# changelog

author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.37.3-1
changelog:
  - Upgrade to 1.37.3 release (development)
  - core: allow reapply on autoconnect-slaves property change (rh #2065049)
  - wifi: do not advertise channels outside regulatory domain (rh #2062785)
  - wifi: warn about WEP being phased out (rh #2030997)
  - bond: reject reapply when fail_over_mac was changed (rh #2003214)


author: Ana Cabral <acabral@redhat.com> - 1:1.39.0-1
changelog:
  - Upgrade to 1.39.0 release (development)
  - Include a migration tool for ifcfg configuration to NM keyfiles
    (rh #2059608)


author: Thomas Haller <thaller@redhat.com> - 1:1.39.2-1
changelog:
  - Update to 1.39.2 release (development)
  - dhcp: set "src" attribute for DHCP routes (rh #1995372)
  - dhcp: drop internal DHCPv4 client based on systemd code (rh #2073067)
  - core: delay startup complete for DNS update (rh #2049421)
  - nmcli: support offline mode to create and edit keyfiles (rh #1361145)


author: Wen Liang <wenliang@redhat.com> - 1:1.39.3-1
changelog:
  - Update to 1.39.3 release (development)
  - l3cfg: drop NM_L3_CFG_COMMIT_TYPE_ASSUME and assume_config_once (rh #2050216)


author: Ana Cabral <acabral@redhat.com> - 1:1.39.5-1
changelog:
  - Update to 1.39.5 release (development)
  - dhcp: fix ignoring addresses with DHCPv6 otherconf (O flag) (rh #2083968)
  - cloud-setup: reorder addresses to honor "primary_ip_address" (rh #2079849)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.39.6-1
changelog:
  - Update to 1.39.6 release (development)
  - Implement ACD (address conflict detection) for DHCPv4 (rh #1713380)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.39.7-1
changelog:
  - Update to 1.39.7 release (development)
  - core: cancel the IP check on deactivation (rh #2080928)
  - core: ensure DHCP is restarted every time the link goes up (rh #2079406)
  - core: fix a leak of L3 configuration memory (rh #2083453)
  - ppp: fix a race with pppd when removing addresses (rh #2085382)
  - wifi: fix a crash when checking WEP supplicant capability (rh #2092782)


author: Thomas Haller <thaller@redhat.com> - 1:1.39.7-2
changelog:
  - fix priority of IPv6 addresses to prefer manual over DHCPv6 over SLAAC (rh #2097293)
  - reverse order of priority for static IPv6 addresses in "ipv6.addresses" (rh #2097293)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.39.8-1
changelog:
  - Update to 1.39.8 release (development)
  - core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
  - dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
  - core: add connection.wait-activation-delay property (rh #2008337)


author: Vojtech Bubela <vbubela@redhat.com> - 1:1.39.10-1
changelog:
  - Update to 1.39.10 release (development)
  - add support for {rto_min,quickack,advmss} route attributes (rh #2068525)
  - fix empty hostname for "SaveHostname" and make setting hostname async (rh #2090946)


author: Tomas Orsava <torsava@redhat.com> - 5.4.1-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 5.4.1-6
changelog:
  - Remove some outdated Obsoletes and Provides,
    but keep providing python3-yaml and python3-PyYAML for users
  - Related: rhbz#1990421


author: Yunying Sun <yunying.sun@intel.com> - 3.0.1-1
changelog:
  - Updated to 3.0.1 release
  - Removed ix86 support as so far it supports x86_64 only
  - Updated licenses following upstream


author: Tom Stellard <tstellar@redhat.com> - 2.2.53-6
changelog:
  - Spec file cleanups and build fix
  - Add BuildRequires: perl-FileHandle to fix make check
  - Add BuildRequres: gcc [1]
  - Use make_build [2] and make_install[3] macros
  - [1] https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_buildrequires_and_requires
  - [2] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - [3] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: Al Stone <ahs3@redhat.com> - 20200326-1
changelog:
  - Update to 20200326 source tree, including patch refreshes
  - Removed a couple of patches that got included upstream


author: Al Stone <ahs3@redhat.com> - 20200925-1
changelog:
  - Update to 20200925 source tree
  - Completely revamp the old big-endian patches (maintainability was the goal).
    This results in a much larger patch set, but each patch is more clearly used
    for a specific purpose.
  - The acpinames command has been deprecated upstream; acpiexec provides 
    replacement functionality.


author: Dean Nelson <dnelson@redhat.com> - 20210604-1
changelog:
  - Update to 20210604 source tree.
  - Bring the big-endian patches up-to-date with what has been submitted
    upstream by Al Stone <ahs3@redhat.com> (not accepted currently).


author: Al Stone <ahs3@redhat.com> - 20210604-2
changelog:
  - Running 'iasl -T all' would segfault when dumping the PHAT template;
    fixed AcpiDmDumpPhat() by removing unnecessary assignments from patch
  - Borrowed a patch from upstream to fix Unicode usage in WPBTs


author: Sumit Bose <sbose@redhat.com> - 0.9.0-6
changelog:
  - Include the latest upstream patches with use-ldaps fixes, man page
    improvements and a new sub-command to create managed service accounts


author: Jan Macku <jamacku@redhat.com> - 1.15-1
changelog:
  - spec: sync specfile with Fedora
  - makefile: Use rpmdev-bumpspec's legacy date option
  - Add feature to generate specfile entry, commit and archive


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3.13
changelog:
  - Sync with rhel 8.3 + cleanup
  - Add new subpackages - z{14,15}
  - Unlike in rhel8, the base subpackage still needs to be build for z12.
  - Covscan related bugfixes
  - Spec and git cleanup (remove unused patches/sources)


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-100
changelog:
  - New upstream release, 3.0.7
    Resolves: rhbz#2019929 - capability=unknown-capability(39) in audit messages


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-101
changelog:
  - Adjust sample-rules dir permissions
    Resolves: rhbz#2054432 - /usr/share/audit/sample-rules is no longer readable by non-root users


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-102
changelog:
  - Fix path normalization in auparse
    Resolves: rhbz#2062824 - auparse missing information when used with --format-text


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-103
changelog:
  - Drop ProtectHome from auditd.service as it interferes with rules
    Resolves: rhbz#2071725 - Default systemd service config blocks audit watch rules in some directories [rhel-9.1.0]


author: Pavel Březina <pbrezina@redhat.com> - 1.2.5-1
changelog:
  - Rebase to 1.2.5 (RHBZ #2080239)
  - backup-restore now works correctly (RHBZ #2070541)
  - add with-subid to sssd profile (RHBZ #2075192)
  - add with-gssapi to sssd profile (RHBZ #2077893)


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-22
changelog:
  - bz1984813 - autofs: FTBFS due to dynamic PTHREAD_STACK_MIN (glibc 2.34 related)
    - eliminate some more alloca usage.
    - use default stack size for threads.
  - Resolves: rhbz#1984813


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-23
changelog:
  - bz1984813 - autofs: FTBFS due to dynamic PTHREAD_STACK_MIN (glibc 2.34 related)
    - fix potential memory leak in "eliminate some more alloca usage" patch.
    - remove unused parameter from add_path() in "eliminate some more alloca usage" patch.
  - Related: rhbz#1984813


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-25
changelog:
  - bz2028301 - autofs: send FAIL cmd/ioctl mess when encountering problems with
    mount trigger
    - fix kernel mount status notification.
  - Resolves: rhbz#2028301


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-26
changelog:
  - bz2028301 - autofs: send FAIL cmd/ioctl mess when encountering problems with
    mount trigger
    - fix fedfs build flags.
  - Related: rhbz#2028301


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-27
changelog:
  - bz2028746 - autofs service has not proper limits set to be able to handle
    many mounts
    - fix set open file limit.
    - improve descriptor open error reporting.
  - Resolves: rhbz#2028746


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-28
changelog:
  - bz2056320 - Using -hosts option does not work in RHEL 9
    - fix root offset error handling.
    - fix nonstrict fail handling of last offset mount.
    - dont fail on duplicate offset entry tree add.
    - fix loop under run in cache_get_offset_parent().
    - simplify cache_add() a little.
    - fix use after free in tree_mapent_delete_offset_tree().
    - fix memory leak in xdr_exports().
    - avoid calling pthread_getspecific() with NULL key_thread_attempt_id.
    - fix sysconf(3) return handling.
    - remove rpcgen dependedncy, it hasn't been needed since rev 10.
  - Related: rhbz#2056320


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-29
changelog:
  - bz2056321 - autofs attempts unmount on directory in use
    - remove nonstrict parameter from tree_mapent_umount_offsets().
    - fix handling of incorrect return from umount_ent().
  - Resolves: rhbz#2056321


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-30
changelog:
  - bz2084108 - autofs is slow to mount when doing lookups returns multiple entries
    - make NFS version check flags consistent.
    - refactor get_nfs_info().
    - also require TCP_REQUESTED when setting NFS port.
    - bailout on rpc systemerror.
    - fix nfsv4 only mounts should not use rpcbind.


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-31
changelog:
  - bz2087535 - libnss_sss: threads stuck at sss_nss_lock from initgroups
    - dont use initgroups() at spawn.
    - comment out Patch1 and Patch2 since they have been merged into
      the distribution tar (and so are not applied).
  - Resolves: rhbz#2087535


author: Hans de Goede <hdegoede@redhat.com> - 5.56-3
changelog:
  - Drop obsolete udev rule + systemd service to call btattach on BT-HCIs
    connected via UART from userspace, this is all handled in the kernel now
  - Add the btmgmt util to the packaged files


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-125.el9]
changelog:
  - cifs: fix bad fids sent over wire (Ronnie Sahlberg) [2088775]
  - SMB3: EBADF/EIO errors in rename/open caused by race condition in smb2_compound_op (Ronnie Sahlberg) [2088775]
  - i40e: Fix call trace in setup_tx_descriptors (Ivan Vecera) [2037980]
  - i40e: Fix calculating the number of queue pairs (Ivan Vecera) [2037980]
  - i40e: Fix adding ADQ filter to TC0 (Ivan Vecera) [2037980]
  - i40e: i40e_main: fix a missing check on list iterator (Ivan Vecera) [2037980]
  - i40e, xsk: Get rid of redundant 'fallthrough' (Ivan Vecera) [2037980]
  - i40e, xsk: Diversify return values from xsk_wakeup call paths (Ivan Vecera) [2037980]
  - i40e, xsk: Terminate Rx side of NAPI when XSK Rx queue gets full (Ivan Vecera) [2037980]
  - i40e: Add Ethernet Connection X722 for 10GbE SFP+ support (Ivan Vecera) [2037980]
  - i40e: Add vsi.tx_restart to i40e ethtool stats (Ivan Vecera) [2037980]
  - i40e: Add tx_stopped stat (Ivan Vecera) [2037980]
  - i40e: Add support for MPLS + TSO (Ivan Vecera) [2037980]
  - i40e: little endian only valid checksums (Ivan Vecera) [2037980]
  - i40e: stop disabling VFs due to PF error responses (Ivan Vecera) [2037980]
  - Revert "i40e: Fix reset bw limit when DCB enabled with 1 TC" (Ivan Vecera) [2037980]
  - i40e: remove dead stores on XSK hotpath (Ivan Vecera) [2037980]
  - i40e: Add a stat for tracking busy rx pages (Ivan Vecera) [2037980]
  - i40e: Add a stat for tracking pages waived (Ivan Vecera) [2037980]
  - i40e: Add a stat tracking new RX page allocations (Ivan Vecera) [2037980]
  - i40e: Aggregate and export RX page reuse stat (Ivan Vecera) [2037980]
  - i40e: Remove rx page reuse double count (Ivan Vecera) [2037980]
  - i40e: Fix race condition while adding/deleting MAC/VLAN filters (Ivan Vecera) [2037980]
  - i40e: Add new version of i40e_aq_add_macvlan function (Ivan Vecera) [2037980]
  - i40e: Add new versions of send ASQ command functions (Ivan Vecera) [2037980]
  - i40e: Add sending commands in atomic context (Ivan Vecera) [2037980]
  - i40e: Remove unused RX realloc stat (Ivan Vecera) [2037980]
  - i40e: Disable hw-tc-offload feature on driver load (Ivan Vecera) [2037980]
  - i40e: Fix reset path while removing the driver (Ivan Vecera) [2037980]
  - i40e: Fix reset bw limit when DCB enabled with 1 TC (Ivan Vecera) [2037980]
  - i40e: respect metadata on XSK Rx to skb (Ivan Vecera) [2037980]
  - i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Ivan Vecera) [2037980]
  - i40e: Remove useless DMA-32 fallback configuration (Ivan Vecera) [2037980]
  - i40e: fix unsigned stat widths (Ivan Vecera) [2037980]
  - i40e: Fix for failed to init adminq while VF reset (Ivan Vecera) [2037980]
  - i40e: Fix queues reservation for XDP (Ivan Vecera) [2037980]
  - i40e: Fix issue when maximum queues is exceeded (Ivan Vecera) [2037980]
  - i40e: Increase delay to 1 s after global EMP reset (Ivan Vecera) [2037980]
  - i40e: remove variables set but not used (Ivan Vecera) [2037980]
  - i40e: Remove non-inclusive language (Ivan Vecera) [2037980]
  - i40e: Update FW API version (Ivan Vecera) [2037980]
  - i40e: Minimize amount of busy-waiting during AQ send (Ivan Vecera) [2037980]
  - i40e: Add ensurance of MacVlan resources for every trusted VF (Ivan Vecera) [2037980]
  - i40e: Fix incorrect netdev's real number of RX/TX queues (Ivan Vecera) [2037980]
  - i40e: Fix for displaying message regarding NVM version (Ivan Vecera) [2037980]
  - i40e: fix use-after-free in i40e_sync_filters_subtask() (Ivan Vecera) [2037980]
  - i40e: Fix to not show opcode msg on unsuccessful VF MAC change (Ivan Vecera) [2037980]
  - i40e: switch to napi_build_skb() (Ivan Vecera) [2037980]
  - i40e: Use irq_update_affinity_hint() (Ivan Vecera) [2037980]
  - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc (Ivan Vecera) [2037980]
  - i40e: Fix pre-set max number of queues for VF (Ivan Vecera) [2037980]
  - i40e: Fix failed opcode appearing if handling messages from VF (Ivan Vecera) [2037980]
  - i40e: Fix display error code in dmesg (Ivan Vecera) [2037980]
  - i40e: Fix creation of first queue by omitting it if is not power of two (Ivan Vecera) [2037980]
  - i40e: Fix warning message and call stack during rmmod i40e driver (Ivan Vecera) [2037980]
  - i40e: Fix ping is lost after configuring ADq on VF (Ivan Vecera) [2037980]
  - i40e: Fix changing previously set num_queue_pairs for PFs (Ivan Vecera) [2037980]
  - i40e: Fix NULL ptr dereference on VSI filter sync (Ivan Vecera) [2037980]
  - i40e: Fix correct max_pkt_size on VF RX queue (Ivan Vecera) [2037980]
  - i40e: Simplify bool conversion (Ivan Vecera) [2037980]
  - i40e: Fix freeing of uninitialized misc IRQ vector (Ivan Vecera) [2037980]
  - i40e: Use the xsk batched rx allocation interface (Ivan Vecera) [2037980]
  - i40e: Fix spelling mistake "dissable" -> "disable" (Ivan Vecera) [2037980]
  - i40e: add support for PTP external synchronization clock (Ivan Vecera) [2037980]
  - i40e: improve locking of mac_filter_hash (Ivan Vecera) [2037980]
  - time: Handle negative seconds correctly in timespec64_to_ns() (Íñigo Huguet) [2097394]
  - iavf: Fix issue with MAC address of VF shown as zero (Petr Oros) [2037976]
  - Revert "iavf: Fix deadlock occurrence during resetting VF interface" (Petr Oros) [2037976]
  - iavf: Fix hang during reboot/shutdown (Petr Oros) [2037976]
  - iavf: Fix double free in iavf_reset_task (Petr Oros) [2037976]
  - iavf: Fix adopting new combined setting (Petr Oros) [2037976]
  - iavf: Fix handling of vlan strip virtual channel messages (Petr Oros) [2037976]
  - iavf: Fix __IAVF_RESETTING state usage (Petr Oros) [2037976]
  - iavf: Fix missing check for running netdev (Petr Oros) [2037976]
  - iavf: Fix deadlock in iavf_reset_task (Petr Oros) [2037976]
  - iavf: Fix race in init state (Petr Oros) [2037976]
  - iavf: Fix locking for VIRTCHNL_OP_GET_OFFLOAD_VLAN_V2_CAPS (Petr Oros) [2037976]
  - iavf: Fix init state closure on remove (Petr Oros) [2037976]
  - iavf: Add waiting so the port is initialized in remove (Petr Oros) [2037976]
  - iavf: Rework mutexes for better synchronisation (Petr Oros) [2037976]
  - iavf: Remove non-inclusive language (Petr Oros) [2037976]
  - iavf: Fix incorrect use of assigning iavf_status to int (Petr Oros) [2037976]
  - iavf: stop leaking iavf_status as "errno" values (Petr Oros) [2037976]
  - iavf: remove redundant ret variable (Petr Oros) [2037976]
  - iavf: Add usage of new virtchnl format to set default MAC (Petr Oros) [2037976]
  - iavf: refactor processing of VLAN V2 capability message (Petr Oros) [2037976]
  - iavf: Add support for 50G/100G in AIM algorithm (Petr Oros) [2037976]
  - iavf: Remove useless DMA-32 fallback configuration (Petr Oros) [2037976]
  - iavf: Use irq_update_affinity_hint() (Petr Oros) [2037976]
  - iavf: remove an unneeded variable (Petr Oros) [2037976]
  - iavf: Fix limit of total number of queues to active queues of VF (Petr Oros) [2037976]
  - iavf: switch to napi_build_skb() (Petr Oros) [2037976]
  - iavf: Restrict maximum VLAN filters for VIRTCHNL_VF_OFFLOAD_VLAN_V2 (Petr Oros) [2037976]
  - iavf: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 offload enable/disable (Petr Oros) [2037976]
  - iavf: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 hotpath (Petr Oros) [2037976]
  - iavf: Add support VIRTCHNL_VF_OFFLOAD_VLAN_V2 during netdev config (Petr Oros) [2037976]
  - iavf: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 negotiation (Petr Oros) [2037976]
  - iavf: do not override the adapter state in the watchdog task (again) (Petr Oros) [2037976]
  - iavf: missing unlocks in iavf_watchdog_task() (Petr Oros) [2037976]
  - iavf: Fix reporting when setting descriptor count (Petr Oros) [2037976]
  - iavf: restore MSI state on reset (Petr Oros) [2037976]
  - iavf: Fix displaying queue statistics shown by ethtool (Petr Oros) [2037976]
  - iavf: Refactor string format to avoid static analysis warnings (Petr Oros) [2037976]
  - iavf: Refactor text of informational message (Petr Oros) [2037976]
  - iavf: Fix static code analysis warning (Petr Oros) [2037976]
  - iavf: Refactor iavf_mac_filter struct memory usage (Petr Oros) [2037976]
  - iavf: Enable setting RSS hash key (Petr Oros) [2037976]
  - iavf: Add trace while removing device (Petr Oros) [2037976]
  - iavf: return errno code instead of status code (Petr Oros) [2037976]
  - iavf: Log info when VF is entering and leaving Allmulti mode (Petr Oros) [2037976]
  - iavf: Add change MTU message (Petr Oros) [2037976]
  - iavf: Fix VLAN feature flags after VFR (Petr Oros) [2037976]
  - iavf: Fix refreshing iavf adapter stats on ethtool request (Petr Oros) [2037976]
  - iavf: Fix deadlock occurrence during resetting VF interface (Petr Oros) [2037976]
  - iavf: Prevent changing static ITR values if adaptive moderation is on (Petr Oros) [2037976]
  - iavf: Restore VLAN filters after link down (Petr Oros) [2037976]
  - iavf: Fix for setting queues to 0 (Petr Oros) [2037976]
  - iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset (Petr Oros) [2037976]
  - iavf: validate pointers (Petr Oros) [2037976]
  - iavf: prevent accidental free of filter structure (Petr Oros) [2037976]
  - iavf: Fix failure to exit out from last all-multicast mode (Petr Oros) [2037976]
  - iavf: don't clear a lock we don't hold (Petr Oros) [2037976]
  - iavf: free q_vectors before queues in iavf_disable_vf (Petr Oros) [2037976]
  - iavf: check for null in iavf_fix_features (Petr Oros) [2037976]
  - iavf: Fix return of set the new channel count (Petr Oros) [2037976]
  - iavf: Fix kernel BUG in free_msi_irqs (Petr Oros) [2037976]
  - iavf: Add helper function to go from pci_dev to adapter (Petr Oros) [2037976]
  - iavf: Combine init and watchdog state machines (Petr Oros) [2037976]
  - iavf: Add __IAVF_INIT_FAILED state (Petr Oros) [2037976]
  - iavf: Refactor iavf state machine tracking (Petr Oros) [2037976]
  - iavf: fix double unlock of crit_lock (Petr Oros) [2037976]
  - iavf: use mutexes for locking of critical sections (Petr Oros) [2037976]
  - iavf: fix locking of critical sections (Petr Oros) [2037976]
  - iavf: do not override the adapter state in the watchdog task (Petr Oros) [2037976]
  - bnxt_en: parse and report result field when NVRAM package install fails (Ken Cox) [2042819 2043783]
  - bnxt_en: Enable packet timestamping for all RX packets (Ken Cox) [2042819 2043783]
  - bnxt_en: Configure ptp filters during bnxt open (Ken Cox) [2042819 2043783]
  - bnxt_en: Update firmware interface to 1.10.2.95 (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix unnecessary dropping of RX packets (Ken Cox) [2042819 2043783]
  - bnxt_en: Initiallize bp->ptp_lock first before using it (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag (Ken Cox) [2042819 2043783]
  - bnxt: add page_pool support for aggregation ring when using xdp (Ken Cox) [2042819 2043783]
  - bnxt: change receive ring space parameters (Ken Cox) [2042819 2043783]
  - bnxt: rename bnxt_rx_pages to bnxt_rx_agg_pages_skb (Ken Cox) [2042819 2043783]
  - bnxt: refactor bnxt_rx_pages operate on skb_shared_info (Ken Cox) [2042819 2043783]
  - bnxt: add flag to denote that an xdp program is currently attached (Ken Cox) [2042819 2043783]
  - bnxt: refactor bnxt_rx_xdp to separate xdp_init_buff/xdp_prepare_buff (Ken Cox) [2042819 2043783]
  - bnxt_en: Prevent XDP redirect from running when stopping TX queue (Ken Cox) [2042819 2043783]
  - bnxt_en: reserve space inside receive page for skb_shared_info (Ken Cox) [2042819 2043783]
  - bnxt_en: Synchronize tx when xdp redirects happen on same ring (Ken Cox) [2042819 2043783]
  - net: bnxt_ptp: fix compilation error (Ken Cox) [2042819 2043783]
  - bnxt: revert hastily merged uAPI aberrations (Ken Cox) [2042819 2043783]
  - bnxt_en: add an nvm test for hw diagnose (Ken Cox) [2042819 2043783]
  - bnxt_en: implement hw health reporter (Ken Cox) [2042819 2043783]
  - bnxt_en: Do not destroy health reporters during reset (Ken Cox) [2042819 2043783]
  - bnxt_en: Eliminate unintended link toggle during FW reset (Ken Cox) [2042819 2043783]
  - bnxt_en: Properly report no pause support on some cards (Ken Cox) [2042819 2043783]
  - bnxt_en: introduce initial link state of unknown (Ken Cox) [2042819 2043783]
  - bnxt_en: parse result field when NVRAM package install fails (Ken Cox) [2042819 2043783]
  - bnxt_en: add more error checks to HWRM_NVM_INSTALL_UPDATE (Ken Cox) [2042819 2043783]
  - bnxt_en: refactor error handling of HWRM_NVM_INSTALL_UPDATE (Ken Cox) [2042819 2043783]
  - bnxt_en: Handle async event when the PHC is updated in RTC mode (Ken Cox) [2042819 2043783]
  - bnxt_en: Implement .adjtime() for PTP RTC mode (Ken Cox) [2042819 2043783]
  - bnxt_en: Add driver support to use Real Time Counter for PTP (Ken Cox) [2042819 2043783]
  - bnxt_en: PTP: Refactor PTP initialization functions (Ken Cox) [2042819 2043783]
  - bnxt_en: Update firmware interface to 1.10.2.73 (Ken Cox) [2042819 2043783]
  - bnxt_en: fix kernel doc warnings in bnxt_hwrm.c (Ken Cox) [2042819 2043783]
  - bnxt_en: Increase firmware message response DMA wait time (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix devlink fw_activate (Ken Cox) [2042819 2043783]
  - bnxt_en: Restore the resets_reliable flag in bnxt_open() (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix incorrect multicast rx mask setting when not requested (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix occasional ethtool -t loopback test failures (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix offline ethtool selftest with RDMA enabled (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix active FEC reporting to ethtool (Ken Cox) [2042819 2043783]
  - bnxt_en: improve firmware timeout messaging (Ken Cox) [2042819 2043783]
  - bnxt_en: use firmware provided max timeout for messages (Ken Cox) [2042819 2043783]
  - bnxt_en: improve VF error messages when PF is unavailable (Ken Cox) [2042819 2043783]
  - bnxt_en: add dynamic debug support for HWRM messages (Ken Cox) [2042819 2043783]
  - bnxt_en: Use page frag RX buffers for better software GRO performance (Ken Cox) [2042819 2043783]
  - bnxt_en: convert to xdp_do_flush (Ken Cox) [2042819 2043783]
  - bnxt_en: Support CQE coalescing mode in ethtool (Ken Cox) [2042819 2043783]
  - bnxt_en: Support configurable CQE coalescing mode (Ken Cox) [2042819 2043783]
  - bnxt_en: enable interrupt sampling on 5750X for DIM (Ken Cox) [2042819 2043783]
  - bnxt_en: Log error report for dropped doorbell (Ken Cox) [2042819 2043783]
  - bnxt_en: Add event handler for PAUSE Storm event (Ken Cox) [2042819 2043783]
  - flow_offload: reject to offload tc actions in offload drivers (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix compile error regression when CONFIG_BNXT_SRIOV is not set (Ken Cox) [2042819 2043783]
  - bnxt_en: reject indirect blk offload when hw-tc-offload is off (Ken Cox) [2042819 2043783]
  - bnxt_en: fix format specifier in live patch error message (Ken Cox) [2042819 2043783]
  - bnxt_en: extend RTNL to VF check in devlink driver_reinit (Ken Cox) [2042819 2043783]
  - bnxt_en: avoid newline at end of message in NL_SET_ERR_MSG_MOD (Ken Cox) [2042819 2043783]
  - bnxt_en: Remove not used other ULP define (Ken Cox) [2042819 2043783]
  - bnxt_en: Provide stored devlink "fw" version on older firmware (Ken Cox) [2042819 2043783]
  - bnxt_en: implement firmware live patching (Ken Cox) [2042819 2043783]
  - bnxt_en: Update firmware interface to 1.10.2.63 (Ken Cox) [2042819 2043783]
  - bnxt_en: implement dump callback for fw health reporter (Ken Cox) [2042819 2043783]
  - bnxt_en: Retrieve coredump and crashdump size via FW command (Ken Cox) [2042819 2043783]
  - bnxt_en: move coredump functions into dedicated file (Ken Cox) [2042819 2043783]
  - bnxt_en: Refactor coredump functions (Ken Cox) [2042819 2043783]
  - bnxt_en: improve fw diagnose devlink health messages (Ken Cox) [2042819 2043783]
  - bnxt_en: consolidate fw devlink health reporters (Ken Cox) [2042819 2043783]
  - bnxt_en: remove fw_reset devlink health reporter (Ken Cox) [2042819 2043783]
  - bnxt_en: improve error recovery information messages (Ken Cox) [2042819 2043783]
  - bnxt_en: add enable_remote_dev_reset devlink parameter (Ken Cox) [2042819 2043783]
  - bnxt_en: implement devlink dev reload fw_activate (Ken Cox) [2042819 2043783]
  - bnxt_en: implement devlink dev reload driver_reinit (Ken Cox) [2042819 2043783]
  - bnxt_en: refactor cancellation of resource reservations (Ken Cox) [2042819 2043783]
  - bnxt_en: refactor printing of device info (Ken Cox) [2042819 2043783]
  - ethernet: constify references to netdev->dev_addr in drivers (Ken Cox) [2042819 2043783]
  - bnxt: use netif_is_rxfh_configured instead of open code (Ken Cox) [2042819 2043783]
  - ethernet: use eth_hw_addr_set() for dev->addr_len cases (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix TX timeout when TX ring size is set to the smallest (Ken Cox) [2042819 2043783]
  - net/{mlx5|nfp|bnxt}: Remove unnecessary RTNL lock assert (Ken Cox) [2042819 2043783]
  - bnxt_en: Clean up completion ring page arrays completely (Ken Cox) [2042819 2043783]
  - bnxt_en: make bnxt_free_skbs() safe to call after bnxt_free_mem() (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix error recovery regression (Ken Cox) [2042819 2043783]
  - bnxt: Search VPD with pci_vpd_find_ro_info_keyword() (Ken Cox) [2042819 2043783]
  - bnxt: Read VPD with pci_vpd_alloc() (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix possible unintended driver initiated error recovery (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix UDP tunnel logic (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix asic.rev in devlink dev info command (Ken Cox) [2042819 2043783]
  - bnxt_en: fix read of stored FW_PSID version on P5 devices (Ken Cox) [2042819 2043783]
  - bnxt_en: fix stored FW_PSID version masks (Ken Cox) [2042819 2043783]
  - bnxt_en: Fix 64-bit doorbell operation on 32-bit kernels (Ken Cox) [2042819 2043783]
  - bnxt_en: support multiple HWRM commands in flight (Ken Cox) [2042819 2043783]
  - bnxt_en: discard out of sequence HWRM responses (Ken Cox) [2042819 2043783]
  - bnxt_en: remove legacy HWRM interface (Ken Cox) [2042819 2043783]
  - bnxt_en: update all firmware calls to use the new APIs (Ken Cox) [2042819 2043783]
  - bnxt_en: use link_lock instead of hwrm_cmd_lock to protect link_info (Ken Cox) [2042819 2043783]
  - bnxt_en: add support for HWRM request slices (Ken Cox) [2042819 2043783]
  - bnxt_en: add HWRM request assignment API (Ken Cox) [2042819 2043783]
  - bnxt_en: introduce new firmware message API based on DMA pools (Ken Cox) [2042819 2043783]
  - bnxt_en: move HWRM API implementation into separate file (Ken Cox) [2042819 2043783]
  - bnxt_en: Refactor the HWRM_VER_GET firmware calls (Ken Cox) [2042819 2043783]
  - bnxt_en: remove DMA mapping for KONG response (Ken Cox) [2042819 2043783]
  - bnxt: count discards due to memory allocation errors (Ken Cox) [2042819 2043783]
  - bnxt: count packets discarded because of netpoll (Ken Cox) [2042819 2043783]
  - net: broadcom: switch from 'pci_' to 'dma_' API (Ken Cox) [2042819 2043783]
  - Revert "bnxt: Read VPD with pci_vpd_alloc()" (Ken Cox) [2042819 2043783]
  - Revert "bnxt: Search VPD with pci_vpd_find_ro_info_keyword()" (Ken Cox) [2042819 2043783]
  - bnxt_en: Increase maximum RX ring size if jumbo ring is not used (Ken Cox) [2042819 2043783]
  - bnxt_en: Don't use static arrays for completion ring pages (Ken Cox) [2042819 2043783]
  - bnxt_en: Log if an invalid signal detected on TSIO pin (Ken Cox) [2042819 2043783]
  - gfs2: Make sure FITRIM minlen is rounded up to fs block size (Andrew Price) [2066375]
  - redhat/configs enable CONFIG_ICE_HWTS (Petr Oros) [2037974]
  - redhat/configs enable CONFIG_ICE_SWITCHDEV (Petr Oros) [2037974]
  - ice: Fix memory corruption in VF driver (Petr Oros) [2037974]
  - ice: Fix queue config fail handling (Petr Oros) [2037974]
  - ice: Sync VLAN filtering features for DVM (Petr Oros) [2037974]
  - ice: Fix PTP TX timestamp offset calculation (Petr Oros) [2037974]
  - ice: Fix interrupt moderation settings getting cleared (Petr Oros) [2037974]
  - ice: fix possible under reporting of ethtool Tx and Rx statistics (Petr Oros) [2037974]
  - ice: fix crash when writing timestamp on RX rings (Petr Oros) [2037974]
  - ice: fix PTP stale Tx timestamps cleanup (Petr Oros) [2037974]
  - ice: clear stale Tx queue settings before configuring (Petr Oros) [2037974]
  - ice: Fix race during aux device (un)plugging (Petr Oros) [2037974]
  - ice: fix use-after-free when deinitializing mailbox snapshot (Petr Oros) [2037974]
  - ice: wait 5 s for EMP reset after firmware flash (Petr Oros) [2037974]
  - ice: Protect vf_state check by cfg_lock in ice_vc_process_vf_msg() (Petr Oros) [2037974]
  - ice: Fix incorrect locking in ice_vc_process_vf_msg() (Petr Oros) [2037974]
  - ice: Fix memory leak in ice_get_orom_civd_data() (Petr Oros) [2037974]
  - ice: fix crash in switchdev mode (Petr Oros) [2037974]
  - ice: allow creating VFs for !CONFIG_NET_SWITCHDEV (Petr Oros) [2037974]
  - ice: xsk: check if Rx ring was filled up to the end (Petr Oros) [2037974]
  - ice: arfs: fix use-after-free when freeing @rx_cpu_rmap (Petr Oros) [2037974]
  - ice: clear cmd_type_offset_bsz for TX rings (Petr Oros) [2037974]
  - ice: xsk: fix VSI state check in ice_xsk_wakeup() (Petr Oros) [2037974]
  - ice: synchronize_rcu() when terminating rings (Petr Oros) [2037974]
  - ice: Do not skip not enabled queues in ice_vc_dis_qs_msg (Petr Oros) [2037974]
  - ice: Set txq_teid to ICE_INVAL_TEID on ring creation (Petr Oros) [2037974]
  - ice: Fix broken IFF_ALLMULTI handling (Petr Oros) [2037974]
  - ice: Fix MAC address setting (Petr Oros) [2037974]
  - ice: Clear default forwarding VSI during VSI release (Petr Oros) [2037974]
  - ice: xsk: Fix indexing in ice_tx_xsk_pool() (Petr Oros) [2037974]
  - ice: xsk: Stop Rx processing when ntc catches ntu (Petr Oros) [2037974]
  - ice: xsk: Eliminate unnecessary loop iteration (Petr Oros) [2037974]
  - ice: don't allow to run ice_send_event_to_aux() in atomic ctx (Petr Oros) [2037974]
  - ice: fix 'scheduling while atomic' on aux critical err interrupt (Petr Oros) [2037974]
  - ice: add trace events for tx timestamps (Petr Oros) [2037974]
  - ice: fix return value check in ice_gnss.c (Petr Oros) [2037974]
  - ice: destroy flow director filter mutex after releasing VSIs (Petr Oros) [2037974]
  - ice: fix NULL pointer dereference in ice_update_vsi_tx_ring_stats() (Petr Oros) [2037974]
  - ice: remove PF pointer from ice_check_vf_init (Petr Oros) [2037974]
  - ice: introduce ice_virtchnl.c and ice_virtchnl.h (Petr Oros) [2037974]
  - ice: cleanup long lines in ice_sriov.c (Petr Oros) [2037974]
  - ice: introduce ICE_VF_RESET_LOCK flag (Petr Oros) [2037974]
  - ice: introduce ICE_VF_RESET_NOTIFY flag (Petr Oros) [2037974]
  - ice: convert ice_reset_vf to take flags (Petr Oros) [2037974]
  - ice: convert ice_reset_vf to standard error codes (Petr Oros) [2037974]
  - ice: make ice_reset_all_vfs void (Petr Oros) [2037974]
  - ice: drop is_vflr parameter from ice_reset_all_vfs (Petr Oros) [2037974]
  - ice: move reset functionality into ice_vf_lib.c (Petr Oros) [2037974]
  - ice: fix a long line warning in ice_reset_vf (Petr Oros) [2037974]
  - ice: introduce VF operations structure for reset flows (Petr Oros) [2037974]
  - ice: fix incorrect dev_dbg print mistaking 'i' for vf->vf_id (Petr Oros) [2037974]
  - ice: introduce ice_vf_lib.c, ice_vf_lib.h, and ice_vf_lib_private.h (Petr Oros) [2037974]
  - ice: use ice_is_vf_trusted helper function (Petr Oros) [2037974]
  - ice: log an error message when eswitch fails to configure (Petr Oros) [2037974]
  - ice: cleanup error logging for ice_ena_vfs (Petr Oros) [2037974]
  - ice: move ice_set_vf_port_vlan near other .ndo ops (Petr Oros) [2037974]
  - ice: refactor spoofchk control code in ice_sriov.c (Petr Oros) [2037974]
  - ice: rename ICE_MAX_VF_COUNT to avoid confusion (Petr Oros) [2037974]
  - ice: remove unused definitions from ice_sriov.h (Petr Oros) [2037974]
  - ice: convert vf->vc_ops to a const pointer (Petr Oros) [2037974]
  - ice: remove circular header dependencies on ice.h (Petr Oros) [2037974]
  - ice: rename ice_virtchnl_pf.c to ice_sriov.c (Petr Oros) [2037974]
  - ice: rename ice_sriov.c to ice_vf_mbx.c (Petr Oros) [2037974]
  - ice: Fix FV offset searching (Petr Oros) [2037974]
  - ice: Add support for outer dest MAC for ADQ tunnels (Petr Oros) [2037974]
  - ice: avoid XDP checks in ice_clean_tx_irq() (Petr Oros) [2037974]
  - ice: change "can't set link" message to dbg level (Petr Oros) [2037974]
  - ice: Add slow path offload stats on port representor in switchdev (Petr Oros) [2037974]
  - ice: Add support for inner etype in switchdev (Petr Oros) [2037974]
  - ice: Fix curr_link_speed advertised speed (Petr Oros) [2037974]
  - ice: Don't use GFP_KERNEL in atomic context (Petr Oros) [2037974]
  - ice: stop disabling VFs due to PF error responses (Petr Oros) [2037974]
  - ice: xsk: fix GCC version checking against pragma unroll presence (Petr Oros) [2037974]
  - ice: convert VF storage to hash table with krefs and RCU (Petr Oros) [2037974]
  - ice: introduce VF accessor functions (Petr Oros) [2037974]
  - ice: factor VF variables to separate structure (Petr Oros) [2037974]
  - ice: convert ice_for_each_vf to include VF entry iterator (Petr Oros) [2037974]
  - ice: use ice_for_each_vf for iteration during removal (Petr Oros) [2037974]
  - ice: remove checks in ice_vc_send_msg_to_vf (Petr Oros) [2037974]
  - ice: move VFLR acknowledge during ice_free_vfs (Petr Oros) [2037974]
  - ice: move clear_malvf call in ice_free_vfs (Petr Oros) [2037974]
  - ice: pass num_vfs to ice_set_per_vf_res() (Petr Oros) [2037974]
  - ice: store VF pointer instead of VF ID (Petr Oros) [2037974]
  - ice: refactor unwind cleanup in eswitch mode (Petr Oros) [2037974]
  - ice: add TTY for GNSS module for E810T device (Petr Oros) [2037974]
  - ice: initialize local variable 'tlv' (Petr Oros) [2037974]
  - ice: check the return of ice_ptp_gettimex64 (Petr Oros) [2037974]
  - ice: fix concurrent reset and removal of VFs (Petr Oros) [2037974]
  - ice: fix setting l4 port flag when adding filter (Petr Oros) [2037974]
  - ice: Match on all profiles in slow-path (Petr Oros) [2037974]
  - ice: enable parsing IPSEC SPI headers for RSS (Petr Oros) [2037974]
  - ice: Simplify tracking status of RDMA support (Petr Oros) [2037974]
  - ice: fix IPIP and SIT TSO offload (Petr Oros) [2037974]
  - ice: fix an error code in ice_cfg_phy_fec() (Petr Oros) [2037974]
  - ice: Add ability for PF admin to enable VF VLAN pruning (Petr Oros) [2037974]
  - ice: Add support for 802.1ad port VLANs VF (Petr Oros) [2037974]
  - ice: Advertise 802.1ad VLAN filtering and offloads for PF netdev (Petr Oros) [2037974]
  - ice: Support configuring the device to Double VLAN Mode (Petr Oros) [2037974]
  - ice: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 (Petr Oros) [2037974]
  - ice: Add hot path support for 802.1Q and 802.1ad VLAN offloads (Petr Oros) [2037974]
  - ice: Add outer_vlan_ops and VSI specific VLAN ops implementations (Petr Oros) [2037974]
  - ice: Adjust naming for inner VLAN operations (Petr Oros) [2037974]
  - ice: Use the proto argument for VLAN ops (Petr Oros) [2037974]
  - ice: Refactor vf->port_vlan_info to use ice_vlan (Petr Oros) [2037974]
  - ice: Introduce ice_vlan struct (Petr Oros) [2037974]
  - ice: Add new VSI VLAN ops (Petr Oros) [2037974]
  - ice: Add helper function for adding VLAN 0 (Petr Oros) [2037974]
  - ice: Refactor spoofcheck configuration functions (Petr Oros) [2037974]
  - ice: xsk: Borrow xdp_tx_active logic from i40e (Petr Oros) [2037974]
  - ice: xsk: Improve AF_XDP ZC Tx and use batching API (Petr Oros) [2037974]
  - ice: xsk: Avoid potential dead AF_XDP Tx processing (Petr Oros) [2037974]
  - ice: Make Tx threshold dependent on ring length (Petr Oros) [2037974]
  - ice: xsk: Handle SW XDP ring wrap and bump tail more often (Petr Oros) [2037974]
  - ice: xsk: Force rings to be sized to power of 2 (Petr Oros) [2037974]
  - ice: Remove likely for napi_complete_done (Petr Oros) [2037974]
  - ice: add support for DSCP QoS for IDC (Petr Oros) [2037974]
  - ice: respect metadata on XSK Rx to skb (Petr Oros) [2037974]
  - ice: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Petr Oros) [2037974]
  - ice: respect metadata in legacy-rx/ice_construct_skb() (Petr Oros) [2037974]
  - ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2037974]
  - ice: Use bitmap_free() to free bitmap (Petr Oros) [2037974]
  - ice: Optimize a few bitmap operations (Petr Oros) [2037974]
  - ice: Slightly simply ice_find_free_recp_res_idx (Petr Oros) [2037974]
  - ice: improve switchdev's slow-path (Petr Oros) [2037974]
  - ice: replay advanced rules after reset (Petr Oros) [2037974]
  - net: fixup build after bpf header changes (Petr Oros) [2037974]
  - net: Don't include filter.h from net/sock.h (Petr Oros) [2037974]
  - ice: Add flow director support for channel mode (Petr Oros) [2037974]
  - ice: switch to napi_build_skb() (Petr Oros) [2037974]
  - ice: xsk: fix cleaned_count setting (Petr Oros) [2037974]
  - ice: xsk: allow empty Rx descriptors on XSK ZC data path (Petr Oros) [2037974]
  - ice: xsk: do not clear status_error0 for ntu + nb_buffs descriptor (Petr Oros) [2037974]
  - ice: remove dead store on XSK hotpath (Petr Oros) [2037974]
  - ice: xsk: allocate separate memory for XDP SW ring (Petr Oros) [2037974]
  - ice: xsk: return xsk buffers back to pool when cleaning the ring (Petr Oros) [2037974]
  - ice: trivial: fix odd indenting (Petr Oros) [2037974]
  - ice: support crosstimestamping on E822 devices if supported (Petr Oros) [2037974]
  - ice: exit bypass mode once hardware finishes timestamp calibration (Petr Oros) [2037974]
  - ice: ensure the hardware Clock Generation Unit is configured (Petr Oros) [2037974]
  - ice: implement basic E822 PTP support (Petr Oros) [2037974]
  - ice: convert clk_freq capability into time_ref (Petr Oros) [2037974]
  - ice: introduce ice_ptp_init_phc function (Petr Oros) [2037974]
  - ice: use 'int err' instead of 'int status' in ice_ptp_hw.c (Petr Oros) [2037974]
  - ice: PTP: move setting of tstamp_config (Petr Oros) [2037974]
  - ice: introduce ice_base_incval function (Petr Oros) [2037974]
  - ice: Fix E810 PTP reset flow (Petr Oros) [2037974]
  - ice: Don't put stale timestamps in the skb (Petr Oros) [2037974]
  - ice: Use div64_u64 instead of div_u64 in adjfine (Petr Oros) [2037974]
  - ice: use modern kernel API for kick (Petr Oros) [2037974]
  - ice: tighter control over VSI_DOWN state (Petr Oros) [2037974]
  - ice: use prefetch methods (Petr Oros) [2037974]
  - ice: update to newer kernel API (Petr Oros) [2037974]
  - ice: support immediate firmware activation via devlink reload (Petr Oros) [2037974]
  - ice: reduce time to read Option ROM CIVD data (Petr Oros) [2037974]
  - ice: move ice_devlink_flash_update and merge with ice_flash_pldm_image (Petr Oros) [2037974]
  - ice: move and rename ice_check_for_pending_update (Petr Oros) [2037974]
  - ice: devlink: add shadow-ram region to snapshot Shadow RAM (Petr Oros) [2037974]
  - ice: Remove unused ICE_FLOW_SEG_HDRS_L2_MASK (Petr Oros) [2037974]
  - ice: Remove unnecessary casts (Petr Oros) [2037974]
  - ice: Propagate error codes (Petr Oros) [2037974]
  - ice: Remove excess error variables (Petr Oros) [2037974]
  - ice: Cleanup after ice_status removal (Petr Oros) [2037974]
  - ice: Remove enum ice_status (Petr Oros) [2037974]
  - ice: Use int for ice_status (Petr Oros) [2037974]
  - ice: Remove string printing for ice_status (Petr Oros) [2037974]
  - ice: Refactor status flow for DDP load (Petr Oros) [2037974]
  - ice: Refactor promiscuous functions (Petr Oros) [2037974]
  - ice: refactor PTYPE validating (Petr Oros) [2037974]
  - ice: Add package PTYPE enable information (Petr Oros) [2037974]
  - ice: safer stats processing (Petr Oros) [2037974]
  - ice: fix adding different tunnels (Petr Oros) [2037974]
  - ice: fix choosing UDP header type (Petr Oros) [2037974]
  - ice: ignore dropped packets during init (Petr Oros) [2037974]
  - ice: rearm other interrupt cause register after enabling VFs (Petr Oros) [2037974]
  - ice: fix FDIR init missing when reset VF (Petr Oros) [2037974]
  - ice: xsk: clear status_error0 for each allocated desc (Petr Oros) [2037974]
  - net/ice: Remove unused enum (Petr Oros) [2037974]
  - net/ice: Fix boolean assignment (Petr Oros) [2037974]
  - ice: avoid bpf_prog refcount underflow (Petr Oros) [2037974]
  - ice: fix vsi->txq_map sizing (Petr Oros) [2037974]
  - net/ice: Add support for enable_iwarp and enable_roce devlink param (Petr Oros) [2037974]
  - ice: Hide bus-info in ethtool for PRs in switchdev mode (Petr Oros) [2037974]
  - ice: Clear synchronized addrs when adding VFs in switchdev mode (Petr Oros) [2037974]
  - intel: Simplify bool conversion (Petr Oros) [2037974]
  - ice: fix error return code in ice_get_recp_frm_fw() (Petr Oros) [2037974]
  - ice: Fix clang -Wimplicit-fallthrough in ice_pull_qvec_from_rc() (Petr Oros) [2037974]
  - ice: Add support to print error on PHY FW load failure (Petr Oros) [2037974]
  - ice: Add support for changing MTU on PR in switchdev mode (Petr Oros) [2037974]
  - ice: send correct vc status in switchdev (Petr Oros) [2037974]
  - ice: support for GRE in eswitch (Petr Oros) [2037974]
  - ice: low level support for tunnels (Petr Oros) [2037974]
  - ice: VXLAN and Geneve TC support (Petr Oros) [2037974]
  - ice: support for indirect notification (Petr Oros) [2037974]
  - ice: Add tc-flower filter support for channel (Petr Oros) [2037974]
  - ice: enable ndo_setup_tc support for mqprio_qdisc (Petr Oros) [2037974]
  - ice: Add infrastructure for mqprio support via ndo_setup_tc (Petr Oros) [2037974]
  - ice: fix an error code in ice_ena_vfs() (Petr Oros) [2037974]
  - ice: Refactor PR ethtool ops (Petr Oros) [2037974]
  - ice: Manage act flags for switchdev offloads (Petr Oros) [2037974]
  - ice: Forbid trusted VFs in switchdev mode (Petr Oros) [2037974]
  - ice: introduce XDP_TX fallback path (Petr Oros) [2037974]
  - ice: optimize XDP_TX workloads (Petr Oros) [2037974]
  - ice: propagate xdp_ring onto rx_ring (Petr Oros) [2037974]
  - ice: do not create xdp_frame on XDP_TX (Petr Oros) [2037974]
  - ice: unify xdp_rings accesses (Petr Oros) [2037974]
  - ice: ndo_setup_tc implementation for PR (Petr Oros) [2037974]
  - ice: ndo_setup_tc implementation for PF (Petr Oros) [2037974]
  - ice: Allow changing lan_en and lb_en on all kinds of filters (Petr Oros) [2037974]
  - ice: cleanup rules info (Petr Oros) [2037974]
  - ice: allow deleting advanced rules (Petr Oros) [2037974]
  - ice: allow adding advanced rules (Petr Oros) [2037974]
  - ice: create advanced switch recipe (Petr Oros) [2037974]
  - ice: manage profiles and field vectors (Petr Oros) [2037974]
  - ice: implement low level recipes functions (Petr Oros) [2037974]
  - ice: add port representor ethtool ops and stats (Petr Oros) [2037974]
  - ice: switchdev slow path (Petr Oros) [2037974]
  - ice: rebuild switchdev when resetting all VFs (Petr Oros) [2037974]
  - ice: enable/disable switchdev when managing VFs (Petr Oros) [2037974]
  - ice: introduce new type of VSI for switchdev (Petr Oros) [2037974]
  - ice: set and release switchdev environment (Petr Oros) [2037974]
  - ice: allow changing lan_en and lb_en on dflt rules (Petr Oros) [2037974]
  - ice: manage VSI antispoof and destination override (Petr Oros) [2037974]
  - ice: allow process VF opcodes in different ways (Petr Oros) [2037974]
  - ice: introduce VF port representor (Petr Oros) [2037974]
  - ice: Move devlink port to PF/VF struct (Petr Oros) [2037974]
  - ice: support basic E-Switch mode control (Petr Oros) [2037974]
  - ethernet: use eth_hw_addr_set() for dev->addr_len cases (Petr Oros) [2037974]
  - ice: Use the xsk batched rx allocation interface (Petr Oros) [2037974]
  - ice: Use xdp_buf instead of rx_buf for xsk zero-copy (Petr Oros) [2037974]
  - ice: Only lock to update netdev dev_addr (Petr Oros) [2037974]
  - ice: restart periodic outputs around time changes (Petr Oros) [2037974]
  - ice: fix Tx queue iteration for Tx timestamp enablement (Petr Oros) [2037974]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-126.el9]
changelog:
  - mm/page_alloc: always attempt to allocate at least one page during bulk allocation (Joel Savitz) [2094045]
  - KVM: arm64: Warn if accessing timer pending state outside of vcpu context (Gavin Shan) [2075082]
  - KVM: arm64: Replace vgic_v3_uaccess_read_pending with vgic_uaccess_read_pending (Gavin Shan) [2075082]
  - KVM: arm64: Don't read a HW interrupt pending state in user context (Gavin Shan) [2075082]
  - KVM: arm64: Always start with clearing SVE flag on load (Gavin Shan) [2075082]
  - KVM: arm64: Don't hypercall before EL2 init (Gavin Shan) [2075082]
  - KVM: arm64: vgic-v3: Consistently populate ID_AA64PFR0_EL1.GIC (Gavin Shan) [2075082]
  - KVM: arm64: Inject exception on out-of-IPA-range translation fault (Gavin Shan) [2075082]
  - KVM/arm64: Don't emulate a PMU for 32-bit guests if feature not set (Gavin Shan) [2075082]
  - KVM: arm64: Handle host stage-2 faults from 32-bit EL0 (Gavin Shan) [2075082]
  - selftests: KVM: Free the GIC FD when cleaning up in arch_timer (Gavin Shan) [2075082]
  - KVM: arm64: selftests: Introduce vcpu_width_config (Gavin Shan) [2075082]
  - KVM: arm64: mixed-width check should be skipped for uninitialized vCPUs (Gavin Shan) [2075082]
  - arm64: alternatives: mark patch_alternative() as `noinstr` (Gavin Shan) [2075082]
  - KVM: arm64: vgic: Remove unnecessary type castings (Gavin Shan) [2075082]
  - KVM: arm64: Don't split hugepages outside of MMU write lock (Gavin Shan) [2075082]
  - KVM: arm64: Drop unneeded minor version check from PSCI v1.x handler (Gavin Shan) [2075082]
  - KVM: arm64: Actually prevent SMC64 SYSTEM_RESET2 from AArch32 (Gavin Shan) [2075082]
  - KVM: arm64: Generally disallow SMC64 for AArch32 guests (Gavin Shan) [2075082]
  - arm64: Fix comments in macro __init_el2_gicv3 (Gavin Shan) [2075082]
  - arm64: errata: avoid duplicate field initializer (Gavin Shan) [2075082]
  - KVM: arm64: fix typos in comments (Gavin Shan) [2075082]
  - KVM: arm64: Generalise VM features into a set of flags (Gavin Shan) [2075082]
  - KVM: arm64: Really propagate PSCI SYSTEM_RESET2 arguments to userspace (Gavin Shan) [2075082]
  - KVM: arm64: Only open the interrupt window on exit due to an interrupt (Gavin Shan) [2075082]
  - KVM: arm64: Enable Cortex-A510 erratum 2077057 by default (Gavin Shan) [2075082]
  - arm64: Always use individual bits in CPACR floating point enables (Gavin Shan) [2075082]
  - arm64: Define CPACR_EL1_FPEN similarly to other floating point controls (Gavin Shan) [2075082]
  - KVM: arm64: Remove unneeded semicolons (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Skip tests if we can't create a vgic-v3 (Gavin Shan) [2075082]
  - KVM: arm64: Indicate SYSTEM_RESET2 in kvm_run::system_event flags field (Gavin Shan) [2075082]
  - KVM: arm64: Expose PSCI SYSTEM_RESET2 call to the guest (Gavin Shan) [2075082]
  - KVM: arm64: Bump guest PSCI version to 1.1 (Gavin Shan) [2075082]
  - KVM: arm64: Don't miss pending interrupts for suspended vCPU (Gavin Shan) [2075082]
  - arm64: Correct wrong label in macro __init_el2_gicv3 (Gavin Shan) [2075082]
  - KVM: arm64: vgic: Read HW interrupt pending state from the HW (Gavin Shan) [2075082]
  - KVM: arm64: Refuse to run VCPU if the PMU doesn't match the physical CPU (Gavin Shan) [2075082]
  - KVM: arm64: Add KVM_ARM_VCPU_PMU_V3_SET_PMU attribute (Gavin Shan) [2075082]
  - KVM: arm64: Keep a list of probed PMUs (Gavin Shan) [2075082]
  - KVM: arm64: Keep a per-VM pointer to the default PMU (Gavin Shan) [2075082]
  - perf: Fix wrong name in comment for struct perf_cpu_context (Gavin Shan) [2075082]
  - KVM: arm64: Do not change the PMU event filter after a VCPU has run (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Implement CONFIG_DEBUG_LIST at EL2 (Gavin Shan) [2075082]
  - KVM: arm64: Drop unused param from kvm_psci_version() (Gavin Shan) [2075082]
  - kvm: selftests: aarch64: use a tighter assert in vgic_poke_irq() (Gavin Shan) [2075082]
  - kvm: selftests: aarch64: fix some vgic related comments (Gavin Shan) [2075082]
  - kvm: selftests: aarch64: fix the failure check in kvm_set_gsi_routing_irqchip_check (Gavin Shan) [2075082]
  - kvm: selftests: aarch64: pass vgic_irq guest args as a pointer (Gavin Shan) [2075082]
  - kvm: selftests: aarch64: fix assert in gicv3_access_reg (Gavin Shan) [2075082]
  - KVM: arm64: Make active_vmids invalid on vCPU schedule out (Gavin Shan) [2075082]
  - KVM: arm64: Align the VMID allocation with the arm64 ASID (Gavin Shan) [2075082]
  - KVM: arm64: Make VMID bits accessible outside of allocator (Gavin Shan) [2075082]
  - KVM: arm64: Introduce a new VMID allocator for KVM (Gavin Shan) [2075082]
  - arm64/fpsimd: Clarify the purpose of using last in fpsimd_save() (Gavin Shan) [2075082]
  - KVM: arm64: Add some more comments in kvm_hyp_handle_fpsimd() (Gavin Shan) [2075082]
  - KVM: arm64: Add comments for context flush and sync callbacks (Gavin Shan) [2075082]
  - KVM: arm64: Add fast path to handle permission relaxation during dirty logging (Gavin Shan) [2075082]
  - KVM: arm64: Use read/write spin lock for MMU protection (Gavin Shan) [2075082]
  - KVM: arm64: Emulate the OS Lock (Gavin Shan) [2075082]
  - KVM: arm64: Allow guest to set the OSLK bit (Gavin Shan) [2075082]
  - KVM: arm64: Stash OSLSR_EL1 in the cpu context (Gavin Shan) [2075082]
  - KVM: arm64: Correctly treat writes to OSLSR_EL1 as undefined (Gavin Shan) [2075082]
  - redhat/configs: aarch64: Enable ARM64_ERRATUM_2077057 (Gavin Shan) [2075082]
  - KVM: arm64: Workaround Cortex-A510's single-step and PAC trap errata (Gavin Shan) [2075082]
  - KVM: arm64: Stop handle_exit() from handling HVC twice when an SError occurs (Gavin Shan) [2075082]
  - KVM: arm64: Avoid consuming a stale esr value when SError occur (Gavin Shan) [2075082]
  - kvm/arm64: rework guest entry logic (Gavin Shan) [2075082]
  - KVM: arm64: Use shadow SPSR_EL1 when injecting exceptions on !VHE (Gavin Shan) [2075082]
  - KVM: arm64: vgic-v3: Restrict SEIS workaround to known broken systems (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Use the mm_ops indirection for cache maintenance (Gavin Shan) [2075082]
  - KVM: arm64: Put kvm_arch_vcpu_get_ip() inside CONFIG_GUEST_PERF_EVENTS (Gavin Shan) [2075082]
  - KVM: arm64: vgic: Replace kernel.h with the necessary inclusions (Gavin Shan) [2075082]
  - KVM: arm64: Fix comment typo in kvm_vcpu_finalize_sve() (Gavin Shan) [2075082]
  - KVM: arm64: selftests: get-reg-list: Add pauth configuration (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Add test for restoring active IRQs (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Add ISPENDR write tests in vgic_irq (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Add tests for IRQFD in vgic_irq (Gavin Shan) [2075082]
  - KVM: selftests: Add IRQ GSI routing library functions (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Add test_inject_fail to vgic_irq (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Add tests for LEVEL_INFO in vgic_irq (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Level-sensitive interrupts tests in vgic_irq (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Add preemption tests in vgic_irq (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Cmdline arg to set EOI mode in vgic_irq (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Cmdline arg to set number of IRQs in vgic_irq test (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Abstract the injection functions in vgic_irq (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Add vgic_irq to test userspace IRQ injection (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Add vGIC library functions to deal with vIRQ state (Gavin Shan) [2075082]
  - KVM: selftests: Add kvm_irq_line library function (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Add GICv3 register accessor library functions (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Add function for accessing GICv3 dist and redist registers (Gavin Shan) [2075082]
  - KVM: selftests: aarch64: Move gic_v3.h to shared headers (Gavin Shan) [2075082]
  - KVM: arm64: Fix comment on barrier in kvm_psci_vcpu_on() (Gavin Shan) [2075082]
  - KVM: arm64: Fix comment for kvm_reset_vcpu() (Gavin Shan) [2075082]
  - KVM: arm64: Use defined value for SCTLR_ELx_EE (Gavin Shan) [2075082]
  - KVM: arm64: Rework kvm_pgtable initialisation (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Unshare guest structs during teardown (Gavin Shan) [2075082]
  - KVM: arm64: Expose unshare hypercall to the host (Gavin Shan) [2075082]
  - KVM: arm64: Implement do_unshare() helper for unsharing memory (Gavin Shan) [2075082]
  - KVM: arm64: Implement __pkvm_host_share_hyp() using do_share() (Gavin Shan) [2075082]
  - KVM: arm64: Implement do_share() helper for sharing memory (Gavin Shan) [2075082]
  - KVM: arm64: Introduce wrappers for host and hyp spin lock accessors (Gavin Shan) [2075082]
  - KVM: arm64: Extend pkvm_page_state enumeration to handle absent pages (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Refcount the pages shared with EL2 (Gavin Shan) [2075082]
  - KVM: arm64: Introduce kvm_share_hyp() (Gavin Shan) [2075082]
  - KVM: arm64: Implement kvm_pgtable_hyp_unmap() at EL2 (Gavin Shan) [2075082]
  - KVM: arm64: Hook up ->page_count() for hypervisor stage-1 page-table (Gavin Shan) [2075082]
  - KVM: arm64: Fixup hyp stage-1 refcount (Gavin Shan) [2075082]
  - KVM: arm64: Refcount hyp stage-1 pgtable pages (Gavin Shan) [2075082]
  - KVM: arm64: Provide {get,put}_page() stubs for early hyp allocator (Gavin Shan) [2075082]
  - KVM: arm64: vgic: Demote userspace-triggered console prints to kvm_debug() (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Make kvm_host_owns_hyp_mappings() robust to VHE (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Stub io map functions (Gavin Shan) [2075082]
  - KVM: arm64: Make __io_map_base static (Gavin Shan) [2075082]
  - KVM: arm64: Make the hyp memory pool static (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Disable GICv2 support (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Fix hyp_pool max order (Gavin Shan) [2075082]
  - KVM: arm64: Use Makefile.kvm for common files (Gavin Shan) [2075082]
  - KVM: arm64: Drop unused workaround_flags vcpu field (Gavin Shan) [2075082]
  - KVM: arm64: Move vGIC v4 handling for WFI out arch callback hook (Gavin Shan) [2075082]
  - arm64/kvm: Fix bitrotted comment for SVE handling in handle_exit.c (Gavin Shan) [2075082]
  - KVM: arm64: Move host EL1 code out of hyp/ directory (Gavin Shan) [2075082]
  - KVM: arm64: Generate hyp_constants.h for the host (Gavin Shan) [2075082]
  - arm64: Add missing include of asm/cpufeature.h to asm/mmu.h (Gavin Shan) [2075082]
  - KVM: arm64: Constify kvm_io_gic_ops (Gavin Shan) [2075082]
  - KVM: arm64: Add minimal handling for the ARMv8.7 PMU (Gavin Shan) [2075082]
  - KVM: arm64: Drop vcpu->arch.has_run_once for vcpu->pid (Gavin Shan) [2075082]
  - KVM: arm64: Merge kvm_arch_vcpu_run_pid_change() and kvm_vcpu_first_run_init() (Gavin Shan) [2075082]
  - KVM: arm64: Restructure the point where has_run_once is advertised (Gavin Shan) [2075082]
  - KVM: arm64: Move kvm_arch_vcpu_run_pid_change() out of line (Gavin Shan) [2075082]
  - KVM: arm64: Move SVE state mapping at HYP to finalize-time (Gavin Shan) [2075082]
  - KVM: arm64: Move pkvm's special 32bit handling into a generic infrastructure (Gavin Shan) [2075082]
  - KVM: arm64: Save PSTATE early on exit (Gavin Shan) [2075082]
  - arm64/fpsimd: Document the use of TIF_FOREIGN_FPSTATE by KVM (Gavin Shan) [2075082]
  - KVM: arm64: Stop mapping current thread_info at EL2 (Gavin Shan) [2075082]
  - KVM: arm64: Introduce flag shadowing TIF_FOREIGN_FPSTATE (Gavin Shan) [2075082]
  - KVM: arm64: Remove unused __sve_save_state (Gavin Shan) [2075082]
  - KVM: arm64: Get rid of host SVE tracking/saving (Gavin Shan) [2075082]
  - KVM: arm64: Reorder vcpu flag definitions (Gavin Shan) [2075082]
  - KVM: arm64: Cap KVM_CAP_NR_VCPUS by kvm_arm_default_max_vcpus() (Gavin Shan) [2075082]
  - KVM: arm64: Fix host stage-2 finalization (Gavin Shan) [2075082]
  - KVM: arm64: Change the return type of kvm_vcpu_preferred_target() (Gavin Shan) [2075082]
  - KVM: arm64: nvhe: Fix a non-kernel-doc comment (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Give priority to standard traps over pvm handling (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Pass vpcu instead of kvm to kvm_get_exit_handler_array() (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Move kvm_handle_pvm_restricted around (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Consolidate include files (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Preserve pending SError on exit from AArch32 (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Handle GICv3 traps as required (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Drop sysregs that should never be routed to the host (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Drop AArch32-specific registers (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Make the ERR/ERX*_EL1 registers RAZ/WI (Gavin Shan) [2075082]
  - KVM: arm64: pkvm: Use a single function to expose all id-regs (Gavin Shan) [2075082]
  - KVM: arm64: Fix early exit ptrauth handling (Gavin Shan) [2075082]
  - KVM: arm64: Add memcg accounting to KVM allocations (Gavin Shan) [2075082]
  - KVM: arm64: vgic: Add memcg accounting to vgic allocations (Gavin Shan) [2075082]
  - KVM: arm64: vgic-v3: Align emulated cpuif LPI state machine with the pseudocode (Gavin Shan) [2075082]
  - KVM: arm64: vgic-v3: Don't advertise ICC_CTLR_EL1.SEIS (Gavin Shan) [2075082]
  - KVM: arm64: vgic-v3: Reduce common group trapping to ICV_DIR_EL1 when possible (Gavin Shan) [2075082]
  - KVM: arm64: vgic-v3: Work around GICv3 locally generated SErrors (Gavin Shan) [2075082]
  - KVM: arm64: Force ID_AA64PFR0_EL1.GIC=1 when exposing a virtual GICv3 (Gavin Shan) [2075082]
  - KVM: arm64: Fix reporting of endianess when the access originates at EL0 (Gavin Shan) [2075082]
  - KVM: arm64: Handle protected guests at 32 bits (Gavin Shan) [2075082]
  - KVM: arm64: Trap access to pVM restricted features (Gavin Shan) [2075082]
  - KVM: arm64: Move sanitized copies of CPU features (Gavin Shan) [2075082]
  - KVM: arm64: Initialize trap registers for protected VMs (Gavin Shan) [2075082]
  - KVM: arm64: Add handlers for protected VM System Registers (Gavin Shan) [2075082]
  - KVM: arm64: Simplify masking out MTE in feature id reg (Gavin Shan) [2075082]
  - KVM: arm64: Add missing field descriptor for MDCR_EL2 (Gavin Shan) [2075082]
  - KVM: arm64: Pass struct kvm to per-EC handlers (Gavin Shan) [2075082]
  - KVM: arm64: Move early handlers to per-EC handlers (Gavin Shan) [2075082]
  - KVM: arm64: Don't include switch.h into nvhe/kvm-main.c (Gavin Shan) [2075082]
  - KVM: arm64: Move __get_fault_info() and co into their own include file (Gavin Shan) [2075082]
  - KVM: arm64: Replace get_raz_id_reg() with get_raz_reg() (Gavin Shan) [2075082]
  - KVM: arm64: Use get_raz_reg() for userspace reads of PMSWINC_EL0 (Gavin Shan) [2075082]
  - KVM: arm64: Return early from read_id_reg() if register is RAZ (Gavin Shan) [2075082]
  - KVM: arm64: Depend on HAVE_KVM instead of OF (Gavin Shan) [2075082]
  - KVM: arm64: Unconditionally include generic KVM's Kconfig (Gavin Shan) [2075082]
  - KVM: arm64: Allow KVM to be disabled from the command line (Gavin Shan) [2075082]
  - KVM: arm64: Disable privileged hypercalls after pKVM finalisation (Gavin Shan) [2075082]
  - KVM: arm64: Prevent re-finalisation of pKVM for a given CPU (Gavin Shan) [2075082]
  - KVM: arm64: Propagate errors from __pkvm_prot_finalize hypercall (Gavin Shan) [2075082]
  - KVM: arm64: Reject stub hypercalls after pKVM has been initialised (Gavin Shan) [2075082]
  - arm64: Prevent kexec and hibernation if is_protected_kvm_enabled() (Gavin Shan) [2075082]
  - KVM: arm64: Turn __KVM_HOST_SMCCC_FUNC_* into an enum (mostly) (Gavin Shan) [2075082]
  - KVM: arm64: Revert "KVM: arm64: Count VMID-wide TLB invalidations" (Gavin Shan) [2075082]
  - cxl/core: Remove cxld_const_init in cxl_decoder_alloc() (John W. Linville) [2072584]
  - cxl/pmem: Fix module reload vs workqueue state (John W. Linville) [2072584]
  - cxl/memdev: Remove unused cxlmd field (John W. Linville) [2072584]
  - cxl/core: Convert to EXPORT_SYMBOL_NS_GPL (John W. Linville) [2072584]
  - cxl/memdev: Change cxl_mem to a more descriptive name (John W. Linville) [2072584]
  - cxl/mbox: Remove bad comment (John W. Linville) [2072584]
  - cxl/pmem: Fix reference counting for delayed work (John W. Linville) [2072584]
  - cxl/pci: Split cxl_pci_setup_regs() (John W. Linville) [2072584]
  - cxl/pci: Add @base to cxl_register_map (John W. Linville) [2072584]
  - cxl/pci: Make more use of cxl_register_map (John W. Linville) [2072584]
  - cxl/pci: Remove pci request/release regions (John W. Linville) [2072584]
  - cxl/pci: Fix NULL vs ERR_PTR confusion (John W. Linville) [2072584]
  - cxl/pci: Remove dev_dbg for unknown register blocks (John W. Linville) [2072584]
  - cxl/pci: Convert register block identifiers to an enum (John W. Linville) [2072584]
  - cxl/acpi: Do not fail cxl_acpi_probe() based on a missing CHBS (John W. Linville) [2072584]
  - cxl/pci: Disambiguate cxl_pci further from cxl_mem (John W. Linville) [2072584]
  - cxl/core: Split decoder setup into alloc + add (John W. Linville) [2072584]
  - tools/testing/cxl: Introduce a mock memory device + driver (John W. Linville) [2072584]
  - cxl/mbox: Move command definitions to common location (John W. Linville) [2072584]
  - cxl/bus: Populate the target list at decoder create (John W. Linville) [2072584]
  - tools/testing/cxl: Introduce a mocked-up CXL port hierarchy (John W. Linville) [2072584]
  - cxl/pmem: Add support for multiple nvdimm-bridge objects (John W. Linville) [2072584]
  - cxl/pmem: Translate NVDIMM label commands to CXL label commands (John W. Linville) [2072584]
  - cxl/mbox: Add exclusive kernel command support (John W. Linville) [2072584]
  - cxl/mbox: Convert 'enabled_cmds' to DECLARE_BITMAP (John W. Linville) [2072584]
  - cxl/pci: Use module_pci_driver (John W. Linville) [2072584]
  - cxl/mbox: Move mailbox and other non-PCI specific infrastructure to the core (John W. Linville) [2072584]
  - cxl/pci: Drop idr.h (John W. Linville) [2072584]
  - cxl/mbox: Introduce the mbox_send operation (John W. Linville) [2072584]
  - cxl/pci: Clean up cxl_mem_get_partition_info() (John W. Linville) [2072584]
  - cxl/pci: Make 'struct cxl_mem' device type generic (John W. Linville) [2072584]
  - cxl/registers: Fix Documentation warning (John W. Linville) [2072584]
  - cxl/pmem: Fix Documentation warning (John W. Linville) [2072584]
  - cxl/pci: Fix debug message in cxl_probe_regs() (John W. Linville) [2072584]
  - cxl/pci: Fix lockdown level (John W. Linville) [2072584]
  - cxl/acpi: Do not add DSDT disabled ACPI0016 host bridge ports (John W. Linville) [2072584]
  - cxl/mem: Adjust ram/pmem range to represent DPA ranges (John W. Linville) [2072584]
  - cxl/mem: Account for partitionable space in ram/pmem ranges (John W. Linville) [2072584]
  - cxl/pci: Store memory capacity values (John W. Linville) [2072584]
  - cxl/pci: Simplify register setup (John W. Linville) [2072584]
  - cxl/pci: Ignore unknown register block types (John W. Linville) [2072584]
  - cxl/core: Move memdev management to core (John W. Linville) [2072584]
  - cxl/pci: Introduce cdevm_file_operations (John W. Linville) [2072584]
  - cxl/core: Move register mapping infrastructure (John W. Linville) [2072584]
  - cxl/core: Move pmem functionality (John W. Linville) [2072584]
  - cxl/core: Improve CXL core kernel docs (John W. Linville) [2072584]
  - cxl: Move cxl_core to new directory (John W. Linville) [2072584]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-127.el9]
changelog:
  - intel/igbvf:fix repeated words in comments (Corinna Vinschen) [2037985]
  - igbvf: Remove useless DMA-32 fallback configuration (Corinna Vinschen) [2037985]
  - x86/sme: Explicitly map new EFI memmap table as encrypted (Rafael Aquini) [2091830]
  - x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c (Rafael Aquini) [2091830]
  - aarch64: Enable NVIDIA Jetson Xavier SoCs (Craig Magina) [2098285]
  - r8169: improve driver unload and system shutdown behavior on DASH-enabled systems (Jose Ignacio Tornos Martinez) [2070952]
  - r8169: factor out redundant RTL8168d PHY config functionality to rtl8168d_1_common() (Jose Ignacio Tornos Martinez) [2070952]
  - r8169: support L1.2 control on RTL8168h (Jose Ignacio Tornos Martinez) [2070952]
  - r8169: add rtl_disable_exit_l1() (Jose Ignacio Tornos Martinez) [2070952]
  - r8169: enable ASPM L1.2 if system vendor flags it as safe (Jose Ignacio Tornos Martinez) [2070952]
  - r8169: don't use pci_irq_vector() in atomic context (Jose Ignacio Tornos Martinez) [2070952]
  - r8169: Avoid misuse of pm_ptr() macro (Jose Ignacio Tornos Martinez) [2070952]
  - r8169: fix incorrect mac address assignment (Jose Ignacio Tornos Martinez) [2070952]
  - r8169: enable ASPM L1/L1.1 from RTL8168h (Jose Ignacio Tornos Martinez) [2070952]
  - r8169: Add device 10ec:8162 to driver r8169 (Jose Ignacio Tornos Martinez) [2070952]
  - ethernet: r8169: use eth_hw_addr_set() (Jose Ignacio Tornos Martinez) [2070952]
  - r8169: add rtl_enable_exit_l1 (Jose Ignacio Tornos Martinez) [2070952]
  - r8169: enable ASPM L0s state (Jose Ignacio Tornos Martinez) [2070952]
  - r8169: rename rtl_csi_access_enable to rtl_set_aspm_entry_latency (Jose Ignacio Tornos Martinez) [2070952]
  - powercap: intel_rapl: add support for RaptorLake (David Arcari) [2076725]
  - perf/x86/cstate: Add SAPPHIRERAPIDS_X CPU support (Michael Petlan) [2094573]
  - fs: dlm: filter user dlm messages for kernel locks (Alexander Aring) [2026117]
  - scsi: storvsc: Fix unsigned comparison to zero (Mohammed Gamal) [2030695]
  - scsi: storvsc: Fix validation for unsolicited incoming packets (Mohammed Gamal) [2030695]
  - scsi: storvsc: Fix storvsc_queuecommand() memory leak (Mohammed Gamal) [2030695]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-128.el9]
changelog:
  - block: remove WARN_ON() from bd_link_disk_holder (Ming Lei) [2094256]
  - block: pop cached rq before potentially blocking rq_qos_throttle() (Ming Lei) [2094256]
  - block: remove queue from struct blk_independent_access_range (Ming Lei) [2094256]
  - block: freeze the queue earlier in del_gendisk (Ming Lei) [2094256]
  - block: remove per-disk debugfs files in blk_unregister_queue (Ming Lei) [2094256]
  - block: serialize all debugfs operations using q->debugfs_mutex (Ming Lei) [2094256]
  - block: disable the elevator int del_gendisk (Ming Lei) [2094256]
  - net: add missing include in include/net/gro.h (Ivan Vecera) [2101789]
  - net: gro: populate net/core/gro.c (Ivan Vecera) [2101789]
  - net: gro: move skb_gro_receive into net/core/gro.c (Ivan Vecera) [2101789]
  - net: gro: move skb_gro_receive_list to udp_offload.c (Ivan Vecera) [2101789]
  - net: move gro definitions to include/net/gro.h (Ivan Vecera) [2101789]
  - net:dev: Change napi_gro_complete return type to void (Ivan Vecera) [2101789]
  - move netdev_boot_setup into Space.c (Ivan Vecera) [2101789]
  - sched: Fix balance_push() vs __sched_setscheduler() (Phil Auld) [2100215]
  - selftests, xsk: Fix bpf_res cleanup test (Felix Maurer) [2090981]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-129.el9]
changelog:
  - fuse: send security context of inode on file (Vivek Goyal) [2101526]
  - fuse: extend init flags (Vivek Goyal) [2101526]
  - security, lsm: dentry_init_security() Handle multi LSM registration (Vivek Goyal) [2101526]
  - security: Return xattr name from security_dentry_init_security() (Vivek Goyal) [2101526]
  - fuse: add FOPEN_NOFLUSH (Vivek Goyal) [2101526]
  - net: fix data-race in dev_isalive() (Hangbin Liu) [2101278]
  - net: Write lock dev_base_lock without disabling bottom halves. (Hangbin Liu) [2101278]
  - net: fix IFF_TX_SKB_NO_LINEAR definition (Hangbin Liu) [2101278]
  - sock: redo the psock vs ULP protection check (Hangbin Liu) [2101278]
  - net: fix dev_fill_forward_path with pppoe + bridge (Hangbin Liu) [2101278]
  - net: Fix features skip in for_each_netdev_feature() (Hangbin Liu) [2101278]
  - RDMA/irdma: Add SW mechanism to generate completions on error (Kamal Heib) [2100317]
  - RDMA/irdma: Remove the redundant variable (Kamal Heib) [2100317]
  - RDMA/irdma: Add support for DSCP (Kamal Heib) [2100317]
  - RDMA/irdma: Use irq_update_affinity_hint() (Kamal Heib) [2100317]
  - RDMA/irdma: Set protocol based on PF rdma_mode flag (Kamal Heib) [2096127 2100317]
  - spec: Keep .BTF section in modules (Viktor Malik) [2097188]
  - NFSD: Instantiate a struct file when creating a regular NFSv4 file (Benjamin Coddington) [1905809]
  - NFSD: Clean up nfsd_open_verified() (Benjamin Coddington) [1905809]
  - NFSD: Remove do_nfsd_create() (Benjamin Coddington) [1905809]
  - NFSD: Refactor NFSv4 OPEN(CREATE) (Benjamin Coddington) [1905809]
  - NFSD: Refactor NFSv3 CREATE (Benjamin Coddington) [1905809]
  - NFSD: Refactor nfsd_create_setattr() (Benjamin Coddington) [1905809]
  - NFSD: Avoid calling fh_drop_write() twice in do_nfsd_create() (Benjamin Coddington) [1905809]
  - NFSD: Clean up nfsd3_proc_create() (Benjamin Coddington) [1905809]
  - ext4: fix up test_dummy_encryption handling for new mount API (Lukas Czerner) [2099577]
  - ext4: only allow test_dummy_encryption when supported (Lukas Czerner) [2099577]
  - fscrypt: add new helper functions for test_dummy_encryption (Lukas Czerner) [2099577]
  - fscrypt: factor out fscrypt_policy_to_key_spec() (Lukas Czerner) [2099577]
  - ext4: fix super block checksum incorrect after mount (Lukas Czerner) [2099577]
  - ext4: fix bug_on ext4_mb_use_inode_pa (Lukas Czerner) [2099577]
  - ext4: make variable "count" signed (Lukas Czerner) [2099577]
  - ext4: add reserved GDT blocks check (Lukas Czerner) [2099577]
  - ext4: fix bug_on in __es_tree_search (Lukas Czerner) [2099577]
  - ext4: avoid cycles in directory h-tree (Lukas Czerner) [2099577]
  - ext4: verify dir block before splitting it (Lukas Czerner) [2099577]
  - ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state (Lukas Czerner) [2099577]
  - ext4: fix bug_on in ext4_writepages (Lukas Czerner) [2099577]
  - ext4: fix memory leak in parse_apply_sb_mount_options() (Lukas Czerner) [2099577]
  - ext4: reject the 'commit' option on ext2 filesystems (Lukas Czerner) [2099577]
  - ext4: fix race condition between ext4_write and ext4_convert_inline_data (Lukas Czerner) [2099577]
  - ext4: fix journal_ioprio mount option handling (Lukas Czerner) [2099577]
  - ext4: mark group as trimmed only if it was fully scanned (Lukas Czerner) [2099577]
  - ext4: fix use-after-free in ext4_rename_dir_prepare (Lukas Czerner) [2099577]
  - ext4: fix warning in ext4_handle_inode_extension (Lukas Czerner) [2099577]
  - redhat/configs: enable CONFIG_SAMPLE_VFIO_MDEV_MTTY (Patrick Talbert) [2071955]
  - Revert "mm: remove the extra ZONE_DEVICE struct page refcount" (Karol Herbst) [2043115]
  - Merge DRM changes from upstream v5.17..v5.18 (Karol Herbst) [2043115]
  - seq_file: include linux/string_helpers.h (Karol Herbst) [2043115]
  - iosys-map: Add a few more helpers (Karol Herbst) [2043115]
  - iosys-map: Add offset to iosys_map_memcpy_to() (Karol Herbst) [2043115]
  - dma-buf-map: Rename to iosys-map (Karol Herbst) [2043115]
  - Revert "virtio: wrap config->reset calls" (Karol Herbst) [2043115]
  - Merge DRM changes from upstream v5.16..v5.17 (Karol Herbst) [2043115]
  - drm/i915/rpl-s: Add PCI IDS for Raptor Lake S (Karol Herbst) [2043115]
  - Merge DRM changes from upstream v5.15..v5.16 (Karol Herbst) [2043115]
  - Merge DRM changes from upstream v5.14..v5.15 (Karol Herbst) [2043115]
  - fbdev: fbmem: add a helper to determine if an aperture is used by a fw fb (Karol Herbst) [2043115]
  - redhat/configs: enable CONFIG_UDMABUF (Karol Herbst) [2012748]
  - redhat/configs: set new DRM configs (Karol Herbst) [2043115]
  - Makefiles: set initial DRM version (Karol Herbst) [2043115]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-130.el9]
changelog:
  - scsi: iscsi: Fix session removal on shutdown (Chris Leech) [2101762]
  - scsi: qedi: Use QEDI_MODE_NORMAL for error handling (Chris Leech) [2101762]
  - scsi: iscsi: Add helper to remove a session from the kernel (Chris Leech) [2101762]
  - scsi: iscsi: Clean up bound endpoints during shutdown (Chris Leech) [2101762]
  - scsi: iscsi: Allow iscsi_if_stop_conn() to be called from kernel (Chris Leech) [2101762]
  - scsi: iscsi: Fix HW conn removal use after free (Chris Leech) [2101762]
  - scsi: iscsi: Make iscsi_unregister_transport() return void (Chris Leech) [2101762]
  - scsi: core: iscsi: Directly use ida_alloc()/ida_free() (Chris Leech) [2101762]
  - scsi: iscsi: Exclude zero from the endpoint ID range (Chris Leech) [2101762]
  - scsi: iscsi: Fix harmless double shift bug (Chris Leech) [2101762]
  - scsi: libiscsi: Remove unnecessary memset() in iscsi_conn_setup() (Chris Leech) [2101762]
  - scsi: libiscsi: Teardown iscsi_cls_conn gracefully (Chris Leech) [2101762]
  - scsi: libiscsi: Add iscsi_cls_conn to sysfs after initialization (Chris Leech) [2101762]
  - scsi: iscsi: Add helper functions to manage iscsi_cls_conn (Chris Leech) [2101762]
  - scsi: iscsi: Drop temp workq_name (Chris Leech) [2101762]
  - scsi: iscsi: Use the session workqueue for recovery (Chris Leech) [2101762]
  - scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding (Chris Leech) [2101762]
  - scsi: iscsi: Remove iscsi_scan_finished() (Chris Leech) [2101762]
  - scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown() (Chris Leech) [2101762]
  - scsi: libiscsi: Move ehwait initialization to iscsi_session_setup() (Chris Leech) [2101762]
  - filemap: Fix serialization adding transparent huge pages to page cache (Aristeu Rozanski) [2083861]
  - mm/huge_memory: Fix xarray node memory leak (Aristeu Rozanski) [2083861]
  - filemap: Cache the value of vm_flags (Aristeu Rozanski) [2083861]
  - mm/readahead: Fix readahead with large folios (Aristeu Rozanski) [2083861]
  - mm/hwpoison: use pr_err() instead of dump_page() in get_any_page() (Aristeu Rozanski) [2083861]
  - XArray: Disallow sibling entries of nodes (Aristeu Rozanski) [2083861]
  - tmpfs: fix regressions from wider use of ZERO_PAGE (Aristeu Rozanski) [2083861]
  - mm/rmap: Fix handling of hugetlbfs pages in page_vma_mapped_walk (Aristeu Rozanski) [2083861]
  - mm/mempolicy: Use vma_alloc_folio() in new_page() (Aristeu Rozanski) [2083861]
  - mm: Add vma_alloc_folio() (Aristeu Rozanski) [2083861]
  - mm/migrate: Use a folio in migrate_misplaced_transhuge_page() (Aristeu Rozanski) [2083861]
  - mm/migrate: Use a folio in alloc_migration_target() (Aristeu Rozanski) [2083861]
  - mm/munlock: update Documentation/vm/unevictable-lru.rst (Aristeu Rozanski) [2083861]
  - mm/munlock: add lru_add_drain() to fix memcg_stat_test (Aristeu Rozanski) [2083861]
  - XArray: Update the LRU list in xas_split() (Aristeu Rozanski) [2083861]
  - XArray: Fix xas_create_range() when multi-order entry present (Aristeu Rozanski) [2083861]
  - mm: unmap_mapping_range_tree() with i_mmap_rwsem shared (Aristeu Rozanski) [2083861]
  - mm: warn on deleting redirtied only if accounted (Aristeu Rozanski) [2083861]
  - mm/thp: fix NR_FILE_MAPPED accounting in page_*_file_rmap() (Aristeu Rozanski) [2083861]
  - mm: filemap_unaccount_folio() large skip mapcount fixup (Aristeu Rozanski) [2083861]
  - mm: delete __ClearPageWaiters() (Aristeu Rozanski) [2083861]
  - mm/hugetlb.c: export PageHeadHuge() (Aristeu Rozanski) [2083861]
  - mm: rework swap handling of zap_pte_range (Aristeu Rozanski) [2083861]
  - mm: change zap_details.zap_mapping into even_cows (Aristeu Rozanski) [2083861]
  - mm: rename zap_skip_check_mapping() to should_zap_page() (Aristeu Rozanski) [2083861]
  - mm: don't skip swap entry even if zap_details specified (Aristeu Rozanski) [2083861]
  - mm: replace multiple dcache flush with flush_dcache_folio() (Aristeu Rozanski) [2083861]
  - mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic() (Aristeu Rozanski) [2083861]
  - mm: shmem: fix missing cache flush in shmem_mfill_atomic_pte() (Aristeu Rozanski) [2083861]
  - mm: hugetlb: fix missing cache flush in hugetlb_mcopy_atomic_pte() (Aristeu Rozanski) [2083861]
  - mm: hugetlb: fix missing cache flush in copy_huge_page_from_user() (Aristeu Rozanski) [2083861]
  - mm: fix missing cache flush for all tail pages of compound page (Aristeu Rozanski) [2083861]
  - mm: thp: fix wrong cache flush in remove_migration_pmd() (Aristeu Rozanski) [2083861]
  - tmpfs: do not allocate pages on read (Aristeu Rozanski) [2083861]
  - shmem: mapping_set_exiting() to help mapped resilience (Aristeu Rozanski) [2083861]
  - selftests/vm/transhuge-stress: Support file-backed PMD folios (Aristeu Rozanski) [2083861]
  - mm/filemap: Support VM_HUGEPAGE for file mappings (Aristeu Rozanski) [2083861]
  - mm/readahead: Switch to page_cache_ra_order (Aristeu Rozanski) [2083861]
  - mm/readahead: Add large folio readahead (Aristeu Rozanski) [2083861]
  - mm: Support arbitrary THP sizes (Aristeu Rozanski) [2083861]
  - mm: Make large folios depend on THP (Aristeu Rozanski) [2083861]
  - mm: Fix READ_ONLY_THP warning (Aristeu Rozanski) [2083861]
  - mm/filemap: Allow large folios to be added to the page cache (Aristeu Rozanski) [2083861]
  - mm: Turn can_split_huge_page() into can_split_folio() (Aristeu Rozanski) [2083861]
  - mm/vmscan: Convert pageout() to take a folio (Aristeu Rozanski) [2083861]
  - mm/vmscan: Turn page_check_references() into folio_check_references() (Aristeu Rozanski) [2083861]
  - mm/vmscan: Account large folios correctly (Aristeu Rozanski) [2083861]
  - mm/vmscan: Optimise shrink_page_list for non-PMD-sized folios (Aristeu Rozanski) [2083861]
  - mm/vmscan: Free non-shmem folios without splitting them (Aristeu Rozanski) [2083861]
  - mm/rmap: Constify the rmap_walk_control argument (Aristeu Rozanski) [2083861]
  - mm/rmap: Convert rmap_walk() to take a folio (Aristeu Rozanski) [2083861]
  - mm: Turn page_anon_vma() into folio_anon_vma() (Aristeu Rozanski) [2083861]
  - mm/rmap: Turn page_lock_anon_vma_read() into folio_lock_anon_vma_read() (Aristeu Rozanski) [2083861]
  - mm/damon: Convert damon_pa_young() to use a folio (Aristeu Rozanski) [2083861]
  - mm/damon: Convert damon_pa_mkold() to use a folio (Aristeu Rozanski) [2083861]
  - mm/migrate: Convert remove_migration_ptes() to folios (Aristeu Rozanski) [2083861]
  - mm/rmap: Convert make_device_exclusive_range() to use folios (Aristeu Rozanski) [2083861]
  - mm/rmap: Convert try_to_migrate() to folios (Aristeu Rozanski) [2083861]
  - mm/rmap: Convert try_to_unmap() to take a folio (Aristeu Rozanski) [2083861]
  - mm/rmap: Turn page_referenced() into folio_referenced() (Aristeu Rozanski) [2083861]
  - mm/mlock: Add mlock_vma_folio() (Aristeu Rozanski) [2083861]
  - mm/rmap: Use a folio in page_mkclean_one() (Aristeu Rozanski) [2083861]
  - mm/page_idle: Convert page_idle_clear_pte_refs() to use a folio (Aristeu Rozanski) [2083861]
  - mm: Convert page_vma_mapped_walk to work on PFNs (Aristeu Rozanski) [2083861]
  - sparc32: Add pmd_pfn() (Aristeu Rozanski) [2083861]
  - powerpc: Add pmd_pfn() (Aristeu Rozanski) [2083861]
  - mm: Add DEFINE_PAGE_VMA_WALK and DEFINE_FOLIO_VMA_WALK (Aristeu Rozanski) [2083861]
  - mm: Add folio_pgoff() (Aristeu Rozanski) [2083861]
  - mm: Add split_folio_to_list() (Aristeu Rozanski) [2083861]
  - mm: Add folio_mapcount() (Aristeu Rozanski) [2083861]
  - mm: Turn head_compound_mapcount() into folio_entire_mapcount() (Aristeu Rozanski) [2083861]
  - mm/vmscan: Turn page_check_dirty_writeback() into folio_check_dirty_writeback() (Aristeu Rozanski) [2083861]
  - fs: Move many prototypes to pagemap.h (Aristeu Rozanski) [2083861]
  - mm/truncate: Combine invalidate_mapping_pagevec() and __invalidate_mapping_pages() (Aristeu Rozanski) [2083861]
  - mm: Turn deactivate_file_page() into deactivate_file_folio() (Aristeu Rozanski) [2083861]
  - mm/truncate: Convert __invalidate_mapping_pages() to use a folio (Aristeu Rozanski) [2083861]
  - mm/truncate: Split invalidate_inode_page() into mapping_evict_folio() (Aristeu Rozanski) [2083861]
  - mm: Convert remove_mapping() to take a folio (Aristeu Rozanski) [2083861]
  - mm/truncate: Replace page_mapped() call in invalidate_inode_page() (Aristeu Rozanski) [2083861]
  - mm/truncate: Convert invalidate_inode_page() to use a folio (Aristeu Rozanski) [2083861]
  - mm/truncate: Inline invalidate_complete_page() into its one caller (Aristeu Rozanski) [2083861]
  - splice: Use a folio in page_cache_pipe_buf_try_steal() (Aristeu Rozanski) [2083861]
  - mm/vmscan: Convert __remove_mapping() to take a folio (Aristeu Rozanski) [2083861]
  - mm: Turn putback_lru_page() into folio_putback_lru() (Aristeu Rozanski) [2083861]
  - mm: Add lru_to_folio() (Aristeu Rozanski) [2083861]
  - mm/memcg: Convert mem_cgroup_swapout() to take a folio (Aristeu Rozanski) [2083861]
  - mm/workingset: Convert workingset_eviction() to take a folio (Aristeu Rozanski) [2083861]
  - mm/gup: Convert check_and_migrate_movable_pages() to use a folio (Aristeu Rozanski) [2083861]
  - mm: Add three folio wrappers (Aristeu Rozanski) [2083861]
  - mm: Turn isolate_lru_page() into folio_isolate_lru() (Aristeu Rozanski) [2083861]
  - mm/gup: Turn compound_range_next() into gup_folio_range_next() (Aristeu Rozanski) [2083861]
  - mm/gup: Turn compound_next() into gup_folio_next() (Aristeu Rozanski) [2083861]
  - mm/gup: Convert gup_huge_pgd() to use a folio (Aristeu Rozanski) [2083861]
  - mm/gup: Convert gup_huge_pud() to use a folio (Aristeu Rozanski) [2083861]
  - mm/gup: Convert gup_huge_pmd() to use a folio (Aristeu Rozanski) [2083861]
  - mm/gup: Convert gup_hugepte() to use a folio (Aristeu Rozanski) [2083861]
  - mm/gup: Convert gup_pte_range() to use a folio (Aristeu Rozanski) [2083861]
  - mm/hugetlb: Use try_grab_folio() instead of try_grab_compound_head() (Aristeu Rozanski) [2083861]
  - mm/gup: Add gup_put_folio() (Aristeu Rozanski) [2083861]
  - mm: Remove page_cache_add_speculative() and page_cache_get_speculative() (Aristeu Rozanski) [2083861]
  - mm/gup: Convert try_grab_page() to use a folio (Aristeu Rozanski) [2083861]
  - mm/gup: Add try_get_folio() and try_grab_folio() (Aristeu Rozanski) [2083861]
  - mm: Turn page_maybe_dma_pinned() into folio_maybe_dma_pinned() (Aristeu Rozanski) [2083861]
  - mm: Add folio_pincount_ptr() (Aristeu Rozanski) [2083861]
  - mm: Make compound_pincount always available (Aristeu Rozanski) [2083861]
  - mm/gup: Remove hpage_pincount_sub() (Aristeu Rozanski) [2083861]
  - mm/gup: Remove hpage_pincount_add() (Aristeu Rozanski) [2083861]
  - mm/gup: Handle page split race more efficiently (Aristeu Rozanski) [2083861]
  - mm/gup: Remove an assumption of a contiguous memmap (Aristeu Rozanski) [2083861]
  - mm/gup: Fix some contiguous memmap assumptions (Aristeu Rozanski) [2083861]
  - mm/gup: Change the calling convention for compound_next() (Aristeu Rozanski) [2083861]
  - mm/gup: Optimise compound_range_next() (Aristeu Rozanski) [2083861]
  - mm/gup: Change the calling convention for compound_range_next() (Aristeu Rozanski) [2083861]
  - mm/gup: Remove for_each_compound_head() (Aristeu Rozanski) [2083861]
  - mm/gup: Remove for_each_compound_range() (Aristeu Rozanski) [2083861]
  - mm/gup: Increment the page refcount before the pincount (Aristeu Rozanski) [2083861]
  - mm: Convert swap_set_page_dirty() to swap_dirty_folio() (Aristeu Rozanski) [2083861]
  - fs: Add aops->dirty_folio (Aristeu Rozanski) [2083861]
  - fs: Add aops->launder_folio (Aristeu Rozanski) [2083861]
  - fs: Add invalidate_folio() aops method (Aristeu Rozanski) [2083861]
  - fs: Turn do_invalidatepage() into folio_invalidate() (Aristeu Rozanski) [2083861]
  - buffer: Add folio_buffers() (Aristeu Rozanski) [2083861]
  - fs/remap_range: Pass the file pointer to read_mapping_folio() (Aristeu Rozanski) [2083861]
  - fs: read_mapping_page() should take a struct file argument (Aristeu Rozanski) [2083861]
  - mm: refactor check_and_migrate_movable_pages (Aristeu Rozanski) [2083861]
  - mm: don't include <linux/memremap.h> in <linux/mm.h> (Aristeu Rozanski) [2083861]
  - mm: simplify freeing of devmap managed pages (Aristeu Rozanski) [2083861]
  - mm: move free_devmap_managed_page to memremap.c (Aristeu Rozanski) [2083861]
  - mm/munlock: mlock_vma_page() check against VM_SPECIAL (Aristeu Rozanski) [2083861]
  - mm: fix use-after-free bug when mm->mmap is reused after being freed (Aristeu Rozanski) [2083861]
  - mm/thp: shrink_page_list() avoid splitting VM_LOCKED THP (Aristeu Rozanski) [2083861]
  - mm/thp: collapse_file() do try_to_unmap(TTU_BATCH_FLUSH) (Aristeu Rozanski) [2083861]
  - mm/munlock: page migration needs mlock pagevec drained (Aristeu Rozanski) [2083861]
  - mm/munlock: mlock_page() munlock_page() batch by pagevec (Aristeu Rozanski) [2083861]
  - mm/munlock: delete smp_mb() from __pagevec_lru_add_fn() (Aristeu Rozanski) [2083861]
  - mm/migrate: __unmap_and_move() push good newpage to LRU (Aristeu Rozanski) [2083861]
  - mm/munlock: mlock_pte_range() when mlocking or munlocking (Aristeu Rozanski) [2083861]
  - mm/munlock: maintain page->mlock_count while unevictable (Aristeu Rozanski) [2083861]
  - mm/munlock: replace clear_page_mlock() by final clearance (Aristeu Rozanski) [2083861]
  - mm/munlock: rmap call mlock_vma_page() munlock_vma_page() (Aristeu Rozanski) [2083861]
  - mm/munlock: delete munlock_vma_pages_all(), allow oomreap (Aristeu Rozanski) [2083861]
  - mm/munlock: delete FOLL_MLOCK and FOLL_POPULATE (Aristeu Rozanski) [2083861]
  - mm/munlock: delete page_mlock() and all its works (Aristeu Rozanski) [2083861]
  - fs/proc: task_mmu.c: don't read mapcount for migration entry (Aristeu Rozanski) [2083861]
  - mm/migrate.c: rework migration_entry_wait() to not take a pageref (Aristeu Rozanski) [2083861]
  - filemap: Use folio_put_refs() in filemap_free_folio() (Aristeu Rozanski) [2083861]
  - mm: Add folio_put_refs() (Aristeu Rozanski) [2083861]
  - mm: drop node from alloc_pages_vma (Aristeu Rozanski) [2083861]
  - mm/oom_kill: allow process_mrelease to run under mmap_lock protection (Aristeu Rozanski) [2083861]
  - mm: document locking restrictions for vm_operations_struct::close (Aristeu Rozanski) [2083861]
  - mm: protect free_pgtables with mmap_lock write lock in exit_mmap (Aristeu Rozanski) [2083861]
  - pagevec: Initialise folio_batch->percpu_pvec_drained (Aristeu Rozanski) [2083861]
  - mm: Use multi-index entries in the page cache (Aristeu Rozanski) [2083861]
  - XArray: Add xas_advance() (Aristeu Rozanski) [2083861]
  - truncate,shmem: Handle truncates that split large folios (Aristeu Rozanski) [2083861]
  - truncate: Convert invalidate_inode_pages2_range to folios (Aristeu Rozanski) [2083861]
  - fs: Convert vfs_dedupe_file_range_compare to folios (Aristeu Rozanski) [2083861]
  - mm: Remove pagevec_remove_exceptionals() (Aristeu Rozanski) [2083861]
  - mm: Convert find_lock_entries() to use a folio_batch (Aristeu Rozanski) [2083861]
  - filemap: Return only folios from find_get_entries() (Aristeu Rozanski) [2083861]
  - filemap: Convert filemap_get_read_batch() to use a folio_batch (Aristeu Rozanski) [2083861]
  - filemap: Convert filemap_read() to use a folio (Aristeu Rozanski) [2083861]
  - truncate: Add invalidate_complete_folio2() (Aristeu Rozanski) [2083861]
  - truncate: Convert invalidate_inode_pages2_range() to use a folio (Aristeu Rozanski) [2083861]
  - truncate: Skip known-truncated indices (Aristeu Rozanski) [2083861]
  - truncate,shmem: Add truncate_inode_folio() (Aristeu Rozanski) [2083861]
  - shmem: Convert part of shmem_undo_range() to use a folio (Aristeu Rozanski) [2083861]
  - mm: Add unmap_mapping_folio() (Aristeu Rozanski) [2083861]
  - mm/slub: Convert __free_slab() to use struct slab (Aristeu Rozanski) [2083861]
  - mm/slub: Convert alloc_slab_page() to return a struct slab (Aristeu Rozanski) [2083861]
  - mm/slub: Convert print_page_info() to print_slab_info() (Aristeu Rozanski) [2083861]
  - mm/slub: Convert kfree() to use a struct slab (Aristeu Rozanski) [2083861]
  - mm/slub: Convert detached_freelist to use a struct slab (Aristeu Rozanski) [2083861]
  - mm: Convert check_heap_object() to use struct slab (Aristeu Rozanski) [2083861]
  - mm: Use struct slab in kmem_obj_info() (Aristeu Rozanski) [2083861]
  - mm: Convert __ksize() to struct slab (Aristeu Rozanski) [2083861]
  - mm: Convert virt_to_cache() to use struct slab (Aristeu Rozanski) [2083861]
  - mm: Convert [un]account_slab_page() to struct slab (Aristeu Rozanski) [2083861]
  - mm: Split slab into its own type (Aristeu Rozanski) [2083861]
  - truncate: Add truncate_cleanup_folio() (Aristeu Rozanski) [2083861]
  - filemap: Add filemap_release_folio() (Aristeu Rozanski) [2083861]
  - filemap: Use a folio in filemap_page_mkwrite (Aristeu Rozanski) [2083861]
  - filemap: Use a folio in filemap_map_pages (Aristeu Rozanski) [2083861]
  - filemap: Use folios in next_uptodate_page (Aristeu Rozanski) [2083861]
  - filemap: Convert page_cache_delete_batch to folios (Aristeu Rozanski) [2083861]
  - filemap: Convert filemap_get_pages to use folios (Aristeu Rozanski) [2083861]
  - filemap: Drop the refcount while waiting for page lock (Aristeu Rozanski) [2083861]
  - filemap: Add read_cache_folio and read_mapping_folio (Aristeu Rozanski) [2083861]
  - filemap: Convert filemap_fault to folio (Aristeu Rozanski) [2083861]
  - filemap: Convert do_async_mmap_readahead to take a folio (Aristeu Rozanski) [2083861]
  - readahead: Convert page_cache_ra_unbounded to folios (Aristeu Rozanski) [2083861]
  - readahead: Convert page_cache_async_ra() to take a folio (Aristeu Rozanski) [2083861]
  - filemap: Convert filemap_range_uptodate to folios (Aristeu Rozanski) [2083861]
  - filemap: Convert filemap_create_page to folio (Aristeu Rozanski) [2083861]
  - filemap: Convert filemap_read_page to take a folio (Aristeu Rozanski) [2083861]
  - filemap: Convert find_get_pages_contig to folios (Aristeu Rozanski) [2083861]
  - filemap: Convert filemap_get_read_batch to use folios (Aristeu Rozanski) [2083861]
  - filemap: Remove thp_contains() (Aristeu Rozanski) [2083861]
  - filemap: Convert find_get_entry to return a folio (Aristeu Rozanski) [2083861]
  - filemap: Add filemap_remove_folio and __filemap_remove_folio (Aristeu Rozanski) [2083861]
  - filemap: Convert tracing of page cache operations to folio (Aristeu Rozanski) [2083861]
  - filemap: Add filemap_unaccount_folio() (Aristeu Rozanski) [2083861]
  - filemap: Convert page_cache_delete to take a folio (Aristeu Rozanski) [2083861]
  - filemap: Add folio_put_wait_locked() (Aristeu Rozanski) [2083861]
  - mm: Add folio_test_pmd_mappable() (Aristeu Rozanski) [2083861]
  - iov_iter: Convert iter_xarray to use folios (Aristeu Rozanski) [2083861]
  - iov_iter: Add copy_folio_to_iter() (Aristeu Rozanski) [2083861]
  - pagevec: Add folio_batch (Aristeu Rozanski) [2083861]
  - mm/writeback: Improve __folio_mark_dirty() comment (Aristeu Rozanski) [2083861]
  - mm/doc: Add documentation for folio_test_uptodate (Aristeu Rozanski) [2083861]
  - fs/writeback: Convert inode_switch_wbs_work_fn to folios (Aristeu Rozanski) [2083861]
  - mm: add virt_to_folio() and folio_address() (Aristeu Rozanski) [2083861]
  - dax: remove the pgmap sanity checks in generic_fsdax_supported (Aristeu Rozanski) [2083861]
  - mm: migrate: simplify the file-backed pages validation when migrating its mapping (Aristeu Rozanski) [2083861]
  - mm/rmap.c: avoid double faults migrating device private pages (Aristeu Rozanski) [2083861]
  - mm: add zap_skip_check_mapping() helper (Aristeu Rozanski) [2083861]
  - mm: drop first_index/last_index in zap_details (Aristeu Rozanski) [2083861]
  - mm: clear vmf->pte after pte_unmap_same() returns (Aristeu Rozanski) [2083861]
  - mm/shmem: unconditionally set pte dirty in mfill_atomic_install_pte (Aristeu Rozanski) [2083861]
  - dax: stop using bdevname (Aristeu Rozanski) [2083861]
  - bpf: Let bpf_warn_invalid_xdp_action() report more info (Ivan Vecera) [2073454]
  - bpf: Do not WARN in bpf_warn_invalid_xdp_action() (Ivan Vecera) [2073454]
  - redhat: make kernel-zfcpdump-core to not provide kernel-core/kernel (Herton R. Krzesinski) [2027654]
  - scsi: csiostor: Add module softdep on cxgb4 (Rahul Lakkireddy) [1977553]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-131.el9]
changelog:
  - scsi: lpfc: Copyright updates for 14.2.0.5 patches (Paul Ely) [2102818]
  - scsi: lpfc: Update lpfc version to 14.2.0.5 (Paul Ely) [2102818]
  - scsi: lpfc: Remove Menlo/Hornet related code (Paul Ely) [2102818]
  - scsi: lpfc: Refactor lpfc_nvmet_prep_abort_wqe() into lpfc_sli_prep_abort_xri() (Paul Ely) [2102818]
  - scsi: lpfc: Fix lost NVMe paths during LIF bounce stress test (Paul Ely) [2102818]
  - scsi: lpfc: Fix attempted FA-PWWN usage after feature disable (Paul Ely) [2102818]
  - scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE (Paul Ely) [2102818]
  - scsi: lpfc: Remove extra atomic_inc on cmd_pending in queuecommand after VMID (Paul Ely) [2102818]
  - scsi: lpfc: Set PU field when providing D_ID in XMIT_ELS_RSP64_CX iocb (Paul Ely) [2102818]
  - scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input (Paul Ely) [2102818]
  - scsi: lpfc: Fix uninitialized cqe field in lpfc_nvme_cancel_iocb() (Paul Ely) [2102818]
  - scsi: lpfc: Change FA-PWWN detection methodology (Paul Ely) [2102818]
  - scsi: lpfc: Remove failing soft_wwn support (Paul Ely) [2102818]
  - scsi: lpfc: Update lpfc version to 14.2.0.4 (Paul Ely) [2102818]
  - scsi: lpfc: Allow reduced polling rate for nvme_admin_async_event cmd completion (Paul Ely) [2102818]
  - scsi: lpfc: Add more logging of cmd and cqe information for aborted NVMe cmds (Paul Ely) [2102818]
  - scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology (Paul Ely) [2102818]
  - scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted (Paul Ely) [2102818]
  - scsi: lpfc: Address NULL pointer dereference after starget_to_rport() (Paul Ely) [2102818]
  - scsi: lpfc: Resolve some cleanup issues following SLI path refactoring (Paul Ely) [2102818]
  - scsi: lpfc: Resolve some cleanup issues following abort path refactoring (Paul Ely) [2102818]
  - scsi: lpfc: Correct BDE type for XMIT_SEQ64_WQE in lpfc_ct_reject_event() (Paul Ely) [2102818]
  - scsi: lpfc: Add support for ATTO Fibre Channel devices (Paul Ely) [2102818]
  - scsi: lpfc: Add support for VMID tagging of NVMe I/Os (Paul Ely) [2102818]
  - scsi: lpfc: Rework lpfc_vmid_get_appid() to be protocol independent (Paul Ely) [2102818]
  - scsi: lpfc: Commonize VMID code location (Paul Ely) [2102818]
  - scsi: nvme-fc: Add new routine nvme_fc_io_getuuid() (Paul Ely) [2102818]
  - scsi: target: pscsi: Set SCF_TREAT_READ_AS_NORMAL flag only if there is valid data (Maurizio Lombardi) [2080216]
  - x86/speculation/mmio: Print SMT warning (Waiman Long) [2090254] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - KVM: x86/speculation: Disable Fill buffer clear within guests (Waiman Long) [2090254] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Waiman Long) [2090254] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/speculation/srbds: Update SRBDS mitigation selection (Waiman Long) [2090254] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Waiman Long) [2090254] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Waiman Long) [2090254] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Waiman Long) [2090254] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Waiman Long) [2090254] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/speculation: Add a common function for MD_CLEAR mitigation update (Waiman Long) [2090254] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Waiman Long) [2090254] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - Documentation: Add documentation for Processor MMIO Stale Data (Waiman Long) [2090254] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/tsx: Disable TSX development mode at boot (Waiman Long) [2090254]
  - x86/tsx: Use MSR_TSX_CTRL to clear CPUID bits (Waiman Long) [2090254]
  - Documentation: Add L1D flushing Documentation (Waiman Long) [2090254]
  - x86, prctl: Hook L1D flushing in via prctl (Waiman Long) [2090254]
  - x86/mm: Prepare for opt-in based L1D flush in switch_mm() (Waiman Long) [2090254]
  - x86/process: Make room for TIF_SPEC_L1D_FLUSH (Waiman Long) [2090254]
  - sched: Add task_work callback for paranoid L1D flush (Waiman Long) [2090254]
  - x86/mm: Refactor cond_ibpb() to support other use cases (Waiman Long) [2090254]
  - cpuidle: psci: Fix regression leading to no genpd governor (Mark Langsdorf) [2067314]
  - cpuidle: Factor-out power domain related code from PSCI domain driver (Mark Langsdorf) [2067314]
  - cpuidle: haltpoll: Call cpuidle_poll_state_init() later (Mark Langsdorf) [2067314]
  - cpuidle: use default_groups in kobj_type (Mark Langsdorf) [2067314]
  - cpuidle: Fix cpuidle_remove_state_sysfs() kerneldoc comment (Mark Langsdorf) [2067314]
  - cpuidle: menu: Fix typo in a comment (Mark Langsdorf) [2067314]
  - cpuidle: Fix kobject memory leaks in error paths (Mark Langsdorf) [2067314]
  - Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" (Chris von Recklinghausen) [2059703] {CVE-2022-0854}
  - swiotlb: fix info leak with DMA_FROM_DEVICE (Chris von Recklinghausen) [2059703] {CVE-2022-0854}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-132.el9]
changelog:
  - SUNRPC: Don't leak sockets in xs_local_connect() (Jeffrey Layton) [2089430]
  - SUNRPC: clean up some inconsistent indenting (Jeffrey Layton) [2089430]
  - SUNRPC: Ensure we flush any closed sockets before xs_xprt_free() (Jeffrey Layton) [2089430]
  - SUNRPC: Don't call connect() more than once on a TCP socket (Jeffrey Layton) [2089430]
  - kdump: round up the total memory size to 128M for crashkernel reservation (Tao Liu) [2058040]
  - topology/sysfs: Add PPIN in sysfs under cpu topology (Mark Langsdorf) [2067284]
  - x86/cpu: Read/save PPIN MSR during initialization (Mark Langsdorf) [2067284]
  - x86/cpu: Merge Intel and AMD ppin_init() functions (Mark Langsdorf) [2067284]
  - x86/build: Use the proper name CONFIG_FW_LOADER (Mark Langsdorf) [2067252]
  - gpio: mockup: Convert to use software nodes (Mark Langsdorf) [2067252]
  - of: unittest: update text of expected warnings (Mark Langsdorf) [2067284]
  - rtc: mc146818-lib: fix signedness bug in mc146818_get_time() (Mark Langsdorf) [2067284]
  - topology/sysfs: get rid of htmldoc warning (Mark Langsdorf) [2067284]
  - topology: Fix up build warning in topology_is_visible() (Mark Langsdorf) [2067284]
  - arch_topology: Do not set llc_sibling if llc_id is invalid (Mark Langsdorf) [2067284]
  - topology/sysfs: Hide PPIN on systems that do not support it. (Mark Langsdorf) [2067284]
  - regmap: allow a defined reg_base to be added to every address (Mark Langsdorf) [2067284]
  - regmap: add configurable downshift for addresses (Mark Langsdorf) [2067284]
  - drivers/base/dd.c : Remove the initial value of the global variable (Mark Langsdorf) [2067284]
  - devres: fix typos in comments (Mark Langsdorf) [2067284]
  - base: soc: Make soc_device_match() simpler and easier to read (Mark Langsdorf) [2067284]
  - driver core: dd: fix return value of __setup handler (Mark Langsdorf) [2067284]
  - driver core: Refactor sysfs and drv/bus remove hooks (Mark Langsdorf) [2067284]
  - driver core: Refactor multiple copies of device cleanup (Mark Langsdorf) [2067284]
  - arch_topology: obtain cpu capacity using information from CPPC (Mark Langsdorf) [2067284]
  - PM: core: keep irq flags in device_pm_check_callbacks() (Mark Langsdorf) [2067284]
  - PM: sleep: Add device name to suspend_report_result() (Mark Langsdorf) [2067284]
  - PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend() (Mark Langsdorf) [2067284]
  - PM: sleep: wakeup: Fix typos in comments (Mark Langsdorf) [2067284]
  - PM: domains: Fix sleep-in-atomic bug caused by genpd_debug_remove() (Mark Langsdorf) [2067284]
  - PM: domains: use dev_err_probe() to simplify error handling (Mark Langsdorf) [2067284]
  - PM: domains: Prevent power off for parent unless child is in deepest state (Mark Langsdorf) [2067284]
  - firmware_loader: EXTRA_FIRMWARE does not support compressed files (Mark Langsdorf) [2067284]
  - driver core: cleanup double words comments (Mark Langsdorf) [2067284]
  - device property: Don't split fwnode_get_irq*() APIs in the code (Mark Langsdorf) [2067284]
  - regmap: irq: cleanup comments (Mark Langsdorf) [2067284]
  - platform: use dev_err_probe() in platform_get_irq_byname() (Mark Langsdorf) [2067284]
  - devtmpfs: drop redundant fs parameters from internal fs (Mark Langsdorf) [2067284]
  - topology/sysfs: Add format parameter to macro defining "show" functions for proc (Mark Langsdorf) [2067284]
  - component: Replace most references to 'master' with 'aggregate device' (Mark Langsdorf) [2067284]
  - device property: Add fwnode_irq_get_byname (Mark Langsdorf) [2067284]
  - regmap-irq: Fix typo in comment (Mark Langsdorf) [2067284]
  - driver core: Free DMA range map when device is released (Mark Langsdorf) [2067284]
  - regmap-irq: Update interrupt clear register for proper reset (Mark Langsdorf) [2067284]
  - PM: s2idle: ACPI: Fix wakeup interrupts handling (Mark Langsdorf) [2067284]
  - devtmpfs regression fix: reconfigure on each mount (Mark Langsdorf) [2067284]
  - regmap: debugfs: Fix indentation (Mark Langsdorf) [2067284]
  - regmap: Call regmap_debugfs_exit() prior to _init() (Mark Langsdorf) [2067284]
  - driver core: Make bus notifiers in right order in really_probe() (Mark Langsdorf) [2067284]
  - driver core: Move driver_sysfs_remove() after driver_sysfs_add() (Mark Langsdorf) [2067284]
  - headers/uninline: Uninline single-use function: kobject_has_children() (Mark Langsdorf) [2067284]
  - redhat: enable CONFIG_DEVTMPFS_SAFE (Mark Langsdorf) [2067284]
  - devtmpfs: mount with noexec and nosuid (Mark Langsdorf) [2067284]
  - driver core: Simplify async probe test code by using ktime_ms_delta() (Mark Langsdorf) [2067284]
  - kobject: remove kset from struct kset_uevent_ops callbacks (Mark Langsdorf) [2067284]
  - driver core: make kobj_type constant. (Mark Langsdorf) [2067284]
  - PM: runtime: Simplify locking in pm_runtime_put_suppliers() (Mark Langsdorf) [2067284]
  - software node: fix wrong node passed to find nargs_prop (Mark Langsdorf) [2067284]
  - driver core: platform: document registration-failure requirement (Mark Langsdorf) [2067284]
  - device property: Add fwnode_iomap() (Mark Langsdorf) [2067284]
  - device property: Drop fwnode_graph_get_remote_node() (Mark Langsdorf) [2067284]
  - device property: Use fwnode_graph_for_each_endpoint() macro (Mark Langsdorf) [2067284]
  - device property: Implement fwnode_graph_get_endpoint_count() (Mark Langsdorf) [2067284]
  - device property: Fix documentation for FWNODE_GRAPH_DEVICE_DISABLED (Mark Langsdorf) [2067284]
  - device property: Fix fwnode_graph_devcon_match() fwnode leak (Mark Langsdorf) [2067284]
  - PM: runtime: Add safety net to supplier device release (Mark Langsdorf) [2067284]
  - PM: runtime: Capture device status before disabling runtime PM (Mark Langsdorf) [2067284]
  - rtc: Check return value from mc146818_get_time() (Mark Langsdorf) [2067284]
  - rtc: mc146818-lib: change return values of mc146818_get_time() (Mark Langsdorf) [2067284]
  - rtc: cmos: take rtc_lock while reading from CMOS (Mark Langsdorf) [2067284]
  - device property: Check fwnode->secondary when finding properties (Mark Langsdorf) [2067284]
  - Documentation/auxiliary_bus: Move the text into the code (Mark Langsdorf) [2067284]
  - Documentation/auxiliary_bus: Clarify the release of devices from find device (Mark Langsdorf) [2067284]
  - Documentation/auxiliary_bus: Clarify __auxiliary_driver_register (Mark Langsdorf) [2067284]
  - Documentation/auxiliary_bus: Clarify auxiliary_device creation (Mark Langsdorf) [2067284]
  - topology/sysfs: rework book and drawer topology ifdefery (Mark Langsdorf) [2067284]
  - topology/sysfs: export cluster attributes only if an architectures has support (Mark Langsdorf) [2067284]
  - topology/sysfs: export die attributes only if an architectures has support (Mark Langsdorf) [2067284]
  - driver core: platform: Make use of the helper function dev_err_probe() (Mark Langsdorf) [2067284]
  - device property: Remove device_add_properties() API (Mark Langsdorf) [2067284]
  - PCI: Convert to device_create_managed_software_node() (Mark Langsdorf) [2067284]
  - driver core: Don't call device_remove_properties() from device_del() (Mark Langsdorf) [2067284]
  - arch_topology: Remove unused topology_set_thermal_pressure() and related (Mark Langsdorf) [2067284]
  - thermal: cpufreq_cooling: Use new thermal pressure update function (Mark Langsdorf) [2067284]
  - arch_topology: Introduce thermal pressure update function (Mark Langsdorf) [2067284]
  - regmap: allow to define reg_update_bits for no bus configuration (Mark Langsdorf) [2067284]
  - PM: sleep: Fix error handling in dpm_prepare() (Mark Langsdorf) [2067252]
  - arch_numa: simplify numa_distance allocation (Mark Langsdorf) [2067252]
  - arm64: support page mapping percpu first chunk allocator (Mark Langsdorf) [2067252]
  - PM: sleep: Avoid calling put_device() under dpm_list_mtx (Mark Langsdorf) [2067252]
  - PM: sleep: Fix runtime PM based cpuidle support (Mark Langsdorf) [2067252]
  - PM / wakeirq: support enabling wake-up irq after runtime_suspend called (Mark Langsdorf) [2067252]
  - device property: Drop redundant NULL checks (Mark Langsdorf) [2067252]
  - PM: sleep: Pause cpuidle later and resume it earlier during system transitions (Mark Langsdorf) [2067252]
  - PM: suspend: Do not pause cpuidle in the suspend-to-idle path (Mark Langsdorf) [2067252]
  - regmap: spi: Set regmap max raw r/w from max_transfer_size (Mark Langsdorf) [2067252]
  - PM: sleep: Do not let "syscore" devices runtime-suspend during system transitions (Mark Langsdorf) [2067252]
  - x86/build: Tuck away built-in firmware under FW_LOADER (Mark Langsdorf) [2067252]
  - vmlinux.lds.h: wrap built-in firmware support under FW_LOADER (Mark Langsdorf) [2067252]
  - firmware_loader: move struct builtin_fw to the only place used (Mark Langsdorf) [2067252]
  - x86/microcode: Use the firmware_loader built-in API (Mark Langsdorf) [2067252]
  - firmware_loader: remove old DECLARE_BUILTIN_FIRMWARE() (Mark Langsdorf) [2067252]
  - firmware_loader: formalize built-in firmware API (Mark Langsdorf) [2067252]
  - component: do not leave master devres group open after bind (Mark Langsdorf) [2067252]
  - driver core: Provide device_match_acpi_handle() helper (Mark Langsdorf) [2067252]
  - regmap: Fix possible double-free in regcache_rbtree_exit() (Mark Langsdorf) [2067252]
  - device property: build kunit tests without structleak plugin (Mark Langsdorf) [2067252]
  - driver core: Reject pointless SYNC_STATE_ONLY device links (Mark Langsdorf) [2067252]
  - firmware_loader: add a sanity check for firmware_request_builtin() (Mark Langsdorf) [2067252]
  - firmware_loader: split built-in firmware call (Mark Langsdorf) [2067252]
  - firmware_loader: fix pre-allocated buf built-in firmware use (Mark Langsdorf) [2067252]
  - drivers/base/component.c: remove superfluous header files from component.c (Mark Langsdorf) [2067252]
  - drivers/base/arch_topology.c: remove superfluous header (Mark Langsdorf) [2067252]
  - driver core: use NUMA_NO_NODE during device_initialize (Mark Langsdorf) [2067252]
  - driver core: Fix possible memory leak in device_link_add() (Mark Langsdorf) [2067252]
  - driver core: Add debug logs when fwnode links are added/deleted (Mark Langsdorf) [2067252]
  - driver core: Create __fwnode_link_del() helper function (Mark Langsdorf) [2067252]
  - driver core: Set deferred probe reason when deferred by driver core (Mark Langsdorf) [2067252]
  - driver core: fw_devlink: Add support for FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD (Mark Langsdorf) [2067252]
  - driver core: Clarify that dev_err_probe() is OK even w/out -EPROBE_DEFER (Mark Langsdorf) [2067252]
  - driver core: fw_devlink: Improve handling of cyclic dependencies (Mark Langsdorf) [2067252]
  - driver core: platform: Make use of the helper macro SET_RUNTIME_PM_OPS() (Mark Langsdorf) [2067252]
  - PM: base: power: don't try to use non-existing RTC for storing data (Mark Langsdorf) [2067252]
  - PM: sleep: core: Avoid setting power.must_resume to false (Mark Langsdorf) [2067252]
  - PM: sleep: wakeirq: drop useless parameter from dev_pm_attach_wake_irq() (Mark Langsdorf) [2067252]
  - PM: domains: Fix domain attach for CONFIG_PM_OPP=n (Mark Langsdorf) [2067252]
  - PM: runtime: add devm_pm_clk_create helper (Mark Langsdorf) [2067252]
  - PM: runtime: add devm_pm_runtime_enable helper (Mark Langsdorf) [2067252]
  - regmap: teach regmap to use raw spinlocks if requested in the config (Mark Langsdorf) [2067252]
  - driver core: platform: Remove platform_device_add_properties() (Mark Langsdorf) [2067252]
  - PM: domains: Add support for 'required-opps' to set default perf state (Mark Langsdorf) [2067252]
  - Revert "media: device property: Call fwnode_graph_get_endpoint_by_id() for fwnode->secondary" (Mark Langsdorf) [2067252]
  - device property: Check fwnode->secondary in fwnode_graph_get_next_endpoint() (Mark Langsdorf) [2067252]
  - drivers/base/node.c: use bin_attribute to break the size limitation of cpumap ABI (Mark Langsdorf) [2067252]
  - regmap: allow const array for {devm_,}regmap_field_bulk_alloc reg_fields (Mark Langsdorf) [2067252]
  - driver: base: Prefer unsigned int to bare use of unsigned (Mark Langsdorf) [2067252]
  - cacheinfo: clear cache_leaves(cpu) in free_cache_attributes() (Mark Langsdorf) [2067252]
  - driver core: Fix error return code in really_probe() (Mark Langsdorf) [2067252]
  - firmware: fix theoretical UAF race with firmware cache and resume (Mark Langsdorf) [2067252]
  - driver: base: Replace symbolic permissions with octal permissions (Mark Langsdorf) [2067252]
  - driver core: Split device_platform_notify() (Mark Langsdorf) [2067252]
  - software nodes: Split software_node_notify() (Mark Langsdorf) [2067252]
  - regmap: Prefer unsigned int to bare use of unsigned (Mark Langsdorf) [2067252]
  - regmap: fix the offset of register error log (Mark Langsdorf) [2067252]
  - nfs: reexport documentation (Dave Wysochanski) [2006399]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-133.el9]
changelog:
  - lockd: fix nlm_close_files (Jeffrey Layton) [2082816]
  - lockd: set fl_owner when unlocking files (Jeffrey Layton) [2082816]
  - intel/igb:fix repeated words in comments (Corinna Vinschen) [2037984]
  - igb: remove unexpected word "the" (Corinna Vinschen) [2037984]
  - igb: Make DMA faster when CPU is active on the PCIe link (Corinna Vinschen) [2037984]
  - igb: fix a use-after-free issue in igb_clean_tx_ring (Corinna Vinschen) [2037984]
  - igb: Remove duplicate defines (Corinna Vinschen) [2037984]
  - igb: skip phy status check where unavailable (Corinna Vinschen) [2037984]
  - igb: Convert kmap() to kmap_local_page() (Corinna Vinschen) [2037984]
  - igb: zero hwtstamp by default (Corinna Vinschen) [2037984]
  - igb: Remove useless DMA-32 fallback configuration (Corinna Vinschen) [2037984]
  - igb: support EXTTS on 82580/i354/i350 (Corinna Vinschen) [2037984]
  - igb: support PEROUT on 82580/i354/i350 (Corinna Vinschen) [2037984]
  - igb: move PEROUT and EXTTS isr logic to separate functions (Corinna Vinschen) [2037984]
  - igb: move SDP config initialization to separate function (Corinna Vinschen) [2037984]
  - igb: switch to napi_build_skb() (Corinna Vinschen) [2037984]
  - igb: remove never changed variable `ret_val' (Corinna Vinschen) [2037984]
  - soc: qcom: aoss: Fix missing put_device call in qmp_get (Steve Best) [2100219]
  - soc: qcom: aoss: Expose send for generic usecase (Steve Best) [2100219]
  - soc: qcom: mdt_loader: be more informative on errors (Steve Best) [2100219]
  - soc: qcom: mdt_loader: Split out split-file-loader (Steve Best) [2100219]
  - revert remoteproc: qcom: pas: Carry PAS metadata context (Steve Best) [2100219]
  - net: openvswitch: fix parsing of nw_proto for IPv6 fragments (Antoine Tenart) [2101452]
  - net: openvswitch: fix misuse of the cached connection on tuple changes (Antoine Tenart) [2101452]
  - kasan: fix a missing header include of static_keys.h (Mark Salter) [2070169]
  - linkage: Fix issue with missing symbol size (Mark Salter) [2070169]
  - arm64: mte: Ensure the cleared tags are visible before setting the PTE (Mark Salter) [2070169]
  - arm64: Enable repeat tlbi workaround on KRYO4XX gold CPUs (Mark Salter) [2070169]
  - arm64: cpufeature: remove duplicate ID_AA64ISAR2_EL1 entry (Mark Salter) [2070169]
  - arm64: vdso: fix makefile dependency on vdso.so (Mark Salter) [2070169]
  - arm[64]/memremap: don't abuse pfn_valid() to ensure presence of linear map (Mark Salter) [2070169]
  - arm64: mm: fix p?d_leaf() (Mark Salter) [2070169]
  - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [2070169]
  - arm64: patch_text: Fixup last cpu should be master (Mark Salter) [2070169]
  - cpuidle: PSCI: Move the `has_lpi` check to the beginning of the function (Mark Salter) [2070169]
  - docs: sysfs-devices-system-cpu: document "asymm" value for mte_tcf_preferred (Mark Salter) [2070169]
  - arm64/mte: Remove asymmetric mode from the prctl() interface (Mark Salter) [2070169]
  - arm64/mte: Add userspace interface for enabling asymmetric mode (Mark Salter) [2070169]
  - arm64/mte: Add hwcap for asymmetric mode (Mark Salter) [2070169]
  - arm64/mte: Add a little bit of documentation for mte_update_sctlr_user() (Mark Salter) [2070169]
  - arm64/mte: Document ABI for asymmetric mode (Mark Salter) [2070169]
  - arm64: mte: avoid clearing PSTATE.TCO on entry unless necessary (Mark Salter) [2070169]
  - kasan: split kasan_*enabled() functions into a separate header (Mark Salter) [2070169]
  - arm64: Add cavium_erratum_23154_cpus missing sentinel (Mark Salter) [2070169]
  - irqchip/gic-v3: Workaround Marvell erratum 38545 when reading IAR (Mark Salter) [2070169]
  - arm64: drop unused includes of <linux/personality.h> (Mark Salter) [2070169]
  - arm64: prevent instrumentation of bp hardening callbacks (Mark Salter) [2070169]
  - arm64: cpufeature: Remove cpu_has_fwb() check (Mark Salter) [2070169]
  - arm64: atomics: remove redundant static branch (Mark Salter) [2070169]
  - arm64: entry: Save some nops when CONFIG_ARM64_PSEUDO_NMI is not set (Mark Salter) [2070169]
  - arm64/mm: Drop use_1G_block() (Mark Salter) [2070169]
  - arm64: avoid flushing icache multiple times on contiguous HugeTLB (Mark Salter) [2070169]
  - arm64/hugetlb: Define __hugetlb_valid_size() (Mark Salter) [2070169]
  - arm64/mm: Consolidate TCR_EL1 fields (Mark Salter) [2070169]
  - Revert "arm64: Mitigate MTE issues with str{n}cmp()" (Mark Salter) [2070169]
  - arm64: lib: Import latest version of Arm Optimized Routines' strncmp (Mark Salter) [2070169]
  - arm64: lib: Import latest version of Arm Optimized Routines' strcmp (Mark Salter) [2070169]
  - arm64: cpufeature: Warn if we attempt to read a zero width field (Mark Salter) [2070169]
  - arm64: cpufeature: Add missing .field_width for GIC system registers (Mark Salter) [2070169]
  - arm64: signal: nofpsimd: Do not allocate fp/simd context when not available (Mark Salter) [2070169]
  - arm64: cpufeature: Always specify and use a field width for capabilities (Mark Salter) [2070169]
  - arm64: module: remove (NOLOAD) from linker script (Mark Salter) [2070169]
  - arm64: clean up symbol aliasing (Mark Salter) [2070169]
  - linkage: add SYM_FUNC_ALIAS{,_LOCAL,_WEAK}() (Mark Salter) [2070169]
  - arm64: Add support of PAuth QARMA3 architected algorithm (Mark Salter) [2070169]
  - arm64: cpufeature: Mark existing PAuth architected algorithm as QARMA5 (Mark Salter) [2070169]
  - arm64: cpufeature: Account min_field_value when cheking secondaries for PAuth (Mark Salter) [2070169]
  - arm64: insn: add encoders for atomic operations (Mark Salter) [2070169]
  - arm64: move AARCH64_BREAK_FAULT into insn-def.h (Mark Salter) [2070169]
  - arm64: insn: Generate 64 bit mask immediates correctly (Mark Salter) [2070169]
  - arm64: booting.rst: Clarify on requiring non-secure EL2 (Mark Salter) [2070169]
  - arm64: fix clang warning about TRAMP_VALIAS (Mark Salter) [2070169]
  - arm64: Do not include __READ_ONCE() block in assembly files (Mark Salter) [2070169]
  - arm64: kasan: fix include error in MTE functions (Mark Salter) [2070169]
  - arm64: Ensure execute-only permissions are not allowed without EPAN (Mark Salter) [2070169]
  - arm64: Enable Cortex-A510 erratum 2051678 by default (Mark Salter) [2070169]
  - redhat/configs: aarch64: Enable ARM64_ERRATUM_2051678 workaround (Mark Salter) [2070169]
  - arm64: cpufeature: List early Cortex-A510 parts as having broken dbm (Mark Salter) [2070169]
  - arm64: errata: Update ARM64_ERRATUM_[2119858|2224489] with Cortex-X2 ranges (Mark Salter) [2070169]
  - arm64: vdso: Fix "no previous prototype" warning (Mark Salter) [2070169]
  - arm64: errata: Add detection for TRBE trace data corruption (Mark Salter) [2070169]
  - arm64: errata: Add detection for TRBE invalid prohibited states (Mark Salter) [2070169]
  - arm64: errata: Add detection for TRBE ignored system register writes (Mark Salter) [2070169]
  - arm64: mm: apply __ro_after_init to memory_limit (Mark Salter) [2070169]
  - arm64: atomics: lse: Dereference matching size (Mark Salter) [2070169]
  - asm-generic: Add missing brackets for io_stop_wc macro (Mark Salter) [2070169]
  - arm64: Use correct method to calculate nomap region boundaries (Mark Salter) [2070169]
  - arm64: Drop outdated links in comments (Mark Salter) [2070169]
  - arm64: errata: Fix exec handling in erratum 1418040 workaround (Mark Salter) [2070169]
  - arm64: Unhash early pointer print plus improve comment (Mark Salter) [2070169]
  - asm-generic: introduce io_stop_wc() and add implementation for ARM64 (Mark Salter) [2070169]
  - arm64: errata: Enable TRBE workaround for write to out-of-range address (Mark Salter) [2070169]
  - arm64: errata: Enable workaround for TRBE overwrite in FILL mode (Mark Salter) [2070169]
  - redhat/configs: aarch64: Enable ARM64_WORKAROUND_TRBE_WRITE_OUT_OF_RANGE (Mark Salter) [2070169]
  - arm64: errata: Add detection for TRBE write to out-of-range (Mark Salter) [2070169]
  - redhat/configs: aarch64: Enable ARM64_WORKAROUND_TSB_FLUSH_FAILURE (Mark Salter) [2070169]
  - arm64: errata: Add workaround for TSB flush failures (Mark Salter) [2070169]
  - redhat/configs: aarch64: Enable ARM64_WORKAROUND_TRBE_OVERWRITE_FILL_MODE (Mark Salter) [2070169]
  - arm64: errata: Add detection for TRBE overwrite in FILL mode (Mark Salter) [2070169]
  - arm64: remove __dma_*_area() aliases (Mark Salter) [2070169]
  - docs/arm64: delete a space from tagged-address-abi (Mark Salter) [2070169]
  - arm64/fp: Add comments documenting the usage of state restore functions (Mark Salter) [2070169]
  - arm64: mm: Use asid feature macro for cheanup (Mark Salter) [2070169]
  - arm64: mm: Rename asid2idx() to ctxid2asid() (Mark Salter) [2070169]
  - arm64: kexec: reduce calls to page_address() (Mark Salter) [2070169]
  - arm64: extable: remove unused ex_handler_t definition (Mark Salter) [2070169]
  - arm64: entry: Use SDEI event constants (Mark Salter) [2070169]
  - arm64: Simplify checking for populated DT (Mark Salter) [2070169]
  - arm64: Ensure that the 'bti' macro is defined where linkage.h is included (Mark Salter) [2070169]
  - arm64: Use BTI C directly and unconditionally (Mark Salter) [2070169]
  - arm64: Unconditionally override SYM_FUNC macros (Mark Salter) [2070169]
  - arm64: Add macro version of the BTI instruction (Mark Salter) [2070169]
  - arm64: Enable KCSAN (Mark Salter) [2070169]
  - arm64/sve: Minor clarification of ABI documentation (Mark Salter) [2070169]
  - arm64/sve: Generalise vector length configuration prctl() for SME (Mark Salter) [2070169]
  - arm64/sve: Make sysctl interface for SVE reusable by SME (Mark Salter) [2070169]
  - arm64: perf: Support new DT compatibles (Mark Salter) [2070169]
  - arm64: perf: Simplify registration boilerplate (Mark Salter) [2070169]
  - arm64: perf: Support Denver and Carmel PMUs (Mark Salter) [2070169]
  - arm64: atomics: lse: define RETURN ops in terms of FETCH ops (Mark Salter) [2070169]
  - arm64: atomics: lse: improve constraints for simple ops (Mark Salter) [2070169]
  - arm64: atomics: lse: define ANDs in terms of ANDNOTs (Mark Salter) [2070169]
  - arm64: atomics lse: define SUBs in terms of ADDs (Mark Salter) [2070169]
  - arm64: atomics: format whitespace consistently (Mark Salter) [2070169]
  - arm64/xor: use EOR3 instructions when available (Mark Salter) [2070169]
  - arm64: mm: log potential KASAN shadow alias (Mark Salter) [2070169]
  - arm64: mm: use die_kernel_fault() in do_mem_abort() (Mark Salter) [2070169]
  - arm64: mte: DC {GVA,GZVA} shouldn't be used when DCZID_EL0.DZP == 1 (Mark Salter) [2070169]
  - arm64: clear_page() shouldn't use DC ZVA when DCZID_EL0.DZP == 1 (Mark Salter) [2070169]
  - arm64: Snapshot thread flags (Mark Salter) [2070169]
  - dlm: fix missing lkb refcount handling (Alexander Aring) [2084605]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-134.el9]
changelog:
  - redhat: fix kernel_variant_package option definition (Herton R. Krzesinski)
  - audit: free module name (Richard Guy Briggs) [2100261]
  - audit,io_uring,io-wq: call __audit_uring_exit for dummy contexts (Richard Guy Briggs) [2100261]
  - certs: Add FIPS selftests (David Howells) [2080044]
  - certs: Move load_certificate_list() to be with the asymmetric keys code (David Howells) [2080044]
  - scsi: core: Add scsi_done_direct() for immediate completion (Ewan D. Milne) [2094105]
  - scsi: core: Rename scsi_mq_done() into scsi_done() and export it (Ewan D. Milne) [2094105]
  - scsi: core: Use a structure member to track the SCSI command submitter (Ewan D. Milne) [2094105]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-5
changelog:
  - Resolves: rhbz#2014523 - c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-9]


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-6
changelog:
  - remove unnecessarily divisive terms, take 1.
  -   in ca-certificates there are 3 cases:
  -   1) master refering to the fedora master branch in the fetch.sh script.
  -      This can only be changed once fedora changes the master branch name.
  -   2) a reference to the 'master bundle' in this file: this has been changed
  -      to 'primary bundle'.
  -   3) a couple of blacklist directories owned by this package, but used to
  -      p11-kit. New 'blocklist' directories have been created, but p11-kit
  -      needs to be updated before the old blacklist directories can be removed
  -      and the man pages corrected.


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.50-90
changelog:
  -   Update to CKBI 2.50 from NSS 3.67
  -      Removing:
  -       # Certificate "QuoVadis Root CA"
  -       # Certificate "Sonera Class 2 Root CA"
  -       # Certificate "Trustis FPS Root CA"
  -      Adding:
  -       # Certificate "GLOBALTRUST 2020"
  -       # Certificate "ANF Secure Server Root CA"
  -       # Certificate "Certum EC-384 CA"
  -       # Certificate "Certum Trusted Root CA"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-90.0
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "GlobalSign Root CA - R2"
  -     # Certificate "DST Root CA X3"
  -     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
  -    Adding:
  -     # Certificate "TunTrust Root CA"
  -     # Certificate "HARICA TLS RSA Root CA 2021"
  -     # Certificate "HARICA TLS ECC Root CA 2021"
  -     # Certificate "HARICA Client RSA Root CA 2021"
  -     # Certificate "HARICA Client ECC Root CA 2021"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "vTrus ECC Root CA"
  -     # Certificate "vTrus Root CA"
  -     # Certificate "ISRG Root X2"
  -     # Certificate "HiPKI Root CA - G1"
  -     # Certificate "Telia Root CA v2"
  -     # Certificate "D-TRUST BR Root CA 1 2020"
  -     # Certificate "D-TRUST EV Root CA 1 2020"
  -     # Certificate "CAEDICOM Root"
  -     # Certificate "I.CA Root CA/RSA"
  -     # Certificate "MULTICERT Root Certification Authority 01"
  -     # Certificate "Certification Authority of WoSign G2"
  -     # Certificate "CA WoSign ECC Root"
  -     # Certificate "CCA India 2015 SPL"
  -     # Certificate "Swedish Government Root Authority v3"
  -     # Certificate "Swedish Government Root Authority v2"
  -     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "OpenTrust Root CA G2"
  -     # Certificate "OpenTrust Root CA G3"
  -     # Certificate "Certplus Root CA G1"
  -     # Certificate "Certplus Root CA G2"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Thailand National Root Certification Authority - G1"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Certification Authority of WoSign"
  -     # Certificate "CA 沃通根证书"
  -     # Certificate "SSC GDL CA Root B"
  -     # Certificate "SAPO Class 2 Root CA"
  -     # Certificate "SAPO Class 3 Root CA"
  -     # Certificate "SAPO Class 4 Root CA"
  -     # Certificate "CA Disig Root R1"
  -     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
  -     # Certificate "ApplicationCA2 Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Halcom Root CA"
  -     # Certificate "Swisscom Root EV CA 2"
  -     # Certificate "CFCA GT CA"
  -     # Certificate "Digidentity L3 Root CA - G2"
  -     # Certificate "SITHS Root CA v1"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "IGC/A AC racine Etat francais"
  -     # Certificate "PersonalID Trustworthy RootCA 2011"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "Swiss Government Root CA II"
  -     # Certificate "Swiss Government Root CA I"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "LuxTrust Global Root"
  -     # Certificate "AC1 RAIZ MTIN"
  -     # Certificate "Microsoft Root Certificate Authority 2011"
  -     # Certificate "CCA India 2011"
  -     # Certificate "ANCERT Certificados Notariales V2"
  -     # Certificate "ANCERT Certificados CGN V2"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "China Internet Network Information Center EV Certificates Root"
  -     # Certificate "Verizon Global Root CA"
  -     # Certificate "SwissSign Silver Root CA - G3"
  -     # Certificate "SwissSign Platinum Root CA - G3"
  -     # Certificate "SwissSign Gold Root CA - G3"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "SITHS CA v3"
  -     # Certificate "Certinomis - Autorité Racine"
  -     # Certificate "ANF Server CA"
  -     # Certificate "Thawte Premium Server CA"
  -     # Certificate "Thawte Server CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "KEYNECTIS ROOT CA"
  -     # Certificate "I.CA - Standard Certification Authority, 09/2009"
  -     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
  -     # Certificate "VI Registru Centras RCSC (RootCA)"
  -     # Certificate "CCA India 2007"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Actalis Authentication CA G1"
  -     # Certificate "A-Trust-Qual-03"
  -     # Certificate "AddTrust External CA Root"
  -     # Certificate "ECRaizEstado"
  -     # Certificate "Configuration"
  -     # Certificate "FNMT-RCM"
  -     # Certificate "StartCom Certification Authority"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "E-ME SSI (RCA)"
  -     # Certificate "ACEDICOM Root"
  -     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
  -     # Certificate "Correo Uruguayo - Root CA"
  -     # Certificate "CNNIC ROOT"
  -     # Certificate "Common Policy"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "Cisco Root CA 2048"
  -     # Certificate "CA Disig"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "UCA Global Root"
  -     # Certificate "UCA Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Starfield Services Root Certificate Authority"
  -     # Certificate "I.CA - Qualified root certificate"
  -     # Certificate "I.CA - Standard root certificate"
  -     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
  -     # Certificate "Japanese Government"
  -     # Certificate "AdminCA-CD-T01"
  -     # Certificate "Admin-Root-CA"
  -     # Certificate "Izenpe.com"
  -     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
  -     # Certificate "Halcom CA FO"
  -     # Certificate "Halcom CA PO 2"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "ACNLB"
  -     # Certificate "state-institutions"
  -     # Certificate "state-institutions"
  -     # Certificate "SECOM Trust Systems CO.,LTD."
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "D-TRUST Root Class 2 CA 2007"
  -     # Certificate "D-TRUST Root Class 3 CA 2007"
  -     # Certificate "SSC Root CA A"
  -     # Certificate "SSC Root CA B"
  -     # Certificate "SSC Root CA C"
  -     # Certificate "Autoridad de Certificacion de la Abogacia"
  -     # Certificate "Root CA Generalitat Valenciana"
  -     # Certificate "VAS Latvijas Pasts SSI(RCA)"
  -     # Certificate "ANCERT Certificados CGN"
  -     # Certificate "ANCERT Certificados Notariales"
  -     # Certificate "ANCERT Corporaciones de Derecho Publico"
  -     # Certificate "GLOBALTRUST"
  -     # Certificate "Certipost E-Trust TOP Root CA"
  -     # Certificate "Certipost E-Trust Primary Qualified CA"
  -     # Certificate "Certipost E-Trust Primary Normalised CA"
  -     # Certificate "GlobalSign"
  -     # Certificate "IGC/A"
  -     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "Swisscom Root CA 1"
  -     # Certificate "Microsec e-Szigno Root CA"
  -     # Certificate "LGPKI"
  -     # Certificate "AC RAIZ DNIE"
  -     # Certificate "Common Policy"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 1"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Staat der Nederlanden Root CA"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Global CA 2"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root Certification Authority"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Microsoft Root Authority"
  -     # Certificate "Microsoft Root Certificate Authority"
  -     # Certificate "Microsoft Root Certificate Authority 2010"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "UTN-USERFirst-Object"
  -     # Certificate "BYTE Root Certification Authority 001"
  -     # Certificate "CISRCA1"
  -     # Certificate "ePKI Root Certification Authority - G2"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "SSL.com EV Root Certification Authority RSA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "ACA ROOT"
  -     # Certificate "Security Communication ECC RootCA1"
  -     # Certificate "Security Communication RootCA3"
  -     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
  -     # Certificate "Network Solutions RSA Certificate Authority"
  -     # Certificate "Network Solutions ECC Certificate Authority"
  -     # Certificate "Australian Defence Public Root CA"
  -     # Certificate "SI-TRUST Root"
  -     # Certificate "Halcom Root Certificate Authority"
  -     # Certificate "Application CA G3 Root"
  -     # Certificate "GLOBALTRUST 2015"
  -     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
  -     # Certificate "emSign Root CA - G2"
  -     # Certificate "emSign Root CA - C2"
  -     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
  -     # Certificate "DigiCert CS ECC P384 Root G5"
  -     # Certificate "DigiCert CS RSA4096 Root G5"
  -     # Certificate "DigiCert RSA4096 Root G5"
  -     # Certificate "DigiCert ECC P384 Root G5"
  -     # Certificate "HARICA Code Signing RSA Root CA 2021"
  -     # Certificate "HARICA Code Signing ECC Root CA 2021"
  -     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.0-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Add BuildRequires: make
  - drop dnssrv service and timer


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (#2051441)
  - fully switch from nettle to gnutls (#1953463 #1954483)
  - use NTP servers from DHCPv6 NTP server option (#2047415)
  - drop obsolete workaround in scriptlet


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.11-1
changelog:
  - Update to v6.11 release
  - Resolves: rhbz#1876400 - CVE-2020-14342 - cifs-utils: shell command injection


author: Jonathan Lebon <jonathan@jlebon.com> - 6.11-2
changelog:
  - Split out -info subpackage for smb2-quota and smbinfo
    https://bugzilla.redhat.com/show_bug.cgi?id=1909288


author: Packit <hello@packit.dev> - 270-1
changelog:
  - Services: User-created timer deletion
  - System Diagnostics: Working with diagnostic reports has been improved


author: Packit <hello@packit.dev> - 272-1
changelog:
  - Firewall: Edit custom services
  - Services: Pin services as favorites
  - Login: Dark mode
  - Unprivileged cockpit/ws container mode


author: Packit <hello@packit.dev> - 273-1
changelog:
  - Metrics: Display CPU temperature
  - Networking: Suggest netmask and gateway addresses
  - Software Updates: Optionally reboot after updating
  - cockpit/ws container: Support modern SSH keys


author: Alexander Sosedkin <asosedkin@redhat.com> - 20210707-1.git29f6c0b
changelog:
  - gnutls: explicitly enable ECDSA-SECPNNNR1-SHANNN
  - packaging: adapt to the RHEL-9 %check-time testing tools availability


author: Alexander Sosedkin <asosedkin@redhat.com> - 20210914-1.git97d08ef
changelog:
  - gnutls: reorder ECDSA-SECPMMMR1-SHANNN together with ECDSA-SHANNN
  - fix several issues with update-crypto-policies --check


author: Alexander Sosedkin <asosedkin@redhat.com> - 20211115-1.git70de135
changelog:
  - OSPP: relax -ECDSA-SHA2-512, -FFDHE-*
  - fips-mode-setup, fips-finish-install: call zipl more often (s390x-specific)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220203-1.gitf03e75e
changelog:
  - gnutls: enable SHAKE, needed for Ed448
  - fips-mode-setup: improve handling FIPS plus subpolicies
  - FIPS: disable SHA-1 HMAC
  - FIPS: disable CBC ciphers except in Kerberos


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220223-1.git5203b41
changelog:
  - openssl: allow SHA-1 signatures with rh-allow-sha1-signatures in LEGACY
  - update AD-SUPPORT, move RC4 enctype enabling to AD-SUPPORT-LEGACY
  - fips-mode-setup: catch more inconsistencies, clarify --check


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220404-1.git845c0c1
changelog:
  - DEFAULT: drop DNSSEC SHA-1 exception
  - openssh: add support for sntrup761x25519-sha512@openssh.com


author: Ondrej Kozina <okozina@redhat.com> - 2.4.3-1
changelog:
  - Update to cryptsetup 2.4.3.
  - patch: Fix typo in repair command prompt.
    Resolves: #2022309 #2023316 #2032782


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-12
changelog:
  - fix STARTTLS protocol injection via MITM (CVE-2021-22947)
  - fix protocol downgrade required TLS bypass (CVE-2021-22946)
  - fix use-after-free and double-free in MQTT sending (CVE-2021-22945)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-15
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix bad local IPv6 connection reuse (CVE-2022-27775)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-11
changelog:
  - Set default sasldb database to GDBM instead of BerkeleyDB
  - Add the migration tool from BerkeleyDB
  - Add some PLAIN auth tests
  - Resolves rhbz#1947971


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Bryan Gurney <bgurney@redhat.com> - 71.1-7
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
  - Fix enable-namespace all reporting errors incorrectly
  - Add support for inject-smart on papr scm
  - Related: rhbz#2040075
  - Related: rhbz#1873851
  - Related: rhbz#1880578
  - Related: rhbz#1922538
  - Related: rhbz#2087707


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.8-9
changelog:
  - Subpackage python2-dbus has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Marian Csontos <mcsontos@redhat.com> - 2.03.13-1
changelog:
  - Update to upstream version 2.03.13.
  - Change in obtain_devices_list_from_udev default.
  - See WHATS_NEW and WHATS_NEW_DM for more information.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.14-4
changelog:
  - Remove service based autoactivation.
  - New lvmautoactivation(7) man page.
  - Fix missing PVIDs for multipath devices in system.devices file.


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-1
changelog:
  - Update Source to upstream version 0.8.7 plus upstream staged commits
    * Previous patches 0011-0016 & 0018-0022 are included in the source tarball
    * Fixes bz#2017592
  - Rename files
    * Previous patches 0001-0010 are now patches 0013-0022
  - Modify 0018-RH-add-mpathconf.patch
    * merged with previous patch 0017
  - Add 0023-libmulitpath-add-section-name-to-invalid-keyword-out.patch
    * Fixes bz#1984303
  - Fix multipath_conf_syntax test to work with bz #1984303
  - Resolves: bz #1984303, #2017592


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-2
changelog:
  - Modify 0017-RH-use-rpm-optflags-if-present.patch
    * use RPM_LF_FLAGS
  - Modify 0018-RH-add-mpathconf.patch
    * update default config to match multipath changes
  - Modify 0022-RH-make-parse_vpd_pg83-match-scsi_id-output.patch
    * fix cmocka vpd tests
  - Rename 0023-libmulitpath-add-section-name-to-invalid-keyword-out.patch to
           0023-libmultipath-add-section-name-to-invalid-keyword-out.patch
  - Resolves: bz#2017592


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-3
changelog:
  - Add 0024-libmultipath-use-typedef-for-keyword-handler-functio.patch
  - Add 0025-libmultipath-print-the-correct-file-when-parsing-fai.patch
  - Add 0026-libmultipath-pass-file-and-line-number-to-keyword-ha.patch
  - Add 0027-libmultipath-make-set_int-take-a-range-for-valid-val.patch
  - Add 0028-libmultipath-improve-checks-for-set_str.patch
  - Add 0029-libmultipath-deprecate-file-and-directory-config-opt.patch
  - Add 0030-libmultipath-split-set_int-to-enable-reuse.patch
  - Add 0031-libmultipath-cleanup-invalid-config-handling.patch
  - Add 0032-libmultipath-don-t-return-error-on-invalid-values.patch
    * The above 9 patches fix bz #2017969
  - Add 0033-multipathd-avoid-unnecessary-path-read-only-reloads.patch
    * Fixes bz #2017979
  - Add 0034-multipath-fix-exit-status-of-multipath-T.patch
  - Resolves: bz #2017969, #2017979


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-4
changelog:
  - Add 0035-RH-mpathconf-fix-setting-property_blacklist.patch
  - Add 0036-libmultipath-fix-disassemble-status-for-historical-s.patch
    * Fixes bz #2042032
  - Add 0037-libmultipath-make-helper-function-to-trigger-path-ue.patch
  - Add 0038-multipathd-trigger-udev-change-on-path-addition.patch
    * Fixes bz #2028835
  - Resolves: bz #2028835, #2042032


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-5
changelog:
  - Add 0039-RH-add-support-to-mpathconf-for-setting-arbitrary-de.patch
    * Fixes bz #2050421
  - Add 0040-RH-add-support-to-mpathconf-for-setting-recheck_wwid.patch
    * Fixes bz #2039749
  - Resolves: bz #2039749, #2050421


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-6
changelog:
  - Add 0041-multipathd-handle-fpin-events.patch
  - Add 0042-multipathd-disallow-changing-to-from-fpin-marginal-p.patch
    * Add "marginal_pathgroups fpin" for responding to PFIN-Li events
    * Fixes bz #2053642
  - Modify tests/restate_module
    * Always offline the path with the lowest priority
    * Fixes bz #2052633
  - Resolves: bz #2052633, #2053642


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-9
changelog:
  - Add 0045-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
    * Fixes bz #2084356
  - Add 0046-multipath-return-failure-on-an-invalid-remove-comman.patch
    * Fixes bz #2084358
  - Add 0047-libmultipath-steal-the-src-string-pointer-in-merge_s.patch
  - Add 0048-libmultipath-enable-linear-ordering-of-bus-proto-tup.patch
  - Add 0049-libmultipath-use-bus_protocol_id-in-snprint_path_pro.patch
  - Add 0050-libmultipath-make-protocol_name-global.patch
  - Add 0051-libmultipath-add-a-protocol-subsection-to-multipath..patch
  - Add 0052-libmultipath-Set-the-scsi-timeout-parameters-by-path.patch
  - Add 0053-libmultipath-check-the-overrides-pctable-for-path-va.patch
  - Add 0054-libmultipath-fix-eh_deadline-documentation.patch
  - Add 0055-libmultipath-Add-documentation-for-the-protocol-subs.patch
  - Add 0056-libmultipath-use-symbolic-value-for-invalid-pcentry.patch
    * The above 10 patches implement the feature from bz #2084365
  - Add 0057-updated-HPE-MSA-builtin-config.patch
    * Fixes bz #2084357
  Resolves: bz #2084365, #2084357, #2084358, #2084365


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Nicola Sella <nsella@redhat.com> - 4.6.1-1
changelog:
  - Update to 4.6.1
  - Fix recreate script
  - Add unit test for fill_sack_from_repos_in_cache (RhBug:1865803)
  - Add docs and examples for fill_sack_from_repos_in_cache (RhBug:1865803)
  - [spec] remove python2 support
  - Remove problematic language
  - The noroot plugin no longer exists, remove mention
  - Run tests for fill_sack_from_repos_in_cache in installroot (RhBug:1865803)
  - expand history to full term size when output is redirected (RhBug:1852577) (RhBug:1852577,1906970)
  - [doc] Fix: "sslcacert" contains path to the file
  - [doc] Added proxy ssl configuration options, increase libdnf require
  - Set persistdir and substitutions for fill_sack_from_repos_in_cache tests (RhBug:1865803)
  - Update documentation for module_obsoletes and module_stream_switch
  - print additional information when verifying GPG key using DNS
  - Bugs fixed (RhBug:1897573)
  - Remove hardcoded logfile permissions (RhBug:1910084)
  - Enhanced detection of plugins removed in transaction (RhBug:1929163)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.7.0-1
changelog:
  - Update to 4.7.0
  - Improve repo config path ordering to fix a comps merging issue (RhBug:1928181)
  - Keep reason when package is removed (RhBug:1921063)
  - Improve mechanism for application of security filters (RhBug:1918475)
  - [doc] Add description for new API
  - [API] Add new method for reset of security filters
  - [doc] Improve documentation for Hotfix repositories
  - [doc] fix: "makecache" command downloads only enabled repositories
  - Use libdnf.utils.checksum_{check,value}
  - [doc] Add info that maximum parallel downloads is 20
  - Increase loglevel in case of invalid config options
  - [doc] installonly_limit documentation follows behavior
  - Prevent traceback (catch ValueError) if pkg is from cmdline
  - Add documentation for config option sslverifystatus (RhBug:1814383)
  - Check for specific key string when verifing signatures (RhBug:1915990)
  - Use rpmkeys binary to verify package signature (RhBug:1915990)
  - Bugs fixed (RhBug:1916783)
  - Preserve file mode during log rotation (RhBug:1910084)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.10.0-1
changelog:
  - Update to 4.10.0
  - Do not assume that a remote rpm is complete if present
  - Use positive percentage for "Failed delta RPMs" message
  - Remove redundant new line in Groups output
  - Format empty group names outputs to <name-unset>
  - [doc] Document default colors
  - Use rpmkeys alone to verify signature
  - Add dnf.error message to explain rpm.error traceback when package not found after resolving a transaction (RhBug:1815327,1887293,1909845)
  - [API] Add method "set_or_append_opt_value" to BaseConfig (RhBug:1967925)
  - Add aliases for commands: info, updateinfo, provides (RhBug:1938333)
  - Add report about demodularized rpms into module info (RhBug:1805260)
  - Remove DNSSEC errors on COPR group email keys
  - Add support for autodetecting packages to be excluded from being installed as weak dependencies (RhBug:1699672)
  - Add support for excluding packages to be installed as weak dependencies (RhBug:1699672)
  - Add fail_fast parameter to download_payloads methods for use in reposync
  - Acquire all relevant locks during "dnf clean"
  - API: Raise CompsError when group/env not found in install_group and install_environment (RhBug:1947958)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.10.0-2
changelog:
  - Respect cacheonly in python dnf API (RhBug:2026849)
  - [doc] Improve description of multilib_policy=all (RhBug:1996681,1995630)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.10.0-3
changelog:
  - Don't recommend python3-unbound (RhBug:1947925)
  - Recommend rpm-plugin-systemd-inhibit only if systemd (RhBug:1947924)
  - Don't recommend /usr/bin/sqlite3 for bash-completion (RhBug:1947924)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.12.0-1
changelog:
  - Allow destdir option with modulesync command
  - Add documentation for query api flags (RhBug:2035577)
  - Fix swap command to work with local rpm files correctly (RhBug:2036434)
  - Fix regression in verifying signatures using rpmkeys
  - Fix decompression of groups.xml (RhBug:2030255)
  - Fix history undo on a Reason Change (RhBug:2010259,2053014)
  - Remove /usr/bin from sys.path to avoid accidentally importing garbage
  - Fix python3.11 build: remove deprecated, update traceback regex
  - fix dnf mark error when history sqlite missing
  - [doc] clarify effect of --enablerepo and --disablerepo options (RhBug:2031414)
  - [doc] default values for module_obsoletes and module_stream_switch (RhBug: 2051846)
  - dnf.conf: hint users where to find more info about defaults and other options
  - Fix unittests that relied on checksum being at the end of solvfiles
  - completion: remove unnecessary echo
  - Fix remove when no repos are enabled (RhBug:2064341)
  - Add loongarch support for dnf
  - Add spaces between words to fix typos (RhBug:2077296)
  - [doc] Improve "proxy" configuration option documentation (RhBug:2072332)
  - Fix download errors handling in non-english locales (RhBug:2024527)


author: Nicola Sella <nsella@redhat.com> - 4.0.18-1
changelog:
  - [needs-restarting] Fix plugin fail if needs-restarting.d does not exist
  - [needs-restarting] add kernel-rt to reboot list
  - Fix debug-restore command
  - [config-manager] enable/disable comma separated pkgs (RhBug:1830530)
  - [debug] Use standard demands.resolving for transaction handling
  - [debug] Do not remove install-only packages (RhBug:1844533)
  - return error when dnf download failed
  - README: Reference Fedora Weblate instead of Zanata
  - [reposync] Add latest NEVRAs per stream to download (RhBug: 1833074)
  - copr: don't try to list runtime dependencies


author: Nicola Sella <nsella@redhat.com> - 4.0.19-1
changelog:
  - Update to 4.0.19
  - copr: allow only 2 arguments with copr enable command
  - [needs-restarting] fix -r in nspawn containers (RhBug:1913962,1914251)
  - Add --gpgcheck option to reposync (RhBug:1856818) (RhBug:1856818)
  - Re-introduce yum-groups-manager functionality (RhBug:1826016)
  - [repomanage] Don't use cached metadata (RhBug:1899852)
  - [needs-restarting] add -s to list services (RhBug:1772939) (RhBug:1772939)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.21-1
changelog:
  - Update to 4.0.21
  - Removed dependency on dnf.yum.misc.Checksum class (RhBug:1935465)
  - Add missing command line option to documentation
  - doc: add packages to needs-restarting conf
  - Set blacklist subcommand as deprecated
  - Bugs fixed (RhBug:1914827,1916782)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.24-1
changelog:
  - Update to 4.0.24
  - [repomanage] Allow running only with metadata
  - [repomanage] Enhance documentation (RhBug:1898293)
  - [versionlock] Locking obsoleted package does not make the obsoleter unavailable (RhBug:1957280)
  - [versionlock] Work correctly with packages with minorbump part of release (RhBug:1961217)
  - [leaves] Show strongly connected components
  - [needs-restarting] Fix wrong boot time (RhBug:1960437)
  - [playground] Disable playground command, since it doesn't work
  - [copr] on CentOS Stream, enable centos stream chroot instead of not epel 8 (RhBug:1994154)
  - [copr] Avoid using deprecated function distro.linux_distribution() (RhBug:2011550)
  - [copr] don't traceback on empty lines in /etc/os-release


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.24-2
changelog:
  - [groups-manager] Use full NEVRA for matching packages instead of only name (RhBug:2029864)
  - [versionlock] Fix: Multiple package-name-spec arguments don't lock (RhBug:2029871)
  - [versionlock] Update documentation for adding specifi version (RhBug:2013332)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.1.0-1
changelog:
  - Add a new subpackage with modulesync command. The command downloads packages from modules and/or creates a repository with modular data. (RhBug:1868047)
  - [repoclosure] Print counts of missing dependencies
  - [reposync] Do not stop downloading packages on the first error (RhBug:2009894)


author: Lukas Nykryn <lnykryn@redhat.com> - 055-6.git20210709
changelog:
  - fix(network-manager): don't pull in systemd-udev-settle
  - fix(dracut.sh): handle '-i' option to include files beginning with '.'
  - fix(dracut.sh): handle symlinks appropriately while using '-i' option
  - fix(squash): create relative symlinks
  - feat(squash): install umount util


author: Lukas Nykryn <lnykryn@redhat.com> - 055-9.git20210812
changelog:
  - fix(kernel-modules): add blk_mq_alloc_disk and
  - fix(network-manager): check for nm-initrd-generator in both
  - fix(cms): reload NetworkManager connections


author: Pavel Valena <pvalena@redhat.com> - 055-30.git20220216
changelog:
  - fix(shutdown): be robust against forced shutdown
  - 95resume: only exclude this module, when swap is netdev
  - fix(qeth_rules): check the existence of
  - fix(fips): handle s390x OSTree systems
  - fix(network): add errors and warnings when network interface
  - fix(url-lib): make pre-pivot hook separetely per
  - fix(dracut-shutdown): add cleanup handler on failure
  - fix(multipath): get config. dir from configuration
  - Do not use recommends for base packages
  - 95nfs: set correct ownership and permissions for statd


author: Pavel Valena <pvalena@redhat.com> - 057-10.git20220721
changelog:
  - fix(dracut.sh): do not fail on irregular files
  - fix(98dracut-systemd): partly revert "emergency mode: use


author: Petr Pisar <ppisar@redhat.com> - 37-14
changelog:
  - Fix XML ABI dumps that were generated with a faulty GCC and missed the
    variadic arguments when building without LTO (bug #1863475)


author: Mark Wielaard <mjw@redhat.com> - 0.186-1
changelog:
  - Upgrade to upstream 0.186
    - debuginfod-client: Default $DEBUGINFOD_URLS is computed from
      drop-in files /etc/debuginfod/*.urls rather than
      hardcoded into the /etc/profile.d/debuginfod*
      scripts.
      Add $DEBUGINFOD_MAXSIZE and $DEBUGINFOD_MAXTIME settings
      for skipping large/slow transfers.
      Add $DEBUGINFOD_RETRY for retrying aborted lookups.
    - debuginfod: Supply extra HTTP response headers, describing
      archive/file names that satisfy the requested buildid content.
      Support -d :memory: option for in-memory databases.
      Protect against loops in federated server configurations.
      Add -r option to use -I/-X regexes for grooming stale files.
      Protect against wasted CPU from duplicate concurrent requests.
      Limit the duration of groom ops roughly to rescan (-t) times.
      Add --passive mode for serving from read-only database.
      Several other performance improvements & prometheus metrics.
    - libdw: Support for the NVIDIA Cuda line map extensions.
      DW_LNE_NVIDIA_inlined_call and DW_LNE_NVIDIA_set_function_name
      are defined in dwarf.h. New functions dwarf_linecontext and
      dwarf_linefunctionname.
    - translations: Update Japanese translation.


author: Mark Wielaard <mjw@redhat.com> - 0.187-4
changelog:
  - Upgrade to elfutils 0.187
    - debuginfod: Support -C option for connection thread pooling.
    - debuginfod-client: Negative cache file are now zero sized instead
      of no-permission files.
    - addr2line: The -A, --absolute option, which shows file names
      includingthe full compilation directory is now the
      default.  To get theold behavior use the new option --relative.
    - readelf, elflint: Recognize FDO Packaging Metadata ELF notes
    - libdw, debuginfo-client: Load libcurl lazily only when files need
      to be fetched remotely. libcurl is now never loaded when
      DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set,
      libcurl is only loaded when the debuginfod_begin function is
      called.
  - Add elfutils-0.187-csh-profile.patch
  - Add elfutils-0.187-debuginfod-client-fd-leak.patch
  - Add elfutils-0.187-mhd_no_dual_stack.patch
  - Add elfutils-0.187-mhd_epoll.patch


author: Frank Ch. Eigler <fche@redhat.com> - 0.187-5
changelog:
  - rhbz2088774: ship /etc/profile.d/debuginfod* files even without
                 default DEBUGINFOD_URLS.


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 4.7.0-1
changelog:
  - Update to 4.7.0 (#1930632)
  - Align spec syntax with upstream spec file
  - Add 'tcl' to the BuildRequires and remove 'man' from this list
  - Fix names of 'procps-ng' and 'man-db' packages on Fedora
  - Only install manpages through make install, other docs are handled by %doc
  - Remove alternatives mechanism for manpages


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.0.0-0.1.alpha
changelog:
  - Update to 5.0.0-alpha (#1989523)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide. Thanks a lot!
  - Remove createmodule.sh and createmodule.py utilities ('module sh-to-mod'
    should be used instead)
  - Remove configure options that have been made default starting version 5.0
  - Remove compat subpackage
  - Run non-regression tests in quick mode


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.0.0-1
changelog:
  - Update to 5.0.0 (#2004402)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide. Thanks a lot!
  - Configuration guide example.txt is replaced by more up to date INSTALL.txt
    document


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-6
changelog:
  - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
  - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
  - CVE-2022-22825 Integer overflow in lookup in xmlparse.c
  - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
  - CVE-2022-22823 Integer overflow in build_model in xmlparse.c
  - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
  - Resolves: CVE-2022-22827
  - Resolves: CVE-2022-22826
  - Resolves: CVE-2022-22825
  - Resolves: CVE-2022-22824
  - Resolves: CVE-2022-22823
  - Resolves: CVE-2022-22822


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-8
changelog:
  - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
  - Resolves: CVE-2021-45960


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-10
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Tomas Korbar <tkorbar@redhat.com> - 2.4.7-1
changelog:
  - Rebase to version 2.4.7
  - Resolves: rhbz#2067201
  - Resolves: CVE-2022-25313
  - Resolves: CVE-2022-25314
  - Resolves: CVE-2022-25236


author: Chris Leech <cleech@redhat.com> - 1.0.34-0.git14ef0d2
changelog:
  - upstream 1.0.34
  - drop gcc warning diabling patch, upstream fixes exist for these issues now
  - #1961180 FCoE interface name regressions


author: Pavel Raiskup <praiskup@redhat.com> - 3.14-4
changelog:
  - /proc and /sys made %ghost to allow filesystem package updates in rootless
    container environments (rhbz#1548403)


author: Kamil Dudka <kdudka@redhat.com> - 1:4.7.0-6
changelog:
  - disable -flto on ppc64le to make test-float pass (#1789115)
  - do not compile with -D__SUPPORT_SNAN__ (#1294016)


author: Eric Garver <egarver@redhat.com> - 1.0.0-0.3.alpha
changelog:
  - remove dead symlink (firewalld.conf) left over from old package versions
    before installing new file


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Marek Kasik <mkasik@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Test bitmap size earlier for PNGs
  - Fix memory leak in pngshim.c
  - Enable man pages for demos
  - Resolves: #1887084, #1890211


author: Akira TAGOH <tagoh@redhat.com> - 2.10.4-3
changelog:
  - Enable HarfBuzz support
  - Add bootstrap without HarfBuzz
  - Resolves: #1853937
  - Resolves: #1906714


author: Richard Hughes <richard@hughsie.com> 1.5.2-1
changelog:
  - New upstream release
  - Add a flag to indicate if packages are supported
  - Add a plugin for the Pinebook Pro laptop
  - Allow components to set the icon from the metadata
  - Fall back to FAT32 internal partitions for detecting ESP
  - Fix detection of ColorHug version on older firmware versions
  - Fix reading BCM57XX vendor and device ids from firmware
  - Fix replugging the MSP430 device
  - Fix sync method when called from threads without a context
  - Ignore an invalid vendor-id when adding releases for display
  - Improve synaptics-mst reliability when writing data
  - Install modules-load configs in the correct directory
  - Notify the service manager when idle-quitting
  - Only download the remote metadata as required
  - Remove HSI update and attestation suffixes
  - Restore recognizing GPG and PKCS7 signature types in libfwupd
  - Set the SMBIOS chassis type to portable if a DT battery exists
  - Switch from libsoup to libcurl for downloading data


author: Richard Hughes <richard@hughsie.com> 1.5.3-1
changelog:
  - New upstream release
  - Add a UEFI quirk for Star Labs Lite Mk III
  - Add the device firmare ID for serio class hardware
  - Allow setting the GMainContext when used for sync methods
  - Allow the client to send legacy PKCS7 and GPG signatures
  - Export the driver name from FuUdevDevice
  - Fix a possible critical warning due to missing retval
  - Fix the endianness for the CRC check in bcm57xx
  - Make sure the correct interface number is used for QMI
  - Mark more user-visible strings as translatable
  - Restrict loading component types of firmware
  - Validate ModemManager firmware update method combinations


author: Richard Hughes <richard@hughsie.com> 1.5.4-1
changelog:
  - New upstream release
  - Add Maple Ridge Thunderbolt firmware parsing support
  - Allow creating FMAP and Synaptics firmware using builder.xml
  - Allow using fwupdtool as non-root for firmware commands
  - Do not trust the Block.HintSystem boolean for ESP filtering
  - Fix a memory leak when parsing Synaptics firmware
  - Fix a possible crash when reading the Goodix MOC USB request
  - Fix possible crashes when parsing invalid firmware


author: Richard Hughes <richard@hughsie.com> 1.5.5-1
changelog:
  - New upstream release
  - Add a plugin to update PixArt RF devices
  - Add new hardware to use the elantp and rts54hid plugins
  - Detect the AMD TSME encryption state for HSI-4
  - Detect the AMI PK test key is not installed for HSI-1
  - Fix flashing a fingerprint reader that is in use
  - Fix several critical warnings when parsing invalid firmware
  - Fix updating DFU devices that use DNLOAD_BUSY
  - Ignore the legacy UEFI OVMF dummy GUID
  - Make libfwupd more thread safe to fix a crash in gnome-software
  - Never show unprintable chars from invalid firmware in the logs


author: Marek Polacek <polacek@redhat.com> 11.2.1-8
changelog:
  - update from releases/gcc-11-branch (#2047296)
    - PRs ada/103538, analyzer/101962, bootstrap/103688, c++/85846, c++/95009,
  	c++/98394, c++/99911, c++/100493, c++/101715, c++/102229, c++/102933,
  	c++/103012, c++/103198, c++/103480, c++/103703, c++/103714,
  	c++/103758, c++/103783, c++/103831, c++/103912, c++/104055, c/97548,
  	c/101289, c/101537, c/103587, c/103881, d/103604, debug/103838,
  	debug/103874, fortran/67804, fortran/83079, fortran/101329,
  	fortran/101762, fortran/102332, fortran/102717, fortran/102787,
  	fortran/103411, fortran/103412, fortran/103418, fortran/103473,
  	fortran/103505, fortran/103588, fortran/103591, fortran/103606,
  	fortran/103607, fortran/103609, fortran/103610, fortran/103692,
  	fortran/103717, fortran/103718, fortran/103719, fortran/103776,
  	fortran/103777, fortran/103778, fortran/103782, fortran/103789,
  	ipa/101354, jit/103562, libfortran/103634, libstdc++/100017,
  	libstdc++/102994, libstdc++/103453, libstdc++/103501,
  	libstdc++/103549, libstdc++/103877, libstdc++/103919,
  	middle-end/101751, middle-end/102860, middle-end/103813, objc/103639,
  	preprocessor/89971, preprocessor/102432, rtl-optimization/102478,
  	rtl-optimization/103837, rtl-optimization/103860,
  	rtl-optimization/103908, sanitizer/102911, target/102347,
  	target/103465, target/103661, target/104172, target/104188,
  	tree-optimization/101615, tree-optimization/103523,
  	tree-optimization/103603, tree-optimization/103995


author: Marek Polacek <polacek@redhat.com> 11.2.1-9
changelog:
  - update from releases/gcc-11-branch (#2047296)
    - PRs fortran/104127, fortran/104212, fortran/104227, target/101529
  - fix up va-opt-6.c testcase


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.2
changelog:
  - add support for relocation of the PCH data (pch/71934, #2044917)
  - remove 30_threads/future/members/poll.cc (#2050090)
  - avoid overly-greedy match in dejagnu regexp (#2050089)


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.3
changelog:
  - use _thread_db_sizeof_pthread to obtain struct pthread size (#2034494)
  - add --enable-host-pie, build the compilers as PIE (#2044917)


author: David Malcolm <dmalcolm@redhat.com> - 11.2.1-10
changelog:
  - update from releases/gcc-11-branch (#2063255)
    - PRs ada/98724, ada/104258, ada/104767, ada/104861, c++/58646, c++/59950,
  	c++/61611, c++/95036, c++/100468, c++/101030, c++/101095, c++/101371,
  	c++/101515, c++/101767, c++/102045, c++/102123, c++/102538,
  	c++/102740, c++/102990, c++/103057, c++/103186, c++/103291,
  	c++/103299, c++/103337, c++/103711, c++/103769, c++/103968,
  	c++/104107, c++/104108, c++/104284, c++/104410, c++/104472,
  	c++/104513, c++/104568, c++/104667, c++/104806, c++/104847,
  	c++/104944, c++/104994, c++/105035, c++/105061, c/82283, c/84685,
  	c/104510, c/104711, d/104659, d/105004, debug/104337, debug/104517,
  	debug/104557, fortran/66193, fortran/99585, fortran/100337,
  	fortran/103790, fortran/104211, fortran/104311, fortran/104331,
  	fortran/104430, fortran/104619, fortran/104811, go/100537,
  	libgomp/104385, libstdc++/101231, libstdc++/102358, libstdc++/103904,
  	libstdc++/104442, lto/104237, lto/104333, lto/104617,
  	middle-end/95115, middle-end/99578, middle-end/100464,
  	middle-end/100680, middle-end/100775, middle-end/100786,
  	middle-end/104307, middle-end/104402, middle-end/104446,
  	middle-end/104786, middle-end/104971, middle-end/105032,
  	preprocessor/104147, rtl-optimization/104544, rtl-optimization/104589,
  	rtl-optimization/104777, rtl-optimization/104814, sanitizer/102656,
  	sanitizer/104449, sanitizer/105093, target/79754, target/87496,
  	target/99708, target/99754, target/100784, target/101324,
  	target/102140, target/102952, target/102957, target/103307,
  	target/103627, target/103925, target/104090, target/104208,
  	target/104219, target/104253, target/104362, target/104448,
  	target/104451, target/104453, target/104458, target/104462,
  	target/104469, target/104502, target/104674, target/104681,
  	target/104688, target/104775, target/104890, target/104910,
  	target/104923, target/104963, target/104998, target/105000,
  	target/105052, target/105058, target/105068, testsuite/103556,
  	testsuite/103586, testsuite/104730, testsuite/104759,
  	testsuite/105055, tree-optimization/45178, tree-optimization/100834,
  	tree-optimization/101636, tree-optimization/102819,
  	tree-optimization/102893, tree-optimization/103169,
  	tree-optimization/103361, tree-optimization/103489,
  	tree-optimization/103544, tree-optimization/103596,
  	tree-optimization/103641, tree-optimization/103864,
  	tree-optimization/104263, tree-optimization/104288,
  	tree-optimization/104511, tree-optimization/104601,
  	tree-optimization/104675, tree-optimization/104782,
  	tree-optimization/104931, tree-optimization/105094
  - fix x86 vector initialization expansion fallback (PR target/105123)
  - drop patch 22 (gcc11-libsanitizer-pthread.patch;
    upstreamed as r11-9607-ga8dd74bfb921ed)


author: Jakub Jelinek <jakub@redhat.com> 11.3.1-2
changelog:
  - update from releases/gcc-11-branch (#2077536)
    - GCC 11.3 release
    - PRs c++/98249, c++/99893, c++/100608, c++/101051, c++/101532, c++/101677,
  	c++/101717, c++/101894, c++/102869, c++/103105, c++/103328,
  	c++/103341, c++/103455, c++/103706, c++/103885, c++/103943,
  	c++/104008, c++/104079, c++/104225, c++/104507, c++/104565,
  	c++/105003, c++/105064, c++/105143, c++/105186, c++/105256, c/101585,
  	debug/105203, fortran/102992, fortran/104210, fortran/104228,
  	fortran/104570, fortran/105138, gcov-profile/105282, ipa/103083,
  	ipa/103432, jit/100613, libstdc++/90943, libstdc++/100516,
  	libstdc++/103630, libstdc++/103638, libstdc++/103650,
  	libstdc++/103955, libstdc++/104098, libstdc++/104301,
  	libstdc++/104542, libstdc++/104859, libstdc++/105021,
  	libstdc++/105027, middle-end/104497, middle-end/105165,
  	rtl-optimization/104985, rtl-optimization/105028,
  	rtl-optimization/105211, target/80556, target/100106, target/104117,
  	target/104474, target/104853, target/104894, target/105214,
  	target/105257, tree-optimization/99121, tree-optimization/104880,
  	tree-optimization/105053, tree-optimization/105070,
  	tree-optimization/105189, tree-optimization/105198,
  	tree-optimization/105226, tree-optimization/105232,
  	tree-optimization/105235
  - fix bogus -Wuninitialized warning on va_arg with complex types on x86_64
    (PR target/105331)
  - remove bogus assertion in std::from_chars (PR libstdc++/105324)


author: Filip Januš <fjanus@redhat.com> - 1.18.1-3
changelog:
  - Resolves: #1799391
  - After upgrade GCC to version gcc version 10.0.1 build fails
  - Patch gdbm_gcc_10.patch was added


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Carlos O'Donell <carlos@redhat.com> - 2.34-30
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 71326f1f2fd09dafb9c34404765fb88129e94237:
  - nptl: Fix pthread_cancel cancelhandling atomic operations
  - mips: Fix mips64n32 64 bit time_t stat support (BZ#29069)
  - hurd: Fix arbitrary error code
  - nptl: Handle spurious EINTR when thread cancellation is disabled (BZ#29029)
  - S390: Add new s390 platform z16.
  - NEWS: Update fixed bug list for LD_AUDIT backports.
  - hppa: Fix bind-now audit (BZ #28857)
  - elf: Replace tst-audit24bmod2.so with tst-audit24bmod2
  - Fix elf/tst-audit25a with default bind now toolchains
  - elf: Fix runtime linker auditing on aarch64 (BZ #26643)
  - elf: Issue la_symbind for bind-now (BZ #23734)
  - elf: Fix initial-exec TLS access on audit modules (BZ #28096)
  - elf: Add la_activity during application exit
  - elf: Do not fail for failed dlmopen on audit modules (BZ #28061)
  - elf: Issue audit la_objopen for vDSO
  - elf: Add audit tests for modules with TLSDESC
  - elf: Avoid unnecessary slowdown from profiling with audit (BZ#15533)
  - elf: Add _dl_audit_pltexit
  - elf: Add _dl_audit_pltenter
  - elf: Add _dl_audit_preinit
  - elf: Add _dl_audit_symbind_alt and _dl_audit_symbind
  - elf: Add _dl_audit_objclose
  - elf: Add _dl_audit_objsearch
  - elf: Add _dl_audit_activity_map and _dl_audit_activity_nsid
  - elf: Add _dl_audit_objopen
  - elf: Move la_activity (LA_ACT_ADD) after _dl_add_to_namespace_list() (BZ #28062)
  - elf: Move LAV_CURRENT to link_lavcurrent.h
  - elf: Fix elf_get_dynamic_info() for bootstrap
  - elf: Fix dynamic-link.h usage on rtld.c
  - elf: Fix elf_get_dynamic_info definition
  - elf: Avoid nested functions in the loader [BZ #27220]
  - powerpc: Delete unneeded ELF_MACHINE_BEFORE_RTLD_RELOC
  - hppa: Use END instead of PSEUDO_END in swapcontext.S
  - hppa: Implement swapcontext in assembler (bug 28960)


author: Carlos O'Donell <carlos@redhat.com> - 2.34-31
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 55640ed3fde48360a8e8083be4843bd2dc7cecfe:
  - i386: Regenerate ulps
  - linux: Fix missing internal 64 bit time_t stat usage
  - x86: Optimize L(less_vec) case in memcmp-evex-movbe.S
  - x86: Don't set Prefer_No_AVX512 for processors with AVX512 and AVX-VNNI
  - x86-64: Use notl in EVEX strcmp [BZ #28646]
  - x86: Shrink memcmp-sse4.S code size
  - x86: Double size of ERMS rep_movsb_threshold in dl-cacheinfo.h
  - x86: Optimize memmove-vec-unaligned-erms.S
  - x86-64: Replace movzx with movzbl
  - x86-64: Remove Prefer_AVX2_STRCMP
  - x86-64: Improve EVEX strcmp with masked load
  - x86: Replace sse2 instructions with avx in memcmp-evex-movbe.S
  - x86: Optimize memset-vec-unaligned-erms.S
  - x86: Optimize memcmp-evex-movbe.S for frontend behavior and size
  - x86: Modify ENTRY in sysdep.h so that p2align can be specified
  - x86-64: Optimize load of all bits set into ZMM register [BZ #28252]
  - scripts/glibcelf.py: Mark as UNSUPPORTED on Python 3.5 and earlier
  - dlfcn: Do not use rtld_active () to determine ld.so state (bug 29078)
  - INSTALL: Rephrase -with-default-link documentation
  - misc: Fix rare fortify crash on wchar funcs. [BZ 29030]
  - Default to --with-default-link=no (bug 25812)
  - scripts: Add glibcelf.py module


author: Carlos O'Donell <carlos@redhat.com> - 2.34-32
changelog:
  - Sync with upstream branch release/2.34/master,
    commit c66c92181ddbd82306537a608e8c0282587131de:
  - posix/glob.c: update from gnulib (BZ#25659)
  - linux: Fix fchmodat with AT_SYMLINK_NOFOLLOW for 64 bit time_t (BZ#29097)


author: Florian Weimer <fweimer@redhat.com> - 2.34-33
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 91c2e6c3db44297bf4cb3a2e3c40236c5b6a0b23:
  - dlfcn: Implement the RTLD_DI_PHDR request type for dlinfo
  - manual: Document the dlinfo function
  - x86: Fix fallback for wcsncmp_avx2 in strcmp-avx2.S [BZ #28896]
  - x86: Fix bug in strncmp-evex and strncmp-avx2 [BZ #28895]
  - x86: Set .text section in memset-vec-unaligned-erms
  - x86-64: Optimize bzero
  - x86: Remove SSSE3 instruction for broadcast in memset.S (SSE2 Only)
  - x86: Improve vec generation in memset-vec-unaligned-erms.S
  - x86-64: Fix strcmp-evex.S
  - x86-64: Fix strcmp-avx2.S
  - x86: Optimize strcmp-evex.S
  - x86: Optimize strcmp-avx2.S
  - manual: Clarify that abbreviations of long options are allowed
  - Add HWCAP2_AFP, HWCAP2_RPRES from Linux 5.17 to AArch64 bits/hwcap.h
  - aarch64: Add HWCAP2_ECV from Linux 5.16
  - Add SOL_MPTCP, SOL_MCTP from Linux 5.16 to bits/socket.h
  - Update kernel version to 5.17 in tst-mman-consts.py
  - Update kernel version to 5.16 in tst-mman-consts.py
  - Update syscall lists for Linux 5.17
  - Add ARPHRD_CAN, ARPHRD_MCTP to net/if_arp.h
  - Update kernel version to 5.15 in tst-mman-consts.py
  - Add PF_MCTP, AF_MCTP from Linux 5.15 to bits/socket.h


author: Florian Weimer <fweimer@redhat.com> - 2.34-34
changelog:
  - Sync with upstream branch release/2.34/master,
    commit ede8d94d154157d269b18f3601440ac576c1f96a:
  - csu: Implement and use _dl_early_allocate during static startup
  - Linux: Introduce __brk_call for invoking the brk system call
  - Linux: Implement a useful version of _startup_fatal
  - ia64: Always define IA64_USE_NEW_STUB as a flag macro
  - Linux: Define MMAP_CALL_INTERNAL
  - i386: Honor I386_USE_SYSENTER for 6-argument Linux system calls
  - i386: Remove OPTIMIZE_FOR_GCC_5 from Linux libc-do-syscall.S
  - elf: Remove __libc_init_secure
  - Linux: Consolidate auxiliary vector parsing (redo)
  - Linux: Include <dl-auxv.h> in dl-sysdep.c only for SHARED
  - Revert "Linux: Consolidate auxiliary vector parsing"
  - Linux: Consolidate auxiliary vector parsing
  - Linux: Assume that NEED_DL_SYSINFO_DSO is always defined
  - Linux: Remove DL_FIND_ARG_COMPONENTS
  - Linux: Remove HAVE_AUX_SECURE, HAVE_AUX_XID, HAVE_AUX_PAGESIZE
  - elf: Merge dl-sysdep.c into the Linux version
  - elf: Remove unused NEED_DL_BASE_ADDR and _dl_base_addr
  - x86: Optimize {str|wcs}rchr-evex
  - x86: Optimize {str|wcs}rchr-avx2
  - x86: Optimize {str|wcs}rchr-sse2
  - x86: Cleanup page cross code in memcmp-avx2-movbe.S
  - x86: Remove memcmp-sse4.S
  - x86: Small improvements for wcslen
  - x86: Remove AVX str{n}casecmp
  - x86: Add EVEX optimized str{n}casecmp
  - x86: Add AVX2 optimized str{n}casecmp
  - x86: Optimize str{n}casecmp TOLOWER logic in strcmp-sse42.S
  - x86: Optimize str{n}casecmp TOLOWER logic in strcmp.S
  - x86: Remove strspn-sse2.S and use the generic implementation
  - x86: Remove strpbrk-sse2.S and use the generic implementation
  - x86: Remove strcspn-sse2.S and use the generic implementation
  - x86: Optimize strspn in strspn-c.c
  - x86: Optimize strcspn and strpbrk in strcspn-c.c
  - x86: Code cleanup in strchr-evex and comment justifying branch
  - x86: Code cleanup in strchr-avx2 and comment justifying branch
  - x86_64: Remove bcopy optimizations
  - x86-64: Remove bzero weak alias in SS2 memset
  - x86_64/multiarch: Sort sysdep_routines and put one entry per line
  - x86: Improve L to support L(XXX_SYMBOL (YYY, ZZZ))
  - fortify: Ensure that __glibc_fortify condition is a constant [BZ #29141]


author: Arjun Shankar <arjun@redhat.com> - 2.34-35
changelog:
  - Sync with upstream branch release/2.34/master,
    commit ff450cdbdee0b8cb6b9d653d6d2fa892de29be31:
  - Fix deadlock when pthread_atfork handler calls pthread_atfork or dlclose
  - x86: Fallback {str|wcs}cmp RTM in the ncmp overflow case [BZ #29127]
  - string.h: fix __fortified_attr_access macro call [BZ #29162]
  - linux: Add a getauxval test [BZ #23293]
  - rtld: Use generic argv adjustment in ld.so [BZ #23293]
  - S390: Enable static PIE


author: Florian Weimer <fweimer@redhat.com> - 2.34-36
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 4c92a1041257c0155c6aa7a182fe5f78e477b0e6:
  - powerpc: Fix VSX register number on __strncpy_power9 [BZ #29197]
  - socket: Fix mistyped define statement in socket/sys/socket.h (BZ #29225)
  - iconv: Use 64 bit stat for gconv_parseconfdir (BZ# 29213)
  - catgets: Use 64 bit stat for __open_catalog (BZ# 29211)
  - inet: Use 64 bit stat for ruserpass (BZ# 29210)
  - socket: Use 64 bit stat for isfdtype (BZ# 29209)
  - posix: Use 64 bit stat for fpathconf (_PC_ASYNC_IO) (BZ# 29208)
  - posix: Use 64 bit stat for posix_fallocate fallback (BZ# 29207)
  - misc: Use 64 bit stat for getusershell (BZ# 29204)
  - misc: Use 64 bit stat for daemon (BZ# 29203)


author: Arjun Shankar <arjun@redhat.com> - 2.34-38
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 94ab2088c37d8e4285354af120b7ed6b887b9e53:
  - nss: handle stat failure in check_reload_and_get (BZ #28752)
  - nss: add assert to DB_LOOKUP_FCT (BZ #28752)
  - nios2: Remove _dl_skip_args usage (BZ# 29187)
  - hppa: Remove _dl_skip_args usage (BZ# 29165)
  - nptl: Fix __libc_cleanup_pop_restore asynchronous restore (BZ#29214)


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-4
changelog:
  - Specify FIPS140-3 module name and version
  - fips: allow a few more primes in RSA key generation
  - fips: tighten PKCS#12 algorithm checks
  - Correct return value of KTLS stub API


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-7
changelog:
  - Increase GNUTLS_MAX_ALGORITHM_NUM for allowlisting (#2033220)
  - Ensure allowlisting API is called before priority string is constructed (#2042532)
  - Use dlopen for loading libtss2* to avoid OpenSSL dependency (#2057490)


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-9
changelog:
  - Stop using typeof keyword for tss2 function prototypes (#2057490)
  - Ensure allowlist API is called before priority string construction (#1975421)


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-10
changelog:
  - Use only the first component of VERSION from /etc/os-release (#2070249)
  - Don't run power-on self-tests on DSA (#2061325)


author: David King <amigadave@amigadave.com> - 1.68.0-6
changelog:
  - Add Requires on python-markdown for g-ir-doc-tool (#1979144)
  - Add license texts and documentation files (#1979144)


author: Adam Williamson <awilliam@redhat.com> - 3.4-5
changelog:
  - Backport fix for upstream #28105 to fix zgrep
    Resolves: rhbz#1872913
  - Remove some non-portable tests that fail on armv7hl (Paul Eggert)
    Resolves: rhbz#1863830


author: Robbie Harwood <rharwood@redhat.com> - 2.06-30
changelog:
  - ppc64le: CAS improvements, prefix detection, and vTPM support
  - Resolves: #2068281
  - Resolves: #2051314
  - Resolves: #2076798


author: Robbie Harwood <rharwood@redhat.com> - 2.06-37
changelog:
  - CVE fixes for 2022-06-07
  - CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
  - CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
  - Resolves: #2070688


author: Tom Stellard <tstellar@redhat.com> - 8.40-50
changelog:
  - Use make_build macro instead of plain make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Jakub Martisko <jamartis@redhat.com> - 1.12-1
changelog:
  - Rebase to gzip 1.12
  - Resolves an arbitrary-file-write vulnerability in zgrep
    Resolves: rhbz#2073343
    Resolves: rhbz#1870675


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Bruno Meneguele <bmeneg@redhat.com> - 1.3.2-9
changelog:
  - Use upstream accepted patch for the memory leak
  - Make SHA-256 the default hash algorithm (rhbz#1934949)


author: Bruno Meneguele <bmeneg@redhat.com> - 1.4-1
changelog:
  - Modify some pieces to get closer to Fedora's specfile
  - Remove patch handling memory leak: solved in the rebase
  - Remove patch handling SHA-256 default hash: solved in the rebase
  - Rebase to upstream release v1.4 (rhbz#2026028)


author: Jan Macku <jamacku@redhat.com> - 10.10-1
changelog:
  - Translated using Weblate (Friulian) (#381)
  - Translations update from Weblate (#378)
  - added veth support
  - ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon
  - ifdown removes veth pair if both peers are down
  - rename_device: also support dracut-style kernel cmdline configuration
  - spec: Mark network-scripts as deprecated
  - spec: Initscripts now requires chkconfig (#374)
  - Translations update from Weblate (#371)
  - spec: Move service script into subpackage
  - ci: Onboard initscripts to Packit
  - ci: Migrate from Travis to GH Actions


author: Jan Macku <jamacku@redhat.com> - 10.11.1-1
changelog:
  - spec: Update relation between initscripts and initscripts-service
  - spec: Replace not working awk command with sed
  - use downstream version style


author: Jan Macku <jamacku@redhat.com> - 10.11.2-1
changelog:
  - ifup-routes: Revert quotes
  - ifup-routes: Use `ip replace` only on type `route`
  - ifup-routes: Log when using `ip $type replace`
  - ifup-routes: Use `ip route repace` to avoid race
  - ci: Update path to csdiff repository (#391)


author: Jan Macku <jamacku@redhat.com> - 10.11.3-1
changelog:
  - Drop unnecessary obsoletes
  - spec: Move rename_device to subpackage `initscripts-rename-device`
  - ci: Update `.packit.yml` to run on `c9s`
  - ci: Use Differential ShellCheck action


author: Andrea Claudi <aclaudi@redhat.com> - 5.13.0-5.el9
changelog:
  - Add build and runtime dependency on libbpf (Andrea Claudi) [1994520]
  - Use TC_LIB_DIR environment variable (Andrea Claudi) [1994545]
  - Re-add iproute-doc package on the specfile (Andrea Claudi) [1994581]


author: Phil Sutter <psutter@redhat.com> - 1.8.7-25
changelog:
  - ebtables: Dump atomic waste
  - doc: ebtables-nft.8: Adjust for missing atomic-options
  - nft: Use xtables_malloc() in mnl_err_list_node_add()


author: Phil Sutter <psutter@redhat.com> - 1.8.7-29
changelog:
  - libxtables: Boost rule target checks by announcing chain names
  - libxtables: Implement notargets hash table
  - nft: Reject standard targets as chain names when restoring
  - xshared: Merge and share parse_chain()
  - xshared: Prefer xtables_chain_protos lookup over getprotoent
  - nft: Speed up immediate parsing
  - nft: Simplify immediate parsing


author: Phil Cameron <pcameron@redhat.com> - 1.2.1-1
changelog:
  - Makefile: protect mandatory compile flags
  - packet capture: don't reuse socket for multiple receive functions
  - TPACKET_V[23]: continue even if mlock() fails
  - ipmon: fix division by zero
  - fix: detstats(), ifstats(): handle packets with incorrect header checksum
  - fix: positionptr(): properly allocate newly created interfaces
  - fix: detstats(): properly account non-IP packets
  - fix: properly init curses (fixes view on some utf-8 terminals)
  - fix: cidr_split_address(): fix buffer overflow
  - ipmon: printentry(): fix printing of huge values
  - build: use correct libraries (wide version of -lpanel)
  - fix unsafe handling of printf() args (RedHat Bugzilla: 1842690)
  - fix the CPU hog if the interface gets removed (RedHat Bugzilla: 1572750)
  - introduce packet capturing abstraction: add recvmmsg(), TPACKET_V2 and TPACKET_V3 mmap()ed capturing modules: this allow us to capture in multigigabit speeds
  - add partial support for IPoIB interfaces (full support cannot be done because the kernel interface doesn't give us source address) (RedHat Bugzilla: 1140211)
  - merge rvnamed-ng into iptraf-ng
  - allow scrolling with Home, End, PageUp and PageDown keys
  - show dropped packet count
  - pktsize: print in and out counters
  - ifstats: show total packet rate and packet drop across all interfaces
  - ipmon: show OSPF protocol version
  - hostmon, ipmon: update screen only when needed (vastly reduces CPU usage and also reduces packet drops)
  - update source code to compile cleanly on modern gcc
  - numerous code refactoring/cleaning up all over the source tree


author: Kairui Song <kasong@redhat.com> - 2:1.8.0-2
changelog:
  - Disable the communication socket when UI is disabled. Resolves: rhbz1951292
  - drop NoNewPrivs from irqbalance service. Resolves: rhbz1963152


author: Tao Liu <ltao@redhat.com> - 2:1.8.0-5
changelog:
  - Document migrateval. Resolves: rhbz2071959
  - Confine irqbalance to systems where it is useful. Resolves: rhbz2063930
  - Wrong EnvironmentFile in irqbalance.service. Resolves: rhbz2058509


author: Chris Leech <cleech@redhat.com> - 6.2.1.2-1.git13e7f58
changelog:
  - iscsiadm overflow regression when discovering many targets at once
  - check for invalid session id during stop connection
  - add ability to attempt target logins asynchronously


author: Chris Leech <cleech@redhat.com> - 0.101-1
changelog:
  - update to 0.101
  - bz#1958038 disabled Werror, which fixes the build with OpenSSL 3 while still using deprecated functions
  - setup new upstream tests as gating


author: Peter Robinson <pbrobinson@fedoraproject.org> 20210315-119
changelog:
  - Update to upstream 20210315 release
  - Update to Intel Bluetooth AX200/201 firmware
  - rtw88: 8822c: Update normal firmware to v9.9.6
  - rtw89: 8852a: add firmware v0.9.12.2
  - iwlwifi: updates for 9000-family/7265D/core59-66 (cc, Qu, QuZ, ty)
  - amdgpu: add initial firmware for green sardine
  - Silabs new WF200 firmware
  - Mellanox: Add new mlxsw_spectrum firmware xx.2008.2406
  - Added Mediatek bluetooth chip (MT7921)


author: Herton R. Krzesinski <herton@redhat.com> - 20210716-121
changelog:
  - Update to upstream 20210716 release (rhbz 1984973, rhbz 1876310).
    What changed in this release is noted on items below, copied from Fedora's
    linux-firmware changelog done by Peter Robinson
  - update NXP 8897/8997 firmware images
  - rtlwifi: de-dupe rtl8723b/rtl8192e SDIO/USB WiFi firmware
  - Mediatek: update WiFi/bluetooth chip (MT7921)
  - Mediatek: update MT7915 firmware to 20201105
  - Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  - cxgb4: Update firmware to revision 1.26.0.0
  - firmware/i915/guc: Add HuC v7.9.3 for TGL & DG1
  - firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  - firmware/i915/guc: Add GuC v62.0.0 for all platforms
  - nvidia: fix symlinks for tu104/tu106 acr unload firmware
  - iwlwifi: new/updated 8000/9000/other from core60-51 release
  - Update firmware file for Intel Bluetooth AX210/201/200
  - rtw88: 8822c: Update normal firmware to v9.9.10
  - rtl_bt: Update RTL8852A BT(UART I/F) FW to 0xD9A8_A0CD
  - rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  - rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  - rtl_bt: Add rtl8761b/rtl8761bu firmware
  - QCA: Update Bluetooth firmware for QCA6174/QCA6390
  - QCA: Add Bluetooth firmware for WCN685x
  - amdgpu: update 21.20 vcn firmware for green sardine, renoir, navi10/12/14
  - amdgpu: add initial dimgrey cavefish firmware from 21.20
  - amdgpu: updated 21.20 firmware for: Picasso, green sardine, arcturus
    vega10/12/20, navi10/12/14, raven1/2, renoir, navy flounder
  - cypress: update firmware: cyw54591/cyw43570 pcie
  - cypress: update firmware: cyw4373/cyw4356/cyw4354/cyw43455/cyw43430/cyw43340/cyw43012 sdio
  - nvidia: Update Tegra194 XUSB firmware to v60.09
  - nvidia: Update Tegra186 XUSB firmware to v55.18
  - nvidia: Update Tegra210 XUSB firmware to v50.26
  - nvidia: Add VIC firmware for Tegra194
  - update firmware for cadence mhdp8546
  - i915: Add ADL-P DMC Support
  - qcom: add gpu firmwares for sc7280
  - qcom: Add venus firmware files for VPU-2.0
  - qcom: update venus firmware files for v5.4
  - qcom: sm8250: update remoteproc firmware
  - qcom: update a650 firmware files
  - QCA: Update Bluetooth firmware for QCA6174
  - WHENCE: link to similar config file for rtl8821a support
  - rtw89: 8852a: update fw to v0.13.8.0
  - rtw88: 8822c: Update normal firmware to v9.9.9
  - rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  - rtl_bt: Add rtl8723bs_config-OBDA0623.bin symlink
  - rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x59A_76A3
  - rtl_nic: add new firmware for RTL8153 and RTL8156 series
  - Intel: Update firmware for Intel Bluetooth AX210/201/200, 9560, 9260, 8265
  - Intel BT 7265: Fix Security Issues
  - mrvl: prestera: Add Marvell Prestera Switchdev firmware 3.0 version
  - amdgpu: update GPU firmwares from 21.10
  - amdgpu: add initial support for arcturus, navy flounder
  - amdgpu: add new polaris 12 MC firmware
  - amdgpu: update navi10/14 smc firmware
  - cxgb4: Update firmware to revision 1.25.4.0
  - Mellanox: Add new mlxsw_spectrum firmware xx.2008.2438
  - nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.14.A.6
  - brcm: add missing symlink for Pi Zero W NVRAM file
  - brcm: Add a link to enable khadas VIM2's WiFi
  - brcm: Link CM4's WiFi firmware with DMI machine name.
  - brcm: Add nvram for the Chuwi Hi8 (CWI509) tablet
  - brcm: Add nvram for the Predia Basic tablet


author: Herton R. Krzesinski <herton@redhat.com> - 20210919-122
changelog:
  - Update to upstream 20210919 release (rhbz 1979806). Changes since the
    last update are noted on items below, copied from the git changelog
    of upstream linux-firmware repository
  - qed: Add firmware 8.59.1.0
  - Update firmware file for Intel Bluetooth AX211/AX210/AX200/AX201
  - Update firmware file for Intel Bluetooth 9560/9260/8265
  - iwlwifi: add FWs for new So device types with multiple RF modules
  - amdgpu: add initial firmware for Yellow Carp
  - Add firmware for mediatek bluetooth chip (MT7922)
  - Update AMD SEV firmware
  - Update firmware for mediatek bluetooth chip (MT7921)
  - Update RTL8852A BT USB firmware to 0xD9A9_1D69
  - Update RTL8822C BT UART firmware to 0x05A9_1A4A
  - Update RTL8822C BT USB firmware to 0x09A9_1A4A
  - Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  - Update firmware of RTL8153C
  - ice: update package file to 1.3.26.0
  - amdgpu: revert back to older raven2/raven/picasso sdma firmware
  - amdgpu: add initial vangogh support
  - amdgpu: update vega20/vega12/vega10/renoir/raven2/raven firmware from 21.30
  - amdgpu: update polaris12/picasso/dimgrey cavefish/flounder firmware from 21.30
  - amdgpu: update sienna cichlid/navi14/navi12/navi10 firmware from 21.30
  - amdgpu: update green sardine/arcturus firmware from 21.30
  - QCA: Updated firmware files for WCN3991
  - i915: Add v2.03 DMC for RKL
  - i915: Add v2.12 DMC for TGL
  - qca: Add firmware files for BT chip WCN6750
  - iwlwifi: add ty firmware from Core63-43


author: Herton R. Krzesinski <herton@redhat.com> - 20211027-123
changelog:
  - Update to upstream 20211027 release (rhbz 1986659). Changes since the
    last update are noted on items below, copied from the git changelog
    of upstream linux-firmware repository
  - Update AMD cpu microcode
  - QCA: Update Bluetooth firmware for WCN685x
  - bnx2x: Add FW 7.13.20.0
  - Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  - Update NXP Management Complex firmware to version 10.28.1
  - Update firmware for MT7921 WiFi device
  - rtw89: 8852a: update fw to v0.13.30.0
  - Update firmware file for Intel Bluetooth 9462
  - Update firmware file for Intel Bluetooth 9560
  - Update firmware file for Intel Bluetooth AX201
  - Update firmware file for Intel Bluetooth AX211
  - Update firmware file for Intel Bluetooth AX210
  - Update firmware file for Intel Bluetooth 9260
  - Update firmware file for Intel Bluetooth AX200
  - brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  - amdgpu: update VCN firmware for dimgrey cavefish
  - amdgpu: update VCN firmware for navy flounder
  - amdgpu: update VCN firmware for sienna cichlid
  - amdgpu: update VCN firmware for vangogh
  - amdgpu: update VCN firmware for renoir
  - amdgpu: update VCN firmware for picasso
  - amdgpu: update VCN firmware for raven2
  - amdgpu: update VCN firmware for raven
  - amdgpu: Add initial firmware for Beige Goby
  - cxgb4: Update firmware to revision 1.26.2.0
  - Update frimware for mediatek bluetooth chip (MT7921)
  - i915: Update ADLP DMC v2.12


author: Herton R. Krzesinski <herton@redhat.com> - 20211216-124
changelog:
  - Update to upstream 20211216 release (rhbz 2035777). Changes since the
    last update are noted on items below, copied from the git changelog
    of upstream linux-firmware repository
  - amdgpu: update green sardine PSP firmware
  - bnx2x: Add FW 7.13.21.0
  - wilc1000: update WILC1000 firmware to v15.4.1
  - rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  - rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  - cxgb4: Update firmware to revision 1.26.4.0
  - i915: Add DMC firmware v2.14 for ADL-P
  - Update firmware file for Intel Bluetooth 9462
  - Update firmware file for Intel Bluetooth AX211
  - Update firmware file for Intel Bluetooth AX210
  - Update firmware file for Intel Bluetooth 9560
  - Update firmware file for Intel Bluetooth 9260
  - Update firmware file for Intel Bluetooth AX200
  - Update firmware file for Intel Bluetooth AX201
  - amdgpu: update yellow carp dmcub firmware
  - amdgpu: update vangogh DMCUB firmware
  - QCA: Add Bluetooth default nvm file for WCN685x
  - Update ath10k/QCA6174/hw3.0/board-2.bin
  - mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  - QCA: Add Bluetooth firmware for WCN685x
  - Update AMD cpu microcode
  - amdgpu: update raven2 firmware from 21.40
  - amdgpu: update navi14 firmware from 21.40
  - amdgpu: update raven firmware from 21.40
  - amdgpu: update navi12 firmware from 21.40
  - amdgpu: update navi10 firmware from 21.40
  - amdgpu: update vega20 firmware from 21.40
  - amdgpu: update vega12 firmware from 21.40
  - amdgpu: update vega10 firmware from 21.40
  - amdgpu: update picasso firmware from 21.40
  - amdgpu: update vangogh firmware from 21.40
  - amdgpu: update beige goby firmware from 21.40
  - amdgpu: add cyan skillfish firmware from 21.40
  - amdgpu: update dimgrey cavefish firmware from 21.40
  - amdgpu: update green sardine firmware from 21.40
  - amdgpu: update navy flounder firmware from 21.40
  - amdgpu: update renoir firmware from 21.40
  - amdgpu: update arcturus firmware from 21.40
  - amdgpu: update sienna cichlid firmware from 21.40
  - rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  - iwlwifi: add new FWs from core64-96 release
  - iwlwifi: update 9000-family firmwares to core64-96
  - amdgpu: update VCN firmware for green sardine
  - update firmware for mediatek bluetooth chip (MT7921)


author: Herton R. Krzesinski <herton@redhat.com> - 20220209-125
changelog:
  - Update to upstream 20220209 release (rhbz 1967151, 2031174). Changes
    since the last update are noted on items below, copied from the git
    changelog of upstream linux-firmware repository
  - Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  - i915: Add DMC firmware v2.16 for ADL-P
  - mediatek: Update MT8173 VPU firmware to v1.1.7
  - Update firmware file for Intel Bluetooth 9260
  - Update firmware file for Intel Bluetooth 9462
  - Update firmware file for Intel Bluetooth 9560
  - Update firmware file for Intel Bluetooth AX201
  - Update firmware file for Intel Bluetooth AX211
  - Update firmware file for Intel Bluetooth AX210
  - Update firmware file for Intel Bluetooth AX200
  - update firmware for mediatek bluetooth chip (MT7921)
  - update firmware for MT7921 WiFi device
  - Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  - add marvell CPT firmware images
  - update firmware for MT7915
  - iwlwifi: add new FWs from core63-136 release
  - iwlwifi: add new FWs from core66-88 release
  - iwlwifi: update 9000-family firmwares to core66-88
  - add firmware for MT7916
  - Update firmware file for Intel Bluetooth 9462
  - WHENCE: add missing symlink for NanoPi R1
  - amdgpu: update yellow carp dmcub firmware
  - QCA: Add Bluetooth nvm file for WCN685x
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  - QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  - cxgb4: Update firmware to revision 1.26.6.0
  - cnm: add chips&media wave521c firmware
  - rtw88: 8822c: Update normal firmware to v9.9.11
  - i915: Add GuC v69.0.3 for all platforms
  - rtw89: 8852a: update fw to v0.13.33.0


author: Patrick Talbert <ptalbert@redhat.com> - 20220509-126
changelog:
  - Update to upstream 20220509 release (rhbz 2081548, 2081550, 2068137).
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - mediatek: Update mt8183 SCP firmware
  - ice: Update package to 1.3.28.0
  - i915: Add DMC v2.06 for DG2
  - rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  - amdgpu: update psp_13_0_8 firmware
  - amdgpu: update gc_10_3_7_rlc firmware
  - amdgpu: update dcn_3_1_6_dmcub firmware
  - ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  - qcom: add firmware files for Adreno a420 & related generations
  - qcom: add firmware files for Adreno a330
  - qcom: add firmware files for Adreno a220
  - i915: Add GuC v70.1.2 for DG2
  - rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  - Mellanox: Add lc_ini_bundle for xx.2010.1006
  - Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  - ath10k: QCA9984 hw1.0: update board-2.bin
  - ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  - ath10k: QCA9888 hw2.0: update board-2.bin
  - ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  - ath10k: QCA6174 hw3.0: update board-2.bin
  - ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  - ath10k: QCA4019 hw1.0: update board-2.bin
  - ath10k: QCA99X0 hw2.0: add board-2.bin
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  - ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  - ath11k: WCN6750 hw1.0: add board-2.bin
  - ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  - ath11k: QCN9074 hw1.0: add board-2.bin
  - ath11k: QCA6390 hw2.0: update board-2.bin
  - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ8074 hw2.0: update board-2.bin
  - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ6018 hw1.0: update board-2.bin
  - Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  - amdgpu: update yellow carp DMCUB firmware
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for MT7922 WiFi device
  - mediatek: Add mt8195 SCP firmware
  - qcom: apq8096: add modem firmware
  - qcom: apq8096: add aDSP firmware
  - rtl_bt: Add firmware and config files for RTL8852C
  - mediatek: Add mt8192 SCP firmware
  - linux-firmware: Update AMD cpu microcode
  - nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  - brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  - linux-firmware: Update firmware file for Intel Bluetooth 9462
  - linux-firmware: Update firmware file for Intel Bluetooth 9462
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth 9260
  - amdgpu: update green sardine VCN firmware
  - amdgpu: update renoir VCN firmware
  - amdgpu: update navi14 VCN firmware
  - amdgpu: update navi12 VCN firmware
  - amdgpu: update navi10 VCN firmware
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - i915: Add GuC v70.1.1 for all platforms
  - rtw88: 8821c: Update normal firmware to v24.11.00
  - ice: Add wireless edge file for Intel E800 series driver
  - ice: update ice DDP comms package to 1.3.31.0
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update GC 10.3.7 firmware
  - rtl_bt: Add firmware and config files for RTL8852B
  - iwlwifi: add new FWs from core68-60 release
  - ath11k: add links for WCN6855 hw2.1
  - ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  - ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  - ath10k/ath11k: mark notice.txt as "File:"
  - linux-firmware: add firmware for MT7986
  - amdgpu: add firmware for SDMA 5.2.7 IP block
  - amdgpu: add firmware for PSP 13.0.8 IP block
  - amdgpu: add firmware for DCN 3.1.6 IP block
  - amdgpu: add firmware for GC 10.3.7 IP block
  - rtw89: 8852a: update fw to v0.13.36.0
  - iwlwifi: update 9000-family firmwares to core68-60
  - amdgpu: update raven2 VCN firmware
  - amdgpu: update raven VCN firmware
  - amdgpu: update picasso VCN firmware
  - linux-firmware: Update firmware file for Intel Bluetooth 9462
  - linux-firmware: Update firmware file for Intel Bluetooth 9462
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth 9260
  - linux-firmware: Update AMD SEV firmware
  - rtw89: 8852a: update fw to v0.13.35.0
  - Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  - wfx: update to firmware 3.14
  - wfx: add antenna configuration files
  - wfx: rename silabs/ into wfx/
  - linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  - linux-firmware: Update firmware patch for Intel Bluetooth 8260
  - linux-firmware: Update firmware file for Intel Bluetooth 8265
  - linux-firmware: Intel BT 7265: Fix Security Issues
  - rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  - rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  - rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  - amdgpu: Update yellow carp firmware from 21.50
  - amdgpu: Update vega20 firmware from 21.50
  - amdgpu: Update vega12 firmware from 21.50
  - amdgpu: Update vega10 firmware from 21.50
  - amdgpu: Update vangogh firmware from 21.50
  - amdgpu: Update renoir firmware from 21.50
  - amdgpu: Update raven2 firmware from 21.50
  - amdgpu: Update raven firmware from 21.50
  - amdgpu: Update picasso firmware from 21.50
  - amdgpu: Update beige goby firmware from 21.50
  - amdgpu: Update dimgrey cavefish firmware from 21.50
  - amdgpu: Update navy flounder firmware from 21.50
  - amdgpu: Update sienna cichlid firmware from 21.50
  - amdgpu: Update navi14 firmware from 21.50
  - amdgpu: Update navi12 firmware from 21.50
  - amdgpu: Update navi10 firmware from 21.50
  - amdgpu: Update cyan skillfish2 firmware from 21.50
  - amdgpu: Update green sardine firmware from 21.50
  - amdgpu: Update arcturus firmware from 21.50
  - amdgpu: Add aldebaran firmware from 21.50
  - LICENSE.amdgpu: update copyright date
  - linux-firmware: Update AMD cpu microcode
  - linux-firmware: update firmware for MT7921 WiFi device


author: Charalampos Stratakis <cstratak@redhat.com> - 2.13.1-1
changelog:
  - Update to 2.13.1 (#1831402)
  - Fix docs build failures with Sphinx 3 (#1823532)
  - Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2.git.d18d5863-1
changelog:
  - Update to the upstream v3.0.2 + tip of origin/master
    with fixes for an important issue:
    https://github.com/nhorman/rng-tools/pull/123
    https://github.com/smuellerDD/jitterentropy-library/issues/37
  - Add important upstream fixes for the one CPU case (bz 1974132)


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2-2.git.409828cf
changelog:
  - Update to the latest upstream commits upto 409828cf (bz 1973157)
  - Add clock_gettime() software time source
  - Add a code for choosing between software and hardware time sources
    https://github.com/smuellerDD/jitterentropy-library/pull/57
    https://bugzilla.redhat.com/show_bug.cgi?id=1974132


author: Vladis Dronov <vdronov@redhat.com> - 3.3.1-2
changelog:
  - Update to the upstream v3.3.1 @ 887c9871 (bz 2015560)
  - Fix a security issue found by a covscan in jitterentropy library


author: Björn Esser <besser82@fedoraproject.org> - 0.14-2
changelog:
  - Add a patch to backport fixes applied on upstream master branch
  - Re-enable RDRAND as json-c can detect broken implementations in CPUs now
  - Disable -Werror during build


author: Björn Esser <besser82@fedoraproject.org> - 0.14-6
changelog:
  - Build using Ninja instead of Make
  - Add a patch to move Doxyfile into doc subdir
  - Remove pre-built html documentation
  - Update Doxyfile during %prep
  - Add a patch to apply some optimizations to arraylist
  - Hardlink the files in %_pkgdocdir


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.4.0-4
changelog:
  - Fix layout->keymap conversion broken by change in xkeyboard-config
    (patch by Peter Hutterer)
    Resolves: #1950406


author: - Susan LeGendre-McGhee <slegendr@redhat.com> - 8.1.1.371-36
changelog:
  - TEMPORARY FIX to correct build failures regarding bio_reset(), __bio_clone_fast(), and bio_init().
  - Related: rhbz#2060486


author: Julien Rische <jrische@redhat.com> - 1.19.1-14
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode


author: Julien Rische <jrische@redhat.com> - 1.19.1-20
changelog:
  - Fix OpenSSL 3 MD5 encyption in FIPS mode
  - Allow libkrad UDP/TCP connection to localhost in FIPS mode
  - Resolves: rhbz#2068458


author: Julien Rische <jrische@redhat.com> - 1.19.1-21
changelog:
  - Fix libkrad client cleanup
  - Allow use of larger RADIUS attributes in krad library
  - Resolves: rhbz#2100351


author: Julien Rische <jrische@redhat.com> - 1.19.1-22
changelog:
  - Restore "supportedCMSTypes" attribute in PKINIT preauth requests
  - Set SHA-512 or SHA-256 with RSA as preferred CMS signature algorithms
  - Resolves: rhbz#2068935


author: Jan Macku <jamacku@redhat.com> - 0.95-1
changelog:
  - clean up spec based on RHEL 8.4.0 spec
  - remove -Werror=format-truncation=1 from configure
  - update to 0.95 (#1880599)


author: Honza Horak <hhorak@redhat.com> - 590-1
changelog:
  - Update to the version 590
  - Also solves the "message overlay" in the terminal
    Resolves: #2062188


author: Karel Zak <kzak@redhat.com> 2.37.3-1
changelog:
  - upgrade to v2.37.3 (fix CVE-2021-3996, CVE-2021-3995)
  - fix #2040366 - uuidd can't access lock/status file


author: Karel Zak <kzak@redhat.com> 2.37.3-2
changelog:
  - fix #2021462 - partitons detection broken on systems not including the parent name in partition name
  - fix #2033622 - logger from util-linux incorrectly handles long messages
  - fix #2000137 - pam_env bypassed for root user when using su
  - fix #2000477 - rpm -V setup fail on /var/log/lastlog
  - fix #2047952 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Nicola Sella <nsella@redhat.com> - 0.60.0-1
changelog:
  - Update to 0.60.0
  - Fix repo.fresh() implementation
  - build-sys: Add ENABLE_STATIC option
  - Fix: Fully set ssl in newHandle function
  - [conf] Add options for working with certificates used with proxy
  - Apply proxy certificate options
  - lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  - build-sys: Clean up message about Python bindings
  - Modify module NSVCA parsing - context definition (RhBug:1926771)
  - [context] Fix: dnf_package_is_installonly (RhBug:1928056)
  - Fix problematic language
  - Add getApplicablePackages to advisory and isApplicable to advisorymodule
  - Keep isAdvisoryApplicable to preserve API
  - Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  - [context] Support config file option "proxy_auth_method", defaults "any"
  - Support main config file option "installonlypkgs".
  - Support main config file option "protected_packages".
  - Properly handle multiple collections in updateinfo.xml (RhBug:1804234)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.63.0-1
changelog:
  - Fix: Fully set ssl in newHandle function
  - [conf] Add options for working with certificates used with proxy
  - lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  - Modify module NSVCA parsing - context definition (RhBug:1926771)
  - [context] Fix: dnf_package_is_installonly (RhBug:1928056)
  - Add getApplicablePackages to advisory and isApplicable to advisorymodule
  - Keep isAdvisoryApplicable to preserve API
  - Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  - [context] Support config file option "proxy_auth_method", defaults "any"
  - Hardening: add signature check with rpmcliVerifySignatures (RhBug:1932079)
  - Do not allow 1 as installonly_limit value (RhBug:1926261)
  - Add a config option to check TLS certificate revocation status (using OCSP stapling), defaults to false (RhBug:1814383)
  - ModuleProfile: add isDefault()
  - ModulePackage: add getDefaultProfile()
  - Add new dnf_context_module_install() C API
  - Fix a crash when [media] section in .treeinfo is missing for bootable media (RhBug:1946024)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.65.0-1
changelog:
  - Update to 0.65.0
  - Implement logic for demodularization of modular rpms (RhBug:1805260)
  - DnfContext: fix handling of default module profiles
  - ModuleMetadata: gracefully handle modules with no defaults
  - Remove failovermethod config option (RhBug:1961083)
  - Add support for excluding packages to be installed as weak dependencies
  - Add support for autodetecting packages to be excluded from being installed as weak dependencies
  - Turn off strict validation of modulemd documents (RhBug:2004853,2007166,2007167)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.67.0-1
changelog:
  - Fix handling transaction id in resolveTransactionItemReason (RhBug:2010259,2053014)
  - Remove deprecated assertions (RhBug:2027383)
  - Skip rich deps for autodetection of unmet dependencies (RhBug:2033130, 2048394)
  - Increase required rpm version since we use `rpmdbCookie()`
  - Add 'loongarch' support
  - Use dnf solv userdata to check versions and checksum (RhBug:2027445)
  - context: Substitute all repository config options (RhBug:2076853)


author: Christopher Snyder <csnyder@redhat.com> 1.29.20-1
changelog:
  - ENT-4279: Switch away from rhsmlib.compat.subprocess_compat
    (mhorky@redhat.com)
  - 2021578: Remove proxy server test as it is unnecessary (wpoteat@redhat.com)
  - cockpit: validate SSL connection to mock-insights (ptoscano@redhat.com)
  - cockpit: fix hostname of the fake Insights server (ptoscano@redhat.com)
  - cockpit: validate the SSL connection to candlepin (ptoscano@redhat.com)
  - cockpit: resolve hostname of service machine (ptoscano@redhat.com)
  - cockpit: use CANDLEPIN_URL consistently (ptoscano@redhat.com)
  - 1719690: Update to message formatting (wpoteat@redhat.com)
  - cockpit: account for missing insights-client on non-RHEL systems
    (ptoscano@redhat.com)
  - cockpit: skip Insights tests on non-RHEL OSes (ptoscano@redhat.com)
  - ENT-4370: Drop old dbus_interface.py (mhorky@redhat.com)
  - ENT-4278: Drop unittest2 imports (mhorky@redhat.com)
  - 1985845: Fix sub-man service-level --show (jhnidek@redhat.com)
  - spec: drop non-systemd support (ptoscano@redhat.com)
  - spec: drop support for Python < 3 (ptoscano@redhat.com)
  - spec: drop support for Fedora < 33 (ptoscano@redhat.com)
  - spec: drop support for RHEL < 8 (ptoscano@redhat.com)
  - spec: drop support for SUSE < 15 (ptoscano@redhat.com)
  - 2015173: chmod /etc/pki/entitlement/*.pem only when existing
    (ptoscano@redhat.com)
  - cockpit: port subscriptions info icons to PF4 icons (kkoukiou@redhat.com)
  - cockpit: translate some untranslated aria-labels (kkoukiou@redhat.com)
  - cockpit: Port Po2JSONPlugin to webpack 5 (kkoukiou@redhat.com)
  - cockpit: stop including PF3 - it's not used anymore (kkoukiou@redhat.com)
  - cockpit: port Insights dialog remaining non PF4 parts (kkoukiou@redhat.com)
  - cockpit: port subscriptions register dialog to Patternfly 4
    (kkoukiou@redhat.com)
  - cockpit: make default TEST_OS rhel-8-4 (kkoukiou@redhat.com)
  - cockpit: port spinners to PF4 spinners (kkoukiou@redhat.com)
  - cockpit: replace custom Revealer component with 'ExpandableSection' from PF4
    (kkoukiou@redhat.com)
  - cockpit: replace pficon and fa classes with svgs form react-icons
    (kkoukiou@redhat.com)
  - cockpit: remove jquery unused dependency (kkoukiou@redhat.com)
  - cockpit: patternfly is a normal dependency - not just dev
    (kkoukiou@redhat.com)
  - cockpit: update patternfly modules and explicitely specify react-icons
    dependency (kkoukiou@redhat.com)
  - cockpit: clean up package.json from unused dependencies and move to webpack 5
    (kkoukiou@redhat.com)
  - webpack: Use relative resolve path for npm 7 compatibility
    (kkoukiou@redhat.com)
  - cockpit: Stop using a custom Select, use the one from PF instead
    (kkoukiou@redhat.com)
  - cockpit: checkout Cockpit's PF/React/build library instead of keeping a
    direct copy of it locally (kkoukiou@redhat.com)
  - cockpit: update npmshrinkwrap file (kkoukiou@redhat.com)
  - Use pytest --forked for D-Bus unit tests (jhnidek@redhat.com)
  - Support of python3 of zypper rhsm script (suttner@atix.de)
  - 2003777: Fix organizations hint in syspurpose commands (mhorky@redhat.com)
  - Small style changes of d-bus server and d-bus unit tests (jhnidek@redhat.com)
  - * Removed GLib.threads_init() (jhnidek@redhat.com)
  - Added cleanup for one patcher; fixed some comments. (jhnidek@redhat.com)
  - cockpit: skip RHEL 9 tests using insights-client (ptoscano@redhat.com)
  - cockpit: fix system installation of subscription-manager
    (ptoscano@redhat.com)
  - cockpit: wait 5 seconds for candlepin at first (ptoscano@redhat.com)
  - cockpit: use the self-signed key in mock-insights (ptoscano@redhat.com)
  - test: Building requires gcc (mmarusak@redhat.com)
  - test: Tell tests about rhel-9 package manager (mmarusak@redhat.com)
  - facts: drop dead/unused code from CleanupCollector (ptoscano@redhat.com)
  - 1989955: use /proc/device-tree/ibm,partition-uuid on POWER LPARs
    (ptoscano@redhat.com)
  - facts: prepare _get_devicetree_uuid() for multiple files
    (ptoscano@redhat.com)
  - facts: refactor device-tree parts of VirtUuidCollector (ptoscano@redhat.com)
  - cockpit: Move from obsolete node-sass to Dart sass (martin@piware.de)
  - Cloud-what: Make saving token file more robust (jhnidek@redhat.com)
  - Fix redundant API calls to Candlepin (hyu@redhat.com)
  - Remove i-notify watchers on the end of the loop (jhnidek@redhat.com)
  - build: pin flake8 to < 4 (ptoscano@redhat.com)
  - Only rpmlint our specfiles (csnyder@redhat.com)
  - Version our obsoletes of syspurpose and the container plugin
    (csnyder@redhat.com)
  - Remove unnecessary comment and sles/suse tests (csnyder@redhat.com)
  - ENT-4273: Drop usage of six.moves (mhorky@redhat.com)
  - ENT-4379: Remove function make_utf8 (mhorky@redhat.com)
  - ENT-4087: Fix flake8 error E722 (mhorky@redhat.com)
  - make spec file SUSE / Open Build Service compliant (p.seiler@linuxmail.org)
  - 2003777: Only hint organizations if it's needed (mhorky@redhat.com)
  - Drop old GUI docs leftovers (ptoscano@redhat.com)
  - tests: drop no more needed rhsm_display (ptoscano@redhat.com)
  - build: remove old specific check for GUI file (ptoscano@redhat.com)
  - Drop async_utils & its tests (ptoscano@redhat.com)
  - Remove rhsm-icon leftovers (ptoscano@redhat.com)
  - build: remove unused detect_overindent function (ptoscano@redhat.com)
  - build: drop lxml leftovers (ptoscano@redhat.com)
  - build: drop Glade leftovers (ptoscano@redhat.com)
  - Add rhsm proxy support to apt-transport-katello (suttner@atix.de)
  - ENT-4289: Drop Sphinx (mhorky@redhat.com)
  - ENT-4340: Resolve deprecation warnings (mhorky@redhat.com)
  - Fixed one unused import of six (jhnidek@redhat.com)
  - ENT-4272: Remove Python 2 conditionals (mhorky@redhat.com)
  - ENT-4274: Remove six.assert* methods (mhorky@redhat.com)
  - ENT-4275: Switch away from six.BytesIO and six.StringIO (mhorky@redhat.com)
  - ENT-4082: Fix flake8 error E265 (mhorky@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.21-1
changelog:
  - 2020248: handle server-side consumer deletion in syspurpose commands
    (ptoscano@redhat.com)
  - connection: recognize proxy errors (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com>
changelog:
  - Ignore debian architecture ALL (schmidt@atix.de)
  - 2028894: Don't allow service-level --serverurl on registered system
    (mhorky@redhat.com)
  - 2037771: Cockpit registration dialog: enable insights by default
    (jhnidek@redhat.com)
  - 2039322: fix string representation of DMI facts (ptoscano@redhat.com)
  - Drop usage of six.python_2_unicode_compatible (ptoscano@redhat.com)
  - ENT-4588: Switch away from six iterators (mhorky@redhat.com)
  - ENT-4590: Switch away from six.callable (mhorky@redhat.com)
  - ENT-4587: Switch away from six types (mhorky@redhat.com)
  - Adding permissive coverage publishing (jmolet@redhat.com)
  - Ensure that prompted environment entry follows state of multiples
    (wpoteat@redhat.com)
  - 2026316: Do not delete cache of content_access during refresh
    (jhnidek@redhat.com)
  - More SUSE compliance (jhnidek@redhat.com)
  - Updates for non-multi-environment scenario (wpoteat@redhat.com)
  - Fix some minor issues related to syspurpose (jhnidek@redhat.com)
  - syspurpose: handle users w/o organizations (ptoscano@redhat.com)
  - service-level: drop useless check (ptoscano@redhat.com)
  - 2026286: consider user-specified --org in any case (ptoscano@redhat.com)
  - 1995032: Use multiple environments (wpoteat@redhat.com)
  - cache: fix typo in debug message (ptoscano@redhat.com)
  - Switch away from Thread.getName() (ptoscano@redhat.com)
  - Fix indentation of ProductStatus. (jhnidek@redhat.com)
  - 2028969: Do not try to load compliance status from cache (jhnidek@redhat.com)
  - Switch comma-separated join to space-separated join (schmidt@atix.de)
  - 2029927: Fix bash autocompletion (mhorky@redhat.com)
  - utils: use shutil.get_terminal_size() (ptoscano@redhat.com)
  - Remove PyXML leftovers (ptoscano@redhat.com)
  - 2026320: fix format of HTTP-date headers (ptoscano@redhat.com)
  - connection: move HTTP-date formatting to own helper (ptoscano@redhat.com)
  - Ensure datetime.timezone.utc objects for parsed UTC dates
    (ptoscano@redhat.com)
  - rhsm: drop custom which() implementation (ptoscano@redhat.com)
  - facts: switch to shutil.which() (ptoscano@redhat.com)
  - test: unconditionally use hashlib (ptoscano@redhat.com)
  - 1999048: Fixed partially subscribed product in Cockpit plugin
    (jhnidek@redhat.com)
  - test: rename tests to default pytest filename pattern (ptoscano@redhat.com)
  - Fixed last bits related to updated D-Bus Register method.
    (jhnidek@redhat.com)
  - Cockpit plugin: display syspurpose card without attributes
    (jhnidek@redhat.com)
  - 2023257: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
  - 2023257: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
  - Refactoring of temporary disablement of dir watchers. (jhnidek@redhat.com)
  - Ignore enable_content option in RegisterWithActivationKeys()
    (jhnidek@redhat.com)
  - Use benefits of enable_content in cockpit plugin. (jhnidek@redhat.com)
  - Added enable_content option to Register() D-Bus method (jhnidek@redhat.com)
  - Added refresh() method to entitlement service (jhnidek@redhat.com)
  - Fixed issue with status cache (jhnidek@redhat.com)
  - Add information about content access mode to consumer (jhnidek@redhat.com)
  - 2024929: build: fix build on 'build' target (ptoscano@redhat.com)
  - 2023391: libdnf: respect environment CFLAGS (ptoscano@redhat.com)
  - Drop unused ssl_verify_depth config option (ptoscano@redhat.com)
  - tests: drop test_po_files.py (ptoscano@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.23-1
changelog:
  - Ignore debian architecture ALL (schmidt@atix.de)
  - 2028894: Don't allow service-level --serverurl on registered system
    (mhorky@redhat.com)
  - 2037771: Cockpit registration dialog: enable insights by default
    (jhnidek@redhat.com)
  - 2039322: fix string representation of DMI facts (ptoscano@redhat.com)
  - Drop usage of six.python_2_unicode_compatible (ptoscano@redhat.com)
  - ENT-4588: Switch away from six iterators (mhorky@redhat.com)
  - ENT-4590: Switch away from six.callable (mhorky@redhat.com)
  - ENT-4587: Switch away from six types (mhorky@redhat.com)
  - Adding permissive coverage publishing (jmolet@redhat.com)
  - Ensure that prompted environment entry follows state of multiples
    (wpoteat@redhat.com)
  - 2026316: Do not delete cache of content_access during refresh
    (jhnidek@redhat.com)
  - More SUSE compliance (jhnidek@redhat.com)
  - Updates for non-multi-environment scenario (wpoteat@redhat.com)
  - Fix some minor issues related to syspurpose (jhnidek@redhat.com)
  - syspurpose: handle users w/o organizations (ptoscano@redhat.com)
  - service-level: drop useless check (ptoscano@redhat.com)
  - 2026286: consider user-specified --org in any case (ptoscano@redhat.com)
  - Drop the Vagrant bits (ptoscano@redhat.com)
  - 1995032: Use multiple environments (wpoteat@redhat.com)
  - cache: fix typo in debug message (ptoscano@redhat.com)
  - Switch away from Thread.getName() (ptoscano@redhat.com)
  - Fix indentation of ProductStatus. (jhnidek@redhat.com)
  - 2028969: Do not try to load compliance status from cache (jhnidek@redhat.com)
  - Switch comma-separated join to space-separated join (schmidt@atix.de)
  - 2029927: Fix bash autocompletion (mhorky@redhat.com)
  - utils: use shutil.get_terminal_size() (ptoscano@redhat.com)
  - Remove PyXML leftovers (ptoscano@redhat.com)
  - 2026320: fix format of HTTP-date headers (ptoscano@redhat.com)
  - connection: move HTTP-date formatting to own helper (ptoscano@redhat.com)
  - Ensure datetime.timezone.utc objects for parsed UTC dates
    (ptoscano@redhat.com)
  - rhsm: drop custom which() implementation (ptoscano@redhat.com)
  - facts: switch to shutil.which() (ptoscano@redhat.com)
  - test: unconditionally use hashlib (ptoscano@redhat.com)
  - 1999048: Fixed partially subscribed product in Cockpit plugin
    (jhnidek@redhat.com)
  - test: rename tests to default pytest filename pattern (ptoscano@redhat.com)
  - Fixed last bits related to updated D-Bus Register method.
    (jhnidek@redhat.com)
  - Cockpit plugin: display syspurpose card without attributes
    (jhnidek@redhat.com)
  - 2023257: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
  - 2023257: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
  - Refactoring of temporary disablement of dir watchers. (jhnidek@redhat.com)
  - Ignore enable_content option in RegisterWithActivationKeys()
    (jhnidek@redhat.com)
  - Use benefits of enable_content in cockpit plugin. (jhnidek@redhat.com)
  - Added enable_content option to Register() D-Bus method (jhnidek@redhat.com)
  - Added refresh() method to entitlement service (jhnidek@redhat.com)
  - Fixed issue with status cache (jhnidek@redhat.com)
  - Add information about content access mode to consumer (jhnidek@redhat.com)
  - 2024929: build: fix build on 'build' target (ptoscano@redhat.com)
  - 2023391: libdnf: respect environment CFLAGS (ptoscano@redhat.com)
  - Drop unused ssl_verify_depth config option (ptoscano@redhat.com)
  - tests: drop test_po_files.py (ptoscano@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.24-1
changelog:
  - 2023430: Cockpit: another improvement of curtain view (jhnidek@redhat.com)
  - environments: fix list for account in env-less org (ptoscano@redhat.com)
  - Reverting disabling AutoAttach() and PoolAttach() in SCA mode
    (jhnidek@redhat.com)
  - 2023430: cockpit: improve handling of main curtain view (ptoscano@redhat.com)
  - Squelch DeprecationWarning's when importing pyinotify (ptoscano@redhat.com)
  - Drop tox.ini, no more needed now (ptoscano@redhat.com)
  - flake8: improve, and integrate bits from tox.ini (ptoscano@redhat.com)
  - flake8: misc fixes in tito/tests (ptoscano@redhat.com)
  - 2035662: facts: tweak message for dmidecode warnings (ptoscano@redhat.com)
  - facts: improve/tweak logging of warnings (ptoscano@redhat.com)
  - jenkins: use custom settings for the RH internal npmjs repo
    (ptoscano@redhat.com)
  - jenkins: switch away from readFile() (ptoscano@redhat.com)
  - jenkins: simplify script filenames & labels (ptoscano@redhat.com)
  - jenkins: remove old scripts (ptoscano@redhat.com)
  - ENT-4671: Improve debug logging to stdout (mhorky@redhat.com)
  - Drop non-systemd support (ptoscano@redhat.com)
  - ENT-4650: Remove python-six from build system (mhorky@redhat.com)
  - ENT-4093: Fix flake8 warning W605 (mhorky@redhat.com)
  - ENT-4618: Switch away from six.get_method_* (mhorky@redhat.com)
  - ENT-4414: Remove RhsmIconCache (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - ENT-4589: Switch away from six.reraise (mhorky@redhat.com)
  - 2041968: Update man and help for environments options (wpoteat@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.25-1
changelog:
  - 2046516: register: do not check environments w/ activation keys
    (ptoscano@redhat.com)
  - No-op refactor of RegisterCommand._process_environments()
    (ptoscano@redhat.com)
  - 1935446: Use updated cert with SHA-256 algorithm (jhnidek@redhat.com)
  - build: pin pytest to < 7 (ptoscano@redhat.com)
  - Update translation files (noreply@weblate.org)


author: Christopher Snyder <csnyder@redhat.com> 1.29.26-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Revert "1935446: Use updated cert with SHA-256 algorithm"
    (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com>
changelog:
  - Make keeping connection more reliable (jhnidek@redhat.com)
  - Small improvements of keep alive (jhnidek@redhat.com)
  - Keep TCP/TLS connection alive and close connection properly
    (jhnidek@redhat.com)
  - ENT-4700: Switch away from 'imp' (mhorky@redhat.com)
  - ENT-4088: Fix flake8 error E731 (mhorky@redhat.com)
  - ENT-4048: Fix flake8 error E501 (mhorky@redhat.com)
  - ENT-240: Add --no-progress-messages CLI option (mhorky@redhat.com)
  - ENT-240: Use spinner to indicate that API communication is pending
    (mhorky@redhat.com)
  - ENT-240: Make verbose messages translatable (mhorky@redhat.com)
  - ENT-240: Make subscription-manager more verbose (mhorky@redhat.com)
  - 2075455: enable sslverifystatus on repos if advertized by CP
    (ptoscano@redhat.com)
  - RepoUpdateActionCommand: lazy load the consumer auth (ptoscano@redhat.com)
  - 2043331: Do not delete installed SCA cert during registration
    (jhnidek@redhat.com)
  - Remove Group tag from .spec file for RHEL/Fedora (jhnidek@redhat.com)
  - 2073354: Print correct status, when access mode has changed
    (jhnidek@redhat.com)
  - flake8: ignore the build directory (ptoscano@redhat.com)
  - Remove ownership of /etc/rhsm (csnyder@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Revert "build: pin flake8 to < 4" (ptoscano@redhat.com)
  - build: simplify flake8 run (ptoscano@redhat.com)
  - flake8: improve the config a bit (ptoscano@redhat.com)
  - jenkins: run stylish.sh with -e (ptoscano@redhat.com)
  - flake8: simplify/update config (ptoscano@redhat.com)
  - tests: remove unused exception variable (ptoscano@redhat.com)
  - Drop cockpit sources & related bits (ptoscano@redhat.com)
  - cockpit: test with split subscription-manager-cockpit (ptoscano@redhat.com)
  - Remove print statements from test suite (mhorky@redhat.com)
  - Run CI's pytest with verbose flag (mhorky@redhat.com)
  - Optimize rhsmlib DBus test strings (mhorky@redhat.com)
  - Change names of some directories in test/ (mhorky@redhat.com)
  - Reorder rhsmlib tests (mhorky@redhat.com)
  - refresh: clear also the release status (ptoscano@redhat.com)
  - 2074110: clear the release cache on release change (ptoscano@redhat.com)
  - Add gcp_license_codes to system facts. (jhnidek@redhat.com)
  - Pass version to make in debian/rules using 'pkg-info.mk' (reisner@atix.de)
  - Refactored rpm-version to pkg-version (reisner@atix.de)
  - Ignore black commit hashes (mhorky@redhat.com)
  - Add check to YumPluginManager.enable_pkg_plugins() if system is using yum/dnf
    to prevent warnings on debian based systems (reisner@atix.de)
  - Extend HardwareCollector.get_distribution() to return ID and ID_LIKE
    (reisner@atix.de)
  - Format code with black==22.3.0 (mhorky@redhat.com)
  - Add Black to CI (mhorky@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Fix few grammar mistakes in rhsm.conf and man page (jhnidek@redhat.com)
  - 2058662: Fix inaccurate module status in combined profile
    (jhnidek@redhat.com)
  - Add file .git-blame-ignore-revs (mhorky@redhat.com)
  - Update configuration files for flake8 (mhorky@redhat.com)
  - Use double quotes for strings (mhorky@redhat.com)
  - Format the code with black (mhorky@redhat.com)
  - Custom facts should not influence unit tests of cloud-what
    (jhnidek@redhat.com)
  - Drop redhat-uep.pem (ptoscano@redhat.com)
  - Move redhat-entitlement-authority.pem to container plugin
    (ptoscano@redhat.com)
  - Drop subscription-manager-rhsm-certificates package (ptoscano@redhat.com)
  - spec: relax subscription-manager-rhsm-certificates requires
    (ptoscano@redhat.com)
  - test: Rely on insights-client.service to succeed in testSubAndInAndFail
    (mvollmer@redhat.com)
  - integration-tests: Run testSubAndInAndFail with "setenforce 0"
    (mvollmer@redhat.com)
  - integration-test: Use custom TLS certs for mock-insights
    (mvollmer@redhat.com)
  - Keep the user namespace from the host (csnyder@redhat.com)
  - tracking return values of tests (jmolet@redhat.com)
  - Adding containers for development and test (csnyder@redhat.com)
  - Drop old git-checkcommits bits (ptoscano@redhat.com)
  - tests: drop no more needed bits (ptoscano@redhat.com)
  - tests: switch away from SyspurposeTestBase (ptoscano@redhat.com)
  - Drop the rel-eng directory for old tito versions (ptoscano@redhat.com)
  - tests: switch away from SyspurposeTestBase.assertRaisesNothing()
    (ptoscano@redhat.com)
  - tests: use write_to_file_utf8() from syspurpose.utils (ptoscano@redhat.com)
  - tests: directly use tempfile.TemporaryDirectory() (ptoscano@redhat.com)
  - tests: use Capture from the main sub-man fitxure module (ptoscano@redhat.com)
  - tests: switch from assert_equal_dict() to assertEqual() (ptoscano@redhat.com)
  - tests: switch from assert_string_equals() to assertEqual()
    (ptoscano@redhat.com)
  - cockpit: bump API version to 264 (ptoscano@redhat.com)
  - cockpit: simplify skipUnlessDistroFamily() to properly skip tests
    (ptoscano@redhat.com)
  - cockpit: drop rhel-atomic bits (ptoscano@redhat.com)
  - cockpit: bump candlepin minimum waiting time to 10 seconds
    (ptoscano@redhat.com)
  - integration-test: Updates for newer insights-client (mvollmer@redhat.com)
  - 2018221: Cockpit use "Organization ID" in label (jhnidek@redhat.com)
  - 2059631: rhsm.conf: fix typo in comment (ptoscano@redhat.com)
  - 2057053: Improve API of detection of cloud-what (jhnidek@redhat.com)
  - 1935446: Revert "Revert "1935446: Use updated cert with SHA-256 algorithm""
    (ptoscano@redhat.com)
  - cockpit: set $RPM_BUILD_ROOT w/ installing (ptoscano@redhat.com)
  - 2057053: Facts: do no use heuristics detection of cloud (jhnidek@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Improve azure determination method (suttner@atix.de)
  - 2056896: Handle all exceptions of gathering data properly
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.29-1
changelog:
  - Translated using Weblate (Japanese) (suanand@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - ENT-5215: Handle all exceptions caused by network problems
    (mhorky@redhat.com)
  - ENT-5215: Handle errors raised in DNF plugin (mhorky@redhat.com)
  - Make TestProfileManager subclass of SubManFixture (mhorky@redhat.com)
  - ENT-5054: Drop singleton implementation in rhsmlib/utils.py
    (mhorky@redhat.com)
  - Rename test file for rhsm/utils.py (mhorky@redhat.com)
  - ENT-5054: Create singleton decorators in rhsm/utils.py (mhorky@redhat.com)
  - zypper: drop dead python-dmidecode usage (ptoscano@redhat.com)
  - facts: drop DmiFirmwareInfoCollector (ptoscano@redhat.com)
  - facts: switch to DmidecodeFactCollector for DMI facts (ptoscano@redhat.com)
  - facts: add dmidecode parser and facts collector (ptoscano@redhat.com)
  - cloud-what: switch MiniHostCollector to dmidecode(1) (ptoscano@redhat.com)
  - 2096446: Make 'rhsm-debug' autocomplete --no-progress-messages
    (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - 2092014: Do not use injections in rhsm (mhorky@redhat.com)
  - ci: run rpmlint as part of stylish (ptoscano@redhat.com)
  - build: switch rpmlint check to rpmlint 2.x (ptoscano@redhat.com)
  - ci: drop stylish job from Jenkins (ptoscano@redhat.com)
  - ci: add black & flake8 check using GitHub Actions (ptoscano@redhat.com)
  - build: install files without exec permissions (ptoscano@redhat.com)
  - 2092014: Disable progress messages when sub-man RPM is not installed
    (mhorky@redhat.com)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Richard Hughes <richard@hughsie.com> 0.3.2-1
changelog:
  - New upstream version
  - Do not use deprecated libusb API
  - Use a 1ms timeout in the Windows event thread


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-5
changelog:
  - Resolves: rhbz#1909755 - Suppress log message "[sssd] [service_signal_done] (0x0010): Unable to signal service [2]: No such file or directory" during logrote
  - Resolves: rhbz#1962123 - [sssd] RHEL 9.0 Beta Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.1-1
changelog:
  - Resolves: rhbz#2011224 - Rebase SSSD for RHEL 9.0-GA
  - Resolves: rhbz#1966201 - sssd: incorrect checks on length values during packet decoding in unpack_authtok()
  - Resolves: rhbz#977803 - incorrect checks of `strto*()` string to number convertion functions
  - Resolves: rhbz#1992432 - Add client certificate validation D-Bus API
  - Resolves: rhbz#1992973 - Lookup with fully-qualified name does not work with 'cache_first = True'
  - Resolves: rhbz#1996151 - Add support for CKM_RSA_PKCS in smart card authentication.
  - Resolves: rhbz#1998459 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest)
  - Resolves: rhbz#2000476 - disabled root ad domain causes subdomains to be marked offline
  - Resolves: rhbz#2014249 - Consistency in defaults between OpenSSH and SSSD
  - Resolves: rhbz#2029419 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-1
changelog:
  - Resolves: rhbz#2011224 - Rebase SSSD for RHEL 9.0-GA
  - Resolves: rhbz#2017390 - [sssd] RHEL 9.0 GA Tier 0 Localization
  - Resolves: rhbz#2013263 - [RHEL9] Add ability to parse child log files
  - Resolves: rhbz#2013262 - [RHEL9] Add tevent chain ID logic into responders
  - Resolves: rhbz#1992432 - Add client certificate validation D-Bus API
  - Resolves: rhbz#1940517 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-2
changelog:
  - Resolves: rhbz#2035244 - AD Domain in the AD Forest Missing after sssd latest update
  - Resolves: rhbz#2041560 - sssd does not use kerberos port that is set.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.0-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#2072640 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
  - Resolves: rhbz#2070189 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
  - Resolves: rhbz#2070138 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
  - Resolves: rhbz#2065693 - [RHEL9] Ship new sub-package called sssd-idp into sssd
  - Resolves: rhbz#2065098 - Use right sdap_domain in ad_domain_info_send
  - Resolves: rhbz#2062716 - [Improvement] Add user and group version of sss_nss_getorigbyname()
  - Resolves: rhbz#2061795 - Unable to lookup AD user if the AD group contains '@' symbol
  - Resolves: rhbz#2056482 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
  - Resolves: rhbz#1937895 - SSSD update prompts for smartcard pin twice - After update to 7.9
  - Resolves: rhbz#1925559 - [RFE] Implement time logging for the LDAP queries and warning of high queries time
  - Resolves: rhbz#1915564 - sssd does not enforce smartcard auth for kde screen locker
  - Resolves: rhbz#1859751 - [RFE] Allow SSSD to use anonymous pkinit for FAST
  - Resolves: rhbz#1749279 - 2FA prompting setting ineffective
  - Resolves: rhbz#1661055 - sssd fails GPO-based access if AD have setup with Japanese language
  - Resolves: rhbz#1245367 - [RFE] Implement memory cache for SID requests to improve performance


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.1-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#1893192 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
  - Resolves: rhbz#1927553 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
  - Resolves: rhbz#2089216 - pam_sss_gss ceased to work after upgrade to 8.6
  - Resolves: rhbz#2090776 - Add idp authentication indicator in man page of sssd.conf
  - Resolves: rhbz#1927195 - sssd runs out of proxy child slots and doesn't clear the counter for Active requests
  - Resolves: rhbz#2073095 - Harden kerberos ticket validation
  - Resolves: rhbz#2082455 - 'getent hosts' not return hosts if they have more than one CN in LDAP
  - Resolves: rhbz#2087581 - Regression "Missing internal domain data." when setting ad_domain to incorrect


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.1-2
changelog:
  - Resolves: rhbz#2073095 - Harden kerberos ticket validation (additional patch)
  - Resolves: rhbz#2061795 - Unable to lookup AD user if the AD group contains '@' symbol (additional patch)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#1936551 - [Improvement] Provide user feedback when login fails due to blocked PIN
  - Resolves: rhbz#1978119 - [Improvement] avoid interlocking among threads that use `libsss_nss_idmap` API (or other sss_client libs)
  - Resolves: rhbz#2062665 - [sssd] RHEL 9.1 Tier 0 Localization


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Sahana Prasad <sahana@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream version 1.2.1
  - Remove patch fix MSG_MORE uasge as it is added upstream
  - Remove cppcheck dependency for rhel bz#1931518
  - Add a patch to fix fuzz tests


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Hangbin Liu <haliu@redhat.com> - 1.8-1
changelog:
  - 1.8 release (rhbz#1958933)
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: Steve Dickson <steved@redhat.com> 2.5.4-3
changelog:
  - mount.nfs: insert 'sloppy' at beginning of the options (bz 1987070)
  - spec: Fix dependency problems with nfsdclnts (bz 1924708)
  - nfsdcltrack: Fix printf format (bz 1995316)


author: Alice Mitchell <ajmitchell@redhat.com> 2.5.4-5
changelog:
  - triggerun doesn't work correctly unless the epoch is given (bz 1937811)
  - Restored the nfs-utils-2.5.4-mount-sloppy.patch (bz 1987070)
  - General memory fixes (bz 1938822)


author: Steve Dickson <steved@redhat.com> 2.5.4-11
changelog:
  - nfs.man: adding new mount option max_connect (bz 2106848)
  - systemd: Fix format-overflow warning (bz 2106896)


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Nicola Sella <nsella@redhat.com> - 1.13.0-1
changelog:
  - Update to 1.13.0
  - Add support for working with certificates used with proxy
  - Drop Python 2 support
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for pkcs11 certificate and key for repository authorization
  - Fix default value for LRO_SSLVERIFYSTATUS
  - Don't use max_ranges to determine if we expect zchunk callback
  - Prefer HTTP over FTP mirrors when zchunk is enabled
  - Fixed mem leaks and typos


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-106
changelog:
  - resolves: rhbz#2065376 - Fix 'create krb5 conf = yes` when a KDC has a single IP address.
  - resolves: rhbz#2076504 - PAM Kerberos authentication fails with a clock skew error


author: Pavel Filipenský <pfilipen@redhat.com> - 4.16.2-101
changelog:
  - resolves: rhbz#2093833 - Fix weak dependency on logrotate
  - resolves: rhbz#2096813 - Fix printer displays only after 300 seconds timeout


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.5-1
changelog:
  - Update to version 0.9.5
    https://www.libssh.org/2020/09/10/libssh-0-9-5/
  - Removed patch to re-enable algorithms using sha1 in sshd for testing
  - The algorithms supported by sshd are now automatically detected for testing
  - Resolves: #1862457 - CVE-2020-16135


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-1
changelog:
  - Fix CVE-CVE-2021-3634 libssh: possible heap-based buffer
    overflow when rekeying
  - Fix static analyzer issues in rhbz#1938795
  - Rebase to version 0.9.6
  - Resolves: rhbz#1994607, rhbz#1938795, rhbz#2009669


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Tom Stellard <tstellar@redhat.com> - 1.2.6-2
changelog:
  - Add BuildRequires: gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_packaging


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Tomas Halman <thalman@redhat.com>
changelog:
  - Renaming python package according to the standard
  - Resolves: rhbz#1951968

  =======
  >>>>>>> 96fbb4a91a8471e931d872e7b696d176fc351605


author: Tomas Halman <thalman@redhat.com>
changelog:
  - Enable audit library in the build 
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Victor Stinner <vstinner@python.org> - 2.9.10-9
changelog:
  - Build the Python extension with the PY_SSIZE_T_CLEAN macro to make it
    compatible with Python 3.10.
  - Fixes: rhbz#1890878.


author: David King <dking@redhat.com> - 2.9.10-12
changelog:
  - Fix CVE-2021-3516 (#1956969)
  - Fix CVE-2021-3517 (#1957002)
  - Fix CVE-2021-3518 (#1957029)
  - Fix CVE-2021-3537 (#1957285)


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Kamil Dudka <kdudka@redhat.com> - 3.18.0-4
changelog:
  - make `renamecopy` and `copytruncate` override each other (#1934601)
  - unify documentation of copy/copytruncate/renamecopy (#1934629)
  - fix resource leaks reported by Coverity


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: DJ Delorie <dj@redhat.com> - 1:4.3-5
changelog:
  - Allow users to build with or without guile support as desired.
  - Allow derivative downstreams to default to disabling guile support.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20201112-1
changelog:
  - Update Intel CPU microcode to microcode-20201112 release (#1896912):
    - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
      to 0x34;
    - Updated releasenote file.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20201112-2
changelog:
  - Do not use "grep -q" in a pipe in check_caveats (#1902021).
  - Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
    (#1902884).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210216-1
changelog:
  - Update Intel CPU microcode to microcode-20210216 release (#1902884):
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
      to 0x2006a0a;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
      up to 0x4003006;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003003 up to 0x5003006.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210525-1
changelog:
  - Update Intel CPU microcode to microcode-20210525 release, addresses
    CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
    (#1962664, #1962714, #1962734, #1962680):
    - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
    - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
    - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
    - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
    - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
      at revision 0xb00000f;
    - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
      at revision 0xb00000f;
    - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
    - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
    - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
    - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
    - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
    - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
    - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
      intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
      to 0xb00003e;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
      to 0x2006b06;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
      to 0xea;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
      to 0xea;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
      to 0xea;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
      to 0xea;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xde up to 0xea;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
      to 0xea;
    - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
      from revision 0x44 up to 0x46;
    - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
      to 0x19;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
      up to 0x100015b;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
      up to 0x4003102;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003006 up to 0x5003102;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
      up to 0x7002302;
    - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
      0x7000019 up to 0x700001b;
    - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
      up to 0xf000019;
    - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
      0xe00000f up to 0xe000012;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
      to 0x44;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
      to 0x20;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
      to 0x34;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
      to 0x36;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
      to 0x1a;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
      up to 0xa6;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
      to 0x2a;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
      to 0xea;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
      up to 0xea;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
      up to 0xec;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
      up to 0xe8;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
      0xe0 up to 0xea.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210525-2
changelog:
  - Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
    intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
    and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
  - Enable 06-8c-01 microcode update by default (#1970611).
  - Enable 06-5e-03 microcode update by default (#1897673).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210608-1
changelog:
  - Update Intel CPU microcode to microcode-20210608 release (#1921773):
    - Fixes in releasenote.md file.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20220207-1
changelog:
  - Update Intel CPU microcode to microcode-20220207 release, addresses
    CVE-2021-0127, CVE-2021-0145, and CVE-2021-33120 (#2053253):
    - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
    - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
      at revision 0xb00000f;
    - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
      at revision 0xb00000f;
    - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
    - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
      intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
      to 0xb000040;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
      to 0x2006c0a;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xea up
      to 0xec;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xea up
      to 0xec;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xea up
      to 0xec;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xea up
      to 0xec;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xea up to 0xec;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xea up
      to 0xec;
    - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
      from revision 0x46 up to 0x49;
    - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
      to 0x1a;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
      up to 0x100015c;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
      up to 0x400320a;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003102 up to 0x500320a;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
      up to 0x7002402;
    - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
      0x700001b up to 0x700001c;
    - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
      up to 0xf00001a;
    - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
      0xe000012 up to 0xe000014;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
      to 0x46;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
      to 0x24;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
      to 0x36;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
      up to 0xd000331;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
      to 0x1c;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
      up to 0xa8;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
      to 0x2d;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
      to 0x22;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
      to 0x3c;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
      to 0x15;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
      to 0x2400001f;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
      to 0xec;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
      up to 0xec;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
      up to 0xee;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
      up to 0xea;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xea up to 0xec;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
      to 0x50.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20220510-1
changelog:
  - Update Intel CPU microcode to microcode-20220510 release, addresses
    CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090248,
      - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      at revision 0x1f;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-97-05) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      at revision 0x1f;
    - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
      revision 0x41c;
    - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) at revision 0x41c;
    - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) at revision 0x41c;
    - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-bf-02) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
      at revision 0x1f;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-bf-05) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
      to 0x2006d05;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xec up to 0xf0;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
      to 0xf0;
    - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
      to 0x90d;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
      up to 0x100015d;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
      up to 0x4003302;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x500320a up to 0x5003302;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
      up to 0x7002501;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
      to 0x48;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
      to 0x28;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
      up to 0xd000363;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
      to 0x1e;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
      up to 0xb0;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
      to 0x31;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
      to 0x26;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
      to 0x3e;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
      to 0x16;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
      up to 0x24000023;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
      to 0xf0;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
      up to 0xf0;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
      up to 0xf0;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
      up to 0xf0;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xec up to 0xf0;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
      to 0x53.


author: Nicola Sella <nsella@redhat.com> - 3.5.0-1
changelog:
  - Update to 3.5.0
  - Add module enable and disable commands
  - Add reports of module changes
  - Add "module enable" command
  - Add subcommands support
  - Print info about obsoleted packages before transaction (RhBug:1855542)


author: Nicola Sella <nsella@redhat.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - spec: Sync summary and description from openSUSE
  - Add support for setting a platform module ID
  - Add dependency for DNF configurations skeleton
  - Add support for setting allow_vendor_change


author: Nicola Sella <nsella@redhat.com> - 3.7.1-1
changelog:
  - Update to 3.7.1
  - [download] fix: unwanted dependency on newer glib 
  - [download] Support for "--resolve" and "--alldeps" arguments 
  - [download] New get_packages_query function
  - Support "--setopt=keepcache=0/1"
  - [download] Support "--archlist=" argument
  - [download] Move package download code to "download_packages" function
  - [download] several optimizations
  - Don't set default value of "assumeyes" to TRUE 
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Extend "--setopt" to support repository options 
  - Added alias "update" to "upgrade" command
  - Command "update" renamed to "upgrade"
  - Add support for command aliases
  - dnf-data requirement only for Fedora and future RHEL
  - Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
  - Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - distrosync: Fix style issues and plugin build with Meson 
  - Add distro-sync subcommand
  - Add "makecache" command


author: Tomas Popela <tpopela@redhat.com> - 0.26-27
changelog:
  - Don't prune bind mounts on ostree based systems, prune the deployments folder
    there to avoid duplications.
  - Fixes: https://github.com/fedora-silverblue/issue-tracker/issues/76


author: Pavel Cahyna <pcahyna@redhat.com> - 4.0.26-4
changelog:
  - Add dependency on glibc-gconv-extra
    mtools need codepage 850, which was split from glibc into a subpackage.
    (Fedora bug #2021637, RHEL bug #2073843)


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-8
changelog:
  - tests: cover baecd1cf2685 ("segtree: Fix segfault when restoring a huge interval set")
  - segtree: Fix segfault when restoring a huge interval set


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-10
changelog:
  - tests: shell: better parameters for the interval stack overflow test
  - tests: shell: $NFT needs to be invoked unquoted


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-11
changelog:
  - tests: py: add dnat to port without defining destination address
  - evaluate: fix inet nat with no layer 3 info
  - include: missing sctp_chunk.h in Makefile.am
  - exthdr: Implement SCTP Chunk matching
  - scanner: sctp: Move to own scope
  - scanner: introduce start condition stack
  - json: Simplify non-tcpopt exthdr printing a bit


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-13
changelog:
  - tests: extend dtype test case to cover expression with integer type
  - evaluate: set evaluation context for set elements


author: Phil Sutter <psutter@redhat.com> [1.0.4-2.el9]
changelog:
  - intervals: Do not sort cached set elements over and over again (Phil Sutter) [1917398]
  - intervals: do not empty cache for maps (Phil Sutter) [1917398]
  - intervals: do not report exact overlaps for new elements (Phil Sutter) [1917398]
  - rule: collapse set element commands (Phil Sutter) [1917398]
  - tests: shell: runtime set element automerge (Phil Sutter) [1917398]


author: Than Ngo <than@redhat.com> - 3.18.0-1
changelog:
  - Resolves: #2044179, rebase to 3.18.0
  - Resolves: #2068091, pkcsconf -t failed with Segmentation fault in FIPS mode
  - Resolves: #2066763, Dilithium support not available
  - Resolves: #2064697, OpenSSL 3.0 Compatibility for IBM Security Libraries and Tools
  - Resolves: #2044181, support crypto profiles
  - Resolves: #2044180, add crypto counters


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-6
changelog:
  - Fix slapd.tmpfiles complaints. Related: rhbz#1969853
  - Use https:// for source Related: rhbz#1973597


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Jakub Jelen <jjelen@redhat.com> - 0.22.0-2
changelog:
  - Unbreak detection of unentrolled smart cards (#2007029)
  - Enable file caching by default except for pkcs15-init (#2000626)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-10
changelog:
  - Set minimal value of RSA key length via configuration option
    Related: rhbz#2066882
  - Use EVP functions for RSA key generation
    Related: rhbz#2087121


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-11
changelog:
  - Fix scp clearing file when src and dest are the same
    Resolves: rhbz#2056884
  - Add missing options from ssh_config into ssh manpage
    Resolves: rhbz#2033372
  - Fix several memory leaks
    Related: rhbz#2068423
  - Fix gssapi authentication failures
    Resolves: rhbz#2091023
  - Fix host-based authentication with rsa keys
    Resolves: rhbz#2088916


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-12
changelog:
  - Disable sntrup761x25519-sha512 in FIPS mode
    Related: rhbz#2070628
  - Disable ed25519 and ed25519-sk keys in FIPS mode
    Related: rhbz#2087915


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-29
changelog:
  - `-config` argument of openssl app should work properly in FIPS mode
  - Resolves: rhbz#2083274
  - openssl req defaults on PKCS#8 encryption changed to AES-256-CBC
  - Resolves: rhbz#2063947


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-31
changelog:
  - Disable SHA-1 signature verification in FIPS mode
  - Disable EVP_PKEY_sign/EVP_PKEY_verify in FIPS mode
    Resolves: rhbz#2087147


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-32
changelog:
  - `openssl ecparam -list_curves` lists only FIPS-approved curves in FIPS mode
  - Resolves: rhbz#2083240
  - Ciphersuites with RSA KX should be filterd in FIPS mode
  - Related: rhbz#2085088
  - In FIPS mode, signature verification works with keys of arbitrary size
    above 2048 bit, and only with 1024, 1280, 1536, 1792 bits for keys
    below 2048 bits
  - Resolves: rhbz#2077884


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-33
changelog:
  - CVE-2022-1473 openssl: OPENSSL_LH_flush() breaks reuse of memory
  - Resolves: rhbz#2089444
  - CVE-2022-1343 openssl: Signer certificate verification returned
    inaccurate response when using OCSP_NOCHECKS
  - Resolves: rhbz#2087911
  - CVE-2022-1292 openssl: c_rehash script allows command injection
  - Resolves: rhbz#2090362
  - Revert "Disable EVP_PKEY_sign/EVP_PKEY_verify in FIPS mode"
    Related: rhbz#2087147
  - Use KAT for ECDSA signature tests, s390 arch
  - Resolves: rhbz#2069235


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-35
changelog:
  - Add explicit indicators for signatures in FIPS mode and mark signature
    primitives as unapproved.
    Resolves: rhbz#2087147


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-36
changelog:
  - Ciphersuites with RSAPSK KX should be filterd in FIPS mode
  - Related: rhbz#2085088
  - FIPS provider should block RSA encryption for key transport.
  - Other RSA encryption options should still be available if key length is enough
  - Related: rhbz#2053289
  - Improve diagnostics when passing unsupported groups in TLS
  - Related: rhbz#2070197
  - Fix PPC64 Montgomery multiplication bug
  - Related: rhbz#2098199
  - Strict certificates validation shouldn't allow explicit EC parameters
  - Related: rhbz#2058663
  - CVE-2022-2068: the c_rehash script allows command injection
  - Related: rhbz#2098277


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-38
changelog:
  - Fix segfault in EVP_PKEY_Q_keygen() when OpenSSL was not previously
    initialized.
    Resolves: rhbz#2103289
  - Improve AES-GCM performance on Power9 and Power10 ppc64le
    Resolves: rhbz#2051312
  - Improve ChaCha20 performance on Power10 ppc64le
    Resolves: rhbz#2051312


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Brian C. Lane <bcl@redhat.com> - 3.4-4
changelog:
  - Fix issues that covscan classifies as important
    Resolves: rhbz#1938836
  - Work around a mkswap bug


author: Brian C. Lane <bcl@redhat.com> - 3.5-1
changelog:
  - Rebase to upstream release 3.5
  - Drop patches included in new upstream tar
  - Add upstream patches for new type command
  - Add upstream patch for swap flag on DASD
    Resolves: rhbz#1999333


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Petr Pisar <ppisar@redhat.com> - 10.36-4
changelog:
  - Fix a mismatch if \K was involved in a recursion
  - Restore single character repetition optimization in JIT (upstream bug #2698)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-1
changelog:
  - Rebase to the 10.37
  - libpcre2-posix.so.2* SONAME bump to libpcre2-posix.so.3*
  - Enable JIT for s390x arch
  - Patches upstreamed: Patch 1,2,3,4
  - Resolves: rhbz#1970765, BZ#1965025


author: Jakub Jelen <jjelen@redhat.com> - 1.9.4-1
changelog:
  - Rebase to current version from Fedora (#2017828)
  - Use of upstrea polkit policy preventing unneeded prompts


author: Jan Rybar <jrybar@redhat.com> - 3.3.16-2
changelog:
  - ps: new exe format option to show real path to exe
  - pidof: new -w option to show kernel worker threads
  - pkill: manpage to document -e option
  - Resolves: bz#1629413
  - Resolves: bz#1399206


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Miro Hrončok <mhroncok@redhat.com> - 1:2.8.0-7
changelog:
  - Subpackage python2-dateutil has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 4.4.0-5
changelog:
  - Subpackage python2-decorator has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Christian Heimes <cheimes@redhat.com> - 2.1.0-3
changelog:
  - Add bconds for extras require trio, curio, and doh
  - Move trio and curio backend modules into extras subpackages
  - Enable python3-dns+curio meta package
  - Skip failing test testCanonicalNameDangling


author: Miro Hrončok <mhroncok@redhat.com> - 0.4-39
changelog:
  - Subpackage python2-iniparse has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 0.9.6-19
changelog:
  - Subpackages python2-inotify, python2-inotify-examples have been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: John Kacur <jkacur@redhat.com> - 0.6.3-5
changelog:
  - various clean-ups including using 'with' context managers in try-except
  - Fix to ignore UnicodeDecodeError when it occurs
  Resolves: rhbz#2031717


author: Dan Radez <dradez@redhat.com> - 4.8.0-6
changelog:
  - adding workaround for https://bugzilla.redhat.com/show_bug.cgi?id=1914843
  - while we wait for upstream fix: https://github.com/pexpect/pexpect/issues/669


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-4
changelog:
  - Make the python-pip-wheel subpackage versioned (python3-pip-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-5
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Miro Hrončok <mhroncok@redhat.com> - 0.6.0-8
changelog:
  - Subpackage python2-ptyprocess has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 53.0.0-1
changelog:
  - Update to 53.0.0
  - https://setuptools.readthedocs.io/en/latest/history.html#v53-0-0
  - Fixes: rhbz#1923249


author: Tomas Orsava <torsava@redhat.com> - 53.0.0-5
changelog:
  - Provide the platform-python-setuptools name for backwards compatibility
    with RHEL 8
  - Related: rhbz#1891487


author: Tomas Orsava <torsava@redhat.com> - 53.0.0-7
changelog:
  - Make the python-setuptools-wheel subpackage versioned (python3-setuptools-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Miro Hrončok <mhroncok@redhat.com> - 234-11
changelog:
  - Subpackage python2-systemd has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.25.10-3
changelog:
  - Drop redundant BuildRequires for nose
  - Instead of the mock backport, use unittest.mock from the standard library


author: Karolina Surma <ksurma@redhat.com> - 1.26.5-1
changelog:
  - Update to 1.26.5
  - Fix for CVE-2021-33503 Catastrophic backtracking in URL authority parser
  Resolves: rhbz#1972639


author: Tomas Orsava <torsava@redhat.com> - 3.9.9-2
changelog:
  - Read pre-packaged Python wheels from a newly versioned directory
    /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-8
changelog:
  - Support hash v8 databases from BDB < 4.6 (#1965147)
  - Ensure ELF files get stripped when debuginfo is disabled (#1999009)
  - Actually honor libarchive bcond at configure time (#1999012)
  - Unbreak checking of installed rich dependencies (#2015407)
  - Rebuild against soname bump in ima-evm-utils (#2026079)
  - Fix IMA signature lengths assumed constant (#2018937)
  - Validate and require subkey binding sigs on PGP pubkeys (#1943724)
  - Fixes CVE-2021-3521


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-10
changelog:
  - Address covscan issues in binding sigs validation patch (#1943724)
  - Bump hash for rpmdb cookie to SHA256 for FIPS (#2048455)
  - Add --path query option (#2037352)
  - Skip recorded symlinks in --setperms (#2025906)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-11
changelog:
  - Fix IMA signature lengths assumed constant, take III (#2018937)
  - Fix regression reading rpm v3 and other rare packages (#2037186)
  - Fix spurious %transfiletriggerpostun execution (#2023692)


author: Petr Lautrbach <plautrba@redhat.com> - 4.4.0-0.1.20201102git05e90ee
changelog:
  - Update to 05e90ee
  - Add /usr/bin/sechecker
  - Adapt to new libsepol filename transition structures
  - Rebuild with libsepol.so.2


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Sumit Bose <sbose@redhat.com> - 0.17.0-8
changelog:
  - LDAP socket timeout, fix duplicated logs and new Samba command line options
    Resolves: rhbz#2038260
    Resolves: rhbz#2038268
    Resolves: rhbz#2028530


author: Fedora Release Engineering <releng@fedoraproject.org> - 1:0.4-0.44.b46
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
  - Use standard make_build and make_install macros in spec file.


author: Jeff Makey <jeff@makey.net> - 1:0.4-0.46.b47
changelog:
  - New upstream release 0.4b47
  - Update main URL.
  - Drop dump-glibc_xattr patch, now applied upstream.
  - Drop documentation conversion from ISO-8859-1 to UTF-8, now applied upstream.
  - Print correct name of archive table of contents file (#1727392).


author: Josef Ridky <jridky@redhat.com> - 1:0.4-0.51.b47
changelog:
  - rename spec file to restore
  - add gating.yaml
  - changes between .47 and .51 had to be stripped due of wrong sync
    between centos and dist-git


author: Pavel Raiskup <praiskup@redhat.com> - 1.6-1
changelog:
  - new upstream release
  - drop WITH_SELINUX knob and selinux patches, there's built-in support now
  - drop several patches which were incorporated upstream, except for
    changewarnSegv patch (did not apply, and not needed nowadays)


author: Vladis Dronov <vdronov@redhat.com> - 6.12-4
changelog:
  - Allow rngd to run as non-privledged user (bz 1965318)
  - Update the rngd.service file
  - Add 3 small upstream patches fixing issues


author: Vladis Dronov <vdronov@redhat.com> - 6.13-1
changelog:
  - Update the sources to 6.13
  - Add important fixes from the upstream
  - Remove Provides: jitterentropy-rngd as it was retired in f29.


author: Vladis Dronov <vdronov@redhat.com> - 6.13-3
changelog:
  - Adjust rngd-wake-threshold.service and post section so udevadm
    is not run in a container (bz 1965318)


author: Vladis Dronov <vdronov@redhat.com> - 6.13-4.git.d207e0b6
changelog:
  - Update to the upstream v6.13 + tip of origin/master + onecpu
    branch + revert of 2ce93190 (bz 1965318)
  - Rebuild rng-tools against the latest jitterentropy library
    3.0.2-2.git.409828cf with fixes for an important issue
  - Adjust Source0 to a more proper one


author: Vladis Dronov <vdronov@redhat.com> - 6.15-1
changelog:
  - Update to the upstream v6.15 @ 172bf0e3 (bz 2075977)
  - Allow rngd process to drop privileges with "-D user:group"
  - Fix an error building with jitterentropy-3.4.0
  - Add a requirement for selinux-policy of a certain version
  - Fix a build failure on ppc64
  - Small edits in test scripts


author: Till Maas <opensource@till.name> - 8.1-26
changelog:
  - Sync in current files from bash package:
    https://src.fedoraproject.org/rpms/bash/c/739b272e5f5d10cf27a847a44d09eb7f4b6ec89b?branch=master
    https://src.fedoraproject.org/rpms/bash/c/329df36f8bbc303be618f06562ec2c4eebfd1d29?branch=master
    https://src.fedoraproject.org/rpms/bash/c/e3b3cd9cec4a3bd12a792536c0ea131f5ba5bd72?branch=master


author: Steve Dickson <steved@redhat.com> - 1.2.6-1
changelog:
  - Use sysconfig variable in service file (bz 1972094)
  - Make sure policycoreutils is installed before using it (bz 1972133)
  - Make sure /var/lib/rpcbind exists (bz 1972133)
  - Corrected the URL reference (bz 1972117)


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-4
changelog:
  - Resolves: #1894485 - rsync is unable to set permissions when chrooted
  - Getting rid of deprecated makeinstall macro


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-7
changelog:
  - Resolves: #1955008 - rsync segfaults in --append mode when file on sender is large (> 2GB) and gets truncated


author: Nikola Knazekova <nknazeko@redhat.com> - v34.1.31-1
changelog:
  - Label /var/run/machine-id as machineid_t
  Resolves: rhbz#2061680
  - Allow insights-client create_socket_perms for tcp/udp sockets
  Resolves: rhbz#2077377
  - Allow insights-client read rhnsd config files
  Resolves: rhbz#2077377
  - Allow rngd drop privileges via setuid/setgid/setcap
  Resolves: rhbz#2076642
  - Allow tmpreaper the sys_ptrace userns capability
  Resolves: rhbz#2062823
  - Add stalld to modules.conf
  Resolves: rhbz#2042614
  - New policy for stalld
  Resolves: rhbz#2042614
  - Label new utility of NetworkManager nm-priv-helper
  Resolves: rhbz#2053639
  - Exclude container.if from selinux-policy-devel
  Resolves: rhbz#1861968


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.32-1
changelog:
  - Dontaudit guest attempts to dbus chat with systemd domains
  Resolves: rhbz#2062740
  - Dontaudit guest attempts to dbus chat with system bus types
  Resolves: rhbz#2062740
  - Fix users for SELinux userspace 3.4
  Resolves: rhbz#2079290
  - Removed adding to attribute unpriv_userdomain from userdom_unpriv_type template
  Resolves: rhbz#2076681
  - Allow systemd-sleep get removable devices attributes
  Resolves: rhbz#2082404
  - Allow systemd-sleep tlp_filetrans_named_content()
  Resolves: rhbz#2082404
  - Allow systemd-sleep execute generic programs
  Resolves: rhbz#2082404
  - Allow systemd-sleep execute shell
  Resolves: rhbz#2082404
  - Allow systemd-sleep transition to sysstat_t
  Resolves: rhbz#2082404
  - Allow systemd-sleep transition to tlp_t
  Resolves: rhbz#2082404
  - Allow systemd-sleep transition to unconfined_service_t on bin_t executables
  Resolves: rhbz#2082404
  - allow systemd-sleep to set timer for suspend-then-hibernate
  Resolves: rhbz#2082404
  - Add default fc specifications for patterns in /opt
  Resolves: rhbz#2081059
  - Use a named transition in systemd_hwdb_manage_config()
  Resolves: rhbz#2061725


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.33-1
changelog:
  - Allow insights-client manage gpg admin home content
  Resolves: rhbz#2062136
  - Add the gpg_manage_admin_home_content() interface
  Resolves: rhbz#2062136
  - Add rhcd policy
  Resolves: bz#1965013
  - Allow svirt connectto virtlogd
  Resolves: rhbz#2000881
  - Add ksm service to ksmtuned
  Resolves: rhbz#2021131
  - Allow nm-privhelper setsched permission and send system logs
  Resolves: rhbz#2053639
  - Update the policy for systemd-journal-upload
  Resolves: rhbz#2085369
  - Allow systemd-journal-upload watch logs and journal
  Resolves: rhbz#2085369
  - Create a policy for systemd-journal-upload
  Resolves: rhbz#2085369
  - Allow insights-client create and use unix_dgram_socket
  Resolves: rhbz#2087765
  - Allow insights-client search gconf homedir
  Resolves: rhbz#2087765


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.34-1
changelog:
  - Allow stalld setsched and sys_nice
  Resolves: rhbz#2092864
  - Allow rhsmcertd to create cache file in /var/cache/cloud-what
  Resolves: rhbz#2092333
  - Update policy for samba-dcerpcd
  Resolves: rhbz#2083509
  - Add support for samba-dcerpcd
  Resolves: rhbz#2083509
  - Allow rabbitmq to access its private memfd: objects
  Resolves: rhbz#2056565
  - Confine targetcli
  Resolves: rhbz#2020169
  - Add policy for wireguard
  Resolves: 1964862
  - Label /var/cache/insights with insights_client_cache_t
  Resolves: rhbz#2062136
  - Allow ctdbd nlmsg_read on netlink_tcpdiag_socket
  Resolves: rhbz#2094489
  - Allow auditd_t noatsecure for a transition to audisp_remote_t
  Resolves: rhbz#2081907


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.35-1
changelog:
  -Add the corecmd_watch_bin_dirs() interface
  Resolves: rhbz#1965013
  - Update rhcd policy
  Resolves: rhbz#1965013
  - Allow rhcd search insights configuration directories
  Resolves: rhbz#1965013
  - Add the kernel_read_proc_files() interface
  Resolves: rhbz#1965013
  - Update insights_client_filetrans_named_content()
  Resolves: rhbz#2081425
  - Allow transition to insights_client named content
  Resolves: rhbz#2081425
  - Add the insights_client_filetrans_named_content() interface
  Resolves: rhbz#2081425
  - Update policy for insights-client to run additional commands 3
  Resolves: rhbz#2081425
  - Allow insights-client execute its private memfd: objects
  Resolves: rhbz#2081425
  - Update policy for insights-client to run additional commands 2
  Resolves: rhbz#2081425
  - Use insights_client_tmp_t instead of insights_client_var_tmp_t
  Resolves: rhbz#2081425
  - Change space indentation to tab in insights-client
  Resolves: rhbz#2081425
  - Use socket permissions sets in insights-client
  Resolves: rhbz#2081425
  - Update policy for insights-client to run additional commands
  Resolves: rhbz#2081425
  - Allow init_t to rw insights_client unnamed pipe
  Resolves: rhbz#2081425
  - Fix insights client
  Resolves: rhbz#2081425
  - Update kernel_read_unix_sysctls() for sysctl_net_unix_t handling
  Resolves: rhbz#2081425
  - Do not let system_cronjob_t create redhat-access-insights.log with var_log_t
  Resolves: rhbz#2081425
  - Allow stalld get scheduling policy of kernel threads
  Resolves: rhbz#2096776
  - Update samba-dcerpcd policy for kerberos usage
  Resolves: rhbz#2096521
  - Allow winbind_rpcd_t connect to self over a unix_stream_socket
  Resolves: rhbz#2096255
  - Allow dlm_controld send a null signal to a cluster daemon
  Resolves: rhbz#2095884
  - Allow dhclient manage pid files used by chronyd
  The chronyd_manage_pid_files() interface was added.
  - Resolves: rhbz#2094155
  Allow install_t nnp_domtrans to setfiles_mac_t
  - Resolves: rhbz#2073010
  - Allow rabbitmq to use systemd notify
  Resolves: rhbz#2056565
  - Allow ksmctl create hardware state information files
  Resolves: rhbz#2021131
  - Label /var/target with targetd_var_t
  Resolves: rhbz#2020169
  - Allow targetclid read generic SSL certificates
  Resolves: rhbz#2020169


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.36-1
changelog:
  - Allow targetclid read generic SSL certificates (fixed)
  Resolves: rhbz#2020169
  - Fix file context pattern for /var/target
  Resolves: rhbz#2020169
  - Use insights_client_etc_t in insights_search_config()
  Resolves: rhbz#1965013


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.37-1
changelog:
  - Allow targetclid read /var/target files
  Resolves: rhbz#2020169
  - Update samba-dcerpcd policy for kerberos usage 2
  Resolves: rhbz#2096521
  - Allow samba-dcerpcd work with sssd
  Resolves: rhbz#2096521
  - Allow stalld set scheduling policy of kernel threads
  Resolves: rhbz#2102224


author: Nikola Knazekova <nknazeko@redhat.com> - 34.1.38-1
changelog:
  - Allow some domains use sd_notify()
  Resolves: rhbz#2056565
  - Revert "Allow rabbitmq to use systemd notify"
  Resolves: rhbz#2056565
  - Update winbind_rpcd_t
  Resolves: rhbz#2102084
  - Update chronyd_pid_filetrans() to allow create dirs
  Resolves: rhbz#2101910
  - Allow keepalived read the contents of the sysfs filesystem
  Resolves: rhbz#2098130
  - Define LIBSEPOL version 3.4-1
  Resolves: rhbz#2095688


author: Martin Osvald <mosvald@redhat.com> - 2.13.7-7
changelog:
  - Move /var/log/lastlog ownership to systemd (#2066753)
  - tcsh sets variable p to /usr/sbin from /etc/csh.login (#2066767)
  - bashrc: Don't set up VTE-specific PROMPT_COMMAND (#2026892)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.47-7
changelog:
  - Fix sg_inq parsing in rescan-scsi-bus.sh (#2036005,#2035362)
  - Fix rescan-scsi-bus.sh summary print (#2035382)
  - sg_readcap --zbc man page switch fix (#2036718)
  - Various Covscan fixes (#2044433)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.8.1-9
changelog:
  - libsubid: creation and nsswitch support. Resolves: #1859252
  - Creation of subid and subid-devel subpackages
  - man: mention NSS in new[ug]idmap manpages
  - libsubid: move development header to shadow folder
  - libsubid: don't print error messages on stderr by default
  - libsubid: libsubid_init return false if out of memory
  - useradd: fix SUB_UID_COUNT=0
  - libsubid: don't return owner in list_owner_ranges API call
  - libsubid: libsubid_init don't print messages on error
  - libsubid: fix newusers when nss provides subids
  - man: clarify subid delegation
  - libsubid: make shadow_logfd not extern
  - login.defs: include HMAC_CRYPTO_ALGO key


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-1
changelog:
  - Rebase to version 4.9. Resolves: #1989556
  - usermod: allow all group types with -G option. Resolves: #1975329
  - useradd: avoid generating an empty subid range
  - Clean spec file


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-3
changelog:
  - getsubids: provide system binary and man page. Resolves: #2013015
  - useradd: generate home and mail directories with selinux user attribute. Resolves: #1993081
  - useradd: revert fix memleak of grp. Resolves: #2020238
  - groupdel: fix SIGSEGV when passwd does not exist. Resolves: #2024834
  - pwck: fix segfault when calling fprintf()
  - newgrp: fix segmentation fault
  - Clean spec file: organize dependencies and move License location


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-4
changelog:
  - useradd: modify check ID range for system users. Resolves: #2004911
  - Fix release sources
  - Add subid requirement for subid-devel


author: Javier Martinez Canillas <javierm@redhat.com> - 15-7
changelog:
  - Make EFI variable copying fatal only on secureboot enabled systems
    Resolves: rhbz#1715879
  - Fix booting shim from an EFI shell using a relative path
    Resolves: rhbz#1717061


author: Javier Martinez Canillas <javierm@redhat.com> - 15-12
changelog:
  - Fix firmware update bug in aarch64 caused by shim ignoring arguments
  - Fix a shim crash when attempting to netboot


author: Peter Jones <pjones@redhat.com> - 15-13
changelog:
  - New signing keys
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Martin Gieseking <martin.gieseking@uos.de> - 1.1.8-1
changelog:
  - Updated to new release.
  - Dropped version-related patch which has been applied upstream (BZ #1527850).


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-8
changelog:
  - [rhui] New log folder
    Resolves: bz2031777
  - nvidia]:Patch to update nvidia plugin for GPU info
    Resolves: bz2034001
  - [hostname] Fix edge case for new hosts in a known subdomain
    Resolves: bz2024893


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-9
changelog:
  - add oc transport, backport various PRs for OCP
    Resolves: bz2037350
  - [report] Provide better warning about estimate-mode
    Resolves: bz2011537
  - [hostname] Fix loading and detection of long base domains
    Resolves: bz2024893


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-12
changelog:
  - [foreman] Use psql-msgpack-decode wrapper for dynflow >= 1.6
    Resolves: bz2043104
  - [virsh] Call virsh commands in the foreground / with a TTY
    Resolves: bz2041855
  - [ovn_central] Account for Red Hat ovn package naming
    Resolves: bz2043488
  - [clean,parsers] Build regex lists for static items only once
    Resolves: bz2037350


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-15
changelog:
  - [sosnode] Handle downstream versioning for runtime option
    Resolves: bz2037350
  - [options] Fix logging on plugopts in effective sos command
    Resolves: bz2054883
  - [report] Honor plugins' hardcoded plugin_timeout
    Resolves: bz2055548
  - [policies] Set fallback to None sysroot, don't chroot to '/'
    Resolves: bz2011537
  - [ovn_central] Rename container responsable of Red Hat
    Resolves: bz2043488


author: Pavel Moravec <pmoravec@redhat.com> = 4.3-1
changelog:
  - Rebase on upstream 4.3
    Resolves: 2055003
  - [sapnw] Fix IndexError exception
    Resolves: 2065551
  - [subscription_manager] collect syspurpose data via sub-man
    Resolves: 2002333
  - [Plugin, utilities] Allow writing command output directly to disk
    Resolves: 2065564
  - [Ceph] Add support for containerized Ceph setup
    Resolves: 2065562
  - [unbound] Add new plugin for Unbound DNS resolver
    Resolves: 2065560
  - [discovery] Add new discovery plugin
    Resolves: 2065558
  - [system] Collect glibc tuning decisions
    Resolves: 2032913


author: Pavel Moravec <pmoravec@redhat.com> = 4.3-2
changelog:
  - [ocp, openshift] Re-align API collection options and rename
    Resolves: bz2065563
  - [utilities] Close file only when storing to file
    Resolves: bz2079492
  - [report] --list-plugins should report used, not default,
    Resolves: bz2079490
  - [report] Honor plugins' hardcoded plugin_timeout
    Resolves: bz2079188
  - crio: switch from parsing output in table format to json
    Resolves: bz2097674
  - [pacemaker] Redesign node enumeration logic
    Resolves: bz2082914
  - [tigervnc] Update collections for newer versions of TigerVNC
    Resolves: bz2066181
  - [plugins] Allow 'str' PlugOpt type to accept any value
    Resolves: bz2079491
  - [ovirt] answer files: Filter out all password keys
    Resolves: bz2095267


author: Ondrej Dubaj <odubaj@redhat.com> - 3.34.0-1
changelog:
  - Updated to version 3.34.0 (https://sqlite.org/releaselog/3_34_0.html)
  - Enabled fts3conf.test on s390x and ppc64 architectures


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.13-3
changelog:
  - Address some issues reported by covscan (#1996691).
  - Replace 0141-tests-disable-sockopt-timestamp-on-new-glibc-with-__.patch
    with upstream v5.13-10-g0211fdc "tests: change sockopt-timestamp test
    to use syscall(__NR_recvmsg)"
    and 0154-tests-call-setsockopt-directly-in-sockopt-timestamp.patch.
  - Undo forceful injection of -m64 into CFLAGS/CPPFLAGS to avoid breaking
    mpers and its tests (#1996676).


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.18-2
changelog:
  - Fix the issues reported by covscan (#2103068).
  - Fix SELinux context matching for the deleted paths (#2087693).
  - Fix sloppy FD usage in the bpf test (#2103137).
  - Cater for RHEL 9 license requirement idiosyncrasies (#2103032).


author: Sahana Prasad <sahana@redhat.com> - 5.57-1
changelog:
  - New upstream release 5.57
  - Fixes #1925229 - client certificate not correctly verified
    when redirect and verifyChain options are used


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 5.58-4
changelog:
  - Stunnel cannot use an encrypted private key being built against OpenSSL 3.0
  - Resolves: rhbz#1976854


author: Clemens Lang <cllang@redhat.com> - 5.62-2
changelog:
  - Fix stunnel in FIPS mode
    Resolves: rhbz#2050617
  - Fail build if tests fail
    Resolves: rhbz#2051083


author: Jiri Hnidek <jhnidek@redhat.com> 20220608-1
changelog:
  - New package built with tito
  - Using new version pattern for subscription-manager-rhsm-certificates


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p1-1
changelog:
  - rebase to 1.9.5p1
  Resolves: rhbz#1902758
  - fixed double free in sss_to_sudoers
  Resolves: rhbz#1885874
  - fixed CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhbz#1915055
  - fixed CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1915054


author: Matthew Miller <mattdm@fedoraproject.org> - 1.9.5p2-1
changelog:
  - rebase to 1.9.5p2
  Resolves: rhbz#1920611
  - fixed CVE-2021-3156 sudo: Heap buffer overflow in argument parsing
  Resolves: rhbz#1920618


author: Zoltan Fridrich <zfridric@redhat.com> - 1.9.5p2-2
changelog:
  - change ldap.conf to sudo-ldap.conf
  Resolves: rhbz#1908882
  - remove /usr/local/* from secure_path
  Resolves: rhbz#1908923
  - fixed CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhbz#1916655
  - fixed CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1917039
  - fixed CVE-2021-3156 sudo: Heap buffer overflow in argument parsing
  Resolves: rhbz#1917735


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-5
changelog:
  RHEL 9 BETA
  - sync with rhel8 spec
  Resolves: rhbz#1908882
  Resolves: rhbz#1942383
  Resolves: rhbz#1946707
  Resolves: rhbz#1946709
  Resolves: rhbz#1981278


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-7
changelog:
  - utmp resource leak in sudo
  Resolves: rhbz#1986579
  - sudo does not list /etc/dnf/protected.d/sudo.conf in the rpm config files listing
  Resolves: rhbz#1997030
  - sudo uses Recommends for sudo-python-plugin(x86-64) = 1.9.5p2-2.el9 and vim-minimal
  Resolves: rhbz#1947908
  - review of important potential issues detected by static analyzers in sudo-1.9.5p2-2.el9
  Resolves: rhbz#1938879


author: Javier Martinez Canillas <javierm@redhat.com> - 6.04-0.13
changelog:
  - Fix a bunch of annocheck problems (pjones)
  - Drop x86_64 ExclusiveArch for tftpboot subpackage
  - Make tftpboot subpackage completely noarch (yselkowi)


author: systemd maintenance team <systemd-maint@redhat.com> - 249-2
changelog:
  - basic/unit-name: do not use strdupa() on a path (#1984299)
  - basic/unit-name: adjust comments (#1984299)
  - tmpfiles: don't create resolv.conf -> stub-resolv.conf symlink (#1989472)
  - Copy 40-redhat.rules from RHEL-8 (#1978639)
  - Avoid /tmp being mounted as tmpfs without the user's will (#1959826)
  - unit: don't add Requires for tmp.mount (#1619292)
  - units: add [Install] section to tmp.mount (#1959826)
  - rc-local: order after network-online.target (#1954429)
  - ci: drop CIs irrelevant for downstream (#1960703)
  - ci: reconfigure Packit for RHEL 9 (#1960703)
  - ci: run unit tests on z-stream branches as well (#1960703)
  - Check return value of pam_get_item/pam_get_data functions (#1973210)
  - random-util: increase random seed size to 1024 (#1982603)
  - journal: don't enable systemd-journald-audit.socket by default (#1973856)
  - journald.conf: don't touch current audit settings (#1973856)


author: systemd maintenance team <systemd-maint@redhat.com> - 249-8
changelog:
  - Really don't enable systemd-journald-audit.socket (#1973856)
  - rules: add elevator= kernel command line parameter (#2003002)
  - boot: don't build bootctl when -Dgnu-efi=false is set (#2003130)
  - unit: install the systemd-bless-boot.service only if we have gnu-efi (#2003130)
  - units: don't enable tmp.mount statically in local-fs.target (#2000927)
  - pid1: bump DefaultTasksMax to 80% of the kernel pid.max value (#2003031)
  - sd-device: introduce device_has_devlink() (#2005024)
  - udev-node: split out permission handling from udev_node_add() (#2005024)
  - udev-node: stack directory must exist when adding device node symlink (#2005024)
  - udev-node: save information about device node and priority in symlink (#2005024)
  - udev-node: always update timestamp of stack directory (#2005024)
  - udev-node: assume no new claim to a symlink if /run/udev/links is not updated (#2005024)
  - udev-node: always atomically create symlink to device node (#2005024)
  - udev-node: check stack directory change even if devlink is removed (#2005024)
  - udev-node: shorten code a bit and update log message (#2005024)
  - udev-node: add random delay on conflict in updating device node symlink (#2005024)
  - udev-node: drop redundant trial of devlink creation (#2005024)
  - udev-node: simplify the example of race (#2005024)
  - udev-node: do not ignore unexpected errors on removing symlink in stack directory (#2005024)
  - basic/time-util: introduce FORMAT_TIMESPAN (#2005024)
  - udev/net-setup-link: change the default MACAddressPolicy to "none" (#2009237)
  - set core ulimit to 0 like on RHEL-7 (#1998509)


author: systemd maintenance team <systemd-maint@redhat.com> - 249-9
changelog:
  - test: don't install test-network-generator-conversion.sh w/o networkd (#2017035)
  - meson.build: change operator combining bools from + to and (#2017035)
  - openssl-util: use EVP API to get RSA bits (#2016042)
  - procfs-util: fix confusion wrt. quantity limit and maximum value (#2017035)
  - test-process-util: also add EROFS to the list of "good" errors (#2017035)
  - ci: use C9S chroots in Packit (#2017035)
  - test-mountpointutil-util: do not assert in test_mnt_id() (#2017035)
  - core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2019468)
  - Drop Patch9001 - https://github.com/systemd/systemd/pull/17050 - Replaced by Patch0046


author: systemd maintenance team <systemd-maint@redhat.com> - 250-3
changelog:
  - Treat EPERM as "not available" too (#2017035)
  - test: copy portable profiles into the image if they don't exist there (#2017035)
  - test: introduce `get_cgroup_hierarchy() helper (#2047768)
  - test: require unified cgroup hierarchy for TEST-56 (#2047768)
  - tests: rework test macros to not take code as parameters (#2017035)
  - test: allow to set NULL to intro or outro (#2017035)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-4
changelog:
  - udev/net-setup-link: change the default MACAddressPolicy to "none" (#2009237)
  - man: mention System Administrator's Guide in systemctl manpage (#1982596)
  - Net naming scheme for RHEL-9.0 (#2052106)
  - core: decrease log level of messages about use of KillMode=none (#2013213)
  - ci: replace apt-key with signed-by (#2013213)
  - ci: fix clang-13 installation (#2013213)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-7
changelog:
  - test: check systemd RPM macros (#2017035)
  - test: do not assume x86-64 arch in TEST-58-REPART (#2017035)
  - tests: add repart tests for block devices with 1024, 2048, 4096 byte sector sizes (#2017035)
  - test: accept both unpadded and padded partition sizes (#2017035)
  - test: lvm 2.03.15 dropped the static autoactivation (#2017035)
  - test: accept GC'ed units in newer LVM (#2017035)
  - shared: Add more dlopen() tests (#2017035)
  - systemctl: Show how long a service ran for after it exited in status output (#2017035)
  - time-util: introduce TIMESTAMP_UNIX (#2017035)
  - systemctl,man: update docs for `--timestamp=` (#2017035)
  - systemctl: make `--timestamp=` affect the `show` verb as well (#2017035)
  - tests: allow running all the services with SYSTEMD_LOG_LEVEL (#2017035)
  - coredump: raise the coredump save size on 64bit systems to 32G (and lower it to 1G on 32bit systems) (#2017035)
  - repart: fix sector size handling (#2017035)
  - mkdir: allow to create directory whose path contains symlink (#2017035)
  - mkdir: CHASE_NONEXISTENT cannot used in chase_symlinks_and_stat() (#2017035)
  - meson: move efi file lists closer to where they are used (#2017035)
  - meson: move efi summary() section to src/boot/efi (#2017035)
  - meson: report SBAT settings (#2017035)
  - boot: Build BCD parser only on arches supported by Windows (#2017035)
  - meson: Remove efi-cc option (#2017035)
  - meson: Get objcopy location from compiler (#2017035)
  - meson: Use files() for source lists for boot and fundamental (#2017035)
  - meson: Use files() for tests (#2017035)
  - tests: add fuzz-bcd (#2017035)
  - meson: Use files() for fuzzers (#2017035)
  - meson: Add check argument to remaining run_command() calls (#2017035)
  - meson: Use echo to list files (#2017035)
  - test: add a test for mkdir_p() (#2017035)
  - util: another set of CVE-2021-4034 assert()s (#2017035)
  - basic: update CIFS magic (#2017035)
  - shared: be extra paranoid and check if argc > 0 (#2017035)
  - core: check if argc > 0 and argv[0] is set (#2017035)
  - core: check argc/argv uncoditionally (#2017035)
  - test: temporary workaround for #21819 (#2017035)
  - test: don't leak local variable to outer scopes (#2017035)
  - tree-wide: don't use strjoina() on getenv() values (#2017035)
  - man: clarify Environmentfile format (#2017035)
  - test-load-fragment: add a basic test for config_parse_unit_env_file() (#2017035)
  - core/execute: use _cleanup_ in exec_context_load_environment() (#2017035)
  - test-env-file: add tests for quoting in env files (#2017035)


author: Lukas Javorsky <ljavorsk@redhat.com> - 2:1.34-4
changelog:
  - added "padding with zeros" info message (#2089298)
  - do not report disk error as file shrank (#2089316)


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-1
changelog:
  - The patches are for SSL3 compatibility. These can probably be
    removed when upstream tboot fully implements SSL3.
  - Upgrade to latest upstream.
  - Remove trousers dependency.
    Resolves: rhbz#1922002
    Resolves: rhbz#1870520
    Resolves: rhbz#1927374


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-2
changelog:
  - Bump the NVR as a result of including the gating.yaml file in
    the git repo.
    Resolves: rhbz#1922002


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-3
changelog:
  - Add the -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m32 -march=i686 -mtune=generic -msse2 -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection and -Wl,-z,relro -Wl,--as-needed  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  macros to assure the
    build meets RHEL security requirements.
    Resolves: rhbz#1922002


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-4
changelog:
  - From Miroslave Vadkerti:
    Onboarding tests to RHEL9 in BaseOS CI requires action, adding
    test configuration in our "dispatcher" configuration for RHEL9:
    https://gitlab.cee.redhat.com/baseos-qe/citool-config/blob/production/brew-dispatcher-rhel9.yaml
    Test config was added for tboot in the following MR.
    https://gitlab.cee.redhat.com/baseos-qe/citool-config/-/merge_requests/2686
    Resolves: rhbz#1922002


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.5-1
changelog:
  - Upgrade to tboot-1.10.5-1 for fixes and updates.
  - Added a Requires line to install grub2-efi-x64-modules
  - Added a scriptlet to the tboot.spec file to automatically install
    grub2-efi-x64-modules and move them to the correct directory.
  - Removed three patches that are no longer needed.
  - Added two patches from upstream, one for a fix, the other cosemetic.
  - Resolves: rhbz#2041766
    Resolves: rhbz#2040083


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-3
changelog:
  - Add the -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -march=x86-64-v2 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection and -Wl,-z,relro -Wl,--as-needed  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  macros to assure the
    build meets RHEL security requirements.
    Resolves: rhbz#1922002


author: John Kacur <jkacur@redhat.com> - 0.16-5
changelog:
  - Make it clear in online help and man pages that --include and --isolate
    affect IRQs as well as threads
  Resolves: rhbz#2022142


author: Leah Leshchinsky <lleshchi@redhat.com> - 0.17-3
changelog:
  - Fix typo for variable parm
  - Handle get_policy_and_rtprio exceptions
  - Remove finally block in get_policy_and_rtprio
  Resolves: rhbz#2049303


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.16.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1944643
    - realtime: disabled kvm.nx_huge_page kernel module option in
      realtime-virtual-host profile
      resolves: rhbz#1976825
    - realtime: explicitly set 'irqaffinity=~<isolated_cpu_mask>' in kernel
      command line
      resolves: rhbz#1974820
    - scheduler: added abstraction for the sched_* and numa_* variables which
      were previously accessible through the sysctl
      resolves: rhbz#1952687
    - recommend: fixed wrong profile on ppc64le bare metal servers
      resolves: rhbz#1959889


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.16.0-3
changelog:
  - scheduler: allow exclude of processes from the specific cgroup(s)
    Resolves: rhbz#1980715
  - Switched to the configparser from the configobj
    Resolves: rhbz#1936386


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.17.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2003838
    - cpu-partitioning: fixed no_balance_cores on newer kernels
      resolves: rhbz#1874596


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.18.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: rhbz#2003838
    - tuned-gui: fixed creation of new profile


author: Patsy Griffin <patsy@redhat.com> - 2020d-1
changelog:
  - Rebase to tzdata-2020d including changes from tzdata-2020c
    - Palestine will end summer time on 2020-10-24 rather than the
      predicted 2020-10-31.
    - Fiji starts DST later than usual, on 2020-12-20.
    - Rearguard now provides an empty file pacificnew to support
      downstream software that expects it.


author: Patsy Griffin <patsy@redhat.com> - 2020f-1
changelog:
  - Rebase to tzdata-2020f including changes for tzdata-2020e
    - tzdata-2020f fixes a bug in tzdata-2020e that caused an
      invalid zi file in rearguard format
    - Volgograd changes time zone from UTC+04 to UTC+03 on 2020-12-27.
    - Australia/Currie is identical to Australia/Hobart for all
      timestamps since 1970 and was therefore created by mistake,
      now moved to the "backward" file.


author: Patsy Griffin <patsy@redhat.com> - 2021c-1
changelog:
  - Rebase to tzdata-2021c - supersedes tzdata-2021b
    - Revert most of 2021b changes to 'backward'.
    - Fix 'zic -b fat' bug in pre-1970 32-bit data.
    - Fix two Link line typos.
    - Distribute SECURITY file.
    - Includes changes in tzdata-2021b:
    - Jordan now starts DST on February's last Thursday.
    - Samoa no longer observes DST.
    - Merge more location-based Zones whose timestamps agree since 1970.
    - Move some backward-compatibility links to 'backward'.
    - Rename Pacific/Enderbury to Pacific/Kanton.
    - Correct many pre-1993 transitions in Malawi, Portugal, etc.
    - zic now creates each output file or link atomically.
    - zic -L no longer omits the POSIX TZ string in its output.
    - zic fixes for truncation and leap second table expiration.
    - zic now follows POSIX for TZ strings using all-year DST.
    - Fix some localtime crashes and bugs in obscure cases.
    - zdump -v now outputs more-useful boundary cases.
    - tzfile.5 better matches a draft successor to RFC 8536.


author: Patsy Griffin <patsy@redhat.com> - 2021e-1
changelog:
  - Rebase to tzdata-2021e - supersedes tzdata-2021d
    - Pacific/Fiji suspended DST for the 2021/2022 season.
    - 'zic -r' now marks unspecified timestamps with "-00".
    - Palestine will fall back 2021-10-29 at 01:00, rather
      than the predicted 2021-10-30.


author: Patsy Griffin <patsy@redhat.com> - 2022a-1
changelog:
  - Rebase to tzdata-2022a
    - Palestine springs forward on 2022-03-27, not -03-26.
    - zdump -v now outputs better failure information
    - fixes for code that reads corrupted TZif data


author: Jakub Martisko <jamartis@redhat.com> - 6.0-56
changelog:
  - Use the C crc implementation instead of the asm (i686 only, other arches already use C)
  Related: rhbz#2045075


author: Sérgio Basto <sergio@serjux.com> - 2.6.0-3
changelog:
  - Use make macros (https://src.fedoraproject.org/rpms/usb_modeswitch/pull-request/1)
  - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Sérgio Basto <sergio@serjux.com> - 2.6.1-1
changelog:
  - Update usb_modeswitch to 2.6.1
  - Drop patch1, http://www.draisberghof.de/usb_modeswitch/bb/viewtopic.php?f=2&t=2733
  - Drop BR jimtcl-devel, if we don't install dynlink-dispatcher


author: Jiri Kucera <jkucera@redhat.com> - 1.114-3
changelog:
  - Do not use fexecve
    Script executed via fexecve has a file descriptor number in
    argv[0]. This results in unexpected output: when displaying
    the script help, a user see "Usage: <number> [options]"
    instead of "Usage: <scriptname> [options]".
    Resolves: #1984417


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.12.1-5
changelog:
  - Replace arch-dependent /usr/include/urcu/config.h with arch-independent
    stub when needed. (bz# 1951223)
  - Added CI gating tests
  - Resolves: bz #1951223


author: - Andy Walsh <awalsh@redhat.com> - 8.1.0.316-1
changelog:
  - Rebased to upstream candidate.
  - Resolves: rhbz#1955374
  - Removed all python based tools, and all management should now be done with
    LVM.
  - Resolves: rhbz#1949159
  - vdostats is now a C program
  - Resolves: rhbz#1972302


author: - Andy Walsh <awalsh@redhat.com> - 8.1.1.287-1
changelog:
  - Fixed off-by-one issue in vdostats.
  - Resolves: rhbz#1999056
  - Improved error handling and path validation in vdostats.
  - Resolves: rhbz#2004576


author: - Andy Walsh <awalsh@redhat.com> - 8.1.1.360-1
changelog:
  - Fixed vdostats output issues.
  - Resolves: rhbz#2004576
  - Removed incorrect assumptions about major device numbers in vdostats.
  - Resolves: rhbz#2045885
  - Made improvements to the vdorecover script.
  - Resolves: rhbz#2047543
  - Added a tool to make LVMVDO pools read/write so that support and
    debugging tools may access them.
  - Resolves: rhbz#2047543


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-9
changelog:
  - 2028431 - CVE-2021-4019 vim: heap-based buffer overflow in find_help_tags() in src/help.c [rhel-9.0]


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-10
changelog:
  - CVE-2021-4193 vim: vulnerable to Out-of-bounds Read
  - CVE-2021-4192 vim: vulnerable to Use After Free


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-11
changelog:
  - CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c
  - CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c
  - CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-12
changelog:
  - CVE-2022-0319 vim: heap-based out-of-bounds read
  - CVE-2022-0361 vim: Heap-based Buffer Overflow in GitHub repository


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-12
changelog:
  - CVE-2022-0368 vim: Out-of-bounds Read in vim
  - CVE-2022-0417 vim: heap-based-buffer-overflow in ex_retab() of src/indent.c
  - CVE-2022-0408 vim: Stack-based Buffer Overflow in spellsuggest.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-12
changelog:
  - CVE-2022-0413 vim: use after free in src/ex_cmds.c
  - CVE-2022-0443 vim: heap-use-after-free in enter_buffer() of src/buffer.c
  - CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-16
changelog:
  - CVE-2022-0554 vim: Use of Out-of-range Pointer Offset in vim prior
  - CVE-2022-0943 vim: Heap-based Buffer Overflow occurs in vim


author: Davide Caratti <dcaratti@redhat.com> - 1:2.10-4
changelog:
  - Explicitly allow/disallow unsafe legacy renegotiation on configuration base.
    Resolves: rhbz#2077973


author: Jakub Martisko <jamartis@redhat.com> - 3.0-31
changelog:
  - Add the missing linker flags
  - Add the patch that allows to configure the linker flags from the spec file
    Resolves: rhbz #2044902


author: Jakub Martisko <jamartis@redhat.com> - 3.0-33
changelog:
  - Disable the asm implementation of some functions and use the C instead
  - This should fix some of the annocheck issues
    Related: rhbz#2044902


author: Patrik Novotný <panovotn@redhat.com> - 1.2.11-28
changelog:
  - IBM CRC32 optimalization rhbz#1959423
  - Enabled Z hardware-accelerated deflate for compression levels 1 through 6 (#1972057)


