxt_en: add an nvm test for hw diagnose (Ken Cox) [2042819 2043783]
  - bnxt_en: implement hw health reporter (Ken Cox) [2042819 2043783]
  - bnxt_en: Do not destroy health reporters during reset (Ken Cox) [2042819 2043783]
  - bnxt_en: Eliminate unintended link toggle during FW reset (Ken Cox) [2042819 2043783]
  - bnxt_en: Properly report no pause support on some cards (Ken Cox) [2042819 2043783]
  - bnxt_en: introduce initial link state of unknown (Ken Cox) [2042819 2043783]
  - bnxt_en: parse result field when NVRAM package install fails (Ken Cox) [2042819 2043783]
  - bnxt_en: add more error checks to HWRM_NVM_INSTALL_UPDATE (Ken Cox) [2042819 2043783]
  - bnxt_en: refactor error handling of HWRM_NVM_INSTALL_UPDATE (Ken Cox) [2042819 2043783]
  - bnxt_en: Handle async event when the PHC is updated in RTC mode (Ken Cox) [2042819 2043783]
  - bnxt_en: Implement .adjtime() for PTP RTC mode (Ken Cox) [2042819 2043783]
  - bnxt_en: Add driver support to use Real Time Counter for PTP (Ken Cox) [2042819 2043783]
  - bnxt_en: PTP: Refactor PTP initialization functions (Ken Cox) [2042819 2043783]
  - bnxt_en: Update firmware interface to 1.10.2.73 (Ken Cox) [2042819 2043783]
  - bnxt_en: fix kernel doc warnings in bnxt_hwrm.c (Ken Cox) [2042819 2043783]
  - bnxt_en: Increase firmware message response DMA wait time (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix devlink fw_activate (Ken Cox) [2042819 2043783]
  - bnxt_en: Restore the resets_reliable flag in bnxt_open() (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix incorrect multicast rx mask setting when not requested (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix occasional ethtool -t loopback test failures (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix offline ethtool selftest with RDMA enabled (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix active FEC reporting to ethtool (Ken Cox) [2042819 2043783]
  - bnxt_en: improve firmware timeout messaging (Ken Cox) [2042819 2043783]
  - bnxt_en: use firmware provided max timeout for messages (Ken Cox) [2042819 2043783]
  - bnxt_en: improve VF error messages when PF is unavailable (Ken Cox) [2042819 2043783]
  - bnxt_en: add dynamic debug support for HWRM messages (Ken Cox) [2042819 2043783]
  - bnxt_en: Use page frag RX buffers for better software GRO performance (Ken Cox) [2042819 2043783]
  - bnxt_en: convert to xdp_do_flush (Ken Cox) [2042819 2043783]
  - bnxt_en: Support CQE coalescing mode in ethtool (Ken Cox) [2042819 2043783]
  - bnxt_en: Support configurable CQE coalescing mode (Ken Cox) [2042819 2043783]
  - bnxt_en: enable interrupt sampling on 5750X for DIM (Ken Cox) [2042819 2043783]
  - bnxt_en: Log error report for dropped doorbell (Ken Cox) [2042819 2043783]
  - bnxt_en: Add event handler for PAUSE Storm event (Ken Cox) [2042819 2043783]
  - flow_offload: reject to offload tc actions in offload drivers (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix compile error regression when CONFIG_BNXT_SRIOV is not set (Ken Cox) [2042819 2043783]
  - bnxt_en: reject indirect blk offload when hw-tc-offload is off (Ken Cox) [2042819 2043783]
  - bnxt_en: fix format specifier in live patch error message (Ken Cox) [2042819 2043783]
  - bnxt_en: extend RTNL to VF check in devlink driver_reinit (Ken Cox) [2042819 2043783]
  - bnxt_en: avoid newline at end of message in NL_SET_ERR_MSG_MOD (Ken Cox) [2042819 2043783]
  - bnxt_en: Remove not used other ULP define (Ken Cox) [2042819 2043783]
  - bnxt_en: Provide stored devlink "fw" version on older firmware (Ken Cox) [2042819 2043783]
  - bnxt_en: implement firmware live patching (Ken Cox) [2042819 2043783]
  - bnxt_en: Update firmware interface to 1.10.2.63 (Ken Cox) [2042819 2043783]
  - bnxt_en: implement dump callback for fw health reporter (Ken Cox) [2042819 2043783]
  - bnxt_en: Retrieve coredump and crashdump size via FW command (Ken Cox) [2042819 2043783]
  - bnxt_en: move coredump functions into dedicated file (Ken Cox) [2042819 2043783]
  - bnxt_en: Refactor coredump functions (Ken Cox) [2042819 2043783]
  - bnxt_en: improve fw diagnose devlink health messages (Ken Cox) [2042819 2043783]
  - bnxt_en: consolidate fw devlink health reporters (Ken Cox) [2042819 2043783]
  - bnxt_en: remove fw_reset devlink health reporter (Ken Cox) [2042819 2043783]
  - bnxt_en: improve error recovery information messages (Ken Cox) [2042819 2043783]
  - bnxt_en: add enable_remote_dev_reset devlink parameter (Ken Cox) [2042819 2043783]
  - bnxt_en: implement devlink dev reload fw_activate (Ken Cox) [2042819 2043783]
  - bnxt_en: implement devlink dev reload driver_reinit (Ken Cox) [2042819 2043783]
  - bnxt_en: refactor cancellation of resource reservations (Ken Cox) [2042819 2043783]
  - bnxt_en: refactor printing of device info (Ken Cox) [2042819 2043783]
  - ethernet: constify references to netdev->dev_addr in drivers (Ken Cox) [2042819 2043783]
  - bnxt: use netif_is_rxfh_configured instead of open code (Ken Cox) [2042819 2043783]
  - ethernet: use eth_hw_addr_set() for dev->addr_len cases (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix TX timeout when TX ring size is set to the smallest (Ken Cox) [2042819 2043783]
  - net/{mlx5|nfp|bnxt}: Remove unnecessary RTNL lock assert (Ken Cox) [2042819 2043783]
  - bnxt_en: Clean up completion ring page arrays completely (Ken Cox) [2042819 2043783]
  - bnxt_en: make bnxt_free_skbs() safe to call after bnxt_free_mem() (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix error recovery regression (Ken Cox) [2042819 2043783]
  - bnxt: Search VPD with pci_vpd_find_ro_info_keyword() (Ken Cox) [2042819 2043783]
  - bnxt: Read VPD with pci_vpd_alloc() (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix possible unintended driver initiated error recovery (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix UDP tunnel logic (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix asic.rev in devlink dev info command (Ken Cox) [2042819 2043783]
  - bnxt_en: fix read of stored FW_PSID version on P5 devices (Ken Cox) [2042819 2043783]
  - bnxt_en: fix stored FW_PSID version masks (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix 64-bit doorbell operation on 32-bit kernels (Ken Cox) [2042819 2043783]
  - bnxt_en: support multiple HWRM commands in flight (Ken Cox) [2042819 2043783]
  - bnxt_en: discard out of sequence HWRM responses (Ken Cox) [2042819 2043783]
  - bnxt_en: remove legacy HWRM interface (Ken Cox) [2042819 2043783]
  - bnxt_en: update all firmware calls to use the new APIs (Ken Cox) [2042819 2043783]
  - bnxt_en: use link_lock instead of hwrm_cmd_lock to protect link_info (Ken Cox) [2042819 2043783]
  - bnxt_en: add support for HWRM request slices (Ken Cox) [2042819 2043783]
  - bnxt_en: add HWRM request assignment API (Ken Cox) [2042819 2043783]
  - bnxt_en: introduce new firmware message API based on DMA pools (Ken Cox) [2042819 2043783]
  - bnxt_en: move HWRM API implementation into separate file (Ken Cox) [2042819 2043783]
  - bnxt_en: Refactor the HWRM_VER_GET firmware calls (Ken Cox) [2042819 2043783]
  - bnxt_en: remove DMA mapping for KONG response (Ken Cox) [2042819 2043783]
  - bnxt: count discards due to memory allocation errors (Ken Cox) [2042819 2043783]
  - bnxt: count packets discarded because of netpoll (Ken Cox) [2042819 2043783]
  - net: broadcom: switch from 'pci_' to 'dma_' API (Ken Cox) [2042819 2043783]
  - Revert "bnxt: Read VPD with pci_vpd_alloc()" (Ken Cox) [2042819 2043783]
  - Revert "bnxt: Search VPD with pci_vpd_find_ro_info_keyword()" (Ken Cox) [2042819 2043783]
  - bnxt_en: Increase maximum RX ring size if jumbo ring is not used (Ken Cox) [2042819 2043783]
  - bnxt_en: Don't use static arrays for completion ring pages (Ken Cox) [2042819 2043783]
  - bnxt_en: Log if an invalid signal detected on TSIO pin (Ken Cox) [2042819 2043783]
  - gfs2: Make sure FITRIM minlen is rounded up to fs block size (Andrew Price) [2066375]
  - redhat/configs enable CONFIG_ICE_HWTS (Petr Oros) [2037974]
  - redhat/configs enable CONFIG_ICE_SWITCHDEV (Petr Oros) [2037974]
  - ice: Fix memory corruption in VF driver (Petr Oros) [2037974]
  - ice: Fix queue config fail handling (Petr Oros) [2037974]
  - ice: Sync VLAN filtering features for DVM (Petr Oros) [2037974]
  - ice: Fix PTP TX timestamp offset calculation (Petr Oros) [2037974]
  - ice: Fix interrupt moderation settings getting cleared (Petr Oros) [2037974]
  - ice: fix possible under reporting of ethtool Tx and Rx statistics (Petr Oros) [2037974]
  - ice: fix crash when writing timestamp on RX rings (Petr Oros) [2037974]
  - ice: fix PTP stale Tx timestamps cleanup (Petr Oros) [2037974]
  - ice: clear stale Tx queue settings before configuring (Petr Oros) [2037974]
  - ice: Fix race during aux device (un)plugging (Petr Oros) [2037974]
  - ice: fix use-after-free when deinitializing mailbox snapshot (Petr Oros) [2037974]
  - ice: wait 5 s for EMP reset after firmware flash (Petr Oros) [2037974]
  - ice: Protect vf_state check by cfg_lock in ice_vc_process_vf_msg() (Petr Oros) [2037974]
  - ice: Fix incorrect locking in ice_vc_process_vf_msg() (Petr Oros) [2037974]
  - ice: Fix memory leak in ice_get_orom_civd_data() (Petr Oros) [2037974]
  - ice: fix crash in switchdev mode (Petr Oros) [2037974]
  - ice: allow creating VFs for !CONFIG_NET_SWITCHDEV (Petr Oros) [2037974]
  - ice: xsk: check if Rx ring was filled up to the end (Petr Oros) [2037974]
  - ice: arfs: fix use-after-free when freeing @rx_cpu_rmap (Petr Oros) [2037974]
  - ice: clear cmd_type_offset_bsz for TX rings (Petr Oros) [2037974]
  - ice: xsk: fix VSI state check in ice_xsk_wakeup() (Petr Oros) [2037974]
  - ice: synchronize_rcu() when terminating rings (Petr Oros) [2037974]
  - ice: Do not skip not enabled queues in ice_vc_dis_qs_msg (Petr Oros) [2037974]
  - ice: Set txq_teid to ICE_INVAL_TEID on ring creation (Petr Oros) [2037974]
  - ice: Fix broken IFF_ALLMULTI handling (Petr Oros) [2037974]
  - ice: Fix MAC address setting (Petr Oros) [2037974]
  - ice: Clear default forwarding VSI during VSI release (Petr Oros) [2037974]
  - ice: xsk: Fix indexing in ice_tx_xsk_pool() (Petr Oros) [2037974]
  - ice: xsk: Stop Rx processing when ntc catches ntu (Petr Oros) [2037974]
  - ice: xsk: Eliminate unnecessary loop iteration (Petr Oros) [2037974]
  - ice: don't allow to run ice_send_event_to_aux() in atomic ctx (Petr Oros) [2037974]
  - ice: fix 'scheduling while atomic' on aux critical err interrupt (Petr Oros) [2037974]
  - ice: add trace events for tx timestamps (Petr Oros) [2037974]
  - ice: fix return value check in ice_gnss.c (Petr Oros) [2037974]
  - ice: destroy flow director filter mutex after releasing VSIs (Petr Oros) [2037974]
  - ice: fix NULL pointer dereference in ice_update_vsi_tx_ring_stats() (Petr Oros) [2037974]
  - ice: remove PF pointer from ice_check_vf_init (Petr Oros) [2037974]
  - ice: introduce ice_virtchnl.c and ice_virtchnl.h (Petr Oros) [2037974]
  - ice: cleanup long lines in ice_sriov.c (Petr Oros) [2037974]
  - ice: introduce ICE_VF_RESET_LOCK flag (Petr Oros) [2037974]
  - ice: introduce ICE_VF_RESET_NOTIFY flag (Petr Oros) [2037974]
  - ice: convert ice_reset_vf to take flags (Petr Oros) [2037974]
  - ice: convert ice_reset_vf to standard error codes (Petr Oros) [2037974]
  - ice: make ice_reset_all_vfs void (Petr Oros) [2037974]
  - ice: drop is_vflr parameter from ice_reset_all_vfs (Petr Oros) [2037974]
  - ice: move reset functionality into ice_vf_lib.c (Petr Oros) [2037974]
  - ice: fix a long line warning in ice_reset_vf (Petr Oros) [2037974]
  - ice: introduce VF operations structure for reset flows (Petr Oros) [2037974]
  - ice: fix incorrect dev_dbg print mistaking 'i' for vf->vf_id (Petr Oros) [2037974]
  - ice: introduce ice_vf_lib.c, ice_vf_lib.h, and ice_vf_lib_private.h (Petr Oros) [2037974]
  - ice: use ice_is_vf_trusted helper function (Petr Oros) [2037974]
  - ice: log an error message when eswitch fails to configure (Petr Oros) [2037974]
  - ice: cleanup error logging for ice_ena_vfs (Petr Oros) [2037974]
  - ice: move ice_set_vf_port_vlan near other .ndo ops (Petr Oros) [2037974]
  - ice: refactor spoofchk control code in ice_sriov.c (Petr Oros) [2037974]
  - ice: rename ICE_MAX_VF_COUNT to avoid confusion (Petr Oros) [2037974]
  - ice: remove unused definitions from ice_sriov.h (Petr Oros) [2037974]
  - ice: convert vf->vc_ops to a const pointer (Petr Oros) [2037974]
  - ice: remove circular header dependencies on ice.h (Petr Oros) [2037974]
  - ice: rename ice_virtchnl_pf.c to ice_sriov.c (Petr Oros) [2037974]
  - ice: rename ice_sriov.c to ice_vf_mbx.c (Petr Oros) [2037974]
  - ice: Fix FV offset searching (Petr Oros) [2037974]
  - ice: Add support for outer dest MAC for ADQ tunnels (Petr Oros) [2037974]
  - ice: avoid XDP checks in ice_clean_tx_irq() (Petr Oros) [2037974]
  - ice: change "can't set link" message to dbg level (Petr Oros) [2037974]
  - ice: Add slow path offload stats on port representor in switchdev (Petr Oros) [2037974]
  - ice: Add support for inner etype in switchdev (Petr Oros) [2037974]
  - ice: Fix curr_link_speed advertised speed (Petr Oros) [2037974]
  - ice: Don't use GFP_KERNEL in atomic context (Petr Oros) [2037974]
  - ice: stop disabling VFs due to PF error responses (Petr Oros) [2037974]
  - ice: xsk: fix GCC version checking against pragma unroll presence (Petr Oros) [2037974]
  - ice: convert VF storage to hash table with krefs and RCU (Petr Oros) [2037974]
  - ice: introduce VF accessor functions (Petr Oros) [2037974]
  - ice: factor VF variables to separate structure (Petr Oros) [2037974]
  - ice: convert ice_for_each_vf to include VF entry iterator (Petr Oros) [2037974]
  - ice: use ice_for_each_vf for iteration during removal (Petr Oros) [2037974]
  - ice: remove checks in ice_vc_send_msg_to_vf (Petr Oros) [2037974]
  - ice: move VFLR acknowledge during ice_free_vfs (Petr Oros) [2037974]
  - ice: move clear_malvf call in ice_free_vfs (Petr Oros) [2037974]
  - ice: pass num_vfs to ice_set_per_vf_res() (Petr Oros) [2037974]
  - ice: store VF pointer instead of VF ID (Petr Oros) [2037974]
  - ice: refactor unwind cleanup in eswitch mode (Petr Oros) [2037974]
  - ice: add TTY for GNSS module for E810T device (Petr Oros) [2037974]
  - ice: initialize local variable 'tlv' (Petr Oros) [2037974]
  - ice: check the return of ice_ptp_gettimex64 (Petr Oros) [2037974]
  - ice: fix concurrent reset and removal of VFs (Petr Oros) [2037974]
  - ice: fix setting l4 port flag when adding filter (Petr Oros) [2037974]
  - ice: Match on all profiles in slow-path (Petr Oros) [2037974]
  - ice: enable parsing IPSEC SPI headers for RSS (Petr Oros) [2037974]
  - ice: Simplify tracking status of RDMA support (Petr Oros) [2037974]
  - ice: fix IPIP and SIT TSO offload (Petr Oros) [2037974]
  - ice: fix an error code in ice_cfg_phy_fec() (Petr Oros) [2037974]
  - ice: Add ability for PF admin to enable VF VLAN pruning (Petr Oros) [2037974]
  - ice: Add support for 802.1ad port VLANs VF (Petr Oros) [2037974]
  - ice: Advertise 802.1ad VLAN filtering and offloads for PF netdev (Petr Oros) [2037974]
  - ice: Support configuring the device to Double VLAN Mode (Petr Oros) [2037974]
  - ice: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 (Petr Oros) [2037974]
  - ice: Add hot path support for 802.1Q and 802.1ad VLAN offloads (Petr Oros) [2037974]
  - ice: Add outer_vlan_ops and VSI specific VLAN ops implementations (Petr Oros) [2037974]
  - ice: Adjust naming for inner VLAN operations (Petr Oros) [2037974]
  - ice: Use the proto argument for VLAN ops (Petr Oros) [2037974]
  - ice: Refactor vf->port_vlan_info to use ice_vlan (Petr Oros) [2037974]
  - ice: Introduce ice_vlan struct (Petr Oros) [2037974]
  - ice: Add new VSI VLAN ops (Petr Oros) [2037974]
  - ice: Add helper function for adding VLAN 0 (Petr Oros) [2037974]
  - ice: Refactor spoofcheck configuration functions (Petr Oros) [2037974]
  - ice: xsk: Borrow xdp_tx_active logic from i40e (Petr Oros) [2037974]
  - ice: xsk: Improve AF_XDP ZC Tx and use batching API (Petr Oros) [2037974]
  - ice: xsk: Avoid potential dead AF_XDP Tx processing (Petr Oros) [2037974]
  - ice: Make Tx threshold dependent on ring length (Petr Oros) [2037974]
  - ice: xsk: Handle SW XDP ring wrap and bump tail more often (Petr Oros) [2037974]
  - ice: xsk: Force rings to be sized to power of 2 (Petr Oros) [2037974]
  - ice: Remove likely for napi_complete_done (Petr Oros) [2037974]
  - ice: add support for DSCP QoS for IDC (Petr Oros) [2037974]
  - ice: respect metadata on XSK Rx to skb (Petr Oros) [2037974]
  - ice: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Petr Oros) [2037974]
  - ice: respect metadata in legacy-rx/ice_construct_skb() (Petr Oros) [2037974]
  - ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2037974]
  - ice: Use bitmap_free() to free bitmap (Petr Oros) [2037974]
  - ice: Optimize a few bitmap operations (Petr Oros) [2037974]
  - ice: Slightly simply ice_find_free_recp_res_idx (Petr Oros) [2037974]
  - ice: improve switchdev's slow-path (Petr Oros) [2037974]
  - ice: replay advanced rules after reset (Petr Oros) [2037974]
  - net: fixup build after bpf header changes (Petr Oros) [2037974]
  - net: Don't include filter.h from net/sock.h (Petr Oros) [2037974]
  - ice: Add flow director support for channel mode (Petr Oros) [2037974]
  - ice: switch to napi_build_skb() (Petr Oros) [2037974]
  - ice: xsk: fix cleaned_count setting (Petr Oros) [2037974]
  - ice: xsk: allow empty Rx descriptors on XSK ZC data path (Petr Oros) [2037974]
  - ice: xsk: do not clear status_error0 for ntu + nb_buffs descriptor (Petr Oros) [2037974]
  - ice: remove dead store on XSK hotpath (Petr Oros) [2037974]
  - ice: xsk: allocate separate memory for XDP SW ring (Petr Oros) [2037974]
  - ice: xsk: return xsk buffers back to pool when cleaning the ring (Petr Oros) [2037974]
  - ice: trivial: fix odd indenting (Petr Oros) [2037974]
  - ice: support crosstimestamping on E822 devices if supported (Petr Oros) [2037974]
  - ice: exit bypass mode once hardware finishes timestamp calibration (Petr Oros) [2037974]
  - ice: ensure the hardware Clock Generation Unit is configured (Petr Oros) [2037974]
  - ice: implement basic E822 PTP support (Petr Oros) [2037974]
  - ice: convert clk_freq capability into time_ref (Petr Oros) [2037974]
  - ice: introduce ice_ptp_init_phc function (Petr Oros) [2037974]
  - ice: use 'int err' instead of 'int status' in ice_ptp_hw.c (Petr Oros) [2037974]
  - ice: PTP: move setting of tstamp_config (Petr Oros) [2037974]
  - ice: introduce ice_base_incval function (Petr Oros) [2037974]
  - ice: Fix E810 PTP reset flow (Petr Oros) [2037974]
  - ice: Don't put stale timestamps in the skb (Petr Oros) [2037974]
  - ice: Use div64_u64 instead of div_u64 in adjfine (Petr Oros) [2037974]
  - ice: use modern kernel API for kick (Petr Oros) [2037974]
  - ice: tighter control over VSI_DOWN state (Petr Oros) [2037974]
  - ice: use prefetch methods (Petr Oros) [2037974]
  - ice: update to newer kernel API (Petr Oros) [2037974]
  - ice: support immediate firmware activation via devlink reload (Petr Oros) [2037974]
  - ice: reduce time to read Option ROM CIVD data (Petr Oros) [2037974]
  - ice: move ice_devlink_flash_update and merge with ice_flash_pldm_image (Petr Oros) [2037974]
  - ice: move and rename ice_check_for_pending_update (Petr Oros) [2037974]
  - ice: devlink: add shadow-ram region to snapshot Shadow RAM (Petr Oros) [2037974]
  - ice: Remove unused ICE_FLOW_SEG_HDRS_L2_MASK (Petr Oros) [2037974]
  - ice: Remove unnecessary casts (Petr Oros) [2037974]
  - ice: Propagate error codes (Petr Oros) [2037974]
  - ice: Remove excess error variables (Petr Oros) [2037974]
  - ice: Cleanup after ice_status removal (Petr Oros) [2037974]
  - ice: Remove enum ice_status (Petr Oros) [2037974]
  - ice: Use int for ice_status (Petr Oros) [2037974]
  - ice: Remove string printing for ice_status (Petr Oros) [2037974]
  - ice: Refactor status flow for DDP load (Petr Oros) [2037974]
  - ice: Refactor promiscuous functions (Petr Oros) [2037974]
  - ice: refactor PTYPE validating (Petr Oros) [2037974]
  - ice: Add package PTYPE enable information (Petr Oros) [2037974]
  - ice: safer stats processing (Petr Oros) [2037974]
  - ice: fix adding different tunnels (Petr Oros) [2037974]
  - ice: fix choosing UDP header type (Petr Oros) [2037974]
  - ice: ignore dropped packets during init (Petr Oros) [2037974]
  - ice: rearm other interrupt cause register after enabling VFs (Petr Oros) [2037974]
  - ice: fix FDIR init missing when reset VF (Petr Oros) [2037974]
  - ice: xsk: clear status_error0 for each allocated desc (Petr Oros) [2037974]
  - net/ice: Remove unused enum (Petr Oros) [2037974]
  - net/ice: Fix boolean assignment (Petr Oros) [2037974]
  - ice: avoid bpf_prog refcount underflow (Petr Oros) [2037974]
  - ice: fix vsi->txq_map sizing (Petr Oros) [2037974]
  - net/ice: Add support for enable_iwarp and enable_roce devlink param (Petr Oros) [2037974]
  - ice: Hide bus-info in ethtool for PRs in switchdev mode (Petr Oros) [2037974]
  - ice: Clear synchronized addrs when adding VFs in switchdev mode (Petr Oros) [2037974]
  - intel: Simplify bool conversion (Petr Oros) [2037974]
  - ice: fix error return code in ice_get_recp_frm_fw() (Petr Oros) [2037974]
  - ice: Fix clang -Wimplicit-fallthrough in ice_pull_qvec_from_rc() (Petr Oros) [2037974]
  - ice: Add support to print error on PHY FW load failure (Petr Oros) [2037974]
  - ice: Add support for changing MTU on PR in switchdev mode (Petr Oros) [2037974]
  - ice: send correct vc status in switchdev (Petr Oros) [2037974]
  - ice: support for GRE in eswitch (Petr Oros) [2037974]
  - ice: low level support for tunnels (Petr Oros) [2037974]
  - ice: VXLAN and Geneve TC support (Petr Oros) [2037974]
  - ice: support for indirect notification (Petr Oros) [2037974]
  - ice: Add tc-flower filter support for channel (Petr Oros) [2037974]
  - ice: enable ndo_setup_tc support for mqprio_qdisc (Petr Oros) [2037974]
  - ice: Add infrastructure for mqprio support via ndo_setup_tc (Petr Oros) [2037974]
  - ice: fix an error code in ice_ena_vfs() (Petr Oros) [2037974]
  - ice: Refactor PR ethtool ops (Petr Oros) [2037974]
  - ice: Manage act flags for switchdev offloads (Petr Oros) [2037974]
  - ice: Forbid trusted VFs in switchdev mode (Petr Oros) [2037974]
  - ice: introduce XDP_TX fallback path (Petr Oros) [2037974]
  - ice: optimize XDP_TX workloads (Petr Oros) [2037974]
  - ice: propagate xdp_ring onto rx_ring (Petr Oros) [2037974]
  - ice: do not create xdp_frame on XDP_TX (Petr Oros) [2037974]
  - ice: unify xdp_rings accesses (Petr Oros) [2037974]
  - ice: ndo_setup_tc implementation for PR (Petr Oros) [2037974]
  - ice: ndo_setup_tc implementation for PF (Petr Oros) [2037974]
  - ice: Allow changing lan_en and lb_en on all kinds of filters (Petr Oros) [2037974]
  - ice: cleanup rules info (Petr Oros) [2037974]
  - ice: allow deleting advanced rules (Petr Oros) [2037974]
  - ice: allow adding advanced rules (Petr Oros) [2037974]
  - ice: create advanced switch recipe (Petr Oros) [2037974]
  - ice: manage profiles and field vectors (Petr Oros) [2037974]
  - ice: implement low level recipes functions (Petr Oros) [2037974]
  - ice: add port representor ethtool ops and stats (Petr Oros) [2037974]
  - ice: switchdev slow path (Petr Oros) [2037974]
  - ice: rebuild switchdev when resetting all VFs (Petr Oros) [2037974]
  - ice: enable/disable switchdev when managing VFs (Petr Oros) [2037974]
  - ice: introduce new type of VSI for switchdev (Petr Oros) [2037974]
  - ice: set and release switchdev environment (Petr Oros) [2037974]
  - ice: allow changing lan_en and lb_en on dflt rules (Petr Oros) [2037974]
  - ice: manage VSI antispoof and destination override (Petr Oros) [2037974]
  - ice: allow process VF opcodes in different ways (Petr Oros) [2037974]
  - ice: introduce VF port representor (Petr Oros) [2037974]
  - ice: Move devlink port to PF/VF struct (Petr Oros) [2037974]
  - ice: support basic E-Switch mode control (Petr Oros) [2037974]
  - ethernet: use eth_hw_addr_set() for dev->addr_len cases (Petr Oros) [2037974]
  - ice: Use the xsk batched rx allocation interface (Petr Oros) [2037974]
  - ice: Use xdp_buf instead of rx_buf for xsk zero-copy (Petr Oros) [2037974]
  - ice: Only lock to update netdev dev_addr (Petr Oros) [2037974]
  - ice: restart periodic outputs around time changes (Petr Oros) [2037974]
  - ice: fix Tx queue iteration for Tx timestamp enablement (Petr Oros) [2037974]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-126.el9]
changelog:
  - mm/page_alloc: always attempt to allocate at least one page during bulk allocation (Joel Savitz) [2094045]
  - KVM: arm64: Warn if accessing timer pending state outside of vcpu context (Gavin Shan) [2075082]
  - KVM: arm64: Replace vgic_v3_uaccess_read_pending with vgic_uaccess_read_pending (Gavin Shan) [2075082]
  - KVM: arm64: Don't read a HW interrupt pending state in user context (Gavin Shan) [2075082]
  - KVM: arm64: Always start with clearing SVE flag on load (Gavin Shan) [2075082]
  - KVM: arm64: Don't hypercall before EL2 init (Gavin Shan) [2075082]
  - KVM: arm64: vgic-v3: Consistently populate ID_AA64PFR0_EL1.GIC (Gavin Shan) [2075082]
  - KVM: arm64: Inject exception on out-of-IPA-range translation fault (Gavin Shan) [2075082]
  - KVM/arm64: Don't emulate a PMU for 32-bit guests if feature not set (Gavin Shan) [2075082]
  - KVM: arm64: Handle host stage-2 faults from 32-bit EL0 (Gavin Shan) [2075082]
  - selftests: KVM: Free the GIC FD when cleaning up in arch_timer (Gavin Shan) [2075082]
  - KVM: arm64: selftests: Introduce vcpu_width_config (Gavin Shan) [2075082]
  - KVM: arm64: mixed-width check should be skipped for uninitialized vCPUs (Gavin Shan) [2075082]
  - arm64: alternatives: mark patch_alternative() as `noinstr` (Gavin Shan) [2075082]
  - KVM: arm64: vgic: Remove unnecessary type castings (Gavin Shan) [2075082]
  - KVM: arm64: Don't split hugepages outside of MMU write lock (Gavin Shan) [2075082]
  - KVM: arm64: Drop unneeded minor version check from PSCI v1.x handler (Gavin Shan) [2075082]
  - KVM: arm64: Actually prevent SMC64 SYSTEM_RESET2 from AArch32 (Gavin Shan) [2075082]
  - KVM: arm64: Generally disallow SMC64 for AArch32 guests (Gavin Shan) [2075082]
  - arm64: Fix comments in macro __init_el2_gicv3 (Gavin Shan) [2075082]
  - arm64: errata: avoid duplicate field initializer (Gavin Shan) [2075082]
  - KVM: arm64: fix typos in comments (Gavin Shan) [2075082]
  - KVM: arm64: Generalise VM features into a set of flags (Gavin Shan) [2075082]
  - KVM: arm64: Really propagate PSCI SYSTEM_RESET2 arguments to userspace (Gavin Shan) [2075082]
  - KVM: arm64: Only open the interrupt window on exit due to an interrupt (Gavin Shan) [2075082]
  - KVM: arm64: Enable Cortex-A510 erratum 2077057 by default (Gavin Shan) [2075082]
  - arm64: Always use individual bits in CPACR floating point enables (Gavin Shan) [2075082]
  - arm64: Define CPACR_EL1_FPEN similarly to other floating point controls (Gavin Shan) [2075082]
  - KVM: arm64: Remove unneeded semicolons (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Skip tests if we can't create a vgic-v3 (Gavin Shan) [2075082]
  - KVM: arm64: Indicate SYSTEM_RESET2 in kvm_run::system_event flags field (Gavin Shan) [2075082]
  - KVM: arm64: Expose PSCI SYSTEM_RESET2 call to the guest (Gavin Shan) [2075082]
  - KVM: arm64: Bump guest PSCI version to 1.1 (Gavin Shan) [2075082]
  - KVM: arm64: Don't miss pending interrupts for suspended vCPU (Gavin Shan) [2075082]
  - arm64: Correct wrong label in macro __init_el2_gicv3 (Gavin Shan) [2075082]
  - KVM: arm64: vgic: Read HW interrupt pending state from the HW (Gavin Shan) [2075082]
  - KVM: arm64: Refuse to run VCPU if the PMU doesn't match the physical CPU (Gavin Shan) [2075082]
  - KVM: arm64: Add KVM_ARM_VCPU_PMU_V3_SET_PMU attribute (Gavin Shan) [2075082]
  - KVM: arm64: Keep a list of probed PMUs (Gavin Shan) [2075082]
  - KVM: arm64: Keep a per-VM pointer to the default PMU (Gavin Shan) [2075082]
  - perf: Fix wrong name in comment for struct perf_cpu_context (Gavin Shan) [2075082]
  - KVM: arm64: Do not change the PMU event filter after a VCPU has run (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Implement CONFIG_DEBUG_LIST at EL2 (Gavin Shan) [2075082]
  - KVM: arm64: Drop unused param from kvm_psci_version() (Gavin Shan) [2075082]
  - kvm: selftests: aarch64: use a tighter assert in vgic_poke_irq() (Gavin Shan) [2075082]
  - kvm: selftests: aarch64: fix some vgic related comments (Gavin Shan) [2075082]
  - kvm: selftests: aarch64: fix the failure check in kvm_set_gsi_routing_irqchip_check (Gavin Shan) [2075082]
  - kvm: selftests: aarch64: pass vgic_irq guest args as a pointer (Gavin Shan) [2075082]
  - kvm: selftests: aarch64: fix assert in gicv3_access_reg (Gavin Shan) [2075082]
  - KVM: arm64: Make active_vmids invalid on vCPU schedule out (Gavin Shan) [2075082]
  - KVM: arm64: Align the VMID allocation with the arm64 ASID (Gavin Shan) [2075082]
  - KVM: arm64: Make VMID bits accessible outside of allocator (Gavin Shan) [2075082]
  - KVM: arm64: Introduce a new VMID allocator for KVM (Gavin Shan) [2075082]
  - arm64/fpsimd: Clarify the purpose of using last in fpsimd_save() (Gavin Shan) [2075082]
  - KVM: arm64: Add some more comments in kvm_hyp_handle_fpsimd() (Gavin Shan) [2075082]
  - KVM: arm64: Add comments for context flush and sync callbacks (Gavin Shan) [2075082]
  - KVM: arm64: Add fast path to handle permission relaxation during dirty logging (Gavin Shan) [2075082]
  - KVM: arm64: Use read/write spin lock for MMU protection (Gavin Shan) [2075082]
  - KVM: arm64: Emulate the OS Lock (Gavin Shan) [2075082]
  - KVM: arm64: Allow guest to set the OSLK bit (Gavin Shan) [2075082]
  - KVM: arm64: Stash OSLSR_EL1 in the cpu context (Gavin Shan) [2075082]
  - KVM: arm64: Correctly treat writes to OSLSR_EL1 as undefined (Gavin Shan) [2075082]
  - redhat/configs: aarch64: Enable ARM64_ERRATUM_2077057 (Gavin Shan) [2075082]
  - KVM: arm64: Workaround Cortex-A510's single-step and PAC trap errata (Gavin Shan) [2075082]
  - KVM: arm64: Stop handle_exit() from handling HVC twice when an SError occurs (Gavin Shan) [2075082]
  - KVM: arm64: Avoid consuming a stale esr value when SError occur (Gavin Shan) [2075082]
  - kvm/arm64: rework guest entry logic (Gavin Shan) [2075082]
  - KVM: arm64: Use shadow SPSR_EL1 when injecting exceptions on !VHE (Gavin Shan) [2075082]
  - KVM: arm64: vgic-v3: Restrict SEIS workaround to known broken systems (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Use the mm_ops indirection for cache maintenance (Gavin Shan) [2075082]
  - KVM: arm64: Put kvm_arch_vcpu_get_ip() inside CONFIG_GUEST_PERF_EVENTS (Gavin Shan) [2075082]
  - KVM: arm64: vgic: Replace kernel.h with the necessary inclusions (Gavin Shan) [2075082]
  - KVM: arm64: Fix comment typo in kvm_vcpu_finalize_sve() (Gavin Shan) [2075082]
  - KVM: arm64: selftests: get-reg-list: Add pauth configuration (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Add test for restoring active IRQs (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Add ISPENDR write tests in vgic_irq (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Add tests for IRQFD in vgic_irq (Gavin Shan) [2075082]
  - KVM: selftests: Add IRQ GSI routing library functions (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Add test_inject_fail to vgic_irq (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Add tests for LEVEL_INFO in vgic_irq (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Level-sensitive interrupts tests in vgic_irq (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Add preemption tests in vgic_irq (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Cmdline arg to set EOI mode in vgic_irq (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Cmdline arg to set number of IRQs in vgic_irq test (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Abstract the injection functions in vgic_irq (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Add vgic_irq to test userspace IRQ injection (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Add vGIC library functions to deal with vIRQ state (Gavin Shan) [2075082]
  - KVM: selftests: Add kvm_irq_line library function (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Add GICv3 register accessor library functions (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Add function for accessing GICv3 dist and redist registers (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Move gic_v3.h to shared headers (Gavin Shan) [2075082]
  - KVM: arm64: Fix comment on barrier in kvm_psci_vcpu_on() (Gavin Shan) [2075082]
  - KVM: arm64: Fix comment for kvm_reset_vcpu() (Gavin Shan) [2075082]
  - KVM: arm64: Use defined value for SCTLR_ELx_EE (Gavin Shan) [2075082]
  - KVM: arm64: Rework kvm_pgtable initialisation (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Unshare guest structs during teardown (Gavin Shan) [2075082]
  - KVM: arm64: Expose unshare hypercall to the host (Gavin Shan) [2075082]
  - KVM: arm64: Implement do_unshare() helper for unsharing memory (Gavin Shan) [2075082]
  - KVM: arm64: Implement __pkvm_host_share_hyp() using do_share() (Gavin Shan) [2075082]
  - KVM: arm64: Implement do_share() helper for sharing memory (Gavin Shan) [2075082]
  - KVM: arm64: Introduce wrappers for host and hyp spin lock accessors (Gavin Shan) [2075082]
  - KVM: arm64: Extend pkvm_page_state enumeration to handle absent pages (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Refcount the pages shared with EL2 (Gavin Shan) [2075082]
  - KVM: arm64: Introduce kvm_share_hyp() (Gavin Shan) [2075082]
  - KVM: arm64: Implement kvm_pgtable_hyp_unmap() at EL2 (Gavin Shan) [2075082]
  - KVM: arm64: Hook up ->page_count() for hypervisor stage-1 page-table (Gavin Shan) [2075082]
  - KVM: arm64: Fixup hyp stage-1 refcount (Gavin Shan) [2075082]
  - KVM: arm64: Refcount hyp stage-1 pgtable pages (Gavin Shan) [2075082]
  - KVM: arm64: Provide {get,put}_page() stubs for early hyp allocator (Gavin Shan) [2075082]
  - KVM: arm64: vgic: Demote userspace-triggered console prints to kvm_debug() (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Make kvm_host_owns_hyp_mappings() robust to VHE (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Stub io map functions (Gavin Shan) [2075082]
  - KVM: arm64: Make __io_map_base static (Gavin Shan) [2075082]
  - KVM: arm64: Make the hyp memory pool static (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Disable GICv2 support (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Fix hyp_pool max order (Gavin Shan) [2075082]
  - KVM: arm64: Use Makefile.kvm for common files (Gavin Shan) [2075082]
  - KVM: arm64: Drop unused workaround_flags vcpu field (Gavin Shan) [2075082]
  - KVM: arm64: Move vGIC v4 handling for WFI out arch callback hook (Gavin Shan) [2075082]
  - arm64/kvm: Fix bitrotted comment for SVE handling in handle_exit.c (Gavin Shan) [2075082]
  - KVM: arm64: Move host EL1 code out of hyp/ directory (Gavin Shan) [2075082]
  - KVM: arm64: Generate hyp_constants.h for the host (Gavin Shan) [2075082]
  - arm64: Add missing include of asm/cpufeature.h to asm/mmu.h (Gavin Shan) [2075082]
  - KVM: arm64: Constify kvm_io_gic_ops (Gavin Shan) [2075082]
  - KVM: arm64: Add minimal handling for the ARMv8.7 PMU (Gavin Shan) [2075082]
  - KVM: arm64: Drop vcpu->arch.has_run_once for vcpu->pid (Gavin Shan) [2075082]
  - KVM: arm64: Merge kvm_arch_vcpu_run_pid_change() and kvm_vcpu_first_run_init() (Gavin Shan) [2075082]
  - KVM: arm64: Restructure the point where has_run_once is advertised (Gavin Shan) [2075082]
  - KVM: arm64: Move kvm_arch_vcpu_run_pid_change() out of line (Gavin Shan) [2075082]
  - KVM: arm64: Move SVE state mapping at HYP to finalize-time (Gavin Shan) [2075082]
  - KVM: arm64: Move pkvm's special 32bit handling into a generic infrastructure (Gavin Shan) [2075082]
  - KVM: arm64: Save PSTATE early on exit (Gavin Shan) [2075082]
  - arm64/fpsimd: Document the use of TIF_FOREIGN_FPSTATE by KVM (Gavin Shan) [2075082]
  - KVM: arm64: Stop mapping current thread_info at EL2 (Gavin Shan) [2075082]
  - KVM: arm64: Introduce flag shadowing TIF_FOREIGN_FPSTATE (Gavin Shan) [2075082]
  - KVM: arm64: Remove unused __sve_save_state (Gavin Shan) [2075082]
  - KVM: arm64: Get rid of host SVE tracking/saving (Gavin Shan) [2075082]
  - KVM: arm64: Reorder vcpu flag definitions (Gavin Shan) [2075082]
  - KVM: arm64: Cap KVM_CAP_NR_VCPUS by kvm_arm_default_max_vcpus() (Gavin Shan) [2075082]
  - KVM: arm64: Fix host stage-2 finalization (Gavin Shan) [2075082]
  - KVM: arm64: Change the return type of kvm_vcpu_preferred_target() (Gavin Shan) [2075082]
  - KVM: arm64: nvhe: Fix a non-kernel-doc comment (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Give priority to standard traps over pvm handling (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Pass vpcu instead of kvm to kvm_get_exit_handler_array() (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Move kvm_handle_pvm_restricted around (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Consolidate include files (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Preserve pending SError on exit from AArch32 (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Handle GICv3 traps as required (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Drop sysregs that should never be routed to the host (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Drop AArch32-specific registers (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Make the ERR/ERX*_EL1 registers RAZ/WI (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Use a single function to expose all id-regs (Gavin Shan) [2075082]
  - KVM: arm64: Fix early exit ptrauth handling (Gavin Shan) [2075082]
  - KVM: arm64: Add memcg accounting to KVM allocations (Gavin Shan) [2075082]
  - KVM: arm64: vgic: Add memcg accounting to vgic allocations (Gavin Shan) [2075082]
  - KVM: arm64: vgic-v3: Align emulated cpuif LPI state machine with the pseudocode (Gavin Shan) [2075082]
  - KVM: arm64: vgic-v3: Don't advertise ICC_CTLR_EL1.SEIS (Gavin Shan) [2075082]
  - KVM: arm64: vgic-v3: Reduce common group trapping to ICV_DIR_EL1 when possible (Gavin Shan) [2075082]
  - KVM: arm64: vgic-v3: Work around GICv3 locally generated SErrors (Gavin Shan) [2075082]
  - KVM: arm64: Force ID_AA64PFR0_EL1.GIC=1 when exposing a virtual GICv3 (Gavin Shan) [2075082]
  - KVM: arm64: Fix reporting of endianess when the access originates at EL0 (Gavin Shan) [2075082]
  - KVM: arm64: Handle protected guests at 32 bits (Gavin Shan) [2075082]
  - KVM: arm64: Trap access to pVM restricted features (Gavin Shan) [2075082]
  - KVM: arm64: Move sanitized copies of CPU features (Gavin Shan) [2075082]
  - KVM: arm64: Initialize trap registers for protected VMs (Gavin Shan) [2075082]
  - KVM: arm64: Add handlers for protected VM System Registers (Gavin Shan) [2075082]
  - KVM: arm64: Simplify masking out MTE in feature id reg (Gavin Shan) [2075082]
  - KVM: arm64: Add missing field descriptor for MDCR_EL2 (Gavin Shan) [2075082]
  - KVM: arm64: Pass struct kvm to per-EC handlers (Gavin Shan) [2075082]
  - KVM: arm64: Move early handlers to per-EC handlers (Gavin Shan) [2075082]
  - KVM: arm64: Don't include switch.h into nvhe/kvm-main.c (Gavin Shan) [2075082]
  - KVM: arm64: Move __get_fault_info() and co into their own include file (Gavin Shan) [2075082]
  - KVM: arm64: Replace get_raz_id_reg() with get_raz_reg() (Gavin Shan) [2075082]
  - KVM: arm64: Use get_raz_reg() for userspace reads of PMSWINC_EL0 (Gavin Shan) [2075082]
  - KVM: arm64: Return early from read_id_reg() if register is RAZ (Gavin Shan) [2075082]
  - KVM: arm64: Depend on HAVE_KVM instead of OF (Gavin Shan) [2075082]
  - KVM: arm64: Unconditionally include generic KVM's Kconfig (Gavin Shan) [2075082]
  - KVM: arm64: Allow KVM to be disabled from the command line (Gavin Shan) [2075082]
  - KVM: arm64: Disable privileged hypercalls after pKVM finalisation (Gavin Shan) [2075082]
  - KVM: arm64: Prevent re-finalisation of pKVM for a given CPU (Gavin Shan) [2075082]
  - KVM: arm64: Propagate errors from __pkvm_prot_finalize hypercall (Gavin Shan) [2075082]
  - KVM: arm64: Reject stub hypercalls after pKVM has been initialised (Gavin Shan) [2075082]
  - arm64: Prevent kexec and hibernation if is_protected_kvm_enabled() (Gavin Shan) [2075082]
  - KVM: arm64: Turn __KVM_HOST_SMCCC_FUNC_* into an enum (mostly) (Gavin Shan) [2075082]
  - KVM: arm64: Revert "KVM: arm64: Count VMID-wide TLB invalidations" (Gavin Shan) [2075082]
  - cxl/core: Remove cxld_const_init in cxl_decoder_alloc() (John W. Linville) [2072584]
  - cxl/pmem: Fix module reload vs workqueue state (John W. Linville) [2072584]
  - cxl/memdev: Remove unused cxlmd field (John W. Linville) [2072584]
  - cxl/core: Convert to EXPORT_SYMBOL_NS_GPL (John W. Linville) [2072584]
  - cxl/memdev: Change cxl_mem to a more descriptive name (John W. Linville) [2072584]
  - cxl/mbox: Remove bad comment (John W. Linville) [2072584]
  - cxl/pmem: Fix reference counting for delayed work (John W. Linville) [2072584]
  - cxl/pci: Split cxl_pci_setup_regs() (John W. Linville) [2072584]
  - cxl/pci: Add @base to cxl_register_map (John W. Linville) [2072584]
  - cxl/pci: Make more use of cxl_register_map (John W. Linville) [2072584]
  - cxl/pci: Remove pci request/release regions (John W. Linville) [2072584]
  - cxl/pci: Fix NULL vs ERR_PTR confusion (John W. Linville) [2072584]
  - cxl/pci: Remove dev_dbg for unknown register blocks (John W. Linville) [2072584]
  - cxl/pci: Convert register block identifiers to an enum (John W. Linville) [2072584]
  - cxl/acpi: Do not fail cxl_acpi_probe() based on a missing CHBS (John W. Linville) [2072584]
  - cxl/pci: Disambiguate cxl_pci further from cxl_mem (John W. Linville) [2072584]
  - cxl/core: Split decoder setup into alloc + add (John W. Linville) [2072584]
  - tools/testing/cxl: Introduce a mock memory device + driver (John W. Linville) [2072584]
  - cxl/mbox: Move command definitions to common location (John W. Linville) [2072584]
  - cxl/bus: Populate the target list at decoder create (John W. Linville) [2072584]
  - tools/testing/cxl: Introduce a mocked-up CXL port hierarchy (John W. Linville) [2072584]
  - cxl/pmem: Add support for multiple nvdimm-bridge objects (John W. Linville) [2072584]
  - cxl/pmem: Translate NVDIMM label commands to CXL label commands (John W. Linville) [2072584]
  - cxl/mbox: Add exclusive kernel command support (John W. Linville) [2072584]
  - cxl/mbox: Convert 'enabled_cmds' to DECLARE_BITMAP (John W. Linville) [2072584]
  - cxl/pci: Use module_pci_driver (John W. Linville) [2072584]
  - cxl/mbox: Move mailbox and other non-PCI specific infrastructure to the core (John W. Linville) [2072584]
  - cxl/pci: Drop idr.h (John W. Linville) [2072584]
  - cxl/mbox: Introduce the mbox_send operation (John W. Linville) [2072584]
  - cxl/pci: Clean up cxl_mem_get_partition_info() (John W. Linville) [2072584]
  - cxl/pci: Make 'struct cxl_mem' device type generic (John W. Linville) [2072584]
  - cxl/registers: Fix Documentation warning (John W. Linville) [2072584]
  - cxl/pmem: Fix Documentation warning (John W. Linville) [2072584]
  - cxl/pci: Fix debug message in cxl_probe_regs() (John W. Linville) [2072584]
  - cxl/pci: Fix lockdown level (John W. Linville) [2072584]
  - cxl/acpi: Do not add DSDT disabled ACPI0016 host bridge ports (John W. Linville) [2072584]
  - cxl/mem: Adjust ram/pmem range to represent DPA ranges (John W. Linville) [2072584]
  - cxl/mem: Account for partitionable space in ram/pmem ranges (John W. Linville) [2072584]
  - cxl/pci: Store memory capacity values (John W. Linville) [2072584]
  - cxl/pci: Simplify register setup (John W. Linville) [2072584]
  - cxl/pci: Ignore unknown register block types (John W. Linville) [2072584]
  - cxl/core: Move memdev management to core (John W. Linville) [2072584]
  - cxl/pci: Introduce cdevm_file_operations (John W. Linville) [2072584]
  - cxl/core: Move register mapping infrastructure (John W. Linville) [2072584]
  - cxl/core: Move pmem functionality (John W. Linville) [2072584]
  - cxl/core: Improve CXL core kernel docs (John W. Linville) [2072584]
  - cxl: Move cxl_core to new directory (John W. Linville) [2072584]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-127.el9]
changelog:
  - intel/igbvf:fix repeated words in comments (Corinna Vinschen) [2037985]
  - igbvf: Remove useless DMA-32 fallback configuration (Corinna Vinschen) [2037985]
  - x86/sme: Explicitly map new EFI memmap table as encrypted (Rafael Aquini) [2091830]
  - x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c (Rafael Aquini) [2091830]
  - aarch64: Enable NVIDIA Jetson Xavier SoCs (Craig Magina) [2098285]
  - r8169: improve driver unload and system shutdown behavior on DASH-enabled systems (Jose Ignacio Tornos Martinez) [2070952]
  - r8169: factor out redundant RTL8168d PHY config functionality to rtl8168d_1_common() (Jose Ignacio Tornos Martinez) [2070952]
  - r8169: support L1.2 control on RTL8168h (Jose Ignacio Tornos Martinez) [2070952]
  - r8169: add rtl_disable_exit_l1() (Jose Ignacio Tornos Martinez) [2070952]
  - r8169: enable ASPM L1.2 if system vendor flags it as safe (Jose Ignacio Tornos Martinez) [2070952]
  - r8169: don't use pci_irq_vector() in atomic context (Jose Ignacio Tornos Martinez) [2070952]
  - r8169: Avoid misuse of pm_ptr() macro (Jose Ignacio Tornos Martinez) [2070952]
  - r8169: fix incorrect mac address assignment (Jose Ignacio Tornos Martinez) [2070952]
  - r8169: enable ASPM L1/L1.1 from RTL8168h (Jose Ignacio Tornos Martinez) [2070952]
  - r8169: Add device 10ec:8162 to driver r8169 (Jose Ignacio Tornos Martinez) [2070952]
  - ethernet: r8169: use eth_hw_addr_set() (Jose Ignacio Tornos Martinez) [2070952]
  - r8169: add rtl_enable_exit_l1 (Jose Ignacio Tornos Martinez) [2070952]
  - r8169: enable ASPM L0s state (Jose Ignacio Tornos Martinez) [2070952]
  - r8169: rename rtl_csi_access_enable to rtl_set_aspm_entry_latency (Jose Ignacio Tornos Martinez) [2070952]
  - powercap: intel_rapl: add support for RaptorLake (David Arcari) [2076725]
  - perf/x86/cstate: Add SAPPHIRERAPIDS_X CPU support (Michael Petlan) [2094573]
  - fs: dlm: filter user dlm messages for kernel locks (Alexander Aring) [2026117]
  - scsi: storvsc: Fix unsigned comparison to zero (Mohammed Gamal) [2030695]
  - scsi: storvsc: Fix validation for unsolicited incoming packets (Mohammed Gamal) [2030695]
  - scsi: storvsc: Fix storvsc_queuecommand() memory leak (Mohammed Gamal) [2030695]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-128.el9]
changelog:
  - block: remove WARN_ON() from bd_link_disk_holder (Ming Lei) [2094256]
  - block: pop cached rq before potentially blocking rq_qos_throttle() (Ming Lei) [2094256]
  - block: remove queue from struct blk_independent_access_range (Ming Lei) [2094256]
  - block: freeze the queue earlier in del_gendisk (Ming Lei) [2094256]
  - block: remove per-disk debugfs files in blk_unregister_queue (Ming Lei) [2094256]
  - block: serialize all debugfs operations using q->debugfs_mutex (Ming Lei) [2094256]
  - block: disable the elevator int del_gendisk (Ming Lei) [2094256]
  - net: add missing include in include/net/gro.h (Ivan Vecera) [2101789]
  - net: gro: populate net/core/gro.c (Ivan Vecera) [2101789]
  - net: gro: move skb_gro_receive into net/core/gro.c (Ivan Vecera) [2101789]
  - net: gro: move skb_gro_receive_list to udp_offload.c (Ivan Vecera) [2101789]
  - net: move gro definitions to include/net/gro.h (Ivan Vecera) [2101789]
  - net:dev: Change napi_gro_complete return type to void (Ivan Vecera) [2101789]
  - move netdev_boot_setup into Space.c (Ivan Vecera) [2101789]
  - sched: Fix balance_push() vs __sched_setscheduler() (Phil Auld) [2100215]
  - selftests, xsk: Fix bpf_res cleanup test (Felix Maurer) [2090981]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-129.el9]
changelog:
  - fuse: send security context of inode on file (Vivek Goyal) [2101526]
  - fuse: extend init flags (Vivek Goyal) [2101526]
  - security, lsm: dentry_init_security() Handle multi LSM registration (Vivek Goyal) [2101526]
  - security: Return xattr name from security_dentry_init_security() (Vivek Goyal) [2101526]
  - fuse: add FOPEN_NOFLUSH (Vivek Goyal) [2101526]
  - net: fix data-race in dev_isalive() (Hangbin Liu) [2101278]
  - net: Write lock dev_base_lock without disabling bottom halves. (Hangbin Liu) [2101278]
  - net: fix IFF_TX_SKB_NO_LINEAR definition (Hangbin Liu) [2101278]
  - sock: redo the psock vs ULP protection check (Hangbin Liu) [2101278]
  - net: fix dev_fill_forward_path with pppoe + bridge (Hangbin Liu) [2101278]
  - net: Fix features skip in for_each_netdev_feature() (Hangbin Liu) [2101278]
  - RDMA/irdma: Add SW mechanism to generate completions on error (Kamal Heib) [2100317]
  - RDMA/irdma: Remove the redundant variable (Kamal Heib) [2100317]
  - RDMA/irdma: Add support for DSCP (Kamal Heib) [2100317]
  - RDMA/irdma: Use irq_update_affinity_hint() (Kamal Heib) [2100317]
  - RDMA/irdma: Set protocol based on PF rdma_mode flag (Kamal Heib) [2096127 2100317]
  - spec: Keep .BTF section in modules (Viktor Malik) [2097188]
  - NFSD: Instantiate a struct file when creating a regular NFSv4 file (Benjamin Coddington) [1905809]
  - NFSD: Clean up nfsd_open_verified() (Benjamin Coddington) [1905809]
  - NFSD: Remove do_nfsd_create() (Benjamin Coddington) [1905809]
  - NFSD: Refactor NFSv4 OPEN(CREATE) (Benjamin Coddington) [1905809]
  - NFSD: Refactor NFSv3 CREATE (Benjamin Coddington) [1905809]
  - NFSD: Refactor nfsd_create_setattr() (Benjamin Coddington) [1905809]
  - NFSD: Avoid calling fh_drop_write() twice in do_nfsd_create() (Benjamin Coddington) [1905809]
  - NFSD: Clean up nfsd3_proc_create() (Benjamin Coddington) [1905809]
  - ext4: fix up test_dummy_encryption handling for new mount API (Lukas Czerner) [2099577]
  - ext4: only allow test_dummy_encryption when supported (Lukas Czerner) [2099577]
  - fscrypt: add new helper functions for test_dummy_encryption (Lukas Czerner) [2099577]
  - fscrypt: factor out fscrypt_policy_to_key_spec() (Lukas Czerner) [2099577]
  - ext4: fix super block checksum incorrect after mount (Lukas Czerner) [2099577]
  - ext4: fix bug_on ext4_mb_use_inode_pa (Lukas Czerner) [2099577]
  - ext4: make variable "count" signed (Lukas Czerner) [2099577]
  - ext4: add reserved GDT blocks check (Lukas Czerner) [2099577]
  - ext4: fix bug_on in __es_tree_search (Lukas Czerner) [2099577]
  - ext4: avoid cycles in directory h-tree (Lukas Czerner) [2099577]
  - ext4: verify dir block before splitting it (Lukas Czerner) [2099577]
  - ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state (Lukas Czerner) [2099577]
  - ext4: fix bug_on in ext4_writepages (Lukas Czerner) [2099577]
  - ext4: fix memory leak in parse_apply_sb_mount_options() (Lukas Czerner) [2099577]
  - ext4: reject the 'commit' option on ext2 filesystems (Lukas Czerner) [2099577]
  - ext4: fix race condition between ext4_write and ext4_convert_inline_data (Lukas Czerner) [2099577]
  - ext4: fix journal_ioprio mount option handling (Lukas Czerner) [2099577]
  - ext4: mark group as trimmed only if it was fully scanned (Lukas Czerner) [2099577]
  - ext4: fix use-after-free in ext4_rename_dir_prepare (Lukas Czerner) [2099577]
  - ext4: fix warning in ext4_handle_inode_extension (Lukas Czerner) [2099577]
  - redhat/configs: enable CONFIG_SAMPLE_VFIO_MDEV_MTTY (Patrick Talbert) [2071955]
  - Revert "mm: remove the extra ZONE_DEVICE struct page refcount" (Karol Herbst) [2043115]
  - Merge DRM changes from upstream v5.17..v5.18 (Karol Herbst) [2043115]
  - seq_file: include linux/string_helpers.h (Karol Herbst) [2043115]
  - iosys-map: Add a few more helpers (Karol Herbst) [2043115]
  - iosys-map: Add offset to iosys_map_memcpy_to() (Karol Herbst) [2043115]
  - dma-buf-map: Rename to iosys-map (Karol Herbst) [2043115]
  - Revert "virtio: wrap config->reset calls" (Karol Herbst) [2043115]
  - Merge DRM changes from upstream v5.16..v5.17 (Karol Herbst) [2043115]
  - drm/i915/rpl-s: Add PCI IDS for Raptor Lake S (Karol Herbst) [2043115]
  - Merge DRM changes from upstream v5.15..v5.16 (Karol Herbst) [2043115]
  - Merge DRM changes from upstream v5.14..v5.15 (Karol Herbst) [2043115]
  - fbdev: fbmem: add a helper to determine if an aperture is used by a fw fb (Karol Herbst) [2043115]
  - redhat/configs: enable CONFIG_UDMABUF (Karol Herbst) [2012748]
  - redhat/configs: set new DRM configs (Karol Herbst) [2043115]
  - Makefiles: set initial DRM version (Karol Herbst) [2043115]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-130.el9]
changelog:
  - scsi: iscsi: Fix session removal on shutdown (Chris Leech) [2101762]
  - scsi: qedi: Use QEDI_MODE_NORMAL for error handling (Chris Leech) [2101762]
  - scsi: iscsi: Add helper to remove a session from the kernel (Chris Leech) [2101762]
  - scsi: iscsi: Clean up bound endpoints during shutdown (Chris Leech) [2101762]
  - scsi: iscsi: Allow iscsi_if_stop_conn() to be called from kernel (Chris Leech) [2101762]
  - scsi: iscsi: Fix HW conn removal use after free (Chris Leech) [2101762]
  - scsi: iscsi: Make iscsi_unregister_transport() return void (Chris Leech) [2101762]
  - scsi: core: iscsi: Directly use ida_alloc()/ida_free() (Chris Leech) [2101762]
  - scsi: iscsi: Exclude zero from the endpoint ID range (Chris Leech) [2101762]
  - scsi: iscsi: Fix harmless double shift bug (Chris Leech) [2101762]
  - scsi: libiscsi: Remove unnecessary memset() in iscsi_conn_setup() (Chris Leech) [2101762]
  - scsi: libiscsi: Teardown iscsi_cls_conn gracefully (Chris Leech) [2101762]
  - scsi: libiscsi: Add iscsi_cls_conn to sysfs after initialization (Chris Leech) [2101762]
  - scsi: iscsi: Add helper functions to manage iscsi_cls_conn (Chris Leech) [2101762]
  - scsi: iscsi: Drop temp workq_name (Chris Leech) [2101762]
  - scsi: iscsi: Use the session workqueue for recovery (Chris Leech) [2101762]
  - scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding (Chris Leech) [2101762]
  - scsi: iscsi: Remove iscsi_scan_finished() (Chris Leech) [2101762]
  - scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown() (Chris Leech) [2101762]
  - scsi: libiscsi: Move ehwait initialization to iscsi_session_setup() (Chris Leech) [2101762]
  - filemap: Fix serialization adding transparent huge pages to page cache (Aristeu Rozanski) [2083861]
  - mm/huge_memory: Fix xarray node memory leak (Aristeu Rozanski) [2083861]
  - filemap: Cache the value of vm_flags (Aristeu Rozanski) [2083861]
  - mm/readahead: Fix readahead with large folios (Aristeu Rozanski) [2083861]
  - mm/hwpoison: use pr_err() instead of dump_page() in get_any_page() (Aristeu Rozanski) [2083861]
  - XArray: Disallow sibling entries of nodes (Aristeu Rozanski) [2083861]
  - tmpfs: fix regressions from wider use of ZERO_PAGE (Aristeu Rozanski) [2083861]
  - mm/rmap: Fix handling of hugetlbfs pages in page_vma_mapped_walk (Aristeu Rozanski) [2083861]
  - mm/mempolicy: Use vma_alloc_folio() in new_page() (Aristeu Rozanski) [2083861]
  - mm: Add vma_alloc_folio() (Aristeu Rozanski) [2083861]
  - mm/migrate: Use a folio in migrate_misplaced_transhuge_page() (Aristeu Rozanski) [2083861]
  - mm/migrate: Use a folio in alloc_migration_target() (Aristeu Rozanski) [2083861]
  - mm/munlock: update Documentation/vm/unevictable-lru.rst (Aristeu Rozanski) [2083861]
  - mm/munlock: add lru_add_drain() to fix memcg_stat_test (Aristeu Rozanski) [2083861]
  - XArray: Update the LRU list in xas_split() (Aristeu Rozanski) [2083861]
  - XArray: Fix xas_create_range() when multi-order entry present (Aristeu Rozanski) [2083861]
  - mm: unmap_mapping_range_tree() with i_mmap_rwsem shared (Aristeu Rozanski) [2083861]
  - mm: warn on deleting redirtied only if accounted (Aristeu Rozanski) [2083861]
  - mm/thp: fix NR_FILE_MAPPED accounting in page_*_file_rmap() (Aristeu Rozanski) [2083861]
  - mm: filemap_unaccount_folio() large skip mapcount fixup (Aristeu Rozanski) [2083861]
  - mm: delete __ClearPageWaiters() (Aristeu Rozanski) [2083861]
  - mm/hugetlb.c: export PageHeadHuge() (Aristeu Rozanski) [2083861]
  - mm: rework swap handling of zap_pte_range (Aristeu Rozanski) [2083861]
  - mm: change zap_details.zap_mapping into even_cows (Aristeu Rozanski) [2083861]
  - mm: rename zap_skip_check_mapping() to should_zap_page() (Aristeu Rozanski) [2083861]
  - mm: don't skip swap entry even if zap_details specified (Aristeu Rozanski) [2083861]
  - mm: replace multiple dcache flush with flush_dcache_folio() (Aristeu Rozanski) [2083861]
  - mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic() (Aristeu Rozanski) [2083861]
  - mm: shmem: fix missing cache flush in shmem_mfill_atomic_pte() (Aristeu Rozanski) [2083861]
  - mm: hugetlb: fix missing cache flush in hugetlb_mcopy_atomic_pte() (Aristeu Rozanski) [2083861]
  - mm: hugetlb: fix missing cache flush in copy_huge_page_from_user() (Aristeu Rozanski) [2083861]
  - mm: fix missing cache flush for all tail pages of compound page (Aristeu Rozanski) [2083861]
  - mm: thp: fix wrong cache flush in remove_migration_pmd() (Aristeu Rozanski) [2083861]
  - tmpfs: do not allocate pages on read (Aristeu Rozanski) [2083861]
  - shmem: mapping_set_exiting() to help mapped resilience (Aristeu Rozanski) [2083861]
  - selftests/vm/transhuge-stress: Support file-backed PMD folios (Aristeu Rozanski) [2083861]
  - mm/filemap: Support VM_HUGEPAGE for file mappings (Aristeu Rozanski) [2083861]
  - mm/readahead: Switch to page_cache_ra_order (Aristeu Rozanski) [2083861]
  - mm/readahead: Add large folio readahead (Aristeu Rozanski) [2083861]
  - mm: Support arbitrary THP sizes (Aristeu Rozanski) [2083861]
  - mm: Make large folios depend on THP (Aristeu Rozanski) [2083861]
  - mm: Fix READ_ONLY_THP warning (Aristeu Rozanski) [2083861]
  - mm/filemap: Allow large folios to be added to the page cache (Aristeu Rozanski) [2083861]
  - mm: Turn can_split_huge_page() into can_split_folio() (Aristeu Rozanski) [2083861]
  - mm/vmscan: Convert pageout() to take a folio (Aristeu Rozanski) [2083861]
  - mm/vmscan: Turn page_check_references() into folio_check_references() (Aristeu Rozanski) [2083861]
  - mm/vmscan: Account large folios correctly (Aristeu Rozanski) [2083861]
  - mm/vmscan: Optimise shrink_page_list for non-PMD-sized folios (Aristeu Rozanski) [2083861]
  - mm/vmscan: Free non-shmem folios without splitting them (Aristeu Rozanski) [2083861]
  - mm/rmap: Constify the rmap_walk_control argument (Aristeu Rozanski) [2083861]
  - mm/rmap: Convert rmap_walk() to take a folio (Aristeu Rozanski) [2083861]
  - mm: Turn page_anon_vma() into folio_anon_vma() (Aristeu Rozanski) [2083861]
  - mm/rmap: Turn page_lock_anon_vma_read() into folio_lock_anon_vma_read() (Aristeu Rozanski) [2083861]
  - mm/damon: Convert damon_pa_young() to use a folio (Aristeu Rozanski) [2083861]
  - mm/damon: Convert damon_pa_mkold() to use a folio (Aristeu Rozanski) [2083861]
  - mm/migrate: Convert remove_migration_ptes() to folios (Aristeu Rozanski) [2083861]
  - mm/rmap: Convert make_device_exclusive_range() to use folios (Aristeu Rozanski) [2083861]
  - mm/rmap: Convert try_to_migrate() to folios (Aristeu Rozanski) [2083861]
  - mm/rmap: Convert try_to_unmap() to take a folio (Aristeu Rozanski) [2083861]
  - mm/rmap: Turn page_referenced() into folio_referenced() (Aristeu Rozanski) [2083861]
  - mm/mlock: Add mlock_vma_folio() (Aristeu Rozanski) [2083861]
  - mm/rmap: Use a folio in page_mkclean_one() (Aristeu Rozanski) [2083861]
  - mm/page_idle: Convert page_idle_clear_pte_refs() to use a folio (Aristeu Rozanski) [2083861]
  - mm: Convert page_vma_mapped_walk to work on PFNs (Aristeu Rozanski) [2083861]
  - sparc32: Add pmd_pfn() (Aristeu Rozanski) [2083861]
  - powerpc: Add pmd_pfn() (Aristeu Rozanski) [2083861]
  - mm: Add DEFINE_PAGE_VMA_WALK and DEFINE_FOLIO_VMA_WALK (Aristeu Rozanski) [2083861]
  - mm: Add folio_pgoff() (Aristeu Rozanski) [2083861]
  - mm: Add split_folio_to_list() (Aristeu Rozanski) [2083861]
  - mm: Add folio_mapcount() (Aristeu Rozanski) [2083861]
  - mm: Turn head_compound_mapcount() into folio_entire_mapcount() (Aristeu Rozanski) [2083861]
  - mm/vmscan: Turn page_check_dirty_writeback() into folio_check_dirty_writeback() (Aristeu Rozanski) [2083861]
  - fs: Move many prototypes to pagemap.h (Aristeu Rozanski) [2083861]
  - mm/truncate: Combine invalidate_mapping_pagevec() and __invalidate_mapping_pages() (Aristeu Rozanski) [2083861]
  - mm: Turn deactivate_file_page() into deactivate_file_folio() (Aristeu Rozanski) [2083861]
  - mm/truncate: Convert __invalidate_mapping_pages() to use a folio (Aristeu Rozanski) [2083861]
  - mm/truncate: Split invalidate_inode_page() into mapping_evict_folio() (Aristeu Rozanski) [2083861]
  - mm: Convert remove_mapping() to take a folio (Aristeu Rozanski) [2083861]
  - mm/truncate: Replace page_mapped() call in invalidate_inode_page() (Aristeu Rozanski) [2083861]
  - mm/truncate: Convert invalidate_inode_page() to use a folio (Aristeu Rozanski) [2083861]
  - mm/truncate: Inline invalidate_complete_page() into its one caller (Aristeu Rozanski) [2083861]
  - splice: Use a folio in page_cache_pipe_buf_try_steal() (Aristeu Rozanski) [2083861]
  - mm/vmscan: Convert __remove_mapping() to take a folio (Aristeu Rozanski) [2083861]
  - mm: Turn putback_lru_page() into folio_putback_lru() (Aristeu Rozanski) [2083861]
  - mm: Add lru_to_folio() (Aristeu Rozanski) [2083861]
  - mm/memcg: Convert mem_cgroup_swapout() to take a folio (Aristeu Rozanski) [2083861]
  - mm/workingset: Convert workingset_eviction() to take a folio (Aristeu Rozanski) [2083861]
  - mm/gup: Convert check_and_migrate_movable_pages() to use a folio (Aristeu Rozanski) [2083861]
  - mm: Add three folio wrappers (Aristeu Rozanski) [2083861]
  - mm: Turn isolate_lru_page() into folio_isolate_lru() (Aristeu Rozanski) [2083861]
  - mm/gup: Turn compound_range_next() into gup_folio_range_next() (Aristeu Rozanski) [2083861]
  - mm/gup: Turn compound_next() into gup_folio_next() (Aristeu Rozanski) [2083861]
  - mm/gup: Convert gup_huge_pgd() to use a folio (Aristeu Rozanski) [2083861]
  - mm/gup: Convert gup_huge_pud() to use a folio (Aristeu Rozanski) [2083861]
  - mm/gup: Convert gup_huge_pmd() to use a folio (Aristeu Rozanski) [2083861]
  - mm/gup: Convert gup_hugepte() to use a folio (Aristeu Rozanski) [2083861]
  - mm/gup: Convert gup_pte_range() to use a folio (Aristeu Rozanski) [2083861]
  - mm/hugetlb: Use try_grab_folio() instead of try_grab_compound_head() (Aristeu Rozanski) [2083861]
  - mm/gup: Add gup_put_folio() (Aristeu Rozanski) [2083861]
  - mm: Remove page_cache_add_speculative() and page_cache_get_speculative() (Aristeu Rozanski) [2083861]
  - mm/gup: Convert try_grab_page() to use a folio (Aristeu Rozanski) [2083861]
  - mm/gup: Add try_get_folio() and try_grab_folio() (Aristeu Rozanski) [2083861]
  - mm: Turn page_maybe_dma_pinned() into folio_maybe_dma_pinned() (Aristeu Rozanski) [2083861]
  - mm: Add folio_pincount_ptr() (Aristeu Rozanski) [2083861]
  - mm: Make compound_pincount always available (Aristeu Rozanski) [2083861]
  - mm/gup: Remove hpage_pincount_sub() (Aristeu Rozanski) [2083861]
  - mm/gup: Remove hpage_pincount_add() (Aristeu Rozanski) [2083861]
  - mm/gup: Handle page split race more efficiently (Aristeu Rozanski) [2083861]
  - mm/gup: Remove an assumption of a contiguous memmap (Aristeu Rozanski) [2083861]
  - mm/gup: Fix some contiguous memmap assumptions (Aristeu Rozanski) [2083861]
  - mm/gup: Change the calling convention for compound_next() (Aristeu Rozanski) [2083861]
  - mm/gup: Optimise compound_range_next() (Aristeu Rozanski) [2083861]
  - mm/gup: Change the calling convention for compound_range_next() (Aristeu Rozanski) [2083861]
  - mm/gup: Remove for_each_compound_head() (Aristeu Rozanski) [2083861]
  - mm/gup: Remove for_each_compound_range() (Aristeu Rozanski) [2083861]
  - mm/gup: Increment the page refcount before the pincount (Aristeu Rozanski) [2083861]
  - mm: Convert swap_set_page_dirty() to swap_dirty_folio() (Aristeu Rozanski) [2083861]
  - fs: Add aops->dirty_folio (Aristeu Rozanski) [2083861]
  - fs: Add aops->launder_folio (Aristeu Rozanski) [2083861]
  - fs: Add invalidate_folio() aops method (Aristeu Rozanski) [2083861]
  - fs: Turn do_invalidatepage() into folio_invalidate() (Aristeu Rozanski) [2083861]
  - buffer: Add folio_buffers() (Aristeu Rozanski) [2083861]
  - fs/remap_range: Pass the file pointer to read_mapping_folio() (Aristeu Rozanski) [2083861]
  - fs: read_mapping_page() should take a struct file argument (Aristeu Rozanski) [2083861]
  - mm: refactor check_and_migrate_movable_pages (Aristeu Rozanski) [2083861]
  - mm: don't include <linux/memremap.h> in <linux/mm.h> (Aristeu Rozanski) [2083861]
  - mm: simplify freeing of devmap managed pages (Aristeu Rozanski) [2083861]
  - mm: move free_devmap_managed_page to memremap.c (Aristeu Rozanski) [2083861]
  - mm/munlock: mlock_vma_page() check against VM_SPECIAL (Aristeu Rozanski) [2083861]
  - mm: fix use-after-free bug when mm->mmap is reused after being freed (Aristeu Rozanski) [2083861]
  - mm/thp: shrink_page_list() avoid splitting VM_LOCKED THP (Aristeu Rozanski) [2083861]
  - mm/thp: collapse_file() do try_to_unmap(TTU_BATCH_FLUSH) (Aristeu Rozanski) [2083861]
  - mm/munlock: page migration needs mlock pagevec drained (Aristeu Rozanski) [2083861]
  - mm/munlock: mlock_page() munlock_page() batch by pagevec (Aristeu Rozanski) [2083861]
  - mm/munlock: delete smp_mb() from __pagevec_lru_add_fn() (Aristeu Rozanski) [2083861]
  - mm/migrate: __unmap_and_move() push good newpage to LRU (Aristeu Rozanski) [2083861]
  - mm/munlock: mlock_pte_range() when mlocking or munlocking (Aristeu Rozanski) [2083861]
  - mm/munlock: maintain page->mlock_count while unevictable (Aristeu Rozanski) [2083861]
  - mm/munlock: replace clear_page_mlock() by final clearance (Aristeu Rozanski) [2083861]
  - mm/munlock: rmap call mlock_vma_page() munlock_vma_page() (Aristeu Rozanski) [2083861]
  - mm/munlock: delete munlock_vma_pages_all(), allow oomreap (Aristeu Rozanski) [2083861]
  - mm/munlock: delete FOLL_MLOCK and FOLL_POPULATE (Aristeu Rozanski) [2083861]
  - mm/munlock: delete page_mlock() and all its works (Aristeu Rozanski) [2083861]
  - fs/proc: task_mmu.c: don't read mapcount for migration entry (Aristeu Rozanski) [2083861]
  - mm/migrate.c: rework migration_entry_wait() to not take a pageref (Aristeu Rozanski) [2083861]
  - filemap: Use folio_put_refs() in filemap_free_folio() (Aristeu Rozanski) [2083861]
  - mm: Add folio_put_refs() (Aristeu Rozanski) [2083861]
  - mm: drop node from alloc_pages_vma (Aristeu Rozanski) [2083861]
  - mm/oom_kill: allow process_mrelease to run under mmap_lock protection (Aristeu Rozanski) [2083861]
  - mm: document locking restrictions for vm_operations_struct::close (Aristeu Rozanski) [2083861]
  - mm: protect free_pgtables with mmap_lock write lock in exit_mmap (Aristeu Rozanski) [2083861]
  - pagevec: Initialise folio_batch->percpu_pvec_drained (Aristeu Rozanski) [2083861]
  - mm: Use multi-index entries in the page cache (Aristeu Rozanski) [2083861]
  - XArray: Add xas_advance() (Aristeu Rozanski) [2083861]
  - truncate,shmem: Handle truncates that split large folios (Aristeu Rozanski) [2083861]
  - truncate: Convert invalidate_inode_pages2_range to folios (Aristeu Rozanski) [2083861]
  - fs: Convert vfs_dedupe_file_range_compare to folios (Aristeu Rozanski) [2083861]
  - mm: Remove pagevec_remove_exceptionals() (Aristeu Rozanski) [2083861]
  - mm: Convert find_lock_entries() to use a folio_batch (Aristeu Rozanski) [2083861]
  - filemap: Return only folios from find_get_entries() (Aristeu Rozanski) [2083861]
  - filemap: Convert filemap_get_read_batch() to use a folio_batch (Aristeu Rozanski) [2083861]
  - filemap: Convert filemap_read() to use a folio (Aristeu Rozanski) [2083861]
  - truncate: Add invalidate_complete_folio2() (Aristeu Rozanski) [2083861]
  - truncate: Convert invalidate_inode_pages2_range() to use a folio (Aristeu Rozanski) [2083861]
  - truncate: Skip known-truncated indices (Aristeu Rozanski) [2083861]
  - truncate,shmem: Add truncate_inode_folio() (Aristeu Rozanski) [2083861]
  - shmem: Convert part of shmem_undo_range() to use a folio (Aristeu Rozanski) [2083861]
  - mm: Add unmap_mapping_folio() (Aristeu Rozanski) [2083861]
  - mm/slub: Convert __free_slab() to use struct slab (Aristeu Rozanski) [2083861]
  - mm/slub: Convert alloc_slab_page() to return a struct slab (Aristeu Rozanski) [2083861]
  - mm/slub: Convert print_page_info() to print_slab_info() (Aristeu Rozanski) [2083861]
  - mm/slub: Convert kfree() to use a struct slab (Aristeu Rozanski) [2083861]
  - mm/slub: Convert detached_freelist to use a struct slab (Aristeu Rozanski) [2083861]
  - mm: Convert check_heap_object() to use struct slab (Aristeu Rozanski) [2083861]
  - mm: Use struct slab in kmem_obj_info() (Aristeu Rozanski) [2083861]
  - mm: Convert __ksize() to struct slab (Aristeu Rozanski) [2083861]
  - mm: Convert virt_to_cache() to use struct slab (Aristeu Rozanski) [2083861]
  - mm: Convert [un]account_slab_page() to struct slab (Aristeu Rozanski) [2083861]
  - mm: Split slab into its own type (Aristeu Rozanski) [2083861]
  - truncate: Add truncate_cleanup_folio() (Aristeu Rozanski) [2083861]
  - filemap: Add filemap_release_folio() (Aristeu Rozanski) [2083861]
  - filemap: Use a folio in filemap_page_mkwrite (Aristeu Rozanski) [2083861]
  - filemap: Use a folio in filemap_map_pages (Aristeu Rozanski) [2083861]
  - filemap: Use folios in next_uptodate_page (Aristeu Rozanski) [2083861]
  - filemap: Convert page_cache_delete_batch to folios (Aristeu Rozanski) [2083861]
  - filemap: Convert filemap_get_pages to use folios (Aristeu Rozanski) [2083861]
  - filemap: Drop the refcount while waiting for page lock (Aristeu Rozanski) [2083861]
  - filemap: Add read_cache_folio and read_mapping_folio (Aristeu Rozanski) [2083861]
  - filemap: Convert filemap_fault to folio (Aristeu Rozanski) [2083861]
  - filemap: Convert do_async_mmap_readahead to take a folio (Aristeu Rozanski) [2083861]
  - readahead: Convert page_cache_ra_unbounded to folios (Aristeu Rozanski) [2083861]
  - readahead: Convert page_cache_async_ra() to take a folio (Aristeu Rozanski) [2083861]
  - filemap: Convert filemap_range_uptodate to folios (Aristeu Rozanski) [2083861]
  - filemap: Convert filemap_create_page to folio (Aristeu Rozanski) [2083861]
  - filemap: Convert filemap_read_page to take a folio (Aristeu Rozanski) [2083861]
  - filemap: Convert find_get_pages_contig to folios (Aristeu Rozanski) [2083861]
  - filemap: Convert filemap_get_read_batch to use folios (Aristeu Rozanski) [2083861]
  - filemap: Remove thp_contains() (Aristeu Rozanski) [2083861]
  - filemap: Convert find_get_entry to return a folio (Aristeu Rozanski) [2083861]
  - filemap: Add filemap_remove_folio and __filemap_remove_folio (Aristeu Rozanski) [2083861]
  - filemap: Convert tracing of page cache operations to folio (Aristeu Rozanski) [2083861]
  - filemap: Add filemap_unaccount_folio() (Aristeu Rozanski) [2083861]
  - filemap: Convert page_cache_delete to take a folio (Aristeu Rozanski) [2083861]
  - filemap: Add folio_put_wait_locked() (Aristeu Rozanski) [2083861]
  - mm: Add folio_test_pmd_mappable() (Aristeu Rozanski) [2083861]
  - iov_iter: Convert iter_xarray to use folios (Aristeu Rozanski) [2083861]
  - iov_iter: Add copy_folio_to_iter() (Aristeu Rozanski) [2083861]
  - pagevec: Add folio_batch (Aristeu Rozanski) [2083861]
  - mm/writeback: Improve __folio_mark_dirty() comment (Aristeu Rozanski) [2083861]
  - mm/doc: Add documentation for folio_test_uptodate (Aristeu Rozanski) [2083861]
  - fs/writeback: Convert inode_switch_wbs_work_fn to folios (Aristeu Rozanski) [2083861]
  - mm: add virt_to_folio() and folio_address() (Aristeu Rozanski) [2083861]
  - dax: remove the pgmap sanity checks in generic_fsdax_supported (Aristeu Rozanski) [2083861]
  - mm: migrate: simplify the file-backed pages validation when migrating its mapping (Aristeu Rozanski) [2083861]
  - mm/rmap.c: avoid double faults migrating device private pages (Aristeu Rozanski) [2083861]
  - mm: add zap_skip_check_mapping() helper (Aristeu Rozanski) [2083861]
  - mm: drop first_index/last_index in zap_details (Aristeu Rozanski) [2083861]
  - mm: clear vmf->pte after pte_unmap_same() returns (Aristeu Rozanski) [2083861]
  - mm/shmem: unconditionally set pte dirty in mfill_atomic_install_pte (Aristeu Rozanski) [2083861]
  - dax: stop using bdevname (Aristeu Rozanski) [2083861]
  - bpf: Let bpf_warn_invalid_xdp_action() report more info (Ivan Vecera) [2073454]
  - bpf: Do not WARN in bpf_warn_invalid_xdp_action() (Ivan Vecera) [2073454]
  - redhat: make kernel-zfcpdump-core to not provide kernel-core/kernel (Herton R. Krzesinski) [2027654]
  - scsi: csiostor: Add module softdep on cxgb4 (Rahul Lakkireddy) [1977553]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-131.el9]
changelog:
  - scsi: lpfc: Copyright updates for 14.2.0.5 patches (Paul Ely) [2102818]
  - scsi: lpfc: Update lpfc version to 14.2.0.5 (Paul Ely) [2102818]
  - scsi: lpfc: Remove Menlo/Hornet related code (Paul Ely) [2102818]
  - scsi: lpfc: Refactor lpfc_nvmet_prep_abort_wqe() into lpfc_sli_prep_abort_xri() (Paul Ely) [2102818]
  - scsi: lpfc: Fix lost NVMe paths during LIF bounce stress test (Paul Ely) [2102818]
  - scsi: lpfc: Fix attempted FA-PWWN usage after feature disable (Paul Ely) [2102818]
  - scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE (Paul Ely) [2102818]
  - scsi: lpfc: Remove extra atomic_inc on cmd_pending in queuecommand after VMID (Paul Ely) [2102818]
  - scsi: lpfc: Set PU field when providing D_ID in XMIT_ELS_RSP64_CX iocb (Paul Ely) [2102818]
  - scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input (Paul Ely) [2102818]
  - scsi: lpfc: Fix uninitialized cqe field in lpfc_nvme_cancel_iocb() (Paul Ely) [2102818]
  - scsi: lpfc: Change FA-PWWN detection methodology (Paul Ely) [2102818]
  - scsi: lpfc: Remove failing soft_wwn support (Paul Ely) [2102818]
  - scsi: lpfc: Update lpfc version to 14.2.0.4 (Paul Ely) [2102818]
  - scsi: lpfc: Allow reduced polling rate for nvme_admin_async_event cmd completion (Paul Ely) [2102818]
  - scsi: lpfc: Add more logging of cmd and cqe information for aborted NVMe cmds (Paul Ely) [2102818]
  - scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology (Paul Ely) [2102818]
  - scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted (Paul Ely) [2102818]
  - scsi: lpfc: Address NULL pointer dereference after starget_to_rport() (Paul Ely) [2102818]
  - scsi: lpfc: Resolve some cleanup issues following SLI path refactoring (Paul Ely) [2102818]
  - scsi: lpfc: Resolve some cleanup issues following abort path refactoring (Paul Ely) [2102818]
  - scsi: lpfc: Correct BDE type for XMIT_SEQ64_WQE in lpfc_ct_reject_event() (Paul Ely) [2102818]
  - scsi: lpfc: Add support for ATTO Fibre Channel devices (Paul Ely) [2102818]
  - scsi: lpfc: Add support for VMID tagging of NVMe I/Os (Paul Ely) [2102818]
  - scsi: lpfc: Rework lpfc_vmid_get_appid() to be protocol independent (Paul Ely) [2102818]
  - scsi: lpfc: Commonize VMID code location (Paul Ely) [2102818]
  - scsi: nvme-fc: Add new routine nvme_fc_io_getuuid() (Paul Ely) [2102818]
  - scsi: target: pscsi: Set SCF_TREAT_READ_AS_NORMAL flag only if there is valid data (Maurizio Lombardi) [2080216]
  - x86/speculation/mmio: Print SMT warning (Waiman Long) [2090254] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - KVM: x86/speculation: Disable Fill buffer clear within guests (Waiman Long) [2090254] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Waiman Long) [2090254] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/speculation/srbds: Update SRBDS mitigation selection (Waiman Long) [2090254] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Waiman Long) [2090254] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Waiman Long) [2090254] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Waiman Long) [2090254] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Waiman Long) [2090254] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/speculation: Add a common function for MD_CLEAR mitigation update (Waiman Long) [2090254] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Waiman Long) [2090254] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - Documentation: Add documentation for Processor MMIO Stale Data (Waiman Long) [2090254] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/tsx: Disable TSX development mode at boot (Waiman Long) [2090254]
  - x86/tsx: Use MSR_TSX_CTRL to clear CPUID bits (Waiman Long) [2090254]
  - Documentation: Add L1D flushing Documentation (Waiman Long) [2090254]
  - x86, prctl: Hook L1D flushing in via prctl (Waiman Long) [2090254]
  - x86/mm: Prepare for opt-in based L1D flush in switch_mm() (Waiman Long) [2090254]
  - x86/process: Make room for TIF_SPEC_L1D_FLUSH (Waiman Long) [2090254]
  - sched: Add task_work callback for paranoid L1D flush (Waiman Long) [2090254]
  - x86/mm: Refactor cond_ibpb() to support other use cases (Waiman Long) [2090254]
  - cpuidle: psci: Fix regression leading to no genpd governor (Mark Langsdorf) [2067314]
  - cpuidle: Factor-out power domain related code from PSCI domain driver (Mark Langsdorf) [2067314]
  - cpuidle: haltpoll: Call cpuidle_poll_state_init() later (Mark Langsdorf) [2067314]
  - cpuidle: use default_groups in kobj_type (Mark Langsdorf) [2067314]
  - cpuidle: Fix cpuidle_remove_state_sysfs() kerneldoc comment (Mark Langsdorf) [2067314]
  - cpuidle: menu: Fix typo in a comment (Mark Langsdorf) [2067314]
  - cpuidle: Fix kobject memory leaks in error paths (Mark Langsdorf) [2067314]
  - Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" (Chris von Recklinghausen) [2059703] {CVE-2022-0854}
  - swiotlb: fix info leak with DMA_FROM_DEVICE (Chris von Recklinghausen) [2059703] {CVE-2022-0854}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-132.el9]
changelog:
  - SUNRPC: Don't leak sockets in xs_local_connect() (Jeffrey Layton) [2089430]
  - SUNRPC: clean up some inconsistent indenting (Jeffrey Layton) [2089430]
  - SUNRPC: Ensure we flush any closed sockets before xs_xprt_free() (Jeffrey Layton) [2089430]
  - SUNRPC: Don't call connect() more than once on a TCP socket (Jeffrey Layton) [2089430]
  - kdump: round up the total memory size to 128M for crashkernel reservation (Tao Liu) [2058040]
  - topology/sysfs: Add PPIN in sysfs under cpu topology (Mark Langsdorf) [2067284]
  - x86/cpu: Read/save PPIN MSR during initialization (Mark Langsdorf) [2067284]
  - x86/cpu: Merge Intel and AMD ppin_init() functions (Mark Langsdorf) [2067284]
  - x86/build: Use the proper name CONFIG_FW_LOADER (Mark Langsdorf) [2067252]
  - gpio: mockup: Convert to use software nodes (Mark Langsdorf) [2067252]
  - of: unittest: update text of expected warnings (Mark Langsdorf) [2067284]
  - rtc: mc146818-lib: fix signedness bug in mc146818_get_time() (Mark Langsdorf) [2067284]
  - topology/sysfs: get rid of htmldoc warning (Mark Langsdorf) [2067284]
  - topology: Fix up build warning in topology_is_visible() (Mark Langsdorf) [2067284]
  - arch_topology: Do not set llc_sibling if llc_id is invalid (Mark Langsdorf) [2067284]
  - topology/sysfs: Hide PPIN on systems that do not support it. (Mark Langsdorf) [2067284]
  - regmap: allow a defined reg_base to be added to every address (Mark Langsdorf) [2067284]
  - regmap: add configurable downshift for addresses (Mark Langsdorf) [2067284]
  - drivers/base/dd.c : Remove the initial value of the global variable (Mark Langsdorf) [2067284]
  - devres: fix typos in comments (Mark Langsdorf) [2067284]
  - base: soc: Make soc_device_match() simpler and easier to read (Mark Langsdorf) [2067284]
  - driver core: dd: fix return value of __setup handler (Mark Langsdorf) [2067284]
  - driver core: Refactor sysfs and drv/bus remove hooks (Mark Langsdorf) [2067284]
  - driver core: Refactor multiple copies of device cleanup (Mark Langsdorf) [2067284]
  - arch_topology: obtain cpu capacity using information from CPPC (Mark Langsdorf) [2067284]
  - PM: core: keep irq flags in device_pm_check_callbacks() (Mark Langsdorf) [2067284]
  - PM: sleep: Add device name to suspend_report_result() (Mark Langsdorf) [2067284]
  - PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend() (Mark Langsdorf) [2067284]
  - PM: sleep: wakeup: Fix typos in comments (Mark Langsdorf) [2067284]
  - PM: domains: Fix sleep-in-atomic bug caused by genpd_debug_remove() (Mark Langsdorf) [2067284]
  - PM: domains: use dev_err_probe() to simplify error handling (Mark Langsdorf) [2067284]
  - PM: domains: Prevent power off for parent unless child is in deepest state (Mark Langsdorf) [2067284]
  - firmware_loader: EXTRA_FIRMWARE does not support compressed files (Mark Langsdorf) [2067284]
  - driver core: cleanup double words comments (Mark Langsdorf) [2067284]
  - device property: Don't split fwnode_get_irq*() APIs in the code (Mark Langsdorf) [2067284]
  - regmap: irq: cleanup comments (Mark Langsdorf) [2067284]
  - platform: use dev_err_probe() in platform_get_irq_byname() (Mark Langsdorf) [2067284]
  - devtmpfs: drop redundant fs parameters from internal fs (Mark Langsdorf) [2067284]
  - topology/sysfs: Add format parameter to macro defining "show" functions for proc (Mark Langsdorf) [2067284]
  - component: Replace most references to 'master' with 'aggregate device' (Mark Langsdorf) [2067284]
  - device property: Add fwnode_irq_get_byname (Mark Langsdorf) [2067284]
  - regmap-irq: Fix typo in comment (Mark Langsdorf) [2067284]
  - driver core: Free DMA range map when device is released (Mark Langsdorf) [2067284]
  - regmap-irq: Update interrupt clear register for proper reset (Mark Langsdorf) [2067284]
  - PM: s2idle: ACPI: Fix wakeup interrupts handling (Mark Langsdorf) [2067284]
  - devtmpfs regression fix: reconfigure on each mount (Mark Langsdorf) [2067284]
  - regmap: debugfs: Fix indentation (Mark Langsdorf) [2067284]
  - regmap: Call regmap_debugfs_exit() prior to _init() (Mark Langsdorf) [2067284]
  - driver core: Make bus notifiers in right order in really_probe() (Mark Langsdorf) [2067284]
  - driver core: Move driver_sysfs_remove() after driver_sysfs_add() (Mark Langsdorf) [2067284]
  - headers/uninline: Uninline single-use function: kobject_has_children() (Mark Langsdorf) [2067284]
  - redhat: enable CONFIG_DEVTMPFS_SAFE (Mark Langsdorf) [2067284]
  - devtmpfs: mount with noexec and nosuid (Mark Langsdorf) [2067284]
  - driver core: Simplify async probe test code by using ktime_ms_delta() (Mark Langsdorf) [2067284]
  - kobject: remove kset from struct kset_uevent_ops callbacks (Mark Langsdorf) [2067284]
  - driver core: make kobj_type constant. (Mark Langsdorf) [2067284]
  - PM: runtime: Simplify locking in pm_runtime_put_suppliers() (Mark Langsdorf) [2067284]
  - software node: fix wrong node passed to find nargs_prop (Mark Langsdorf) [2067284]
  - driver core: platform: document registration-failure requirement (Mark Langsdorf) [2067284]
  - device property: Add fwnode_iomap() (Mark Langsdorf) [2067284]
  - device property: Drop fwnode_graph_get_remote_node() (Mark Langsdorf) [2067284]
  - device property: Use fwnode_graph_for_each_endpoint() macro (Mark Langsdorf) [2067284]
  - device property: Implement fwnode_graph_get_endpoint_count() (Mark Langsdorf) [2067284]
  - device property: Fix documentation for FWNODE_GRAPH_DEVICE_DISABLED (Mark Langsdorf) [2067284]
  - device property: Fix fwnode_graph_devcon_match() fwnode leak (Mark Langsdorf) [2067284]
  - PM: runtime: Add safety net to supplier device release (Mark Langsdorf) [2067284]
  - PM: runtime: Capture device status before disabling runtime PM (Mark Langsdorf) [2067284]
  - rtc: Check return value from mc146818_get_time() (Mark Langsdorf) [2067284]
  - rtc: mc146818-lib: change return values of mc146818_get_time() (Mark Langsdorf) [2067284]
  - rtc: cmos: take rtc_lock while reading from CMOS (Mark Langsdorf) [2067284]
  - device property: Check fwnode->secondary when finding properties (Mark Langsdorf) [2067284]
  - Documentation/auxiliary_bus: Move the text into the code (Mark Langsdorf) [2067284]
  - Documentation/auxiliary_bus: Clarify the release of devices from find device (Mark Langsdorf) [2067284]
  - Documentation/auxiliary_bus: Clarify __auxiliary_driver_register (Mark Langsdorf) [2067284]
  - Documentation/auxiliary_bus: Clarify auxiliary_device creation (Mark Langsdorf) [2067284]
  - topology/sysfs: rework book and drawer topology ifdefery (Mark Langsdorf) [2067284]
  - topology/sysfs: export cluster attributes only if an architectures has support (Mark Langsdorf) [2067284]
  - topology/sysfs: export die attributes only if an architectures has support (Mark Langsdorf) [2067284]
  - driver core: platform: Make use of the helper function dev_err_probe() (Mark Langsdorf) [2067284]
  - device property: Remove device_add_properties() API (Mark Langsdorf) [2067284]
  - PCI: Convert to device_create_managed_software_node() (Mark Langsdorf) [2067284]
  - driver core: Don't call device_remove_properties() from device_del() (Mark Langsdorf) [2067284]
  - arch_topology: Remove unused topology_set_thermal_pressure() and related (Mark Langsdorf) [2067284]
  - thermal: cpufreq_cooling: Use new thermal pressure update function (Mark Langsdorf) [2067284]
  - arch_topology: Introduce thermal pressure update function (Mark Langsdorf) [2067284]
  - regmap: allow to define reg_update_bits for no bus configuration (Mark Langsdorf) [2067284]
  - PM: sleep: Fix error handling in dpm_prepare() (Mark Langsdorf) [2067252]
  - arch_numa: simplify numa_distance allocation (Mark Langsdorf) [2067252]
  - arm64: support page mapping percpu first chunk allocator (Mark Langsdorf) [2067252]
  - PM: sleep: Avoid calling put_device() under dpm_list_mtx (Mark Langsdorf) [2067252]
  - PM: sleep: Fix runtime PM based cpuidle support (Mark Langsdorf) [2067252]
  - PM / wakeirq: support enabling wake-up irq after runtime_suspend called (Mark Langsdorf) [2067252]
  - device property: Drop redundant NULL checks (Mark Langsdorf) [2067252]
  - PM: sleep: Pause cpuidle later and resume it earlier during system transitions (Mark Langsdorf) [2067252]
  - PM: suspend: Do not pause cpuidle in the suspend-to-idle path (Mark Langsdorf) [2067252]
  - regmap: spi: Set regmap max raw r/w from max_transfer_size (Mark Langsdorf) [2067252]
  - PM: sleep: Do not let "syscore" devices runtime-suspend during system transitions (Mark Langsdorf) [2067252]
  - x86/build: Tuck away built-in firmware under FW_LOADER (Mark Langsdorf) [2067252]
  - vmlinux.lds.h: wrap built-in firmware support under FW_LOADER (Mark Langsdorf) [2067252]
  - firmware_loader: move struct builtin_fw to the only place used (Mark Langsdorf) [2067252]
  - x86/microcode: Use the firmware_loader built-in API (Mark Langsdorf) [2067252]
  - firmware_loader: remove old DECLARE_BUILTIN_FIRMWARE() (Mark Langsdorf) [2067252]
  - firmware_loader: formalize built-in firmware API (Mark Langsdorf) [2067252]
  - component: do not leave master devres group open after bind (Mark Langsdorf) [2067252]
  - driver core: Provide device_match_acpi_handle() helper (Mark Langsdorf) [2067252]
  - regmap: Fix possible double-free in regcache_rbtree_exit() (Mark Langsdorf) [2067252]
  - device property: build kunit tests without structleak plugin (Mark Langsdorf) [2067252]
  - driver core: Reject pointless SYNC_STATE_ONLY device links (Mark Langsdorf) [2067252]
  - firmware_loader: add a sanity check for firmware_request_builtin() (Mark Langsdorf) [2067252]
  - firmware_loader: split built-in firmware call (Mark Langsdorf) [2067252]
  - firmware_loader: fix pre-allocated buf built-in firmware use (Mark Langsdorf) [2067252]
  - drivers/base/component.c: remove superfluous header files from component.c (Mark Langsdorf) [2067252]
  - drivers/base/arch_topology.c: remove superfluous header (Mark Langsdorf) [2067252]
  - driver core: use NUMA_NO_NODE during device_initialize (Mark Langsdorf) [2067252]
  - driver core: Fix possible memory leak in device_link_add() (Mark Langsdorf) [2067252]
  - driver core: Add debug logs when fwnode links are added/deleted (Mark Langsdorf) [2067252]
  - driver core: Create __fwnode_link_del() helper function (Mark Langsdorf) [2067252]
  - driver core: Set deferred probe reason when deferred by driver core (Mark Langsdorf) [2067252]
  - driver core: fw_devlink: Add support for FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD (Mark Langsdorf) [2067252]
  - driver core: Clarify that dev_err_probe() is OK even w/out -EPROBE_DEFER (Mark Langsdorf) [2067252]
  - driver core: fw_devlink: Improve handling of cyclic dependencies (Mark Langsdorf) [2067252]
  - driver core: platform: Make use of the helper macro SET_RUNTIME_PM_OPS() (Mark Langsdorf) [2067252]
  - PM: base: power: don't try to use non-existing RTC for storing data (Mark Langsdorf) [2067252]
  - PM: sleep: core: Avoid setting power.must_resume to false (Mark Langsdorf) [2067252]
  - PM: sleep: wakeirq: drop useless parameter from dev_pm_attach_wake_irq() (Mark Langsdorf) [2067252]
  - PM: domains: Fix domain attach for CONFIG_PM_OPP=n (Mark Langsdorf) [2067252]
  - PM: runtime: add devm_pm_clk_create helper (Mark Langsdorf) [2067252]
  - PM: runtime: add devm_pm_runtime_enable helper (Mark Langsdorf) [2067252]
  - regmap: teach regmap to use raw spinlocks if requested in the config (Mark Langsdorf) [2067252]
  - driver core: platform: Remove platform_device_add_properties() (Mark Langsdorf) [2067252]
  - PM: domains: Add support for 'required-opps' to set default perf state (Mark Langsdorf) [2067252]
  - Revert "media: device property: Call fwnode_graph_get_endpoint_by_id() for fwnode->secondary" (Mark Langsdorf) [2067252]
  - device property: Check fwnode->secondary in fwnode_graph_get_next_endpoint() (Mark Langsdorf) [2067252]
  - drivers/base/node.c: use bin_attribute to break the size limitation of cpumap ABI (Mark Langsdorf) [2067252]
  - regmap: allow const array for {devm_,}regmap_field_bulk_alloc reg_fields (Mark Langsdorf) [2067252]
  - driver: base: Prefer unsigned int to bare use of unsigned (Mark Langsdorf) [2067252]
  - cacheinfo: clear cache_leaves(cpu) in free_cache_attributes() (Mark Langsdorf) [2067252]
  - driver core: Fix error return code in really_probe() (Mark Langsdorf) [2067252]
  - firmware: fix theoretical UAF race with firmware cache and resume (Mark Langsdorf) [2067252]
  - driver: base: Replace symbolic permissions with octal permissions (Mark Langsdorf) [2067252]
  - driver core: Split device_platform_notify() (Mark Langsdorf) [2067252]
  - software nodes: Split software_node_notify() (Mark Langsdorf) [2067252]
  - regmap: Prefer unsigned int to bare use of unsigned (Mark Langsdorf) [2067252]
  - regmap: fix the offset of register error log (Mark Langsdorf) [2067252]
  - nfs: reexport documentation (Dave Wysochanski) [2006399]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-133.el9]
changelog:
  - lockd: fix nlm_close_files (Jeffrey Layton) [2082816]
  - lockd: set fl_owner when unlocking files (Jeffrey Layton) [2082816]
  - intel/igb:fix repeated words in comments (Corinna Vinschen) [2037984]
  - igb: remove unexpected word "the" (Corinna Vinschen) [2037984]
  - igb: Make DMA faster when CPU is active on the PCIe link (Corinna Vinschen) [2037984]
  - igb: fix a use-after-free issue in igb_clean_tx_ring (Corinna Vinschen) [2037984]
  - igb: Remove duplicate defines (Corinna Vinschen) [2037984]
  - igb: skip phy status check where unavailable (Corinna Vinschen) [2037984]
  - igb: Convert kmap() to kmap_local_page() (Corinna Vinschen) [2037984]
  - igb: zero hwtstamp by default (Corinna Vinschen) [2037984]
  - igb: Remove useless DMA-32 fallback configuration (Corinna Vinschen) [2037984]
  - igb: support EXTTS on 82580/i354/i350 (Corinna Vinschen) [2037984]
  - igb: support PEROUT on 82580/i354/i350 (Corinna Vinschen) [2037984]
  - igb: move PEROUT and EXTTS isr logic to separate functions (Corinna Vinschen) [2037984]
  - igb: move SDP config initialization to separate function (Corinna Vinschen) [2037984]
  - igb: switch to napi_build_skb() (Corinna Vinschen) [2037984]
  - igb: remove never changed variable `ret_val' (Corinna Vinschen) [2037984]
  - soc: qcom: aoss: Fix missing put_device call in qmp_get (Steve Best) [2100219]
  - soc: qcom: aoss: Expose send for generic usecase (Steve Best) [2100219]
  - soc: qcom: mdt_loader: be more informative on errors (Steve Best) [2100219]
  - soc: qcom: mdt_loader: Split out split-file-loader (Steve Best) [2100219]
  - revert remoteproc: qcom: pas: Carry PAS metadata context (Steve Best) [2100219]
  - net: openvswitch: fix parsing of nw_proto for IPv6 fragments (Antoine Tenart) [2101452]
  - net: openvswitch: fix misuse of the cached connection on tuple changes (Antoine Tenart) [2101452]
  - kasan: fix a missing header include of static_keys.h (Mark Salter) [2070169]
  - linkage: Fix issue with missing symbol size (Mark Salter) [2070169]
  - arm64: mte: Ensure the cleared tags are visible before setting the PTE (Mark Salter) [2070169]
  - arm64: Enable repeat tlbi workaround on KRYO4XX gold CPUs (Mark Salter) [2070169]
  - arm64: cpufeature: remove duplicate ID_AA64ISAR2_EL1 entry (Mark Salter) [2070169]
  - arm64: vdso: fix makefile dependency on vdso.so (Mark Salter) [2070169]
  - arm[64]/memremap: don't abuse pfn_valid() to ensure presence of linear map (Mark Salter) [2070169]
  - arm64: mm: fix p?d_leaf() (Mark Salter) [2070169]
  - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [2070169]
  - arm64: patch_text: Fixup last cpu should be master (Mark Salter) [2070169]
  - cpuidle: PSCI: Move the `has_lpi` check to the beginning of the function (Mark Salter) [2070169]
  - docs: sysfs-devices-system-cpu: document "asymm" value for mte_tcf_preferred (Mark Salter) [2070169]
  - arm64/mte: Remove asymmetric mode from the prctl() interface (Mark Salter) [2070169]
  - arm64/mte: Add userspace interface for enabling asymmetric mode (Mark Salter) [2070169]
  - arm64/mte: Add hwcap for asymmetric mode (Mark Salter) [2070169]
  - arm64/mte: Add a little bit of documentation for mte_update_sctlr_user() (Mark Salter) [2070169]
  - arm64/mte: Document ABI for asymmetric mode (Mark Salter) [2070169]
  - arm64: mte: avoid clearing PSTATE.TCO on entry unless necessary (Mark Salter) [2070169]
  - kasan: split kasan_*enabled() functions into a separate header (Mark Salter) [2070169]
  - arm64: Add cavium_erratum_23154_cpus missing sentinel (Mark Salter) [2070169]
  - irqchip/gic-v3: Workaround Marvell erratum 38545 when reading IAR (Mark Salter) [2070169]
  - arm64: drop unused includes of <linux/personality.h> (Mark Salter) [2070169]
  - arm64: prevent instrumentation of bp hardening callbacks (Mark Salter) [2070169]
  - arm64: cpufeature: Remove cpu_has_fwb() check (Mark Salter) [2070169]
  - arm64: atomics: remove redundant static branch (Mark Salter) [2070169]
  - arm64: entry: Save some nops when CONFIG_ARM64_PSEUDO_NMI is not set (Mark Salter) [2070169]
  - arm64/mm: Drop use_1G_block() (Mark Salter) [2070169]
  - arm64: avoid flushing icache multiple times on contiguous HugeTLB (Mark Salter) [2070169]
  - arm64/hugetlb: Define __hugetlb_valid_size() (Mark Salter) [2070169]
  - arm64/mm: Consolidate TCR_EL1 fields (Mark Salter) [2070169]
  - Revert "arm64: Mitigate MTE issues with str{n}cmp()" (Mark Salter) [2070169]
  - arm64: lib: Import latest version of Arm Optimized Routines' strncmp (Mark Salter) [2070169]
  - arm64: lib: Import latest version of Arm Optimized Routines' strcmp (Mark Salter) [2070169]
  - arm64: cpufeature: Warn if we attempt to read a zero width field (Mark Salter) [2070169]
  - arm64: cpufeature: Add missing .field_width for GIC system registers (Mark Salter) [2070169]
  - arm64: signal: nofpsimd: Do not allocate fp/simd context when not available (Mark Salter) [2070169]
  - arm64: cpufeature: Always specify and use a field width for capabilities (Mark Salter) [2070169]
  - arm64: module: remove (NOLOAD) from linker script (Mark Salter) [2070169]
  - arm64: clean up symbol aliasing (Mark Salter) [2070169]
  - linkage: add SYM_FUNC_ALIAS{,_LOCAL,_WEAK}() (Mark Salter) [2070169]
  - arm64: Add support of PAuth QARMA3 architected algorithm (Mark Salter) [2070169]
  - arm64: cpufeature: Mark existing PAuth architected algorithm as QARMA5 (Mark Salter) [2070169]
  - arm64: cpufeature: Account min_field_value when cheking secondaries for PAuth (Mark Salter) [2070169]
  - arm64: insn: add encoders for atomic operations (Mark Salter) [2070169]
  - arm64: move AARCH64_BREAK_FAULT into insn-def.h (Mark Salter) [2070169]
  - arm64: insn: Generate 64 bit mask immediates correctly (Mark Salter) [2070169]
  - arm64: booting.rst: Clarify on requiring non-secure EL2 (Mark Salter) [2070169]
  - arm64: fix clang warning about TRAMP_VALIAS (Mark Salter) [2070169]
  - arm64: Do not include __READ_ONCE() block in assembly files (Mark Salter) [2070169]
  - arm64: kasan: fix include error in MTE functions (Mark Salter) [2070169]
  - arm64: Ensure execute-only permissions are not allowed without EPAN (Mark Salter) [2070169]
  - arm64: Enable Cortex-A510 erratum 2051678 by default (Mark Salter) [2070169]
  - redhat/configs: aarch64: Enable ARM64_ERRATUM_2051678 workaround (Mark Salter) [2070169]
  - arm64: cpufeature: List early Cortex-A510 parts as having broken dbm (Mark Salter) [2070169]
  - arm64: errata: Update ARM64_ERRATUM_[2119858|2224489] with Cortex-X2 ranges (Mark Salter) [2070169]
  - arm64: vdso: Fix "no previous prototype" warning (Mark Salter) [2070169]
  - arm64: errata: Add detection for TRBE trace data corruption (Mark Salter) [2070169]
  - arm64: errata: Add detection for TRBE invalid prohibited states (Mark Salter) [2070169]
  - arm64: errata: Add detection for TRBE ignored system register writes (Mark Salter) [2070169]
  - arm64: mm: apply __ro_after_init to memory_limit (Mark Salter) [2070169]
  - arm64: atomics: lse: Dereference matching size (Mark Salter) [2070169]
  - asm-generic: Add missing brackets for io_stop_wc macro (Mark Salter) [2070169]
  - arm64: Use correct method to calculate nomap region boundaries (Mark Salter) [2070169]
  - arm64: Drop outdated links in comments (Mark Salter) [2070169]
  - arm64: errata: Fix exec handling in erratum 1418040 workaround (Mark Salter) [2070169]
  - arm64: Unhash early pointer print plus improve comment (Mark Salter) [2070169]
  - asm-generic: introduce io_stop_wc() and add implementation for ARM64 (Mark Salter) [2070169]
  - arm64: errata: Enable TRBE workaround for write to out-of-range address (Mark Salter) [2070169]
  - arm64: errata: Enable workaround for TRBE overwrite in FILL mode (Mark Salter) [2070169]
  - redhat/configs: aarch64: Enable ARM64_WORKAROUND_TRBE_WRITE_OUT_OF_RANGE (Mark Salter) [2070169]
  - arm64: errata: Add detection for TRBE write to out-of-range (Mark Salter) [2070169]
  - redhat/configs: aarch64: Enable ARM64_WORKAROUND_TSB_FLUSH_FAILURE (Mark Salter) [2070169]
  - arm64: errata: Add workaround for TSB flush failures (Mark Salter) [2070169]
  - redhat/configs: aarch64: Enable ARM64_WORKAROUND_TRBE_OVERWRITE_FILL_MODE (Mark Salter) [2070169]
  - arm64: errata: Add detection for TRBE overwrite in FILL mode (Mark Salter) [2070169]
  - arm64: remove __dma_*_area() aliases (Mark Salter) [2070169]
  - docs/arm64: delete a space from tagged-address-abi (Mark Salter) [2070169]
  - arm64/fp: Add comments documenting the usage of state restore functions (Mark Salter) [2070169]
  - arm64: mm: Use asid feature macro for cheanup (Mark Salter) [2070169]
  - arm64: mm: Rename asid2idx() to ctxid2asid() (Mark Salter) [2070169]
  - arm64: kexec: reduce calls to page_address() (Mark Salter) [2070169]
  - arm64: extable: remove unused ex_handler_t definition (Mark Salter) [2070169]
  - arm64: entry: Use SDEI event constants (Mark Salter) [2070169]
  - arm64: Simplify checking for populated DT (Mark Salter) [2070169]
  - arm64: Ensure that the 'bti' macro is defined where linkage.h is included (Mark Salter) [2070169]
  - arm64: Use BTI C directly and unconditionally (Mark Salter) [2070169]
  - arm64: Unconditionally override SYM_FUNC macros (Mark Salter) [2070169]
  - arm64: Add macro version of the BTI instruction (Mark Salter) [2070169]
  - arm64: Enable KCSAN (Mark Salter) [2070169]
  - arm64/sve: Minor clarification of ABI documentation (Mark Salter) [2070169]
  - arm64/sve: Generalise vector length configuration prctl() for SME (Mark Salter) [2070169]
  - arm64/sve: Make sysctl interface for SVE reusable by SME (Mark Salter) [2070169]
  - arm64: perf: Support new DT compatibles (Mark Salter) [2070169]
  - arm64: perf: Simplify registration boilerplate (Mark Salter) [2070169]
  - arm64: perf: Support Denver and Carmel PMUs (Mark Salter) [2070169]
  - arm64: atomics: lse: define RETURN ops in terms of FETCH ops (Mark Salter) [2070169]
  - arm64: atomics: lse: improve constraints for simple ops (Mark Salter) [2070169]
  - arm64: atomics: lse: define ANDs in terms of ANDNOTs (Mark Salter) [2070169]
  - arm64: atomics lse: define SUBs in terms of ADDs (Mark Salter) [2070169]
  - arm64: atomics: format whitespace consistently (Mark Salter) [2070169]
  - arm64/xor: use EOR3 instructions when available (Mark Salter) [2070169]
  - arm64: mm: log potential KASAN shadow alias (Mark Salter) [2070169]
  - arm64: mm: use die_kernel_fault() in do_mem_abort() (Mark Salter) [2070169]
  - arm64: mte: DC {GVA,GZVA} shouldn't be used when DCZID_EL0.DZP == 1 (Mark Salter) [2070169]
  - arm64: clear_page() shouldn't use DC ZVA when DCZID_EL0.DZP == 1 (Mark Salter) [2070169]
  - arm64: Snapshot thread flags (Mark Salter) [2070169]
  - dlm: fix missing lkb refcount handling (Alexander Aring) [2084605]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-134.el9]
changelog:
  - redhat: fix kernel_variant_package option definition (Herton R. Krzesinski)
  - audit: free module name (Richard Guy Briggs) [2100261]
  - audit,io_uring,io-wq: call __audit_uring_exit for dummy contexts (Richard Guy Briggs) [2100261]
  - certs: Add FIPS selftests (David Howells) [2080044]
  - certs: Move load_certificate_list() to be with the asymmetric keys code (David Howells) [2080044]
  - scsi: core: Add scsi_done_direct() for immediate completion (Ewan D. Milne) [2094105]
  - scsi: core: Rename scsi_mq_done() into scsi_done() and export it (Ewan D. Milne) [2094105]
  - scsi: core: Use a structure member to track the SCSI command submitter (Ewan D. Milne) [2094105]


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-10
changelog:
  - Add conflicts of kernel-srpm-macros with kernel-rpm-macros < 185-9
    as macros.kmp, kmodtool, and rpmsort were moved from the latter
    to the former.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-11
changelog:
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x
  - Resolves: #2055464


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Set supplementary groups when dropping privileges
  - Show more descriptive error messages on missing files errors
  - Create /usr/libexec/keylime directory


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Use classic release instead of autorelease macro
  - Use classic changelog instead of autochangelog macro


author: Julien Rische <jrische@redhat.com> - 1.19.1-14
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode


author: Julien Rische <jrische@redhat.com> - 1.19.1-20
changelog:
  - Fix OpenSSL 3 MD5 encyption in FIPS mode
  - Allow libkrad UDP/TCP connection to localhost in FIPS mode
  - Resolves: rhbz#2068458


author: Julien Rische <jrische@redhat.com> - 1.19.1-21
changelog:
  - Fix libkrad client cleanup
  - Allow use of larger RADIUS attributes in krad library
  - Resolves: rhbz#2100351


author: Julien Rische <jrische@redhat.com> - 1.19.1-22
changelog:
  - Restore "supportedCMSTypes" attribute in PKINIT preauth requests
  - Set SHA-512 or SHA-256 with RSA as preferred CMS signature algorithms
  - Resolves: rhbz#2068935


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.0~BETA-1
changelog:
  - new upstream release
  - remove upstreamed patches
  - update CCFLAGS (https://github.com/ksh93/ksh/commit/98f989afcc7)
    Resolves: #1986897


author: Mike FABIAN <mfabian@redhat.com> - 0.0.51-1
changelog:
  - Parse stuff in glibc locale names after @ which is not a script as a variant
  - Add ckb_IQ.UTF-8 locale


author: Mike FABIAN <mfabian@redhat.com> - 0.0.52-1
changelog:
  - Update to 0.0.52
  - add list_common_keyboards() to public api by Sundeep ANAND <suanand@redhat.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.53-1
changelog:
  - Update to 0.0.53
  - Capitalize the return values of language_name() and territory_name()
    (See: https://github.com/rhinstaller/anaconda/pull/2837).
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Mike FABIAN <mfabian@redhat.com> - 0.0.54-1
changelog:
  - Update to 0.0.54
  - add list_common_languages derived from gnome-control-center
    by Sundeep ANAND <suanand@redhat.com>


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Petr Menšík <pemensik@redhat.com> - 1.7.1-2
changelog:
  - Use make_build and make_install macro instead of make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Lescak <rlescak@redhat.com> - 1.7.1-9
changelog:
  - Fix for CVE-2020-19860 ldns: heap overread vulnerability (#2051211)
  - Added also patch for deprecated distutils Python module used in build


author: Tom Stellard <tstellar@redhat.com> - 2.2.53-6
changelog:
  - Spec file cleanups and build fix
  - Add BuildRequires: perl-FileHandle to fix make check
  - Add BuildRequres: gcc [1]
  - Use make_build [2] and make_install[3] macros
  - [1] https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_buildrequires_and_requires
  - [2] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - [3] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: Richard Hughes <richard@hughsie.com> 0.7.16-1
changelog:
  - Update to 0.7.15
  - Add UPL short name to SPDX conversion
  - Allow parsing desktop files using as_app_parse_data()
  - Do not preserve restrictive permissions when installing AppStream files
  - Modernize the validation requirements
  - Remove relative path from icon names
  - Support loading YAML from as_store_from_bytes()
  - Update list of allowed metadata licences
  - Update the SPDX license list to v3.5


author: Richard Hughes <richard@hughsie.com> 0.7.17-1
changelog:
  - New upstream release
  - Add "icon-theme" as recognised component type
  - Fix CI by moving 'future' back a bit
  - Make default content rating values match OARS semantics
  - Properly initialize unique_id_mutex


author: Richard Hughes <richard@hughsie.com> 0.7.18-1
changelog:
  - New upstream release
  - Add content rating system APIs from gnome-software
  - Add "validate-version" command
  - Allow timestamp in the future in validate-relax
  - Don't ignore localized strings that are the same as original
  - Fix crash with invalid children of <ul/>
  - Properly initialize mutexes
  - Test launchable tags in validation


author: Karel Zak <kzak@redhat.com> 2.37.3-1
changelog:
  - upgrade to v2.37.3 (fix CVE-2021-3996, CVE-2021-3995)
  - fix #2040366 - uuidd can't access lock/status file


author: Karel Zak <kzak@redhat.com> 2.37.3-2
changelog:
  - fix #2021462 - partitons detection broken on systems not including the parent name in partition name
  - fix #2033622 - logger from util-linux incorrectly handles long messages
  - fix #2000137 - pam_env bypassed for root user when using su
  - fix #2000477 - rpm -V setup fail on /var/log/lastlog
  - fix #2047952 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-4
changelog:
  - Memory leaks fixes backport
    Resolves: rhbz#1938757
  - Fix default key size for non XTS ciphers
    Resolves: rhbz#1954005


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-6
changelog:
  - Add workarounds for some LVM test issues
    Resolves: rhbz#1976174
  - Adapt tests to xfsprogs 5.12 changes
    Resolves: rhbz#1976176


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-10
changelog:
  - Fix reading statistics for VDO pools with VDO 8
    Resolves: rhbz#1994220
  - vdo_stats: Default to 100 % savings for invalid savings values
    Resolves: rhbz#2025880
  - Add support for creating and unlocking standalone integrity devices
    Resolves: rhbz#2011365


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-11
changelog:
  - tests: Wait for raid and mirrored LVs to be synced before removing
    Resolves: rhbz#2030647
  - spec: Require the same version of utils for lvm-devel and lvm-dbus-devel
    Resolves: rhbz#2028113


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-12
changelog:
  - fix STARTTLS protocol injection via MITM (CVE-2021-22947)
  - fix protocol downgrade required TLS bypass (CVE-2021-22946)
  - fix use-after-free and double-free in MQTT sending (CVE-2021-22945)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-15
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix bad local IPv6 connection reuse (CVE-2022-27775)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: Vishal Vijayraghavan <vvijayra AT redhat DOT com> - 1:2.1.3-1
changelog:
  - New release of liberation-fonts 2.1.3
  - Resolves:rh#1464310 : Tilded G not works with Liberation Sans and Serif


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Resolves: rhbz#1963838 restore missing functions
    Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libformula
    didn't use its built-in loaders so libreoffice's database
    report generator didn't show all categories in formula wizard


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.45.6-11
changelog:
  - Fix: syslinux: failed to create ldlinux.sys
    resolves: rhbz#1990720, rhbz#1950627
  - Fix license files.
  - Move appliance to separate subpackage
    resolves: rhbz#1989514


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.46.1-1
changelog:
  - Rebase to new stable branch version 1.46.1
    resolves: rhbz#2011711
  - Add --enable-appliance-format-auto
  - Add support for Kylin
  - Document lazy-counters setting cannot be changed in XFS version 5
    resolves: rhbz#2025944, rhbz#1995391, rhbz#2024022
  - Require libvirt-daemon-driver-storage-core
    resolves: rhbz#2018358
  - Fix usage of strerror_r which caused corrupted error messages
    resolves: rhbz#2030396


author: Laszlo Ersek <lersek@redhat.com> - 1:1.46.1-2
changelog:
  - Add detection support for Rocky Linux
    resolves: rhbz#2030709
  - Resolve conflict between manual and libvirt-assigned PCI addresses
    resolves: rhbz#2034160


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.48.4-1
changelog:
  - Rebase to new stable branch version 1.48.4
    resolves: rhbz#2059285
  - Disable 5-level page tables when using -cpu max
    resolves: rhbz#2084568
  - SELinux relabelling should not stop on ext4 immutable bits
    resolves: rhbz#1794518
  - Ignore "iface" in add-drive variants
    resolves: rhbz#1844341
  - Lift protocol limit on guestfs_readdir()
    resolves: rhbz#1674392
  - Check return values from librpm calls (2089623)
  - Document limitations of encrypted RBD disks
    resolves: rhbz#2033247
  - Fix lvm-set-filter failed in guestfish with the latest lvm2 package
    resolves: rhbz#1965941
  - Enable PHP bindings
    resolves: rhbz#2097718
  - Add support for Clevis & Tang
    resolves: rhbz#1809453
  - Fix CVE-2022-2211 Denial of Service in --key parameter
    resolves: rhbz#2101281
  - Add clevis-luks to BRs, required for Clevis & Tang
    related: rhbz#1809453


author: Richard W.M. Jones <rjones@redhat.com> - 8.2-1
changelog:
  - Rebuild for RHEL AV 8.2.
  - Include ntfs-3g-system-compression plugin.
    resolves: rhbz#1705234, rhbz#1796073


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Keith Seitz <keiths@redhat.com> - 2.0.4-2
changelog:
  - Add support for pre-generated documenation, allowing removal
    of pandoc dependency. (RHBZ 1943531, Keith Seitz)


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Mohan Boddu <mboddu@redhat.com> - 0.2.10-24
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951286 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951284 replace apache-commons-logging with java.util.logging


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libloader
    didn't use its built-in loaders so libreoffice's database
    report generator didn't work


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Michal Ruprich <mruprich@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64
  - Fix for CVE-2020-28241


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.8.2-2
changelog:
  - Fix nbdcopy progress bar.
  - Add nbdinfo --map --totals and --can/--is options.
    resolves: rhbz#1950630


author: Richard W.M. Jones <rjones@redhat.com> - 1.10.5-1
changelog:
  - Rebase to new stable branch version 1.10.5
    resolves: rhbz#2011708
  - Map uint32_t to OCaml int64 to avoid signedness problems
    resolves: rhbz#2040610
  - CVE-2022-0485 nbdcopy destination image corruption
  - New upstream API to control initialization of pread buffer
    resolves: rhbz#2046194


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.5-1
changelog:
  - Rebase to new stable branch version 1.12.5
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660


author: Adrian Reber <areber@redhat.com> - 1.2-5
changelog:
  - Repack tarball to remove problematic license from unused code
  - Apply fixes for warnings found by gcc -fanalyzer


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: Bryan Gurney <bgurney@redhat.com> - 1.12-8
changelog:
  - Apply patch to fix undefined behavior on realloc
  - Also add and apply patch to fix referencing empty array
  - Related: rhbz#2034641


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Remi Collet <remi@remirepo.net> - 0.11.0-1
changelog:
  - update to 0.11.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/665


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951282 replace apache-commons-logging with java.util.logging


author: Daiki Ueno <dueno@redhat.com> - 4.4-1
changelog:
  - Update to 4.4. Resolves: rhbz#1975812
  - Port compiler warning suppression by Paul Wouters:
    https://src.fedoraproject.org/rpms/libreswan/c/8d7f98d41444ac77c562f735b4b93038f5346ce2?branch=rawhide


author: Daiki Ueno <dueno@redhat.com> - 4.4-3
changelog:
  - Backport removal gethostbyname2 uses from the upstream
  - Fix issues spotted by covscan (rhbz#1938784)


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.99.20-1
changelog:
  - 1900160 - sane-airscan-0.99.20 is available
  - 1897935 - Crash on libsane-airscan when trying to activate scanner


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Mohan Boddu <mboddu@redhat.com> - 1.1.2-29
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951281 replace apache-commons-logging with java.util.logging


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    Resolves: rhbz#1970826 rhbz#1970839 rhbz#1970857 rhbz#1970847


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.31-6
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985029)


author: Kalev Lember <klember@redhat.com> - 2.72.0-2
changelog:
  - Tighten soname globs
  - Avoid automatic requires on sysprof-devel package
  - Update required glib2 version


author: Kalev Lember <klember@redhat.com> - 2.72.0-5
changelog:
  - Don't try to avoid sysprof dep any more now that sysprof-capture-devel is
    split out to a separate subpackage


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.5-1
changelog:
  - Update to version 0.9.5
    https://www.libssh.org/2020/09/10/libssh-0-9-5/
  - Removed patch to re-enable algorithms using sha1 in sshd for testing
  - The algorithms supported by sshd are now automatically detected for testing
  - Resolves: #1862457 - CVE-2020-16135


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-1
changelog:
  - Fix CVE-CVE-2021-3634 libssh: possible heap-based buffer
    overflow when rekeying
  - Fix static analyzer issues in rhbz#1938795
  - Rebase to version 0.9.6
  - Resolves: rhbz#1994607, rhbz#1938795, rhbz#2009669


author: Matej Mužila <mmuzila@redhat.com> 4.4.0-2
changelog:
  - Update to version 4.4.0
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354
    CVE-2022-1355


author: Stefan Berger <stefanb@linux.ibm.com> - 0.7.5-0.20210218gite271498466
changelog:
  - Addressed UBSAN and cppcheck detected issues
  - Return proper size of ECC Parameters to pass HLK tests


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.3
changelog:
  - Add -Wno-error=deprecated-declarations, to ignore OpenSSL 3.0 deprecation warnings.
    Fixes: rhbz#1958054


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.5
changelog:
  - Fixes CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
    Resolves: rhbz#1976814


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-2
changelog:
  - Fix FAT mkfs with dosfstools >= 4.2
  - udiskslinuxdriveata: Use GTask to apply configuration in a thread
  - Limit allowed module names
  - 80-udisks2.rules: Ignore Apple boot partition from livecd-tools


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-4
changelog:
  - Fix a couple of issues found by Coverity (#1938890)
  - Ignore systemd "Extended Boot Loader" GPT partition


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-1
changelog:
  - Version 2.9.4 (#2010363)
  - CVE-2021-3802: Harden the default mount options for ext filesystems (#2004423)
  - Fix double free on daemon exit (unaligned fastbin chunk) (#2001549)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.5-1
changelog:
  - Update license to GPL-2.0 OR MIT
  - Add io_uring_prep_epoll_ctl()
  - Add io_uring_get_probe(), io_uring_get_probe_ring()
  - Add io_uring_register_probe()
  - Add io_uring_{register,unregister}_personality()
  - Add io_uring_prep_{recv,send}()
  - Add io_uring_prep_openat2()
  - Add io_uring_ring_dontfork()
  - Add io_uring_prep_read() and io_uring_prep_write()
  - Documentation fixes and improvements


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.6-1
changelog:
  - add io_uring_prep_splice()
  - add io_uring_prep_provide_buffers()
  - add io_uring_prep_remove_buffers()
  - add io_uring_register_eventfd_async()
  - reinstate io_uring_unregister_eventfd() (it was accidentally removed in 0.4)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.7-1
changelog:
  - Add io_uring_cq_eventfd_toggle() helper for new IORING_CQ_EVENTFD_DISABLED flag
  - Add IORING_OP_TEE
  - Documentation fixes and improvements


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-4
changelog:
  - qemu_command: Generate memory only after controllers (rhbz#2047271)
  - qemu: Validate domain definition even on migration (rhbz#2048435)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-5
changelog:
  - Make systemd unit ordering more robust (rhbz#1868537)
  - util: Fix machined servicename (rhbz#1868537)


author: Jiri Denemark <jdenemar@redhat.com> - 8.1.0-1
changelog:
  - Rebased to libvirt-8.1.0 (rhbz#2060313)
  - The rebase also fixes the following bugs:
      rhbz#1643868, rhbz#2045953, rhbz#1910856, rhbz#2051451, rhbz#1745868
      rhbz#2040548, rhbz#2041665, rhbz#1999372, rhbz#2038045, rhbz#2045959
      rhbz#2046024, rhbz#2040555, rhbz#2057067, rhbz#2037146, rhbz#2036300


author: Jiri Denemark <jdenemar@redhat.com> - 8.2.0-1
changelog:
  - Rebased to libvirt-8.2.0 (rhbz#2060313)
  - The rebase also fixes the following bugs:
      rhbz#1866400, rhbz#2065381, rhbz#2063903, rhbz#1901394, rhbz#2065399


author: Jiri Denemark <jdenemar@redhat.com> - 8.3.0-1
changelog:
  - Rebased to libvirt-8.3.0 (rhbz#2060313)
  - The rebase also fixes the following bugs:
      rhbz#1653327, rhbz#2075765, rhbz#2075464, rhbz#2078274, rhbz#2070380
      rhbz#2073887, rhbz#2073867


author: Jiri Denemark <jdenemar@redhat.com> - 8.4.0-1
changelog:
  - Rebased to libvirt-8.4.0 (rhbz#2060313)
  - The rebase also fixes the following bugs:
      rhbz#2057768, rhbz#2081981, rhbz#2035163, rhbz#2075837, rhbz#2082540
      rhbz#2075383


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-1
changelog:
  - Rebased to libvirt-8.5.0 (rhbz#2060313)
  - The rebase also fixes the following bugs:
      rhbz#1475431, rhbz#2026765, rhbz#2059511, rhbz#2089431, rhbz#2102009


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-2
changelog:
  - domain_conf: Format <defaultiothread/> more often (rhbz#2059511)
  - domain_conf: Format iothread IDs more often (rhbz#2059511)
  - qemu: Make IOThread changing more robust (rhbz#2059511)
  - qemuDomainSetIOThreadParams: Accept VIR_DOMAIN_AFFECT_CONFIG flag (rhbz#2059511)
  - virsh: Implement --config for iothreadset (rhbz#2059511)
  - docs: Document TPM portion of domcaps (rhbz#2103119)
  - virtpm: Introduce TPM-1.2 and TPM-2.0 capabilieis (rhbz#2103119)
  - domcaps: Introduce TPM backendVersion (rhbz#2103119)
  - qemu: Report supported TPM version in domcaps (rhbz#2103119)
  - vircpi: Add PCIe 5.0 and 6.0 link speeds (rhbz#2105231)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-1
changelog:
  - Rebased to libvirt-python-8.5.0 (rhbz#2060316)
  - The rebase also fixes the following bugs:
      rhbz#2092752


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-2
changelog:
  - Drop libwacom-show-stylus, it's a debugging tool that requires extra
    dependencies that we shouldn't pull in everywhere (#2044710)


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.8-17
changelog:
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update flags, enable LTO
  - Remove RANDFILE and increase default bits in ssleay.conf


author: Victor Stinner <vstinner@python.org> - 2.9.10-9
changelog:
  - Build the Python extension with the PY_SSIZE_T_CLEAN macro to make it
    compatible with Python 3.10.
  - Fixes: rhbz#1890878.


author: David King <dking@redhat.com> - 2.9.10-12
changelog:
  - Fix CVE-2021-3516 (#1956969)
  - Fix CVE-2021-3517 (#1957002)
  - Fix CVE-2021-3518 (#1957029)
  - Fix CVE-2021-3537 (#1957285)


author: Simo Sorce <simo@redhat.com> - 1.1.34-3
changelog:
  - Drop crypto dependency.
  - The "cryptography" implemented in exslt is outdated and bad supporting only
    insecure algorithms (RC4, SHA1, MD5, MD4), and should not be used anyway.


author: Michal Ruprich <mruprich@redhat.com> - 1.0.225-3
changelog:
  - Resolves: #1965253 - CVE-2021-28902 libyang: NULL pointer dereference in read_yin_container()
  - Resolves: #1965255 - CVE-2021-28903 libyang: recursive call to lyxml_parse_mem() lead to crash


author: Remi Collet <remi@remirepo.net> - 1.7.2-1
changelog:
  - update to 1.7.2
  - fix installation layout using merged patch from
    https://github.com/nih-at/libzip/pull/190


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "i686-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j40  
    cd -


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "x86_64-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j40  
    cd -


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1-3
changelog:
  - fix handling of zero-length messages
  - minimize default configuration
  - remove obsolete build requirement


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-1
changelog:
  - update to 3.1.1 (#1979954 CVE-2021-3570 CVE-2021-3571)
  - add read-only UDS port
  - add option to set clockClass threshold
  - don't repeat some log messages in multi-port configuration
  - increase default TX timestamp timeout to 10 ms
  - limit unicast message rate per address and grant duration


author: Artem Egorenkov <aegorenk@redhat.com> - 3.6.0-7
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Sérgio Basto <sergio@serjux.com> - 2.14.1-1
changelog:
  - Update to 2.14.1
  - Disable javadoc (#1988896)
  - Build with jansi-2
  - Remove deps on slf4j-ext (no longer available in Fedora 35)


author: Frank Crawford <frank@crawford.emu.id.au> - 7.5.4-2
changelog:
  - Add requires for perl-diagnostics (#1893671) and perl-lib (#1893503)
  - Add other requires as nothing is now automatically supplied


author: Brian C. Lane <bcl@redhat.com> 34.9.9-1
changelog:
  - Change macboot default to false (bcl@redhat.com)
    Resolves: rhbz#2019512
  - livemedia-creator: Change defaults to Red Hat Enterprise Linux 9 (bcl@redhat.com)
    Resolves: rhbz#2019133


author: Brian C. Lane <bcl@redhat.com> 34.9.10-1
changelog:
  - mkksiso: Check the length of the filenames (bcl@redhat.com)
    Related: rhbz#2028104
  - mkksiso: Check the iso's arch against the host's (bcl@redhat.com)
    Related: rhbz#2028104
  - mkksiso: Add missing implantisomd5 tool requirements (bcl@redhat.com)
    Related: rhbz#2028104
  - mkksiso: Raise error if no volume id is found (bcl@redhat.com)
    Related: rhbz#2028104
  - mount: Add s390x support to IsoMountopoint (bcl@redhat.com)
    Resolves: rhbz#2028104
  - mkksiso: Skip mkefiboot for non-UEFI isos (bcl@redhat.com)
  - mkksiso: Add -joliet-long (bcl@redhat.com)
    Related: rhbz#2028104
  - mkksiso: Return 1 on errors (bcl@redhat.com)
    Related: rhbz#2028104


author: Brian C. Lane <bcl@redhat.com> 34.9.11-1
changelog:
  - Enable sftp when using inst.sshd (bcl@redhat.com)
    Resolves: rhbz#2040770
  - Drop ia32 uefi package installation (bcl@redhat.com)
    Resolves: rhbz#2039035
  - Remove 32-bit UEFI packages from example kickstart (bcl@redhat.com)
    Related: rhbz#2039035


author: Brian C. Lane <bcl@redhat.com> 34.9.12-1
changelog:
  - mkksiso: Improve debug message about unsupported arch (bcl@redhat.com)
    Related: rhbz#2049192
  - mkksiso: Add kickstart to s390x cdboot.prm (bcl@redhat.com)
    Resolves: rhbz#2049192


author: Brian C. Lane <bcl@redhat.com> 34.9.15-1
changelog:
  - tito: Add the LoraxRHELTagger from rhel8-branch (bcl)
    Related: rhbz#2070910
  - runtime-postinstall: Remove machine specific nvme files (bcl)
    Resolves: rhbz#2070910


author: Brian C. Lane <bcl@redhat.com> 34.9.16-1
changelog:
  - Makefile: Add local-srpm target to create a .src.rpm from HEAD (bcl)
    Related: rhbz#2088631
  - mkksiso: Fix s390x support (bcl)
    Related: rhbz#2088631
  - mkksiso: Remove use of os.path.join (bcl)
    Related: rhbz#2088631
  - Makefile: Add mkksiso to coverage report (bcl)
    Related: rhbz#2088631
  - setup.py: Install mkksiso to /usr/bin (bcl)
    Related: rhbz#2088631
  - mkksiso: Fix grub2 editing error (bcl)
    Related: rhbz#2088631
  - mkksiso: Rewrite to use xorriso features (bcl)
    Resolves: rhbz#2088631


author: Brian C. Lane <bcl@redhat.com> 34.9.17-1
changelog:
  - minimal.ks: Add include for architecture specific packages (bcl)
    Related: rhbz#2051548
  - livemedia.ks: Add include for architecture specific packages (bcl)
    Resolves: rhbz#2051548
  - tests: Add tests for mkksiso (bcl)
    Related: rhbz#2037015
  - mkksiso: Add kernel cmdline customization support (bcl)
    Resolves: rhbz#2037015
  - mkksiso: Move kickstart to --ks KICKSTART (bcl)
    Related: rhbz#2037015
  - mkksiso: Add helper functions for kernel cmdline modifications (bcl)
    Related: rhbz#2037015
  - lorax.spec: Fix changelog order (bcl)
    Resolves: rhbz#1972099


author: Brian C. Lane <bcl@redhat.com> 34.9.18-1
changelog:
  - mkksiso: Set u+rw permission on extracted files and directories (bcl)
    Related: rhbz#2088631
  - lorax.spec: Fix changelog (bcl)
    Resolves: rhbz#1972099


author: Brian C. Lane <bcl@redhat.com> - 9.0-26
changelog:
  - templates: Change nomodeset / basic graphics to use inst.text (bcl)
    Resolves: rhbz#1961092
  - templates: Drop nomodeset / basic graphics menu from live configs (bcl)
    Related: rhbz#1961092


author: Brian C. Lane <bcl@redhat.com> - 9.0-29
changelog:
  - Drop ia32 uefi package installation (bcl)
    Resolves: rhbz#2038397
  - Enable sftp when using inst.sshd (bcl)
    Resolves: rhbz#2035049


author: Brian C. Lane <bcl@redhat.com> - 9.0-30
changelog:
  - Add .discinfo on all arches (bcl)
    Resolves: rhbz#2030008
  - Add inst.rngd cmdline option (bcl)
    Resolves: rhbz#2028720


author: Brian C. Lane <bcl@redhat.com> - 9.0-31
changelog:
  - Do not install rng-tools (bcl)
    Resolves: rhbz#2028720
  - Revert "Add inst.rngd cmdline option" (bcl)
    Related: rhbz#2028720


author: Brian C. Lane <bcl@redhat.com> - 9.0-35
changelog:
  - Makefile: Making it easier to create releases (bcl)
    Related: rhbz#2071074
  - runtime-postinstall: Remove machine specific nvme files (bcl)
    Resolves: rhbz#2071074


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: Miro Hrončok <mhroncok@redhat.com> - 1-3
changelog:
  - Modify several conditionals to support RHEL 9+ and drop ancient Fedora 17
  - Add explicit conflict with older lua-devel
  - Require rpm, not redhat-rpm-config


author: Marian Csontos <mcsontos@redhat.com> - 2.03.13-1
changelog:
  - Update to upstream version 2.03.13.
  - Change in obtain_devices_list_from_udev default.
  - See WHATS_NEW and WHATS_NEW_DM for more information.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.14-4
changelog:
  - Remove service based autoactivation.
  - New lvmautoactivation(7) man page.
  - Fix missing PVIDs for multipath devices in system.devices file.


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: Ondrej Dubaj <odubaj@redhat.com> - 3.0.1-1
changelog:
  - Rebase to new major version 3.0.1 (it's Beta version)
  - Removed documentation/ folder, as it was removed by upstream


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.0.3-1
changelog:
  - Rebase to 3.0.3
  - Temporarily disable generation of -javadoc.rpm, due to missing feature in xmvn,
    which leads to build crash


author: Christopher Tubbs <ctubbsii@fedoraproject.org> - 1:3.6.3-6
changelog:
  - Remove unneeded commons-logging from runtime class path (rhbz#1883751)
  - Also remove redundant commons-codec


author: Cornelia Huck <cohuck@redhat.com> - 0.69-1
changelog:
  - a2621934aa37 ("Merge pull request #18 from cohuck/validate")
  - ffbcef5a1c84 ("Merge pull request #25 from etrunko/master")
  - 5ec75a83bf30 ("Remove never used 'available' option")
  - d49b0f0db6b3 ("Merge pull request #23 from eskultety/man-fix")
  - 4cfe37eb2d99 ("man: Point --verbose to the 'list' command rather than 'types'")
  - a0ae49eb7178 ("Merge pull request #17 from cohuck/install_symlinks")
  - 504beba6e8f9 ("Force symlink cretion")
  - 522c5ded00ff ("Fix attribute validation")


author: Alex Williamson <alex.williamson@redhat.com> - 0.78-1
changelog:
  - e029640033d3 ("Automatic version commit for tag 0.78")
  - e32f506656fd ("use standard bash path")
  - 70690b64401f ("avoid other tags spilling into the .spec changelog")
  - 70b89c18cf5b ("Merge pull request #31 from awilliam/20201113.0")
  - 80187bc9ba03 ("Merge pull request #30 from fiuczy/fix-error-cleanup")
  - 97ea8bbeefb7 ("mdevctl: fix cleanup on error when creating and removing mdev")
  - b45d33dfd36c ("version support")
  - 2b1c16ce6fb0 ("Fix attributes getting applied via start-parent-mdevs")
  - 25d5e8d24d57 ("mdevctl: fix cleanup on error when writing to attribute")


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.31-0.1.beta
changelog:
  - New version
    Resolves: rhbz#1758783
  - Dropped no-scp, no-optimization, compile-fix, crash-fix patches (all upstreamed)
  - Dropped fgnu89-inline patch (probably not needed)


author: Sandro Mani <manisandro@gmail.com> - 115-1
changelog:
  - Add -fstack-protector to LDFLAGS (since we carry -D_FORTIFY_SOURCE=2 in cflags, see https://sourceforge.net/p/mingw-w64/bugs/818/)


author: Yan Vugenfirer <yvugenfi@redhat.com> 102.5.0
changelog:
  - Set version to 102.5.0
  - Bug 1972070 - RFE: Add Windows Server 2022 version support for mingw-qemu-ga


author: Yan Vugenfirer <yvugenfi@redhat.com> 102.6.0
changelog:
  - Set version to 102.6.0
  - BZ#1978859 - The qemu-ga-win build version in MSI is different between checking inside guest and qga command
  - BZ#1981302 - QGA version can't be upgrade directly without uninstalling old version


author: Yan Vugenfirer <yvugenfi@redhat.com> 102.9.0
changelog:
  - Set version to 102.9.0
  - BZ#2026167 - Add Windows11 version support for mingw-qemu-ga
  - Use mingw-glib2-2.70.1


author: Yan Vugenfirer <yvugenfi@redhat.com> 102.10.0
changelog:
  - Set version to 102.10.0
  - BZ#2026167 - Add Windows11 version support for mingw-qemu-ga
  - Dynamically link mingw-glib2 library


author: Konstantin Kostiuk <kkostiuk@redhat.com> 103.0.0
changelog:
  - Set version to 103.0.0
  - BZ#1992643 - Add mingw-qemu-ga-win package to CentOS stream
  - Rebase to qemu-6.2.0


author: Konstantin Kostiuk <kkostiuk@redhat.com> 104.0.0
changelog:
  - Set version to 104.0.0
  - BZ#2078384 - Rebase QEMU Guest Agent Windows to 7.0.0
  - Rebase to qemu-7.0.0


author: Konstantin Kostiuk <kkostiuk@redhat.com> 104.0.2
changelog:
  - Set version to 104.0.2
  - BZ#2084608 - Fix mismatched allocation function
  - BZ#2084613 - qga-win: race condition in build


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Jakub Hrozek <jhrozek@redhat.com> - 0.17.0-6
changelog:
  - Related: rhbz#1986806 - CVE-2021-3639 mod_auth_mellon: Open Redirect
                            vulnerability in logout URLs


author: Jakub Hrozek <jhrozek@redhat.com> - 2.4.9.1-1
changelog:
  - Resolves: rhbz#1987223 - CVE-2021-32792 mod_auth_openidc: XSS when using
                             OIDCPreservePost On [rhel-9.0]
  - Resolves: rhbz#1987217 - CVE-2021-32791 mod_auth_openidc: hardcoded
                             static IV and AAD with a reused key in AES GCM
                             encryption [rhel-9.0]
  - Resolves: rhbz#1987204 - CVE-2021-32786 mod_auth_openidc: open redirect in
                             oidc_validate_redirect_url() [rhel-9.0]


author: Paul Howarth <paul@city-fan.org> - 2.3.9-24
changelog:
  - Drop EL-6 support
    - Use %license unconditionally
    - _httpd_* macros always available
    - Run directory is always /run on tmpfs
    - Assume httpd ≥ 2.4 filesystem layout
    - systemd-units always provided by systemd


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-26
changelog:
  - Resolves: #1958882 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Coty Sutherland <csutherl@redhat.com> - 1.2.48-20
changelog:
  - Cleanup spec file and remove .redhat-N suffix from release
  - Remove ap24 subpackage since we only need to build for one version of httpd


author: Fedora Release Engineering <releng@fedoraproject.org> - 2.9.3-10
changelog:
  - Resolves: #1930664 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules
  - rename mlogc to mod_security-mlogc


author: Tomas Orsava <torsava@redhat.com> - 4.7.1-9
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Use the modern way of filtering Provides not to interfere with modern Python
    RPM generators
  - Related: rhbz#1990421


author: Jakub Kadlcik <frostyx@email.cz> 0.5-1
changelog:
  - Release for epel8 as well (frostyx@email.cz)
  - Require createrepo_c for the createrepo_mod package (frostyx@email.cz)
  - modulemd-merge: improve README.md file (frostyx@email.cz)
  - repo2module: improve README.md file (frostyx@email.cz)
  - dir2module: improve README.md file (frostyx@email.cz)
  - Improve README.md file (frostyx@email.cz)
  - createrepo_mod: improve README.md file (frostyx@email.cz)
  - Loosen the python3-libmodulemd dependency to just libmodulemd
    (frostyx@email.cz)
  - createrepo_mod: use just createrepo_c if it has built-in module support
    (frostyx@email.cz)
  - Explicitly depend on python3-setuptools (frostyx@email.cz)
  - createrepo_mod: dump modules.yaml into the correct directory
    (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6-1
changelog:
  - Generate manpages for all tools in this repository 
  - modulemd-generate-macros: add a tool for generating module-build-macros
  - modulemd_tools: add the first pieces of a python library (for internal usage only)


author: Jakub Kadlcik <frostyx@email.cz> 0.7-1
changelog:
  - Generate manpages on the fly
  - Automated test builds incl. Docker/Travis
  - Fix PEP8 in all tools
  - modulemd_tools: temporarily skip some tests on EPEL8 or Fedora
  - Drop libmodulemd dependency in favor of python3-libmodulemd


author: Jakub Kadlcik <frostyx@email.cz> 0.8-1
changelog:
  - modulemd_tools: drop python3-parameterized dependency (frostyx@email.cz)
  - Package modulemd_tools helper lib (fvalder@redhat.com)
  - Add modulemd-merge tests (fvalder@redhat.com)
  - Add createrepo_mod tests (fvalder@redhat.com)
  - Replace master in fedora releaser to rawhide (frostyx@email.cz)


author: Adam Jackson <ajax@redhat.com> - 2.3.4-25
changelog:
  - Fix invoking autogen/configure so the default CFLAGS actually get applied
    Resolves: rhbz#2044881


author: Jan Horak <jhorak@redhat.com> - 1.9-28
changelog:
  - Removed NPAPI from the description, since is no longer supported in Mozilla
    products
    Resolves: rhbz#2041339


author: Honggang Li <honli@redhat.com> - 5.7-3
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960479


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2015392


author: Davide Caratti <dcaratti@redhat.com> - 0.7-2
changelog:
  - add a simple sanity test and enable gating. Related: rhbz#1962741
  - don't overwrite global build options. Related: rhbz#1967697
  - fix 'check_conflicts' on multilib. Related: rhbz#1967697


author: Davide Caratti <dcaratti@redhat.com> - 0.8-2
changelog:
  - fix mptcpize to work also when protocol number is 0 (upstream issue #159)
    and when command resides in another file system (upstream issue #161)
    Related: rhbz#2015623


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 0.5.13-6
changelog:
  - updating line in /usr/lib/tmpfiles.d/munge.conf: /var/run/munge → /run/munge
  - add license tag
  - add requires logrotate


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Michal Schorm <mschorm@redhat.com> - 1.0.1-1
changelog:
  - Rebase to 1.0.1 release
    This release is just a sync-up with upstream selinux-policy
  - URL changed to a new upstream repository


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.2-2
changelog:
  - More efficient cache and cow filters.
  - Add nbdkit-cow-filter cow-on-read option.
  - Add nbdkit-cache-filter cache-on-read=/PATH.
  - Add nbdkit-cache-filter cache-min-block-size option.
  - Add nbdkit-delay-filter delay-open and delay-close options.
  - Reduce verbosity of debugging from virt-v2v.
  - Miscellaneous bugfixes
    resolves: rhbz#1950632


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.3-1
changelog:
  - New upstream stable version 1.26.3.
    resolves: rhbz#1950632
  - Add Python .cleanup() method.
  - Fix data corruption in zero and trim on unaligned tail.
    resolves: rhbz#1990134


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.3-3
changelog:
  - Fix parsing of delay-* options
    resolves: rhbz#1991649
  - Fix assertion failure during server shutdown
  - Fix delay-close option
    resolves: rhbz#1991652
  - tests/test-debug-flags.sh: Don't use port 10809 during test
    resolves: rhbz#1991945


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.5-1
changelog:
  - Rebase along stable branch to 1.26.5
    resolves: rhbz#1995327
  - Add nbdkit-vddk-plugin -D vddk.stats=1 flag
    resolves: rhbz#1995329
  - Add nbdkit-cow-filter cow-block-size parameter
    resolves: rhbz#1995332
  - Fix CVE-2021-3716 nbdkit: NBD_OPT_STRUCTURED_REPLY injection on STARTTLS
  - Update keyring


author: Richard W.M. Jones <rjones@redhat.com> - 1.28.5-1
changelog:
  - Rebase to new stable branch version 1.28.5
    resolves: rhbz#2011709
  - Move nbdkit-null-plugin to nbdkit-server package
    resolves: rhbz#2021154
  - Add asynchronous support in nbdkit-vddk-plugin
  - Drop obsolete documentation related to thread model in vddk plugin
    resolves: rhbz#2018463
  - Switch to xorriso (instead of genisoimage)
  - Distribute README.VDDK in nbdkit-vddk-plugin subpackage
  - Fix nbdkit-cow-filter cow-block-size=4096
  - file: Fix implementation of cache=none for writes
    resolves: rhbz#2029751
  - vddk: Implement VMDK creation


author: Richard W.M. Jones <rjones@redhat.com> - 1.30.8-1
changelog:
  - Rebase to new stable branch version 1.30.8
    resolves: rhbz#2059289
  - Add automatic provides generator and subpackage nbdkit-srpm-macros
    resolves: rhbz#2059291
  - New filters: blocksize-policy, protect, retry-request
  - Fix license of bash-completion subpackage
  - vddk: Fix use of uninitialized memory when computing block size
    resolves: rhbz#2066655
  - Skip vsock tests unless the vsock_loopback module is loaded
    resolves: rhbz#2069558
  - Add support for ssh create remote file.
  - Suppress excess messages from nbdkit-nbd-plugin
    resolves: rhbz#2083498
  - Suppress incorrect VDDK error when converting guests from vCenter
    resolves: rhbz#2083617
  - Backport new readahead filter from 1.32.
  - Backport new LUKS filter from 1.32.
  - Backport new scan filter from 1.32.
  - Add new Python binding for nbdkit_parse_size from 1.32
  - Add new rate filter burstiness setting from 1.32
  - vddk: Suppress new VDDK "phone home" messages
    resolves: rhbz#2104720
  - vddk: Clearer error message when thumbprint is wrong
    resolves: rhbz#1905772
  - Fix memory allocator=malloc,mlock=true
    resolves: rhbz#2044432
  - Fix multiple Coverity problems
  - Fix bounds error in nbdkit-checkwrite-filter
    resolves: rhbz#2108545


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Thomas Haller <thaller@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0 release
  - Drop NotShowIn=GNOME
  - Use wireless-security code from libnma
  - Add flatpak build configuration
  - applet: hide unmanaged ethernet devices in nm-applet
  - applet: fix Wi-Fi scan requests with appindicator
  - editor: fix drop down list for connection.secondaries


author: Steve Dickson <steved@redhat.com> 2.5.4-3
changelog:
  - mount.nfs: insert 'sloppy' at beginning of the options (bz 1987070)
  - spec: Fix dependency problems with nfsdclnts (bz 1924708)
  - nfsdcltrack: Fix printf format (bz 1995316)


author: Alice Mitchell <ajmitchell@redhat.com> 2.5.4-5
changelog:
  - triggerun doesn't work correctly unless the epoch is given (bz 1937811)
  - Restored the nfs-utils-2.5.4-mount-sloppy.patch (bz 1987070)
  - General memory fixes (bz 1938822)


author: Steve Dickson <steved@redhat.com> 2.5.4-11
changelog:
  - nfs.man: adding new mount option max_connect (bz 2106848)
  - systemd: Fix format-overflow warning (bz 2106896)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-5
changelog:
  - Add -mod-devel subpackage for building external nginx modules
    Resolves: rhbz#1991720 (Neal Gompa)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-10
changelog:
  - Resolves: #1975747 - CVE-2021-3618 nginx: ALPACA: Application Layer Protocol
    Confusion - Analyzing and Mitigating Cracks in TLS Authentication


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.10.0-1
changelog:
  - Rebase to 16.10.0, add corepack, fix PowerShell dependency
  - Resolves: RHBZ#2000539, #2000548, #2000549, #2002177


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-1
changelog:
  - Update to latest version
  - Use jinja and jq
  - Don't fix python3
  - Resolves: CVE-2022-21824, CVE-2021-44531, CVE-2021-44532, CVE-2021-44533
  - Resolves CVE-2020-15095
  - Resolves: CVE-2021-3918, CVE-2021-22959, CVE-2021-22960
  - Resolves: CVE-2021-3807, CVE-2021-27290


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-2
changelog:
  - Build with bootstrap by default due to old versions of dependencies available
  - Resolves: #2042995, #2042970, #2042981, #2042989
  - Resolves: #2029936, #2024890, #2014499, #2014135
  - Resolves: #2013834, #1945299


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-1
changelog:
  - update to NSS 3.79
  - update to NSPR 4.34
  - change FIPS Modulename to conform with our final module standard


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-5
changelog:
  - FIPS 140-3 changes
  -  Reject Small RSA keys, 1024 bit keys are marked as FIP OK when verifying, reject
     signature keys by policy
  -  Allow applications to retrigger selftests on demand.


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-6
changelog:
  - Remove debugging printf from a patch
  - increase the pbe cache size to handle reusing the same token key.


author: Andreas Schneider <asn@redhat.com> - 1.1.11-8
changelog:
  - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install
                             smaller footprint


author: Jan Macku <jamacku@redhat.com> - 1.15-1
changelog:
  - spec: sync specfile with Fedora
  - makefile: Use rpmdev-bumpspec's legacy date option
  - Add feature to generate specfile entry, commit and archive


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Tomas Orsava <torsava@redhat.com> - 1.20.1-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Jerry James <loganjerry@gmail.com> - 8.0.1-1
changelog:
  - Version 8.0.1
  - Add 0002-Catch-CompileException-in-test.patch to fix compilation of a test
  - Make generate-tarball.sh actually compress the tarball


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to
    https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.1
  - require crun >= 0.17


author: Jindrich Novy <jnovy@redhat.com> - 1.2.5-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.5
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.6-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.6
  - Related: #2061316


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.5-1
changelog:
  - apply patch from Matthias Gerstner of the SUSE security team to fix a
    possible race condition in the mkhomedir helper (CVE-2020-10737)
  - only process SELinux contexts if SELinux is not disabled (Alexander Bokovoy)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.6-1
changelog:
  - update license on src/buffer.h
  - change /var/run -> /run in systemd service file (Orion Poplawski)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: Ravindra Kumar <ravindrakumar@vmware.com> - 11.2.5-1
changelog:
  - Package new upstream version open-vm-tools-11.2.5-17337674.
  - libdnet dependency was removed in open-vm-tools 11.0.0. So,
    removed the stale BuildRequires for libdnet.


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-2.el9
changelog:
  - ovt-Fixes-necessary-to-build-open-vm-tools-with-newer-gt.patch [bz#1936382]
  - ovt-Update-spec-file-for-correct-build.patch [bz#1936382]
  - Resolves: bz#1936382
    ([ESXi][RHEL-9][FTBS] open-vm-tools not working with newer gtk libraries)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-4
changelog:
  - ovt-Fix-a-memory-leak-reported-by-a-partner-from-their-C.patch [bz#1954040]
  - Resolves: bz#1954040
    ([ESXi][RHEL9.0][open-vm-tools] Coverity detected an important defect in open-vm-tools-11.2.5 rebase)


author: Miroslav Rezanina <rezanin@redhat.com> - 11.3.0-1
changelog:
  - Rebase to 11.3.0 [bz#1974471]
  - Resolves: bz#1974471
    ([ESXi][RHEL9]Open-vm-tools release 11.3.0 has been released - please update for RHEL 9.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.3.5-1
changelog:
  - Rebase to 11.3.5 [bz#2008243]
  - Resolves: bz#2008243
    ([ESXi][RHEL9]Open-vm-tools release 11.3.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.0.0-1
changelog:
  - Rebase to 12.0.0 [bz#2061193]
  - Resolves: bz#2061193
    ([ESXi][RHEL9]Open-vm-tools release 12.0.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.0.5-1
changelog:
  - Rebase to open-vm-tools 12.0.5 [bz#2090275]
  - Resolves: bz#2090275
    ([ESXi][RHEL9]Open-vm-tools release 12.0.5 has been released - please rebase)


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Milan Crha <mcrha@redhat.com> - 2.3-38
changelog:
  - Related: #2013578 (Add patch to build against samba 4.15)
  - Avoid build time dependencies related to server, when it's not built


author: Karol Herbst <kherbst@redhat.com> - 3.0-0.20200512git5cc337c
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Bump CLHPP version to 2.0.11


author: Karol Herbst <kherbst@redhat.com> - 3.0-1.20200512gitd082d42
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Rework CLHPP handling as file is not downloadable anymore
  - Bump CLHPP version to 2.0.12


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-6
changelog:
  - Fix slapd.tmpfiles complaints. Related: rhbz#1969853
  - Use https:// for source Related: rhbz#1973597


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-11
changelog:
  - Initialize crypto API only once (rhbz#2020044)
  - Add support for Blueprint remediations (rhbz#2020052)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-12
changelog:
  - Allow using local files instead of remote resources (rhbz#2015518)
  - Add an alternative source of hostname (rhbz#2021509)
  - Lower memory limits and improve their checking (rhbz#2022362)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041782)
  - Select and exclude groups of rules on the command line (rhbz#2020580, rhbz#2020581)
  - The boot-time remediation service for systemd's Offline Update mode


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-10
changelog:
  - Set minimal value of RSA key length via configuration option
    Related: rhbz#2066882
  - Use EVP functions for RSA key generation
    Related: rhbz#2087121


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-11
changelog:
  - Fix scp clearing file when src and dest are the same
    Resolves: rhbz#2056884
  - Add missing options from ssh_config into ssh manpage
    Resolves: rhbz#2033372
  - Fix several memory leaks
    Related: rhbz#2068423
  - Fix gssapi authentication failures
    Resolves: rhbz#2091023
  - Fix host-based authentication with rsa keys
    Resolves: rhbz#2088916


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-12
changelog:
  - Disable sntrup761x25519-sha512 in FIPS mode
    Related: rhbz#2070628
  - Disable ed25519 and ed25519-sk keys in FIPS mode
    Related: rhbz#2087915


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-29
changelog:
  - `-config` argument of openssl app should work properly in FIPS mode
  - Resolves: rhbz#2083274
  - openssl req defaults on PKCS#8 encryption changed to AES-256-CBC
  - Resolves: rhbz#2063947


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-31
changelog:
  - Disable SHA-1 signature verification in FIPS mode
  - Disable EVP_PKEY_sign/EVP_PKEY_verify in FIPS mode
    Resolves: rhbz#2087147


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-32
changelog:
  - `openssl ecparam -list_curves` lists only FIPS-approved curves in FIPS mode
  - Resolves: rhbz#2083240
  - Ciphersuites with RSA KX should be filterd in FIPS mode
  - Related: rhbz#2085088
  - In FIPS mode, signature verification works with keys of arbitrary size
    above 2048 bit, and only with 1024, 1280, 1536, 1792 bits for keys
    below 2048 bits
  - Resolves: rhbz#2077884


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-33
changelog:
  - CVE-2022-1473 openssl: OPENSSL_LH_flush() breaks reuse of memory
  - Resolves: rhbz#2089444
  - CVE-2022-1343 openssl: Signer certificate verification returned
    inaccurate response when using OCSP_NOCHECKS
  - Resolves: rhbz#2087911
  - CVE-2022-1292 openssl: c_rehash script allows command injection
  - Resolves: rhbz#2090362
  - Revert "Disable EVP_PKEY_sign/EVP_PKEY_verify in FIPS mode"
    Related: rhbz#2087147
  - Use KAT for ECDSA signature tests, s390 arch
  - Resolves: rhbz#2069235


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-35
changelog:
  - Add explicit indicators for signatures in FIPS mode and mark signature
    primitives as unapproved.
    Resolves: rhbz#2087147


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-36
changelog:
  - Ciphersuites with RSAPSK KX should be filterd in FIPS mode
  - Related: rhbz#2085088
  - FIPS provider should block RSA encryption for key transport.
  - Other RSA encryption options should still be available if key length is enough
  - Related: rhbz#2053289
  - Improve diagnostics when passing unsupported groups in TLS
  - Related: rhbz#2070197
  - Fix PPC64 Montgomery multiplication bug
  - Related: rhbz#2098199
  - Strict certificates validation shouldn't allow explicit EC parameters
  - Related: rhbz#2058663
  - CVE-2022-2068: the c_rehash script allows command injection
  - Related: rhbz#2098277


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-38
changelog:
  - Fix segfault in EVP_PKEY_Q_keygen() when OpenSSL was not previously
    initialized.
    Resolves: rhbz#2103289
  - Improve AES-GCM performance on Power9 and Power10 ppc64le
    Resolves: rhbz#2051312
  - Improve ChaCha20 performance on Power10 ppc64le
    Resolves: rhbz#2051312


author: Matej Tyc <matyc@redhat.com> - 2.0.0-5
changelog:
  - Fix handling of content archives
    Resolves: rhbz#1996129
  - Fix handling of content fingerprint
    Resolves: rhbz#1993065
  - Fix crash when a previously selected hardening has been cancelled
    Resolves: rhbz#2014108
  - Pull latest translations


author: Matej Tyc <matyc@redhat.com> - 2.0.0-8
changelog:
  - Introduce unified help support
    Resolves: rhbz#2043512
  - Update translations
    Resolves: rhbz#2017374


author: Matej Tyc <matyc@redhat.com> - 2.0.0-9
changelog:
  - Introduce the firstboot remediation
    Resolves: rhbz#1999587
  - Add better error handling of installation using unsupported installation sources
    Resolves: rhbz#2042334


author: Matej Tyc <matyc@redhat.com> - 2.0.0-12
changelog:
  - Remove the firstboot remediation feature completely.
    We can't have it, while maintaining the standard UX.
    Resolves: rhbz#2065751


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210809-1
changelog:
  - Update for new release (v20210809) [bz#1970881]
  - Resolves: bz#1970881
    ([RHEL-9] virt-install --location fails with Could not find an installable distribution at URL '/var/lib/libvirt/images/boot.iso')


author: Luca BRUNO <lucab@redhat.com> - 2021.3-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2021.3
    Resolves: rhbz#1981859


author: Luca BRUNO <lucab@redhat.com> - 2021.6-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2021.6
    Resolves: rhbz#2026931


author: Luca BRUNO <lucab@redhat.com> - 2022.2-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2022.2
    Resolves: rhbz#2070964


author: Alex Macdonald <almacdon@redhat.com> - 1.2.2-3
changelog:
  - Remove osgi metadata patch0 that previously added a manifest
  - Include patch (courtesy of jkang) to package as a bundle instead of a jar
  - Update maven-compiler-plugin source/target version for builds in f33


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.11-1
changelog:
  - Update to v6.11 release
  - Resolves: rhbz#1876400 - CVE-2020-14342 - cifs-utils: shell command injection


author: Jonathan Lebon <jonathan@jlebon.com> - 6.11-2
changelog:
  - Split out -info subpackage for smb2-quota and smbinfo
    https://bugzilla.redhat.com/show_bug.cgi?id=1909288


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.42.2-3
changelog:
  - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use
    cairomm1.0, which may be a virtual Provides, in the manual lib Requires


author: Nathan Scott <nathans@redhat.com> - 5.3.5-3
changelog:
  - Resolve failure in the Nvidia metrics agent (BZ 2030123)
  - PMDA indom cache loading performance improvements (BZ 2030122)
  - Consistent user experience for new farm services (BZ 2030138)
  - Resilience improvements for the pmproxy service (BZ 2030141)


author: Nathan Scott <nathans@redhat.com> - 5.3.5-4
changelog:
  - pmdabcc: resolve compilation issues of some bcc PMDA modules on
    aarch64, ppc64le and s390x (BZ 2024982)
  - pmdabpf: support arm and powerpc architectures (BZ 2024980)
  - Further improve pmlogger service startup latency (BZ 1973833)
  - Additional improvements to farm systemd services (BZ 2030138)


author: Nathan Scott <nathans@redhat.com> - 5.3.5-5
changelog:
  - Further improve pmlogger and pmie farm services (BZ 2030138)
  - Resolve a further KVM selinux issue with KVM (BZ 2006430)
  - Rebuild to use latest selinux-policy for el9 (BZ 2041503)


author: Nathan Scott <nathans@redhat.com> - 5.3.5-8
changelog:
  - Fix pcp-zeroconf logger interval override regression (BZ 1991764)
  - Remove warnings from spec setup of PCP systemd units (BZ 2048024)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-3
changelog:
  - Fix remaining issues in the pcp-ss(1) utility (BZ 1981886)
  - Remove benign pmie systemd unit file warning (BZ 2072971)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-5
changelog:
  - Harden pmdapostfix(1) against missing Postfix (BZ 2059463)
  - Fix cgroups failure on non-x86_64 platforms (BZ 2081262)


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Petr Pisar <ppisar@redhat.com> - 10.36-4
changelog:
  - Fix a mismatch if \K was involved in a recursion
  - Restore single character repetition optimization in JIT (upstream bug #2698)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-1
changelog:
  - Rebase to the 10.37
  - libpcre2-posix.so.2* SONAME bump to libpcre2-posix.so.3*
  - Enable JIT for s390x arch
  - Patches upstreamed: Patch 1,2,3,4
  - Resolves: rhbz#1970765, BZ#1965025


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-28
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951271 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1:0.9.4-23
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951270 replace apache-commons-logging with java.util.logging


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-471
changelog:
  - Make accessing environment by DynaLoader thread-safe
  - Use duplocale() if available
  - Fix fc() in Turkish locale
  - Fix croaking on "my $_" when "use utf8" is in effect (GH#18449)
  - Fix PERL_UNUSED_ARG() definition in XSUB.h
  - Add missing entries to perldiag (GH#18276)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-472
changelog:
  - Protect locale tests from LANGUAGE environment variable
  - Prevent the number of buckets in a hash from getting too large
  - Fix a memory leak when compiling a regular expression (GH#18604)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-474
changelog:
  - Fix dumping a hash entry of PL_strtab type
  - Fix an arithmetic left shift of a minimal integer value (GH#18639)


author: Paul Howarth <paul@city-fan.org> - 1.2000-1
changelog:
  - Update to 1.200
    - New release with no new features, just preparing for a series of bugfix
      releases
  - Specify all build dependencies
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.014-14
changelog:
  - Spec clean-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Use %{make_build} and %{make_install}
    - Fix permissions of installed files


author: Tom Callaway <spot@fedoraproject.org> - 0.44-1
changelog:
  - Update to 0.44
    - Support Perls with COW disabled
    - Bump B::COW requirement for testing
  - Disable tests until B::COW is packaged


author: Tom Stellard <tstellar@redhat.com> - 1.64-4
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Petr Pisar <ppisar@redhat.com> - 1.66-2
changelog:
  - Update DBD-SQLite-1.60-Unbundle-Test-NoWarnings.patch
  - Do not build-require unused Test::FailWarnings
  - Update the description


author: Tom Stellard <tstellar@redhat.com> - 1.642-7
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Paul Howarth <paul@city-fan.org> - 1:0.17029-1
changelog:
  - Update to 0.17029
    - Rebuild for order of 'NAME' and 'VERSION' sections in the generated POD
      documentation (VERSION used to appear before NAME)


author: Paul Howarth <paul@city-fan.org> - 1.002002-1
changelog:
  - Update to 1.002002
    - Fix bug in handling regexps in import lists; Exporter::Tiny allowed regexps
      like /foo/i but not /foo/; having trailing flags is now optional! (GH#6)
    - Tests would fail if 'PERL5OPT=-Mfeature=:5.18' environment variable was set;
      this is because bareword '-default' was being interpreted as the Perl
      'default' keyword (GH#5)
  - Unbundle newly-bundled test modules


author: Paul Howarth <paul@city-fan.org> - 1.16-18
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.72-21
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - IO::Socket::Utils CERT_asHash and CERT_create now support subject and
      issuer with multiple same parts (like multiple OU); in this case an array
      ref instead of a scalar is used as hash value (GH#95)


author: Michal Josef Špaček <mspacek@redhat.com> - 2.070-4
changelog:
  - Remove failing tests in openssl 3.0.0-alpha16. Related: rhbz#1968046
    - Provisional for mass rebuild of openssl3.


author: Paul Howarth <paul@city-fan.org> - 1.26-1
changelog:
  - Update to 1.26
    - BUILD: Update FAIL_POSIX warning message (GH#28)
    - TEST: t/07_taint.t: Use executable name as source of taintedness (GH#21)
    - OTHER: Typographic corrections (CPAN RT#60211, CPAN RT#86403)
    - Add Travis configuration


author: Paul Howarth <paul@city-fan.org> - 1.29-1
changelog:
  - Update to 1.29
    - Improved handling of shell commands on Windows, which should get us closer
      to resolving Win32-related issues; there should be no change of
      functionality on Unix-like platforms
    - Better workaround for bug in perl-5.8.9 (GH#23)
    - Add t/args.t
    - Modify t/win32.t
    - Added Travis and AppVeyor configuration files
    - Eliminated use of Dist::Zilla for build, using older, but more reliable and
      better understood (by maintainer) ExtUtils::MakeMaker-based configuration
    - Move author testing to xt/ directory


author: Emmanuel Seyman <emmanuel@seyman.fr> - 4.03-1
changelog:
  - Update to 4.03
  - Use %{make_install} instead of "make pure_install"
  - Use %{make_build} instead of make
  - Replace calls to %{__perl} with /usr/bin/perl
  - Pass NO_PACKLIST and NO_PERLLOCAL to Makefile.PL


author: Petr Pisar <ppisar@redhat.com> - 1:0.68-3
changelog:
  - Fix resolving localhost on loopback-only machines
    (https://github.com/perl-ldap/perl-ldap/pull/60)


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix failing installation in parallel make (GH#38)
    - Infrastructure improvements and tooling updates, lots of author tests with
      corresponding fixes added
    - Added slide and slideatatime functions
    - Documentation fixes (GH#21, GH#33, GH#34, CPAN RT#126029, CPAN RT#132043,
      CPAN RT#132940)
    - Bump List::MoreUtils::XS requirement to 0.430
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix parts of CPAN RT#123989: more $a/$b/$_ refcounting bugs
      - Since some bugs are simply reported wrong, dealing with them breaks more
        (including running code) than it solves - way too heavy to feel better...
    - Introduce functions slide and slideatatime
    - Toolchain fixes
    - Fix LANG=nb_NO.utf8 related str tests fails (CPAN RT#133128)
    - Fix typo (GH#7)
    - Fix parts of CPAN RT#132043: listcmp misbehave in XS implementation
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.70-1
changelog:
  - Update to 0.70
    - Protect ourselves from Module::Metadata parsing problems (CPAN RT#130939)
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.86-1
changelog:
  - Update to 0.86
    - Update PAUSE and ANDK keys to 2020
    - Update documentation pertaining to SHA1
    - Fix compatibility with Crypt::OpenPGP
  - Use mktemp to create temporary GPG directory


author: Paul Howarth <paul@city-fan.org> - 0.21-26
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.90-1
changelog:
  - Update to 1.90
    - Formalised libssl version support policy: all stable versions of OpenSSL
      in the 0.9.8-1.1.1 branches (with the exception of 0.9.8-0.9.8b) and all
      stable releases of LibreSSL in the 2.0-3.1 series are supported
    - The LibreSSL 3.2 series is not yet fully supported because its TLSv1.3
      implementation is not currently libssl-compatible
    - Added support for LibreSSL on Windows when built with Visual C++
    - Exposed P_X509_CRL_add_extensions, several SSL_CIPHER functions, and
      several stack functions
    - Fixed crashes in the callback functions CTX_set_next_proto_select_cb and
      CTX_set_alpn_select_cb
    - The test suite is now compatible with OpenSSL 1.1.1e onwards, as well as
      OpenSSL security level 2 (the default on many Linux distributions)


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-4
changelog:
  - Fix tests for openssl 3.0.0-alpha16. rhbz#1964854
    - Fix check across alpha1 vs alpha17
    - Change default alg for PEM_get_string_PrivateKey()
    - Different order in CA chain in some versions
    - Changed API of CTX_set_ciphersuites() and set_ciphersuites(), ignore
      unknown ciphers
    - Disable TLSv1 and TLSv1_1 usage in test


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-6
changelog:
  - Fix tests for openssl 3.0.0-beta1. rhbz#1964854
    - Add fix for t/05_passwd_cb.t
    - Update Net-SSLeay-1.90-openssl3.0.0-43_misc_functions.patch to accept beta version
  - Fix tab vs space in spec file
  - Update Net-SSLeay-1.90-openssl3.0.0-39_pkcs12.patch patch to upstream version


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-8
changelog:
  - Fix tests for openssl 3.0.0-beta2. rhbz#1992571
    - Add another fix for t/05_passwd_cb.t, because change in passphrase caching
  - Remove XXX in spec file


author: Paul Howarth <paul@city-fan.org> - 1.106-20
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build requirements
    - Drop support for building with Test::More < 0.88
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license macro


author: Paul Howarth <paul@city-fan.org> - 1:0.38-458
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Tom Stellard <tstellar@redhat.com> - 3:1.54-441
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.29-6
changelog:
  - Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.36-3
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Petr Pisar <ppisar@redhat.com> - 3:1.302177-1
changelog:
  - Update to 1.302177
    - Minor fix to author downstream test
    - No significant changes since the last trial
    - Fix Test::More's $TODO inside intercept (#862)


author: Paul Howarth <paul@city-fan.org> - 3:1.302180-1
changelog:
  - Update to 1.302180
    - Move try_sig_mask to the only module that uses it
    - Inherit warnings bitmask in cmp_ok string eval
    - Update copyright date
    - Improved API for intercept {} and what it returns
    - Bump minimum List::Util version (for uniq)


author: Paul Howarth <paul@city-fan.org> - 3:1.302181-1
changelog:
  - Update to 1.302181
    - Put try_sig_mask back where it goes (and add test to prevent this in the
      future)
    - Drop new List::Util requirement back down


author: Tom Stellard <tstellar@redhat.com> - 1.1-36
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Paul Howarth <paul@city-fan.org> - 1.30-1
changelog:
  - Update to 1.30
    - Breaking Change: Set $YAML::LoadBlessed default to false to make it more
      secure


author: Paul Howarth <paul@city-fan.org> - 1:0.238-1
changelog:
  - Update to 0.238
    - Move the prerequisite Test::More from being a runtime prerequisite to a
      test time / build time prerequisite (GH#11)


author: Remi Collet <rcollet@redhat.com> - 8.0.10-1
changelog:
  - rebase to 8.0.10 #1992513
  - compatibility with OpenSSL 3.0 #1992492
  - snmp:  add sha256 / sha512 security protocol #1936635
  - phar: implement openssl_256 and openssl_512 for phar signatures
  - phar: use sha256 signature by default


author: Remi Collet <rcollet@redhat.com> - 8.0.20-1
changelog:
  - rebase to 8.0.20 #2095752
  - clean unneeded dependency on useradd command #2095447
  - add upstream patch to initialize pcre before mbstring
  - retrieve tzdata version from /usr/share/zoneinfo/tzdata.zi


author: Jakub Jelen <jjelen@redhat.com> - 1.1.1-2
changelog:
  - Move pinentry-tty to separate subpackage (#1782442)
  - Update the wrapper selecting the appropriate version (#1918969)


author: Neal Gompa <ngompa@centosproject.org> - 0.3.40-1
changelog:
  - Update to version 0.3.40 which drops media-session service for WirePlumber
    Resolves: rhbz#2022694


author: Alexander Scheel <ascheel@redhat.com> - 3.0.26-6
changelog:
  - CVE-2020-1695: Improper validation of response header in MediaTypeHeaderDelegate.java class
    Resolves: rh-bz#1845547


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 3.0.26-13
changelog:
  - Replace jboss-annotations-1.2-api with jakarta-annotations
  - Drop log4j dependency
  - Add jakarta-activation dependency


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.30-1
changelog:
  - Resolves: rhbz#1721684 Rebase pki-servlet-engine to 9.0.30
  - Update to JWS 5.3.0 distribution
  - Remove new dependencies that PKI doesn't need (and are not provided by RHEL 8)


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.43-1
changelog:
  - Update to JWS 5.5, and drop jakarta-saaj dependency
  - Updates to javapackages-local removed %add_maven_depmap which broke the build,
    so I removed most of the maven artifacts as they aren't very useful anyway
  - Cleaned up a few unnecessary patches


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.43-2
changelog:
  - Related: rhbz#1977948 Cleanup unused tomcat-juli.jar copy now that the maven artifacts have been removed


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-13.20200306git58a7289
changelog:
  - Add patches fixing crash on monitor hot(un)plug (rhbz#1809681)
  - Add patches fixing delay between gdm telling us to deactivate and
    us telling gdm it is ok to continue
  - Drop plymouth-plugin-throbgress sub-package, the spinfinity theme now
    uses the two-step plugin


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-14.20200306git58a7289
changelog:
  - New upstream git snapshot
  - Add RemainAfterExit=yes to plymouth's systemd service files (rhbz#1807771)
  - Fix the spinner / animation missing on shutdown and reboot


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-1.20210323git8a3c9bb
changelog:
  - Update to 0.9.5 + a bunch of extra fixes from git (new upstream git snapshot)
  - Fixes 1896929 - systemd complains about Unit configured to use KillMode=none


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2.20210331git1ea1020
changelog:
  - New git snapshot
  - Fixes 1933378 - Bootsplash doesn't always fully clear on boot to console
  - Fixes 1941329 - Flickering plymouth on shutdown/reboot
  - Prune spec-file changelog a bit


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.1.1-rhel
    (https://github.com/containers/podman/commit/fa692a6)
  - Related: #2097694


author: Marek Kasik <mkasik@redhat.com> - 21.01.0-11
changelog:
  - Backport fixes for issues found by Coverity Scan
  - and fix some of the new issues
  - Resolves: #1967967


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.5.9-14
changelog:
  - Fixed cleanup crash when processing messages with whitespace only fullname
    Resolves: rhbz#1978901


author: Honza Horak <hhorak@redhat.com> - 13.3-6
changelog:
  - Do not provide pkgconfig(libpq) to not trick packages that actually require
    libpq-devel
    Resolves: #1980992


author: Filip Januš <fjanus@redhat.com> - 13.3-9
changelog:
  - Remove tests failing with openssl3, now pgp is tested only with
    supported ciphers
    Add postgresql-pgcrypto-openssl3-init.patch - Correctly init ciphers
    Add postgresql-pgcrypto-openssl3-tests.patch - disable unsupported
    ciphers in the test suite
    Related discussion: #2008773
    Resolves: #1964848


author: Marek Kulik <mkulik@redhat.com> - 13.5-1
changelog:
  - Update to 13.5 (#2023301)
    Remove patch postgresql-pgcrypto-openssl3-init.patch - Already in upstream


author: Bastien Nocera <bnocera@redhat.com> - 0.8.1-2
changelog:
  + power-profiles-daemon-0.8.1-2
  - Remove linter, as apparently unwanted in check section
  - Resolves: rhbz#1947950


author: Adrian Reber <adrian@lisas.de> - 3.14.0-6
changelog:
  - Reintroduce the emacs subpackage to avoid file conflicts between
    protobuf-compiler.x86_64 and protobuf-compiler.i686
  - Disable LTO to fix annobin errors


author: Jan Rybar <jrybar@redhat.com> - 3.6-16
changelog:
  - output is not redirected when ps_mem is killed
  - cmdline unwanted blank spaces fixed
  - Resolves: rhbz#2033997
  - Resolves: rhbz#2049743


author: Wim Taymans <wtaymans@redhat.com> - 15.0-1
changelog:
  - Update to 15.0
  - convert to meson build
  - esound, gconf, oss are no longer supported
  - Resolves: rhbz#1961581


author: Tomas Popela <tpopela@redhat.com> - 1.20.1-1
changelog:
  - Update to 1.20.1
  - Resolves: rhbz#2016905
  - Ship python3-cairo-devel in CRB
  - Resolves: rhbz#2053665


author: Dominik Mierzejewski <rpm@greysector.net> - 0.26-1
changelog:
  - update to 0.26 (#1780153)
  - make main package archful to run tests on all arches
    (pythonN-pyelftools subpackages are still noarch)
  - run readelf tests on x86_64 only for now
  - rename binaries to conform to Python packaging guidelines
  - enable python3 subpackage for EPEL7
  - declare bundled old construct module instead of needlessly requiring it


author: Brian C. Lane <bcl@redhat.com> - 3.32.1-1
changelog:
  - Use .z version for new builds, start with 3.32.0 (bcl)
    Related: rhbz#1968762
  - tests: Use pykickstart/commands relative to the import (bcl)
    Related: rhbz#1968762


author: Brian C. Lane <bcl@redhat.com> - 3.32.2-1
changelog:
  - Add RHEL 9 handler (mkolman)
    Resolves: rhbz#1966730
  - Add RHEL 9 version for commands that had a RHEL version in the past (mkolman)
    Related: rhbz#1966730
  - Add RHEL 9 version for BTRFS related commands (mkolman)
    Related: rhbz#1966730


author: Brian C. Lane <bcl@redhat.com> - 3.32.4-1
changelog:
  - github: Add rhel9-branch to the list of branches (bcl)
    Related: rhbz#2054906
  - Fix validation of packages arguments (bcl)
    Resolves: rhbz#2054906


author: Brian C. Lane <bcl@redhat.com> - 3.32.5-1
changelog:
  - Tools should default to RHEL9 not DEVEL (bcl)
    Resolves: rhbz#2060779
  - Default to RHEL9 for docs and ksshell test. (bcl)
    Related: rhbz#2060779
  - Set default version to RHEL9 (bcl)
    Related: rhbz#2060779
  - Remove the --ignorebroken option from RHEL handlers (vponcova)
    Related: rhbz#2060779
  - Add the isRHEL function (vponcova)
    Related: rhbz#2060779


author: Brian C. Lane <bcl@redhat.com> - 3.32.6-1
changelog:
  - tests: Update ksvalidator tests to allow new wording for help output (bcl)
    Related: rhbz#2083269
  - rootpw: Use RHEL9 instead of F37 for new rootpw feature (bcl)
    Related: rhbz#2083269
  - rootpw: Add an --allow-ssh argument (bcl)
    Resolves: rhbz#2083269
  - github: Fix workflow to only send coverage for python 3.9 (bcl)
    Related: rhbz#2083269


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.7-1
changelog:
  - Upgrade to pyparted-3.11.7 (BZ#1890443)
  - Set PY_SSIZE_T_CLEAN for the build (bcl)
  - add nvme support
  - Update RELEASE file to make last step be "make pypi" (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.12.0-1
changelog:
  - Patch pyparted to handle PED_DISK_TYPE_PARTITION_TYPE_ID for the
    msdos disk type and PED_DISK_TYPE_PARTITION_TYPE_UUID for the gpt
    label
    Resolves: rhbz#2103243


author: Miro Hrončok <mhroncok@redhat.com> - 3.4-6
changelog:
  - Subpackage python2-pyserial has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.4.3-12
changelog:
  - Subpackage python2-appdirs has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.5.0-18
changelog:
  - Subpackage python2-augeas has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Pino Toscano <ptoscano@redhat.com> - 0.5.0-20
changelog:
  - Backport upstream commit d93e1563add8c40450556b7d74520439ee792bd9 to fix
    the discovery of location in the test
  - Execute the tests at build time
  - Add a simple gating test to execute the test script, and make it gating for
    the python-augeas source


author: Miro Hrončok <mhroncok@redhat.com> - 5.0.6-19
changelog:
  - Subpackage python2-configobj has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 3.4.7-1
changelog:
  - Update to 3.4.7
  - Remove dependency on python-cryptography-vectors package and use vectors
    directly from Github source tar ball. Related: rhbz#1952343


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-6
changelog:
  - Rebase to 36.0.1, related: rhbz#2059630, rhbz#2060787
  - OpenSSL 3.0 FIPS mode is now detected correctly, related: rhbz#2054785
  - Fix error check from EVP_PKEY_CTX_set_signature_md, related: rhbz#2060343
  - Block 3DES in FIPS mode, related: rhbz#2055209
  - Disable DSA tests in FIPS mode
  - Enable SHA1 signatures in test suite
  - Fix serialization of keyusage ext with no bits
  - Re-enable tests that are passing again


author: Vendula Poncova <vponcova@redhat.com> - 0.4-1
changelog:
  - Replace the error register with the error mapper (vponcova)
  - Propagate additional arguments for the client handler factory (vponcova)
  - Propagate additional arguments in the class AddressedMessageBus (vponcova)
  - Generate the documentation (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.0-1
changelog:
  - Fix the documentation (vponcova)
  - Fix minor typos (yurchor)
  - Enable Codecov (vponcova)
  - Test the documentation build (vponcova)
  - Extend the documentation (vponcova)
  - Add configuration files for Read the Docs and Conda (vponcova)
  - Fix all warnings from the generated documentation (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.1-1
changelog:
  - Include tests and examples in the source distribution (vponcova)
  - Fix the pylint warning signature-differs (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.2-1
changelog:
  - Replace ABC with ABCMeta (vponcova)
  - Fix typing tests (vponcova)
  - Run tests on the latest CentOS (vponcova)
  - Install sphinx from PyPI (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.3-1
changelog:
  - Document differences between dasbus and pydbus (vponcova)
  - Improve the support for interface proxies in the service identifier (vponcova)
  - Improve the support for interface proxies in the message bus (vponcova)
  - Test the interface proxies (vponcova)
  - Make the message bus of a service identifier accessible (vponcova)
  - Fix the testing environment for Fedora Rawhide (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.4-1
changelog:
  - Handle all errors of the DBus call (vponcova)
  - Fix tests for handling DBus errors on the server side (vponcova)
  - Run packit smoke tests for all Fedora (jkonecny)
  - Fix packit archive creation (jkonecny)
  - Add possibility to change setup.py arguments (jkonecny)


author: Bryan Gurney <bgurney@redhat.com> - 0.8-4
changelog:
  - Remove check test
  - Remove BuildRequires for python3-dbus and python3-into-dbus-python
  - Resolves: rhbz#1986608


author: Bryan Gurney <bgurney@redhat.com> - 0.04-4
changelog:
  - Remove check test
  - Remove Requires and BuildRequires for python3-pyparsing
  - Resolves: rhbz#1986574


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-2
changelog:
  - Fix Python configuration for ELN/RHEL 9
  - Rework bconds for Python now that there are no Fedoras left that should
    use Python2


author: Bryan Gurney <bgurney@redhat.com> - 0.08-4
changelog:
  - Remove check test
  - Remove BuildRequires for python3-dbus-signature-pyparsing and python3-dbus
  - Resolves: rhbz#1986609


author: Miro Hrončok <mhroncok@redhat.com> - 1.10-18
changelog:
  - Subpackage python2-jsonpointer has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Bryan Gurney <bgurney@redhat.com> - 0.15-5
changelog:
  - Remove check test
  - Remove BuildRequires and Requires for python3-justbases
  - Resolves: rhbz#1986913


author: Miro Hrončok <mhroncok@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.2
  - Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
  - Fixes: rhbz#1855415
  - Fixes: rhbz#1901634


author: Petr Viktorin <pviktori@redhat.com> - 1.1.4-1
changelog:
  - Update to version 1.1.4
  - Avoids test warnings on Python 3.10
    Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1907474


author: Martin Kolman <mkolman@redhat.com> - 0.48-1
changelog:
  - Merge pull request #23 from poncovka/master-decode_bytes (mkolman)
  - Handle bytes and strings from RPM (#1764642) (vponcova)


author: Martin Kolman <mkolman@redhat.com> - 0.49-1
changelog:
  - Merge pull request #31 from jkonecny12/master-fix-make-archive (mkolman)
  - Fix make archive command after pot file removal (jkonecny)
  - Merge pull request #29 from jkonecny12/master-weblate-support (jkonecny)
  - Add Readme with description and translation badge (jkonecny)
  - Add pot file to the git ignore (jkonecny)
  - Pause release when making bumpver to check and solve translations (jkonecny)
  - Remove unused PREFIX from Makefile (jkonecny)
  - Remove Zanata (jkonecny)
  - Push translations to our translation repository (jkonecny)
  - Download translations from Weblate (jkonecny)
  - Remove pot file (jkonecny)
  - Merge pull request #24 from M4rtinK/master-fix_zanata_client_detection_in_makefile (mkolman)
  - Fix Zanata client detection in Makefile (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.50-1
changelog:
  - Merge pull request #33 from mzidek-gh/master (mkolman)
  - dump: Use exception's type and value when calculating hash (mzidek)


author: Miro Hrončok <mhroncok@redhat.com> - 0.10.6-9
changelog:
  - Subpackage python2-netifaces has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-2
changelog:
  - Limit BuildRequires to necessary minimum in Red Hat Enterprise Linux
  - Skip pytest in Red Hat Enterprise Linux
  - Do not build -doc subpackage for Red Hat Enterprise Linux


author: Jakub Hrozek <jhrozek@redhat.com> - 3.1.0-1
changelog:
  - Resolves: rhbz#1922352 - python-oauthlib requires python-mock
  - Update to upstream 3.1.0
  - Gets rid of obsolete python-nose dependency
  - Nuke the python2/python3 conditionals, let's only support python3


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.0-2
changelog:
  - Remove the python3-oauthlib+signedtoken package
  - When building, skip tests that require jwt
  - Resolves: rhbz#1966407 - Drop python-jwt dependency from python-oauthlib


author: Jakub Hrozek <jhrozek@redhat.com> - 3.1.1-1
changelog:
  - Resolves: rhbz#1935433 - python-oauthlib implements and/or uses the
                             deprecated SHA1 algorithm by default


author: Miro Hrončok <mhroncok@redhat.com> - 0.7.2-21
changelog:
  - Subpackage python2-prettytable has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomas Orsava <torsava@redhat.com> - 5.8.0-5
changelog:
  - Remove unnecessary test dependency on python3-mock
  - Remove unnecessary macro __provides_exclude_from


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.8.6-6
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Add manual Obsoletes for python39-psycopg2-doc
  - Related: rhbz#1990421


author: Pavel Cahyna <pcahyna@redhat.com> - 1.5.29-1
changelog:
  - Updated to 1.5.29.
  - Avoid dependency on python-pbr, conditionalize docs build, to allow building in RHEL.
    Inspired by python-sushy.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.3-3
changelog:
  - Replace pypi_name macro with srcname
  - Update BR’s
  - Run the doctests
  - Build documentation in a new -doc subpackage


author: Miro Hrončok <mhroncok@redhat.com> - 0.17.3-7
changelog:
  - Don't BuildRequire python3-hypothesis and exclude affected tests from %check
  - Resolves: rhbz#1928125


author: Christian Heimes <cheimes@redhat.com> - 6.1-10
changelog:
  - Resolves: #1935839 Remove python-imaging build requirements for RHEL
  - Run unit tests during build


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.0-11
changelog:
  - Don't use SIGNATURE_RSA
  - Related: #1935433 - python-oauthlib implements and/or uses the deprecated
                        SHA1 algorithm by default


author: Paul Belanger <pabelanger@redhat.com> - 0.5.4-1
changelog:
  - Initial package.
  - Forked from https://fedora.pkgs.org/rawhide/fedora-x86_64/python3-resolvelib-0.5.5-2.fc35.noarch.rpm.html however
    downgraded to 0.5.4 due to 0.5.5 being yanked from pypi.


author: Miro Hrončok <mhroncok@redhat.com> - 12-1
changelog:
  - Disable the dist generators for Python 2
  - https://fedoraproject.org/wiki/Changes/Disable_Python_2_Dist_RPM_Generators_and_Freeze_Python_2_Macros


author: Tomas Orsava <torsava@redhat.com> - 12-2
changelog:
  - scripts/pythondistdeps: Switch from using pkg_resources to importlib.metadata
    for reading the egg/dist-info metadata
  - The script no longer requires setuptools but instead requires packaging


author: Tomas Orsava <torsava@redhat.com> - 12-4
changelog:
  - scripts/pythondistdeps: Treat extras names case-insensitively and always
    output them in lower case (#1936875)


author: Miro Hrončok <mhroncok@redhat.com> - 12-5.1
changelog:
  - Do not generate setuptools requirement for console_scripts on Python 3.10+
  - See https://fedoraproject.org/wiki/Changes/Reduce_dependencies_on_python3-setuptools


author: Miro Hrončok <mhroncok@redhat.com> - 12-6
changelog:
  - Get rid of distutils deprecation warning (by not using it)
  - The distutils module is deprecated in Python 3.10+
  - https://www.python.org/dev/peps/pep-0632/


author: Tomas Orsava <torsava@redhat.com> - 12-8
changelog:
  - From `python3-foo` packages automatically generate `python3.X-foo` Obsoletes
    tags on CentOS/RHEL
  - Resolves: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 3.9-44
changelog:
  - Set $RPM_BUILD_ROOT in %{python3_...} macros
    to allow selecting alternate sysconfig install scheme based on that variable


author: Karolina Surma <ksurma@redhat.com> - 3.9-45
changelog:
  - Introduce -f (read from file) option to %py{3}_check_import
  - Introduce -t (filter top-level modules) option to %py{3}_check_import
  - Introduce -e (exclude module globs) option to %py{3}_check_import


author: Karolina Surma <ksurma@redhat.com> - 3.9-46
changelog:
  - Fix multiline arguments processing for %py_check_import
  - Fix %py_shebang_flags handling within %py_check_import
  - Process .pth files in buildroot's sitedirs in %py_check_import
  - Move import_all_modules.py from python-srpm-macros to python-rpm-macros


author: Miro Hrončok <mhroncok@redhat.com> - 3.9-47
changelog:
  - Set %__python3 value according to %python3_pkgversion
    I.e. when %python3_pkgversion is 3.12, %__python3 is /usr/bin/python3.12


author: Tomas Orsava <torsava@redhat.com> - 3.9-49
changelog:
  - Add lua helper functions to make it possible to automatically generate
    Obsoletes tags
  - Modify the %py_provides macro to also generate Obsoletes tags on CentOS/RHEL
  - Resolves: rhbz#1990421


author: Tomas Orsava <torsava@redhat.com> - 3.9-51
changelog:
  - Add Obsoletes tags with the python39- prefix for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Packit Service <user-cont-team+packit-service@redhat.com> - 1.8-1
changelog:
  - New version - 1.8 (Jiri Konecny)
  - Add missing make command to spec file (Jiri Konecny)
  - Don't translate the prompt keys (Vendula Poncova)
  - Enable daily build for Anaconda-devel COPR repository (Jiri Konecny)
  - Use Fedora container registry instead of Dockerhub (Jiri Konecny)
  - Migrate COPR daily COPR builds to Packit (Jiri Konecny)
  - Test build on Fedora ELN (Jiri Konecny)
  - Remove packit get-current-action (Jiri Konecny)
  - Run tests in GitHub workflow (Martin Pitt)
  - Fix raise-missing-from (W0707) pylint warnings (Martin Pitt)
  - Fix pylint to check test code correctly (Jiri Konecny)
  - Use script to run unit tests (Jiri Konecny)
  - Use relative imports in tests (Jiri Konecny)
  - Change directory structure of unit tests (Jiri Konecny)
  - Fix documentation of _process_screen method (Jiri Konecny)
  - Fix pylint issues (Jiri Konecny)
  - Use pylint instead of pocketlint (Jiri Konecny)
  - Add coverage support (Jiri Konecny)
  - Make link to exmples directory in Readme (Jiri Konecny)
  - Fix homepage of the project in setup.py (Jiri Konecny)
  - Fix classifiers in setup.py (Jiri Konecny)
  - Add pypi-upload to Makefile (Jiri Konecny)
  - Use correct variant of the field (Jiri Konecny)
  - Propose Fedora update only to Fedora in development (Jiri Konecny)
  - Add upstream tag template to packit for releasing (Jiri Konecny)
  - Packit will download archive from Source0 if needed (Jiri Konecny)


author: Nils Philippsen <nils@tiptoe.de> - 1.4.32-1
changelog:
  - version 1.4.32
  - don't BR: python3-pytest-xdist on EL9
  - remove obsolete (no-op) tweak of setup.cfg


author: Sergio Correia <scorreia@redhat.com> - 1.4.37-3
changelog:
  - Remove obsolete cruft from the specfile, follow the packaging guidelines
  - Remove also extra packages we have no runtime dependencies for
    Related: rhbz#2084556


author: Tomas Orsava <torsava@redhat.com> - 3.9.9-2
changelog:
  - Read pre-packaged Python wheels from a newly versioned directory
    /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Nicola Sella <nsella@redhat.com> - 4.0.18-1
changelog:
  - [needs-restarting] Fix plugin fail if needs-restarting.d does not exist
  - [needs-restarting] add kernel-rt to reboot list
  - Fix debug-restore command
  - [config-manager] enable/disable comma separated pkgs (RhBug:1830530)
  - [debug] Use standard demands.resolving for transaction handling
  - [debug] Do not remove install-only packages (RhBug:1844533)
  - return error when dnf download failed
  - README: Reference Fedora Weblate instead of Zanata
  - [reposync] Add latest NEVRAs per stream to download (RhBug: 1833074)
  - copr: don't try to list runtime dependencies


author: Nicola Sella <nsella@redhat.com> - 4.0.19-1
changelog:
  - Update to 4.0.19
  - copr: allow only 2 arguments with copr enable command
  - [needs-restarting] fix -r in nspawn containers (RhBug:1913962,1914251)
  - Add --gpgcheck option to reposync (RhBug:1856818) (RhBug:1856818)
  - Re-introduce yum-groups-manager functionality (RhBug:1826016)
  - [repomanage] Don't use cached metadata (RhBug:1899852)
  - [needs-restarting] add -s to list services (RhBug:1772939) (RhBug:1772939)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.21-1
changelog:
  - Update to 4.0.21
  - Removed dependency on dnf.yum.misc.Checksum class (RhBug:1935465)
  - Add missing command line option to documentation
  - doc: add packages to needs-restarting conf
  - Set blacklist subcommand as deprecated
  - Bugs fixed (RhBug:1914827,1916782)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.24-1
changelog:
  - Update to 4.0.24
  - [repomanage] Allow running only with metadata
  - [repomanage] Enhance documentation (RhBug:1898293)
  - [versionlock] Locking obsoleted package does not make the obsoleter unavailable (RhBug:1957280)
  - [versionlock] Work correctly with packages with minorbump part of release (RhBug:1961217)
  - [leaves] Show strongly connected components
  - [needs-restarting] Fix wrong boot time (RhBug:1960437)
  - [playground] Disable playground command, since it doesn't work
  - [copr] on CentOS Stream, enable centos stream chroot instead of not epel 8 (RhBug:1994154)
  - [copr] Avoid using deprecated function distro.linux_distribution() (RhBug:2011550)
  - [copr] don't traceback on empty lines in /etc/os-release


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.24-2
changelog:
  - [groups-manager] Use full NEVRA for matching packages instead of only name (RhBug:2029864)
  - [versionlock] Fix: Multiple package-name-spec arguments don't lock (RhBug:2029871)
  - [versionlock] Update documentation for adding specifi version (RhBug:2013332)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.1.0-1
changelog:
  - Add a new subpackage with modulesync command. The command downloads packages from modules and/or creates a repository with modular data. (RhBug:1868047)
  - [repoclosure] Print counts of missing dependencies
  - [reposync] Do not stop downloading packages on the first error (RhBug:2009894)


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Chris Leech <cleech@redhat.com> - 6.2.1.2-1.git13e7f58
changelog:
  - iscsiadm overflow regression when discovering many targets at once
  - check for invalid session id during stop connection
  - add ability to attempt target logins asynchronously


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-4
changelog:
  - Make the python-pip-wheel subpackage versioned (python3-pip-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-5
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Tony Asleson <tasleson@redhat.com> - 0.14.6-6
changelog:
  - Fix build failure
    Bad source: /builddir/build/SOURCES/pywbem-0.14.6.tar.gz: No such file or directory


author: Miro Hrončok <mhroncok@redhat.com> - 0.26-8
changelog:
  - Subpackage python2-pyxdg has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Andrea Claudi <aclaudi@redhat.com> - [2.4.4-4.el9]
changelog:
  - Don't build scapy-doc package on rhel (Andrea Claudi) [1973720]
  - Enable gating test on RHEL9 (Jianwen Ji) [1974642]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jerry James <loganjerry@gmail.com> - 2020.3-4
changelog:
  - Fix cmake file installation (bz 1930389)
  - Allow use of RTM instructions when available
  - At upstream's suggestion, do not force ITT_NOTIFY support
  - Drop -fetchadd64 patch, only needed for forced ITT_NOTIFY support


author: Jonathon Turel <jturel@gmail.com> 0.7.2-1
changelog:
  - Use DNF on RHEL (jturel@gmail.com)
  - Use PackageManager to determine kernel version (jturel@gmail.com)
  - Use subprocess to check process path arguments (jturel@gmail.com)
  - Find the right lxml version for Python 3.4 (jturel@gmail.com)
  - Update Vagrantfile to use Fedora 30 (jturel@gmail.com)
  - Ignore debug kernels when checking if kernel has been updated
    (jturel@gmail.com)
  - Add build dependency for nosetests (frostyx@email.cz)
  - Run tests within the %check phase (frostyx@email.cz)
  - Update fedora branches (frostyx@email.cz)


author: Jonathon Turel <jturel@gmail.com> 0.7.2-3
changelog:
  - Update tito releaser branches (frostyx@email.cz)
  - Not build for python2 package for Fedora anymore (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.4-1
changelog:
  - Fix list index out of range for ssh process names (frostyx@email.cz)
  - When there is no helper, it doesn't contain anything (frostyx@email.cz)
  - Fix wrong parameters number when upating an application objects
    (frostyx@email.cz)
  - Remove unnecessary string decoding (frostyx@email.cz)
  - Fix the missing dist in release (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.5-1
changelog:
  - Depend on python3-six instead of python3-future (frostyx@email.cz)
  - Drop beautifulsoup4 in favor of built-in xml.dom (frostyx@email.cz)
  - Drop nosetests dependency, use pytest instead (frostyx@email.cz)


author: Artem Egorenkov <aegorenk@redhat.com> - 1.13.1-4
changelog:
  - Don't start unbound-anchor before unbound service if DISABLE_UNBOUND_ANCHOR
    environment variable equals to "yes"
  - Resolves: rhbz#1951923


author: Artem Egorenkov <aegorenk@redhat.com> - 1.13.1-5
changelog:
  - Option --enable-linux-ip-local-port-range added to use system configured port range for libunbound on Linux
  - Resolves: rhbz#1952814


author: Vladis Dronov <vdronov@redhat.com> - 0.6.7-1
changelog:
  - Update to qatengine v0.6.7 with openssl-3 support (bz 1874206, bz 1953498)
  - Add documentation files to a package


author: Vladis Dronov <vdronov@redhat.com> - 21.05.0-1
changelog:
  - Update to qatlib 21.05 with openssl-3 support (bz 1920444, bz 1953498)
  - Add documentation files to a package


author: Vladis Dronov <vdronov@redhat.com> - 1.0.7-1
changelog:
  - Rebuild for qatzip v1.0.7
  - Fix snprintf truncation check (bz 2046925)
  - Add -fstack-protector-strong build option (bz 2044889)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-12
changelog:
  - kvm-RHEL-mark-old-machine-types-as-deprecated.patch [bz#2062813]
  - kvm-hw-virtio-vdpa-Fix-leak-of-host-notifier-memory-regi.patch [bz#2062828]
  - kvm-spec-Fix-obsolete-for-spice-subpackages.patch [bz#2062819 bz#2062817]
  - kvm-spec-Obsolete-old-usb-redir-subpackage.patch [bz#2062819]
  - kvm-spec-Obsolete-ssh-driver.patch [bz#2062817]
  - Resolves: bz#2062828
    ([virtual network][rhel9][vDPA] qemu crash after hot unplug vdpa device [rhel-9.1.0])
  - Resolves: bz#2062819
    (Broken upgrade path due to qemu-kvm-hw-usbredir  rename [rhel-9.1.0])
  - Resolves: bz#2062817
    (Missing qemu-kvm-block-ssh obsolete breaks upgrade path [rhel-9.1.0])
  - Resolves: bz#2062813
    (Mark all RHEL-8 and earlier machine types as deprecated [rhel-9.1.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-13
changelog:
  - kvm-RHEL-disable-seqpacket-for-vhost-vsock-device-in-rhe.patch [bz#2065589]
  - Resolves: bz#2065589
    (RHEL 9.0 guest with vsock device migration failed from RHEL 9.0 > RHEL 8.6 [rhel-9.1.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-1
changelog:
  - Rebase to QEMU 7.0.0 [bz#2064757]
  - Do not build ssh block driver anymore [bz#2064500]
  - Removed hpet and parallel port support [bz#2065042]
  - Compatibility support [bz#2064782 bz#2064771]
  - Resolves: bz#2064757
    (Rebase to QEMU 7.0.0)
  - Resolves: bz#2064500
    (Install qemu-kvm-6.2.0-11.el9_0.1 failed as conflict with qemu-kvm-block-ssh-6.2.0-11.el9_0.1)
  - Resolves: bz#2065042
    (Remove upstream-only devices from the qemu-kvm binary)
  - Resolves: bz#2064782
    (Update machine type compatibility for QEMU 7.0.0 update [s390x])
  - Resolves: bz#2064771
    (Update machine type compatibility for QEMU 7.0.0 update [x86_64])


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-2
changelog:
  - kvm-configs-devices-aarch64-softmmu-Enable-CONFIG_VIRTIO.patch [bz#2044162]
  - kvm-target-ppc-cpu-models-Fix-ppc_cpu_aliases-list-for-R.patch [bz#2081022]
  - Resolves: bz#2044162
    ([RHEL9.1] Enable virtio-mem as tech-preview on ARM64 QEMU)
  - Resolves: bz#2081022
    (Build regression on ppc64le with c9s qemu-kvm 7.0.0-1 changes)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-3
changelog:
  - kvm-hw-arm-virt-Remove-the-dtb-kaslr-seed-machine-option.patch [bz#2046029]
  - kvm-hw-arm-virt-Fix-missing-initialization-in-instance-c.patch [bz#2046029]
  - kvm-Enable-virtio-iommu-pci-on-aarch64.patch [bz#1477099]
  - kvm-sysemu-tpm-Add-a-stub-function-for-TPM_IS_CRB.patch [bz#2037612]
  - kvm-vfio-common-remove-spurious-tpm-crb-cmd-misalignment.patch [bz#2037612]
  - Resolves: bz#2046029
    ([WRB] New machine type property - dtb-kaslr-seed)
  - Resolves: bz#1477099
    (virtio-iommu (including ACPI, VHOST/VFIO integration, migration support))
  - Resolves: bz#2037612
    ([Win11][tpm][QL41112 PF]  vfio_listener_region_add received unaligned region)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-4
changelog:
  - kvm-qapi-machine.json-Add-cluster-id.patch [bz#2041823]
  - kvm-qtest-numa-test-Specify-CPU-topology-in-aarch64_numa.patch [bz#2041823]
  - kvm-hw-arm-virt-Consider-SMP-configuration-in-CPU-topolo.patch [bz#2041823]
  - kvm-qtest-numa-test-Correct-CPU-and-NUMA-association-in-.patch [bz#2041823]
  - kvm-hw-arm-virt-Fix-CPU-s-default-NUMA-node-ID.patch [bz#2041823]
  - kvm-hw-acpi-aml-build-Use-existing-CPU-topology-to-build.patch [bz#2041823]
  - kvm-coroutine-Rename-qemu_coroutine_inc-dec_pool_size.patch [bz#2079938]
  - kvm-coroutine-Revert-to-constant-batch-size.patch [bz#2079938]
  - kvm-virtio-scsi-fix-ctrl-and-event-handler-functions-in-.patch [bz#2079347]
  - kvm-virtio-scsi-don-t-waste-CPU-polling-the-event-virtqu.patch [bz#2079347]
  - kvm-virtio-scsi-clean-up-virtio_scsi_handle_event_vq.patch [bz#2079347]
  - kvm-virtio-scsi-clean-up-virtio_scsi_handle_ctrl_vq.patch [bz#2079347]
  - kvm-virtio-scsi-clean-up-virtio_scsi_handle_cmd_vq.patch [bz#2079347]
  - kvm-virtio-scsi-move-request-related-items-from-.h-to-.c.patch [bz#2079347]
  - kvm-Revert-virtio-scsi-Reject-scsi-cd-if-data-plane-enab.patch [bz#1995710]
  - kvm-migration-Fix-operator-type.patch [bz#2064530]
  - Resolves: bz#2041823
    ([aarch64][numa] When there are at least 6 Numa nodes serial log shows 'arch topology borken')
  - Resolves: bz#2079938
    (qemu coredump when boot with multi disks (qemu) failed to set up stack guard page: Cannot allocate memory)
  - Resolves: bz#2079347
    (Guest boot blocked when scsi disks using same iothread and 100% CPU consumption)
  - Resolves: bz#1995710
    (RFE: Allow virtio-scsi CD-ROM media change with IOThreads)
  - Resolves: bz#2064530
    (Rebuild qemu-kvm with clang-14)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-5
changelog:
  - kvm-qemu-nbd-Pass-max-connections-to-blockdev-layer.patch [bz#1708300]
  - kvm-nbd-server-Allow-MULTI_CONN-for-shared-writable-expo.patch [bz#1708300]
  - Resolves: bz#1708300
    (RFE: qemu-nbd vs NBD_FLAG_CAN_MULTI_CONN)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-6
changelog:
  - kvm-Introduce-event-loop-base-abstract-class.patch [bz#2031024]
  - kvm-util-main-loop-Introduce-the-main-loop-into-QOM.patch [bz#2031024]
  - kvm-util-event-loop-base-Introduce-options-to-set-the-th.patch [bz#2031024]
  - kvm-qcow2-Improve-refcount-structure-rebuilding.patch [bz#2072379]
  - kvm-iotests-108-Test-new-refcount-rebuild-algorithm.patch [bz#2072379]
  - kvm-qcow2-Add-errp-to-rebuild_refcount_structure.patch [bz#2072379]
  - kvm-iotests-108-Fix-when-missing-user_allow_other.patch [bz#2072379]
  - kvm-virtio-net-setup-vhost_dev-and-notifiers-for-cvq-onl.patch [bz#2070804]
  - kvm-virtio-net-align-ctrl_vq-index-for-non-mq-guest-for-.patch [bz#2070804]
  - kvm-vhost-vdpa-fix-improper-cleanup-in-net_init_vhost_vd.patch [bz#2070804]
  - kvm-vhost-net-fix-improper-cleanup-in-vhost_net_start.patch [bz#2070804]
  - kvm-vhost-vdpa-backend-feature-should-set-only-once.patch [bz#2070804]
  - kvm-vhost-vdpa-change-name-and-polarity-for-vhost_vdpa_o.patch [bz#2070804]
  - kvm-virtio-net-don-t-handle-mq-request-in-userspace-hand.patch [bz#2070804]
  - kvm-Revert-globally-limit-the-maximum-number-of-CPUs.patch [bz#2094270]
  - kvm-vfio-common-remove-spurious-warning-on-vfio_listener.patch [bz#2086262]
  - Resolves: bz#2031024
    (Add support for fixing thread pool size [QEMU])
  - Resolves: bz#2072379
    (Fail to rebuild the reference count tables of qcow2 image on host block devices (e.g. LVs))
  - Resolves: bz#2070804
    (PXE boot crash qemu when using multiqueue vDPA)
  - Resolves: bz#2094270
    (Do not set the hard vCPU limit to the soft vCPU limit in downstream qemu-kvm anymore)
  - Resolves: bz#2086262
    ([Win11][tpm]vfio_listener_region_del received unaligned region)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-7
changelog:
  - kvm-coroutine-ucontext-use-QEMU_DEFINE_STATIC_CO_TLS.patch [bz#1952483]
  - kvm-coroutine-use-QEMU_DEFINE_STATIC_CO_TLS.patch [bz#1952483]
  - kvm-coroutine-win32-use-QEMU_DEFINE_STATIC_CO_TLS.patch [bz#1952483]
  - kvm-Enable-virtio-iommu-pci-on-x86_64.patch [bz#2094252]
  - kvm-linux-aio-fix-unbalanced-plugged-counter-in-laio_io_.patch [bz#2092788]
  - kvm-linux-aio-explain-why-max-batch-is-checked-in-laio_i.patch [bz#2092788]
  - Resolves: bz#1952483
    (RFE: QEMU's coroutines fail with CFLAGS=-flto on non-x86_64 architectures)
  - Resolves: bz#2094252
    (Compile the virtio-iommu device on x86_64)
  - Resolves: bz#2092788
    (Stalled IO Operations in VM)


author: Camilla Conte <cconte@redhat.com> - 7.0.0-8
changelog:
  - kvm-tests-avocado-update-aarch64_virt-test-to-exercise-c.patch [bz#2060839]
  - kvm-RHEL-only-tests-avocado-Switch-aarch64-tests-from-a5.patch [bz#2060839]
  - kvm-RHEL-only-AArch64-Drop-unsupported-CPU-types.patch [bz#2060839]
  - kvm-target-i386-deprecate-CPUs-older-than-x86_64-v2-ABI.patch [bz#2060839]
  - kvm-target-s390x-deprecate-CPUs-older-than-z14.patch [bz#2060839]
  - kvm-target-arm-deprecate-named-CPU-models.patch [bz#2060839]
  - kvm-meson.build-Fix-docker-test-build-alpine-when-includ.patch [bz#1968509]
  - kvm-QIOChannel-Add-flags-on-io_writev-and-introduce-io_f.patch [bz#1968509]
  - kvm-QIOChannelSocket-Implement-io_writev-zero-copy-flag-.patch [bz#1968509]
  - kvm-migration-Add-zero-copy-send-parameter-for-QMP-HMP-f.patch [bz#1968509]
  - kvm-migration-Add-migrate_use_tls-helper.patch [bz#1968509]
  - kvm-multifd-multifd_send_sync_main-now-returns-negative-.patch [bz#1968509]
  - kvm-multifd-Send-header-packet-without-flags-if-zero-cop.patch [bz#1968509]
  - kvm-multifd-Implement-zero-copy-write-in-multifd-migrati.patch [bz#1968509]
  - kvm-QIOChannelSocket-Introduce-assert-and-reduce-ifdefs-.patch [bz#1968509]
  - kvm-QIOChannelSocket-Fix-zero-copy-send-so-socket-flush-.patch [bz#1968509]
  - kvm-migration-Change-zero_copy_send-from-migration-param.patch [bz#1968509]
  - kvm-migration-Allow-migrate-recover-to-run-multiple-time.patch [bz#2096143]
  - Resolves: bz#2060839
    (Consider deprecating CPU models like "kvm64" / "qemu64" on RHEL 9)
  - Resolves: bz#1968509
    (Use MSG_ZEROCOPY on QEMU Live Migration)
  - Resolves: bz#2096143
    (The migration port is not released if use it again for recovering postcopy migration)


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-26
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch patches
    - -gui: add mesa-dri-drivers soft dep for rhel8+ too
    Resolves: bz#1998959
  - Fix out-of-bound write in QOutlineMapper::converPath
    Resolves: bz#1996876


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-27
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch patches
    - validate configure results (base, egl-x11)

    Resolves: bz#2014991


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-9
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch fixes
    - pull in candidate fix QTBUG-83890
    Resolves: bz#1988934


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: John Kacur <jkacur@redhat.com> - 2.1-2
changelog:
  - Take into account the rename of the sched_features file for HRTICK
  - Use HRTICK_DL if available
  Resolves: rhbz#1973083


author: John Kacur <jkacur@redhat.com> - 2.1-6
changelog:
  - Fix potential double mount of cgroups for deadline_test
  - Fix potential double mount of cgroups for cyclicdeadline_test
  Resolves: rhbz#2011415


author: Leah Leshchinsky <lleshchi@redhat.com> - 2.3-1
changelog:
  - Update to latest upstream 2.3
  - Correct the comment of numa_initialize()
  - oslat.8: Remove the argument of --bias
  Resolves: rhbz#2012297


author: John Kacur <jkacur@redhat.com> - 2.3-2
changelog:
  - Fix parsing of affinity
  - Ignore the runtime cpumask if a new cpumask is requested
  Resolves: rhbz#2050244


author: Christopher Engelhard <ce@lcts.de> - 2.6-3
changelog:
  - Stop auto-creating a cronjob, but ship example cronjob/
    systemd timer units in docdir instead (upstream issue #1829)
  - Build & ship HTML user guide
  - Remove %pre scriptlet, as it was introduced only to fix a
    specific upgrade issue with v1.15 in 2014


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-7
changelog:
  - Sync spec changes and downstream patches from RHEL 8
    - Require xorriso instead of genisoimage
    - Add S/390 support and forgotten dependency on the file utility
    - Backport upstream code related to LUKS2 support
    - Modify the cron command to avoid an e-mail with error message after
      ReaR is installed but not properly configured when the cron command
      is triggered for the first time
    - Changes for NetBackup (NBU) support, upstream PR2544
  - Add dependency on dhcp-client, RHBZ #1926451


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-10
changelog:
  - Sync spec changes and downstream patches from RHEL 8 rear-2.6-2
    - Fix multipath performance regression in 2.6, introduced by upstream PR #2299.
      Resolves: rhbz1993296
    - On POWER add bootlist & ofpathname to the list of required programs
      conditionally (bootlist only if running under PowerVM, ofpathname
      always except on PowerNV) - upstream PR2665, add them to package
      dependencies
      Resolves: rhbz1983013
    - Backport PR2608:
      Fix setting boot path in case of UEFI partition (ESP) on MD RAID
      Resolves: rhbz1945869
    - Backport PR2625
      Prevents accidental backup removal in case of errors
      Resolves: rhbz1958247
    - Fix rsync error and option handling
      Resolves: rhbz1930662


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-11
changelog:
  - Apply PR2675 to fix leftover temp dir bug (introduced in backported PR2625)
  - Apply PR2603 to ignore unused PV devices
  - Apply upstream PR2750 to avoid exclusion of wanted multipath devices
  - Remove unneeded xorriso dep on s390x (no ISO image support there)
  - Apply upstream PR2736 to add the EXCLUDE_{IP_ADDRESSES,NETWORK_INTERFACES}
    options
  - Add patch for better handling of thin pools and other LV types not supported
    by vgcfgrestore


author: Nick Clifton <nickc@redhat.com> - 192-1
changelog:
  - Select between gcc-built and annobin-built versions of the annobin plugin.
  - Resolves: rhbz#2030671


author: Nick Clifton <nickc@redhat.com> - 196-1
changelog:
  - Pass "--remove section .gnu.build.attributes" to the find-debuginfo script.
  - Resolves: rhbz#2099613


author: Rich Megginson <rmeggins@redhat.com> - 1.16.1-1
changelog:
  - nbde_client - NBDE client system role does not support servers with static IP addresses
    previous fix did not handle some cases
    Resolves rhbz#1985022 (EL8)
    Resolves rhbz#2031555 (EL9)


author: Rich Megginson <rmeggins@redhat.com> - 1.16.2-1
changelog:
  - nbde_client - NBDE client system role does not support servers with static IP addresses
    previous fix did not handle some other cases
    Resolves rhbz#1985022 (EL8)
    Resolves rhbz#2031555 (EL9)


author: Rich Megginson <rmeggins@redhat.com> - 1.16.3-1
changelog:
  - tlog - Enabling session recording configuration does not work due to RHEL9 SSSD files provider default
    Resolves rhbz#2072749 (EL8)
    Resolves rhbz#2071804 (EL9)


author: Rich Megginson <rmeggins@redhat.com> - 1.17.0-1
changelog:
  - All roles should support running with gather_facts: false
    Resolves: rhbz#2078989 (9.1.0)

  - firewall - Firewall system role Ansible deprecation warning related to "include"
    Resolves: rhbz#2061511 (9.1.0)

  - ha_cluster - ha_cluster - support advanced corosync configuration
    Resolves: rhbz#2065337 (9.1.0)

  - ha_cluster - ha_cluster - support SBD fencing
    Resolves: rhbz#2079626 (9.1.0)

  - ha_cluster - ha_cluster - add support for configuring bundle resources
    Resolves: rhbz#2073519 (9.1.0)

  - kernel_settings - kernel_settings error configobj not found on RHEL 8.6 managed hosts
    Resolves: rhbz#2060525 (9.1.0)

  - logging - logging tests fail during cleanup if no cloud-init on system
    Resolves: rhbz#2058799 (9.1.0)

  - logging - Logging - RFE - support template, severity and facility options
    Resolves: rhbz#2075119 (9.1.0)

  - metrics - Metrics role, with "metrics_from_mssql" option does not configure /var/lib/pcp/pmdas/mssql/mssql.conf on first run
    Resolves: rhbz#2060523 (9.1.0)

  - metrics - metrics - consistently use ansible_managed in configuration files managed by role
    Resolves: rhbz#2065392 (9.1.0)

  - metrics - [RFE] add an option to the metrics role to enable postfix metric collection
    Resolves: rhbz#2051737 (9.1.0)

  - nbde_client - NBDE client system role does not support servers with static IP addresses
    Resolves: rhbz#2070462 (9.1.0)

  - network - [RFE] Extend rhel-system-roles.network feature set to support routing rules
    Resolves: rhbz#2079622 (9.1.0)

  - network - bond: fix typo in supporting the infiniband ports in active-backup mode
    Resolves: rhbz#2065394 (9.1.0)

  - network - pytest failed when running with nm providers in the rhel-8.5 beaker machine
    Resolves: rhbz#2066911 (9.1.0)

  - network - network - consistently use ansible_managed in configuration files managed by role
    Resolves: rhbz#2065382 (9.1.0)

  - postfix - postfix - consistently use ansible_managed in configuration files managed by role
    Resolves: rhbz#2065393 (9.1.0)

  - postfix - Postfix RHEL System Role should provide the ability to replace config and reset configuration back to default
    Resolves: rhbz#2065383 (9.1.0)

  - sshd - FIPS mode detection in SSHD role is wrong
    Resolves: rhbz#2073605 (9.1.0)

  - storage - RFE storage Less verbosity by default
    Resolves: rhbz#2079627 (9.1.0)

  - timesync - timesync: basic-smoke test failure in timesync/tests_ntp.yml
    Resolves: rhbz#2060524 (9.1.0)

  - tlog - Tlog role - Enabling session recording configuration does not work due to RHEL9 SSSD files provider default
    Resolves: rhbz#2071804 (9.1.0)


author: Rich Megginson <rmeggins@redhat.com> - 1.18.0-1
changelog:
  - firewall - [Improvement] Allow System Role to reset to default Firewalld Settings
    Resolves: rhbz#2043010 (9.1.0)

  - metrics - [RFE] add an option to the metrics role to enable postfix metric collection
    Resolves: rhbz#2051737 (9.1.0)

  - network - Rework the infiniband support
    Resolves: rhbz#2086965 (9.1.0)

  - sshd - recurse into tests and examples sub-directories when replacing string in files
    the sshd role latest version added sub-directories under tests that need
    role name replacement - so just use find

  - sshd - sshd system role should not assume that RHEL 9 /etc/ssh/sshd_config has "Include > /etc/ssh/sshd_config.d/*.conf"
    Resolves: rhbz#2052081 (9.1.0)

  - sshd - sshd system role should be able to optionally manage /etc/ssh/sshd_config on RHEL 9
    Resolves: rhbz#2052086 (9.1.0)

  - storage - storage role cannot set mount_options for volumes
    Resolves: rhbz#2083376 (9.1.0)


author: Rich Megginson <rmeggins@redhat.com> - 1.19.0-1
changelog:
  - storage - support for creating and managing LVM thin pools/LVs
    Resolves: rhbz#2072745 (9.1.0)

  - firewall - Update Ansible syntax in Firewall system role README.md file examples
    Resolves: rhbz#2094096 (9.1.0)

  - storage role raid_level "striped" is not supported
    Resolves: rhbz#2083410 (9.1.0)

  - network: the controller device is not completely cleaned up in the bond tests.
    Resolves: rhbz#2089872 (9.1.0)

  - firewall - state no longer required for masquerade and ICMP block inversion
    Resolves: rhbz#2093423 (9.1.0)

  - ha_cluster - Move tasks that set up CI environment to roles tasks/ dir
    Resolves: rhbz#2093438 (9.1.0)


author: Rich Megginson <rmeggins@redhat.com> - 1.19.1-1
changelog:
  - storage - fix coverity scan issue in blivet.py
    Resolves: rhbz#2072745 (9.1.0)

  - logging - fix gather_facts/set_vars issue
    Resolves: rhbz#2078989 (9.1.0)

  - ha_cluster - Move tasks that set up CI environment to roles tasks/ dir
    Resolves: rhbz#2093438 (9.1.0)

  - sshd - fix tests issue with rhel9 hosts


author: Rich Megginson <rmeggins@redhat.com> - 1.19.3-1
changelog:
  - min_ansible_version is string instead of float

  - fix storage test failures

  - support for ansible-core 2.13

  - crypto_policies - rhel 8.7 default policy is FUTURE not DEFAULT
    Resolves: rhbz#2100251

  - firewall - forward_port should accept list of string or list of dict
    Resolves: rhbz#2100605

  - firewall - support add/modify/delete services
    Resolves: rhbz#2100292

  - metrics - document minimum supported redis version required by rhel-system-roles
    Resolves: rhbz#2100286

  - metrics - restart pmie, pmlogger if changed, do not wait for handler
    Resolves: rhbz#2100294

  - network - Support managing the network through nmstate schema
    Resolves: rhbz#2072385

  - storage - _storage_test_pool_pvs get wrong data type in  test-verify-pool-members.yml
    Resolves: rhbz#2044119

  - storage - support for adding/removing disks to/from storage pools
    Resolves: rhbz#2072742

  - storage - support for attaching cache volumes to existing volumes
    Resolves: rhbz#2072746


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-8
changelog:
  - Support hash v8 databases from BDB < 4.6 (#1965147)
  - Ensure ELF files get stripped when debuginfo is disabled (#1999009)
  - Actually honor libarchive bcond at configure time (#1999012)
  - Unbreak checking of installed rich dependencies (#2015407)
  - Rebuild against soname bump in ima-evm-utils (#2026079)
  - Fix IMA signature lengths assumed constant (#2018937)
  - Validate and require subkey binding sigs on PGP pubkeys (#1943724)
  - Fixes CVE-2021-3521


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-10
changelog:
  - Address covscan issues in binding sigs validation patch (#1943724)
  - Bump hash for rpmdb cookie to SHA256 for FIPS (#2048455)
  - Add --path query option (#2037352)
  - Skip recorded symlinks in --setperms (#2025906)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-11
changelog:
  - Fix IMA signature lengths assumed constant, take III (#2018937)
  - Fix regression reading rpm v3 and other rare packages (#2037186)
  - Fix spurious %transfiletriggerpostun execution (#2023692)


author: Colin Walters <walters@verbum.org> - 2022.8-2
changelog:
  - https://github.com/coreos/rpm-ostree/releases/tag/v2022.8
    Resolves: rhbz#2077062
    Resolves: rhbz#2023325


author: Michal Domonkos <mdomonko@redhat.com> - 9.3-5
changelog:
  - Drop progressbar2 dependency and bundle a tiny replacement (#1927784)
  - Drop fakeroot dependency and qa-robot scripts (#1905465)


author: Miro Hrončok <mhroncok@redhat.com> - 1.11-10
changelog:
  - Don't use the %python_sitelib macro, because it errors
  - See https://fedoraproject.org/wiki/Changes/PythonMacroError


author: Liming Sun <lsun@mellanox.com> - 2.0.2-1
changelog:
  - Remove unnecessary dependency in .spec and use make_build
  - Add package build for debian/ubuntu
  - Fix some format in the man page
  - Add check for syslog headers


author: Liming Sun <lsun@mellanox.com> - 2.0.3-1
changelog:
  - Enable pci device during probing
  - Map the pci resource0 file instead of /dev/mem
  - Add copyright header in bootstrap.sh
  - Add 'Requires' tag check in the rpm .spec for kernel-modules-extra
  - Fix the 'rshim --version' output


author: Liming Sun <lsun@mellanox.com> - 2.0.4-1
changelog:
  - Update .spec file according to review comments
  - Fix the 'KillMode' in rshim.service
  - Support process termination by SIGTERM
  - Fix some compiling warnings and configure issue for FreeBSD
  - Fix a read()/write() issue in rshim_pcie.c caused by optimization


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-1
changelog:
  - Update user-space rshim driver source to version 2.0.5
  - Modify rshim.spec accordingly
  - Switch to %autosetup to handle Patch0 and any future patches
  - Resolves: rhbz#1858577


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-4
changelog:
  - Resolves: #1894485 - rsync is unable to set permissions when chrooted
  - Getting rid of deprecated makeinstall macro


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-7
changelog:
  - Resolves: #1955008 - rsync segfaults in --append mode when file on sender is large (> 2GB) and gets truncated


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-7
changelog:
  - Enable openssl
    resolves: rhbz#1972058
  - Close dir when fsync=on
    resolves: rhbz#1972069
  - Do not exit when user/group can not be found
    resolves: rhbz#1990868
  - Remove abortOnIDResolution fail
  - Always use message severity when comparing with ratelimit severity
    resolves: rhbz#1990869


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-9
changelog:
  - Add required flags for branch protection
  - Add missing tests folder
  - Resolve issues detected by covscan
    resolves: rhbz#1938863


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-103
changelog:
  - Add deleteStateOnFileMove imfile module option
    resolves: rhbz#2069664
  - Add inotify_rm_watch() inotify API call when object needs to be destroyed
    resolves: rhbz#2070528
  - Fix error handling in gtlsRecordRecv, which can cause full CPU usage


author: Pavel Valena <pvalena@redhat.com> - 3.0.1-154
changelog:
  - Upgrade to Ruby 3.0.2.
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810
  - Fix StartTLS stripping vulnerability in Net::IMAP
    Resolves: CVE-2021-32066
  - Fix dependencies of gems with explicit source installed from a
    different source.
    Resolves: CVE-2020-36327
  - Pass ldflags to gem install via CONFIGURE_ARGS.


author: Vít Ondruch <vondruch@redhat.com> - 2.7.1-133
changelog:
  - Fix `require` behavior allowing to load libraries multiple times.
    Resolves: rhbz#1842989
  - Add ruby-default-gems dependency on irb.


author: Pavel Valena <pvalena@redhat.com> - 2.7.3-136
changelog:
  - Upgrade to Ruby 2.7.3.
    Resolves: rhbz#1947938
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1944227


author: Jarek Prokop <jprokop@redhat.com> - 3.0.1-138
changelog:
  - Upgrade to Ruby 3.0.1 by merging Fedora rawhide branch (commit: 6b2ff68).
    * Add missing `rubygem-` prefix for bundled provide of 'connection_pool'.
    * Pass ldflags to gem install via CONFIGURE_ARGS
    * Remove IRB dependency from rubygem-rdoc.
    * Fix flaky excon test suite.
    * Properly support DWARF5 debug information.
        Related: rhbz#1920533
    * Bundle OpenSSL into StdLib.
    * Fix SEGFAULT in rubygem-shoulda-matchers test suite.
    * Provide `gem.build_complete` file for binary gems.
    * Re-enable test suite.
    * ruby-default-gems have to depend on rubygem(io-console) due to reline.
    * Fix SEGFAULT preventing rubygem-unicode to build on armv7hl.
    * Add support for reworked RubyGems plugins.
    * Use proper path for plugin wrappers.
    * Extract RSS and REXML into separate subpackages, because they were moved from
       default gems to bundled gems.
    * Drop Net::Telnet and XMLRPC packages, because they were dropped from Ruby.
    Resolves: rhbz#1938942
  - Fix FTBFS due to an incompatible load directive.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-139
changelog:
  - Upgrade to Ruby 3.0.2.
    Related: rhbz#1938942
  - Fix command injection vulnerability in RDoc. (CVE-2021-31799)
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    (CVE-2021-31810)
  - Fix StartTLS stripping vulnerability in Net::IMAP (CVE-2021-32066)
  - Fix dependencies of gems with explicit source installed from a
    different source. (CVE-2020-36327)
  - Pass ldflags to gem install via CONFIGURE_ARGS.
    The same comment on the changelog 3.0.1-138 was wrong.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-140
changelog:
  - Fix rubygem-irb upgrade not working due to directory -> symlink conversion.
    Resolves: rhbz#2010949


author: Jarek Prokop <jprokop@redhat.com> - 3.1.2-141
changelog:
  - Upgrade to Ruby 3.1.2 by merging Fedora Rawhide branch (commit: b7b5473).
    Resolves: rhbz#2063773


author: Jun Aruga <jaruga@redhat.com> - 0.5.3-1
changelog:
  - New upstream release 0.5.3 by merging Fedora master branch (commit: 674d475)
    Resolves: rhbz#1817135


author: Jarek Prokop <jprokop@redhat.com> - 0.5.4-1
changelog:
  - New upstream release 0.5.4 by merging Fedora rawhide branch (commit: e21b5b9)
    Resolves: rhbz#2063773


author: <msekleta@redhat.com> - 0.3.2-5
changelog:
  - Adjust packaging to account for differences between Fedora and CentOS/RHEL rust packaging (#1930369)


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-106
changelog:
  - resolves: rhbz#2065376 - Fix 'create krb5 conf = yes` when a KDC has a single IP address.
  - resolves: rhbz#2076504 - PAM Kerberos authentication fails with a clock skew error


author: Pavel Filipenský <pfilipen@redhat.com> - 4.16.2-101
changelog:
  - resolves: rhbz#2093833 - Fix weak dependency on logrotate
  - resolves: rhbz#2096813 - Fix printer displays only after 300 seconds timeout


author: Michal Fabik <mfabik@redhat.com> 0.35-1
changelog:
  - New upstream version
   - Fix leaks in koops stacktrace- and report-handling code
   - Replace utility code with GLib functions
   - Fix unit test portability issue
   - Add build dependency on make


author: Michal Fabik <mfabik@redhat.com> 0.38-1
changelog:
  - New upstream version
   - lib: Use GLib for computing SHA-1 digests
   - sr_distances_cluster_objects: Check arg safety


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-14
changelog:
  - Fix getting of InstallDate property, improve it to work on non en_US locales
    and update support for recent Fedora distributions


author: Matej Tyc <matyc@redhat.com> - 0.1.58-1
changelog:
  - Rebase to a new upstream release (RHBZ#2014561)
  - Disable profiles that we disable in RHEL8
  - Add a VM wait handling to fix issues with tests.


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.60-3
changelog:
  - Update sudoers rules in RHEL8 STIG V1R5 (RHBZ#2045403)
  - Add missing SRG references in RHEL8 STIG V1R5 rules (RHBZ#2045403)
  - Update chronyd_or_ntpd_set_maxpoll to disregard server and poll directives (RHBZ#2045403)
  - Fix GRUB2 rule template to configure the module correctly on RHEL8 (RHBZ#2014561)
  - Update GRUB2 rule descriptions (RHBZ#2020623)
  - Make package_rear_installed not applicable on AARCH64 (RHBZ#2014561)


author: Watson Sato <wsato@redhat.com> - 0.1.60-4
changelog:
  - Fix Ansible service disabled tasks (RHBZ#2014561)
  - Update description of OSPP profile (RHBZ#2045386)
  - Add page_aloc.shuffle rules for OSPP profile (RHBZ#2055118)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.60-5
changelog:
  - Remove tmux process runinng check in configure_bashrc_exec_tmux (RHBZ#2056847)
  - Fix issue with getting STIG items in create_scap_delta_tailoring.py (RHBZ#2014561)
  - Update rule enable_fips_mode to check only for technical state (RHBZ#2057457)


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.62-2
changelog:
  - Remove sysctl_fs_protected_* rules from RHEL9 OSPP (RHBZ#2081719)
  - Make rule audit_access_success_ unenforcing in RHEL9 OSPP (RHBZ#2058154)
  - Drop zipl_vsyscall_argument rule from RHEL9 OSPP profile (RHBZ#2060049)
  - make sysctl_user_max_user_namespaces in RHEL9 OSPP (RHBZ#2083716)
  - Remove some sysctl rules  related to network from RHEL9 OSPP (RHBZ#2081708)
  - Add rule to check if Grub2 recovery is disabled to RHEL9 OSPP (RHBZ#2092809)
  - Add rule grub2_systemd_debug-shell_argument_absent (RHBZ#2092840)
  - Remove rule accounts_password_minlen_login_defs from all profiles (RHBZ#2073040)
  - Remove rules related to remove logging from RHEL9 OSPP (RHBZ#2105016)
  - Remove sshd_enable_strictmodes from OSPP (RHBZ#2105278)
  - Remove rules related to NIS services (RHBZ#2096602)
  - Make rule stricter when checking for FIPS crypto-policies (RHBZ#2057082)


author: Jan Černý <jcerny@redhat.com> - 1.2.1-5
changelog:
  - Remove qt5-devel from "Requires" section
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/WO625MVYEAAJNHNRLEEJDVZTIWMQOBRR/
  - Update for new CMake out of source builds
    https://fedoraproject.org/wiki/Changes/CMake_to_do_out-of-source_builds
  - Fix Qt5 deprecated symbols
  - Fix FTBS in Rawhide/F33 (RHBZ#1865462)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.14.0-3
changelog:
  - Update to include in RHEL 9 compose
  - Resolves: rhbz#1926095
    (qemu-kvm not available for ppc64le)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.14.0-5
changelog:
  - seabios-Disable-power-support.patch [bz#1951027]
  - Resolves: bz#1951027
    (SeaBios no longer needed for ppc64)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.14.0-7
changelog:
  - seabios-Drop-fedora-bits-they-are-not-tested-and-currently-f.patch [bz#2004169]
  - seabios-Disable-TPM-support.patch [bz#2004169]
  - Resolves: bz#2004169
    (seabios  implements and/or uses the deprecated SHA-1 algorithm by default)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.15.0-1
changelog:
  - Rebase to seabios to 1.15.0 [bz#2018393]
  - 0003-pci-let-firmware-reserve-IO-for-pcie-pci-bridge.patch [bz#2001732]
  - 0004-pci-reserve-resources-for-pcie-pci-bridge-to-fix-reg.patch [bz#2001732]
  - Resolves: bz#2018393
    ([rebase] update seabios to nov '21 release)
  - Resolves: bz#2001732
    ([virtual network][qemu-6.1.0-1] Fail to hotplug nic with rtl8139 driver)


author: Paweł Poławski <ppolawsk@redhat.com> - 1.16.0-1
changelog:
  - Rebase to upstream 1.16.0 release [bz#2066826]
  - Resolves: bz#2066826
    (rebase seabios to 1.16 release)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.0-2
changelog:
  - seabios-malloc-use-variable-for-ZoneHigh-size.patch [bz#2004662]
  - seabios-malloc-use-large-ZoneHigh-when-there-is-enough-memor.patch [bz#2004662]
  - Resolves: bz#2004662
    (RFE: "Unable to allocate resource at romfile_loader_allocate:87" when running very large VMs)


