# changelog

author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.52.0-1
changelog:
  - Update to 1.52.0
  - Add support for creating VLANs for secondary VNICs in nm-cloud-setup (RHEL-36423)
  - Always reset retries when unblocking children or ports (RHEL-78122)
  - Prevent the activation of unavailable OVS interfaces (RHEL-79997)


author: Jerry Snitselaar <jsnitsel@redhat.com> - 4.1.6-2
changelog:
  - Fix faulty logic in dsa_user_test_runner device clean up.
  - Adds a couple of test clean ups as well.
  Resolves: RHEL-32451


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.5.10-1
changelog:
  - Fix check for biosboot partition in GRUB2.check (vtrefny)
    Resolves: RHEL-55922
  - Ignore all storage errors when trying to activate swaps (vtrefny)
    Resolves: RHEL-55922


author: Martin Kolman <mkolman@redhat.com> - 34.25.5.11-1
changelog:
  - security: call /usr/libexec/fips-setup-helper (asosedkin)
    Resolves: RHEL-58667
  - release-notes: Document support for compressed kernel modules in Driver Discs
    (peter.georg)
    Related: RHEL-9913
  - Add documentation about support for compressed kernel modules (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Update test info to reflect added support for compressed kernel
    modules (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Add test for zstd compressed kernel module (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Add test for xz compressed kernel module (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Add support for compressed kernel modules (peter.georg)
    Resolves: RHEL-9913
  - New version - 34.25.5.10 (k.koukiou)


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.5.13-1
changelog:
  - security: require pykickstart version with %certificates support (rvykydal)
    Resolves: RHEL-61430
  - security: do not crash initramfs ks parsing on failing certificate dump
    (rvykydal)
    Resolves: RHEL-61430
  - security: add service to transfer certificates from initramfs (rvykydal)
    Resolves: RHEL-61430
  - security: import certificates in initramfs (rvykydal)
    Resolves: RHEL-61430
  - security: install certificates in pre-install phase only for dnf payload
    (rvykydal)
    Resolves: RHEL-61430
  - security: raise exception if certificate destination is unknown (rvykydal)
    Resolves: RHEL-61430
  - security: log a warning when dumping certificate over an existing file
    (rvykydal)
    Resolves: RHEL-61430
  - security: pre-install certificates before payload installation (rvykydal)
    Resolves: RHEL-61430
  - security: add API to install certificates early before payload (rvykydal)
    Resolves: RHEL-61430
  - security: install certificates on target system (rvykydal)
    Resolves: RHEL-61430
  - security: Add API for installation on target system (rvykydal)
    Resolves: RHEL-61430
  - security: import certificates early after Anaconda start (rvykydal)
    Resolves: RHEL-61430
  - security: add API to import certificates to Anaconda environment (rvykydal)
    Resolves: RHEL-61430
  - security: add API: Certificate getter (rvykydal)
    Resolves: RHEL-61430
  - kickstart: extend section specification for list of section data (rvykydal)
  - security: implement the support to install certificates to Anaconda
    (rvykydal)
    Resolves: RHEL-61430
  - translations: bump dependency to l10n repo because of branch switch
    (k.koukiou)
  - util: correct errors and suppress stderr for common cases (riehecky)
  - util: Add additional information for EFI systems (riehecky)
    Resolves: RHEL-55128


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.15-1
changelog:
  - security: add a development note for certificates import in initramfs
    (rvykydal)
    Related: RHEL-77155
  - security: do not issue warning on existing certificate file during dump
    (rvykydal)
    Resolves: RHEL-77155
  - network: pass NM global dns configuration to the installed system (rvykydal)
    Resolves: RHEL-71824
  - network: pass global dns initrd option to the installed system (rvykydal)
    Resolves: RHEL-71824


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.16-1
changelog:
  - network: add dnsconfd to selected packages if used in installer (rvykydal)
    Resolves: RHEL-79803
  - network: add dnsconfd to installer environment (rvykydal)
    Resolves: RHEL-79804


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.17-1
changelog:
  - network: start dnsconfd in initramfs (rvykydal)
    Resolves: RHEL-80303
  - network: enable dnsconfd service on installed system if required (rvykydal)
    Resolves: RHEL-80023
  - network: pass 16-dns-backend.conf to target system (rvykydal)
    Resolves: RHEL-80233
  - netowrk: enable dnsconfd service in installer environment (rvykydal)
    Resolves: RHEL-80023


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3.13
changelog:
  - Sync with rhel 8.3 + cleanup
  - Add new subpackages - z{14,15}
  - Unlike in rhel8, the base subpackage still needs to be build for z12.
  - Covscan related bugfixes
  - Spec and git cleanup (remove unused patches/sources)


author: Sergio Correia <scorreia@redhat.com> - 3.1.2-2
changelog:
  - Remove 
   
  if [ $1 -eq 0 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then 
          /usr/lib/systemd/systemd-update-helper remove-system-units from %preun scriptlet, as it was causing troubles when removing audit || : 
  fi 

    Related: RHEL-14896


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-1
changelog:
  - New upstream maintenance release, 3.1.4
  - Prevent scriplets from failing
  - When upgrading, restart the daemon if it's running
  - If uninstalling, stop the daemon
  - auditctl: use pidfd_send_signal for signaling auditd
    Resolves: RHEL-45865
  - Minor doc update
    Resolves: RHEL-5186
  - augenrules: do not exit with failure if in immutable mode
    Resolves: RHEL-40110
  - auditd.service: Disable ProtectControlGroups
    Resolves: RHEL-5197
  - auditctl: correct output when displaying rules with exe/path/dir
    Resolves: RHEL-40243


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-2
changelog:
  - Disable ProtectKernelModules=true in service file
    Resolves: RHEL-59570
  - af_unix plugin: restore original behavior in binary mode
    Resolves: RHEL-59585
  - Support image mode
    Resolves: RHEL-69033
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-11252
  - Filter syscalls to ensure architecture-specific availability
    Resolves: RHEL-70455


author: Michal Sekletar <msekleta@redhat.com> - 0.8-21
changelog:
  - fix file attributes on /run/avahi-daemon (RHEL-5633)
  - avahi-client: fix resource leak (RHEL-27722)
  - fix resource leak in avahi_time_event_queue_new (RHEL-27717)


author: Pavel Cahyna <pcahyna@redhat.com> - 11.0.1-5
changelog:
  - Make nagios-plugin build conditional and disabled on RHEL to avoid
    generating this subpackage that has missing dependencies
  - Fix flags for annobin in Qt tools (bat & tray-monitor) build
  - Add a forgotten RHEL 8 patch to use openssl crypto (random numbers, hmac,
    hashing functions)
    Resolves: rhbz#1935458


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-22
changelog:
  - Resolve CVE-2024-1975
  - Resolve CVE-2024-1737
  - Resolve CVE-2024-4076
  - Add ability to change runtime limits for max types and records per name


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.27-2
changelog:
  - Disable building of DLZ packages
  - Conflict explicitly with more bind subpackages
  - Merge license subpackage into libs


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-2
changelog:
  - Backport nsupdate TLS support into 9.18 (RHEL-76331)
  - Update nsupdate manual about new TLS options
  - Test nsupdate TLS support


author: Nick Clifton <nickc@redhat.com> - 2.35.2-55
changelog:
  - Add linker error/warning messages for executable stacks and RWX segments.  (RHEL-59801, RHEL-59802)


author: Nick Clifton <nickc@redhat.com> - 2.35.2-61
changelog:
  - Add an option to objcopy that creates padding sections that eliminate gaps between segments.  (RHEL-60807)


author: Patrick Palka <ppalka@redhat.com> - 1.75.0-9
changelog:
  - Apply upstream Boost.Asio patch to resolve RHEL-67973
  - Fix %patch directive compatibility with RPM 4.20


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Marek Polacek <polacek@redhat.com> 11.5.0-1
changelog:
  - update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
    - PRs ada/113893, ada/113979, analyzer/104042, c/113262, c/114007, c/114493,
  	c++/89224, c++/92145, c++/92407, c++/97990, c++/99710, c++/100667,
  	c++/100772, c++/101765, c++/103185, c++/104051, c++/111485,
  	c++/111529, c++/113598, c++/113674, c++/114537, c++/114561,
  	c++/114562, c++/114572, c++/114634, c++/114691, d/113125, d/113758,
  	d/114171, debug/111080, debug/112718, driver/115440, fortran/50410,
  	fortran/103715, fortran/104908, fortran/107426, fortran/114474,
  	fortran/114825, gcov-profile/114115, libfortran/110651,
  	libgomp/113192, libquadmath/114533, libstdc++/104259,
  	libstdc++/104606, libstdc++/105417, libstdc++/110054,
  	libstdc++/113250, libstdc++/114147, libstdc++/114401,
  	libstdc++/114750, libstdc++/114803, libstdc++/115269,
  	libstdc++/115454, libstdc++/115575, middle-end/90348,
  	middle-end/95351, middle-end/107385, middle-end/108789,
  	middle-end/110027, middle-end/110115, middle-end/110176,
  	middle-end/111422, middle-end/111632, middle-end/112732,
  	middle-end/113907, middle-end/113921, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/115527,
  	middle-end/115836, objc/101666, objc/101718, preprocessor/105608,
  	rtl-optimization/100303, rtl-optimization/108086,
  	rtl-optimization/110079, rtl-optimization/114768,
  	rtl-optimization/114902, rtl-optimization/115092, sanitizer/97696,
  	sanitizer/111736, sanitizer/114956, sanitizer/115172, target/88309,
  	target/101737, target/101865, target/105522, target/108120,
  	target/108743, target/110411, target/111610, target/111677,
  	target/112397, target/113122, target/113281, target/114049,
  	target/114098, target/114130, target/114184, target/114310,
  	target/114837, target/114846, target/115253, target/115297,
  	target/115360, target/115457, target/115475, target/115611,
  	target/115691, testsuite/113175, testsuite/114034, testsuite/114036,
  	tree-optimization/110386, tree-optimization/110422,
  	tree-optimization/111039, tree-optimization/111070,
  	tree-optimization/111331, tree-optimization/111407,
  	tree-optimization/111445, tree-optimization/111736,
  	tree-optimization/112495, tree-optimization/112505,
  	tree-optimization/112793, tree-optimization/113372,
  	tree-optimization/113552, tree-optimization/113603,
  	tree-optimization/114027, tree-optimization/114115,
  	tree-optimization/114566, tree-optimization/114876,
  	tree-optimization/115192, tree-optimization/115337,
  	tree-optimization/115843
  - fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)


author: Marek Polacek <polacek@redhat.com> 11.5.0-2
changelog:
  - fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - fix wrong code with memcpy from _Complex (PR tree-optimization/116034)


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Ondrej Kozina <okozina@redhat.com> - 2.4.3-1
changelog:
  - Update to cryptsetup 2.4.3.
  - patch: Fix typo in repair command prompt.
    Resolves: #2022309 #2023316 #2032782


author: Daniel Zatovic <dzatovic@redhat.com> - 2.4.3-5.1
changelog:
  - patch: Run PBKDF benchmark with 8 bytes long well-known passphrase.
  - patch: Change tests to use passphrases with minimal 8 chars length.
  - patch: Add FIPS related error message in keyslot add code.
  - Resolves: #2151576


author: Pavol Zacik <pzacik@redhat.com> - 1:2.3.3op2-28
changelog:
  - RHEL-39940 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-24
changelog:
  - fix SSH connection too eager reuse still (CVE-2023-27538)
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)
  - fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
  - fix TELNET option IAC injection (CVE-2023-27533)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-26
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix host name wildcard checking (CVE-2023-28321)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Jeff Moyer <jmoyer@redhat.com> - 78-1
changelog:
  - Rebase to v78
  - Add support for legacy monitor.conf file location
  - Fix a test failure.
  - Resolves: RHEL-10382
  - Resolves: RHEL-8204
  - Resolves: RHEL-29151


author: Martin Osvald <mosvald@redhat.com> - 3.4.1-11
changelog:
  - Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly
    for shared mailboxes
  - cyrus-imapd.spec: rename patches to correspond with others


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-2
changelog:
  - Fix SPDX License identifiers.
  - Fix input units for VDO LV's minimim_io_size.
  - Fix stripe count and validation for RAID LVs.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-5
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-14
changelog:
  - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
  - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)


author: José Expósito <jexposit@redhat.com> - 2.4.123-2
changelog:
  - Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches")
    libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x
    Resolves: https://issues.redhat.com/browse/RHEL-53869


author: Marek Kasik <mkasik@redhat.com> - 40.1-5
changelog:
  - Use tmp dir as containing folder for non-native files
  - Backport fixes for issues found by Coverity Scan
  - Fix some other issues found by Coverity Scan
  - Resolves: #1975150


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-16
changelog:
  - fence_openstack: add support for reading config from clouds.yaml
    and openrc
    Resolves: rhbz#2041933, rhbz#2041935


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Adam Jackson <ajax@redhat.com> - 1.3.5-9
changelog:
  - Remove BuildRequires xprop entirely. If present, the configure script will call
    it looking for a property on the root window that Fedora's X server does not
    set, and which would not work anyway since there is no X server running in the
    buildroot, so we can just remove the dependency.


author: Pavel Cahyna <pcahyna@redhat.com> - 1.6.14-2
changelog:
  - Apply upstream patch 41d0d70f
    ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type


author: Michel Lind <salimma@centosproject.org> - 2.10.4-10
changelog:
  - Fix for CVE-2025-27363 out-of-bound write vulnerability
  - Patch initially by Marc Deslauriers of Canonical
  - https://www.openwall.com/lists/oss-security/2025/03/14/3
  - Adjusted for EL9 by Jonathan Wright of AlmaLinux
  - and a member of the Meta security team
  - Resolves: RHEL-83105


author: Richard Hughes <richard@hughsie.com> 1.9.26-1
changelog:
  - Rebase to get hardware support for CERTPX-13842
  - Resolves: #RHEL-16637
  - Resolves: #RHEL-35373
  - Resolves: #RHEL-61930


author: Nick Clifton <nickc@redhat.com> - 10.97-1
changelog:
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)


author: Nick Clifton <nickc@redhat.com> - 11.02-1
changelog:
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158386)
  - Annocheck: Add more special glibc filenames.  (#2158100)


author: Nick Clifton <nickc@redhat.com> - 11.05-1
changelog:
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.


author: Nick Clifton <nickc@redhat.com> - 11.06-1
changelog:
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
  - Spec file: Enable annotated building.


author: Nick Clifton <nickc@redhat.comn> - 2.38-17
changelog:
  - NVR Bump: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216446)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17.1
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2220917)


author: Nick Clifton <nickc@redhat.comn> - 2.38-18
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216456)


author: Marek Polacek <polacek@redhat.com> 12.2.1-4
changelog:
  - update from releases/gcc-12 branch (#2110583)
  - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST
    (PR libstdc++/107468)


author: Marek Polacek <polacek@redhat.com> 12.2.1-7.5
changelog:
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832)


author: Nick Clifton <nickc@redhat.com> - 12.20-1
changelog:
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.


author: Nick Clifton <nickc@redhat.com> - 12.32-1
changelog:
  - LLVM Plugin: Fix building with LLVM version 17.  (RHEL-17311)
  - GCC Plugin: Add support for -fhardended.
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)


author: Nick Clifton <nickc@redhat.com> - 12.32-2
changelog:
  - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505)


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Rebase to 12.65.  (RHEL-51018)
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53574)


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Rebase to bring in improvements for locating string notes.  (RHEL-79807)
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.
  - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string.  (RHEL-77328)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Nick Clifton <nickc@redhat.com> - 2.40-12
changelog:
  - Spec File: Enable building with GTS-13 gcc.  (#2217819)
  - Spec File: Sync version number with c8s.


author: Nick Clifton <nickc@redhat.com> - 2.40-17
changelog:
  - Spec File: Do not use of the system zlib by default.  (RHEL-19373)
  - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303)


author: Nick Clifton <nickc@redhat.com> - 2.40-19
changelog:
  - Spec File: Restore the SElinux context to %{_libdir}.  (RHEL-22818)
  - [2.40-18: was a failed attempt to fix RHEL-22818]


author: Marek Polacek <polacek@redhat.com> 13.2.1-5
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245,
  	fortran/111837, fortran/112316, libbacktrace/111315,
  	libbacktrace/112263, libstdc++/110944, libstdc++/111172,
  	libstdc++/111936, libstdc++/112089, libstdc++/112314,
  	middle-end/111253, middle-end/111818, modula2/111756, modula2/112110,
  	target/101177, target/110170, target/111001, target/111366,
  	target/111367, target/111380, target/111935, target/112443,
  	tree-optimization/111397, tree-optimization/111445,
  	tree-optimization/111489, tree-optimization/111583,
  	tree-optimization/111614, tree-optimization/111622,
  	tree-optimization/111694, tree-optimization/111764,
  	tree-optimization/111820, tree-optimization/111833,
  	tree-optimization/111917
    - fix aarch64 RA ICE (#2241139, PR target/111528)
  - fix ia32 doubleword rotates (#2238781, PR target/110792)


author: Marek Polacek <polacek@redhat.com> 13.2.1-6
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633,
  	c/112339, fortran/111880, fortran/112764, libgomp/111413,
  	libstdc++/112348, libstdc++/112491, libstdc++/112607,
  	middle-end/111497, target/53372, target/110411, target/111408,
  	target/111815, target/111828, target/112672, tree-optimization/111137,
  	tree-optimization/111465, tree-optimization/111967,
  	tree-optimization/112496
  - add -fno-stack-protector to aarch64 tests (RHEL-17684)


author: Marek Polacek <polacek@redhat.com> 13.3.1-1
changelog:
  - update from releases/gcc-13 branch
    - GCC 13.3 release
    - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577,
  	analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882,
  	analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969,
  	analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473,
  	bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224,
  	c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769,
  	c++/113141, c++/113966, c++/114303, c++/114377, c++/114537,
  	c++/114561, c++/114562, c++/114572, c++/114580, c++/114634,
  	c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337,
  	fortran/50410, fortran/55978, fortran/89462, fortran/93678,
  	fortran/95374, fortran/101135, fortran/102003, fortran/103707,
  	fortran/103715, fortran/103716, fortran/104352, fortran/106987,
  	fortran/106999, fortran/107426, fortran/110987, fortran/112407,
  	fortran/113799, fortran/113866, fortran/113885, fortran/113956,
  	fortran/114001, fortran/114474, fortran/114535, fortran/114739,
  	fortran/114825, fortran/115039, gcov-profile/114115,
  	gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616,
  	ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731,
  	libquadmath/114533, libstdc++/66146, libstdc++/93672,
  	libstdc++/104606, libstdc++/107800, libstdc++/108976,
  	libstdc++/110050, libstdc++/110054, libstdc++/113841,
  	libstdc++/114147, libstdc++/114316, libstdc++/114359,
  	libstdc++/114367, libstdc++/114401, libstdc++/114750,
  	libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655,
  	middle-end/110027, middle-end/111151, middle-end/111632,
  	middle-end/111683, middle-end/112684, middle-end/112732,
  	middle-end/113396, middle-end/113622, middle-end/114070,
  	middle-end/114348, middle-end/114552, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/114907,
  	rtl-optimization/54052, rtl-optimization/114415,
  	rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696,
  	sanitizer/114687, sanitizer/114743, sanitizer/114956,
  	sanitizer/115172, target/88309, target/101865, target/105522,
  	target/110621, target/111234, target/111600, target/111610,
  	target/111822, target/112397, target/113095, target/113233,
  	target/113950, target/114049, target/114130, target/114160,
  	target/114172, target/114175, target/114272, target/114747,
  	target/114752, target/114794, target/114837, target/114848,
  	target/114981, testsuite/111066, testsuite/112297, testsuite/114034,
  	testsuite/114036, testsuite/114662, tree-optimization/91838,
  	tree-optimization/109925, tree-optimization/110838,
  	tree-optimization/111009, tree-optimization/111268,
  	tree-optimization/111407, tree-optimization/111736,
  	tree-optimization/111882, tree-optimization/112281,
  	tree-optimization/112303, tree-optimization/112793,
  	tree-optimization/112961, tree-optimization/112991,
  	tree-optimization/113552, tree-optimization/113630,
  	tree-optimization/113670, tree-optimization/113831,
  	tree-optimization/113910, tree-optimization/114027,
  	tree-optimization/114115, tree-optimization/114121,
  	tree-optimization/114203, tree-optimization/114231,
  	tree-optimization/114246, tree-optimization/114375,
  	tree-optimization/114396, tree-optimization/114485,
  	tree-optimization/114566, tree-optimization/114672,
  	tree-optimization/114733, tree-optimization/114736,
  	tree-optimization/114749, tree-optimization/114787,
  	tree-optimization/114799, tree-optimization/114876,
  	tree-optimization/114965, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154
  - add --without-clang-plugin --without-llvm-plugin to annobin configure
    options


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244)


author: Nick Clifton <nickc@redhat.com> - 12.67-1
changelog:
  - Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
  - Annocheck: Stop warnings about known gaps.    (RHEL-53218)
  - Annocheck: Fix stack realign test.  (#2302427)


author: Nick Clifton <nickc@redhat.com> - 12.67-2
changelog:
  - Spec File: Use correct directory for plugin installation.  (RHEL-53209)
  - Spec File: Disable plugin when running on wrong major version of the compiler.


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53209)


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Rebase for GTS 14.1 release.  (RHEL-76932)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-39736)


author: Marek Polacek <polacek@redhat.com> 14.2.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.2 release
    - PRs analyzer/114899, c++/99241, c++/99242, c++/104981, c++/106760,
  	c++/111890, c++/115165, c++/115476, c++/115550, c++/115561,
  	c++/115583, c++/115623, c++/115754, c++/115783, c++/115865,
  	c++/115897, c++/115900, c++/115986, fortran/59104, fortran/84006,
  	fortran/93635, fortran/98534, fortran/99798, fortran/100027,
  	fortran/103115, fortran/103312, fortran/113363, fortran/115700,
  	ipa/111613, ipa/113291, ipa/113787, ipa/114207, ipa/115033,
  	ipa/115277, ipa/116055, libstdc++/113376, libstdc++/114387,
  	libstdc++/115399, libstdc++/115482, libstdc++/115522,
  	libstdc++/115585, libstdc++/115807, libstdc++/115854,
  	libstdc++/116070, middle-end/115527, middle-end/115836,
  	middle-end/115887, pch/115312, rtl-optimization/115049,
  	rtl-optimization/115565, target/87376, target/88236, target/97367,
  	target/98762, target/105090, target/113715, target/114759,
  	target/114890, target/114936, target/114988, target/115068,
  	target/115153, target/115188, target/115351, target/115389,
  	target/115456, target/115457, target/115459, target/115475,
  	target/115526, target/115554, target/115562, target/115591,
  	target/115611, target/115691, target/115725, target/115726,
  	target/115752, target/115763, target/115840, target/115872,
  	target/115978, target/115981, target/115988, target/116035,
  	testsuite/115826, testsuite/116061, tree-optimization/113673,
  	tree-optimization/115382, tree-optimization/115646,
  	tree-optimization/115669, tree-optimization/115694,
  	tree-optimization/115701, tree-optimization/115723,
  	tree-optimization/115841, tree-optimization/115843,
  	tree-optimization/115867, tree-optimization/115868,
  	tree-optimization/116034, tree-optimization/116057


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-74061)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-70192)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-74059)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)
  - have gfortran require install-info (RHEL-62417)


author: Filip Januš <fjanus@redhat.com> - 2.2.5-12
changelog:
  - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src)
  - Resolves: #1599032


author: Filip Januš <fjanus@redhat.com> - 2.3.1-1
changelog:
  - Upstream released new version 2.3.1
  - patch bug615 is no more needed - fixed by upstream in release
  - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on
    x390s - XFAIL_TEST definition for x390s is no more necessary


author: Filip Januš <fjanus@redhat.com> - 2.3.2-1
changelog:
  - Add condition if fedora for packages not available in RHEL
  - enable avif support
  - use bcond
  - rebase to version 2.3.2


author: Tomas Popela <tpopela@redhat.com> - 2.42.6-3
changelog:
  - Backport fixes for CVE-2021-46829 and CVE-2021-44648
  - Resolves: rhbz#2115213
  - Resolves: rhbz#2044346


author: Milan Crha <mcrha@redhat.com> - 2.6.0-8
changelog:
  - Backport Fedora change to provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format)
  - Resolves: RHEL-78739


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-15
changelog:
  - RHEL-39110 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-17
changelog:
  - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
  - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
  - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: Milan Crha <mcrha@redhat.com> - 41.0-2
changelog:
  - Resolves: #2012699 (Backport changes from Fedora 35)
  - Add patch to mark compulsory only repos, not apps from it
  - Resolves: #2011176 (flathub repo can't be added through gnome-software)
  - Resolves: #2010660 (gs-repos-dialog: Can show also desktop applications)
  - Resolves: #2010353 (Optional repos cannot be disabled)
  - Resolves: #2010740 (Refresh on repository setup change)
  - Resolves: #2009063 (Correct update notifications)


author: Milan Crha <mcrha@redhat.com> - 41.5-2
changelog:
  - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file)
  - Resolves: #2129021 (Hide some errors in non-debug builds)


author: Daiki Ueno <dueno@redhat.com> - 3.8.2-2
changelog:
  - Bump nettle dependency to 3.9.1
  - Skip KTLS test exercising ChaCha20-Poly1305 in TLS 1.2 (RHEL-18498)


author: Daiki Ueno <dueno@redhat.com> - 3.8.3-2
changelog:
  - Fix timing side-channel in deterministic ECDSA (RHEL-28959)
  - Fix potential crash during chain building/verification (RHEL-28954)


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-96
changelog:
  - Fixes for several CVEs
  - Resolves: CVE-2024-45779 CVE-2024-45778 CVE-2025-1118
  - Resolves: CVE-2025-0677 CVE-2024-45782 CVE-2025-0690
  - Resolves: CVE-2024-45783 CVE-2025-0624 CVE-2024-45776
  - Resolves: CVE-2025-0622 CVE-2024-45774 CVE-2024-45775
  - Resolves: CVE-2024-45781 CVE-2024-45780
  - Resolves: #RHEL-79700
  - Resolves: #RHEL-79341
  - Resolves: #RHEL-79875
  - Resolves: #RHEL-79849
  - Resolves: #RHEL-79707
  - Resolves: #RHEL-79857
  - Resolves: #RHEL-79709
  - Resolves: #RHEL-79846
  - Resolves: #RHEL-75737
  - Resolves: #RHEL-79713
  - Resolves: #RHEL-73785
  - Resolves: #RHEL-73787
  - Resolves: #RHEL-79704
  - Resolves: #RHEL-79702


author: Nicolas Frayer <nfrayer@redhat.com> 2.06-99
changelog:
  - Added the following 2 commits to optimize memory consumption
  - tpm: Disable the tpm verifier if the TPM device is not present
  - powerpc: increase MIN RMA size for CAS negotiation
  - Resolves: #RHEL-76558


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Bump version
  - Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542,
    CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835
    Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037
    Resolves: RHEL-71019, RHEL-70995, RHEL-71163


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
    CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
    CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
    CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
    CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
    CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
  - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
  - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
  - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
  - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
  - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
  - Resolves: RHEL-71189


author: Tom Stellard <tstellar@redhat.com> - 5.3.3-3
changelog:
  - Fix warning building with clang
  - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type]


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-2
changelog:
  - Fix FIPS related bugs.
  - Abort encryption when header and data devices are same.
  - Resolves: #2150251 #2148841


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-3
changelog:
  - patch: Disallow use of internal kenrel crypto driver names in "capi"
  - patch: Also disallow active devices with internal kernel names
  - patch: Fix init_by_name to allow unknown cipher format in dm-crypt
  - patch: Fix reencryption to fail properly for unknown cipher
  - patch: Fix activation of LUKS2 with capi format cipher and kernel
  - Resolves: #2212771


author: Daniel Zatovic <dzatovic@redhat.com> - 2.7.2-1
changelog:
  - Update to cryptsetup 2.7.2
  - Use OpenSLL Argon implementation instead of the built-in one
  - Resolves: RHEL-32377


author: Ondrej Kozina <okozina@redhat.com> - 2.7.2-2
changelog:
  - patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
  - patch: Enable Argon2 in FIPS with openssl backend.
  - patch: Abort online reencryption for misconfigured devices.
  - patch: Harden online reencryption checks in initialization phase.
  - patch: Fix detection of direct-io with suspended devices.
  - patch: Return suspended status also for unknow target types.
  - patch: Do not handle device as suspended on error.
  - Resolves: RHEL-39003 RHEL-41238


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-2.el9
changelog:
  - macvlan: Add bclim parameter (Andrea Claudi) [2186945]
  - Update kernel headers (Andrea Claudi) [2186945]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-5.el9
changelog:
  - tc: add missing separator (Andrea Claudi) [RHEL-337]
  - u32: fix TC_U32_TERMINAL printing (Andrea Claudi) [RHEL-586]


author: Phil Sutter <psutter@redhat.com> [1.8.10-3.el9]
changelog:
  - extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
  - spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
  - nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
  - spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]


author: Phil Sutter <psutter@redhat.com> [1.8.10-5.el9]
changelog:
  - xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
  - tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
  - nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
  - nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
  - nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]


author: Chris Leech <cleech@redhat.com> - 6.2.1.9-18.gita65a472
changelog:
  - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
  - new meson build system, sync with fedora packaging


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2159650, rhbz#2167513, rhbz#2170367, rhbz#2189721 rhbz#2209688


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.21.1.rt14.306.el9_2]
changelog:
  - [rt] build kernel-rt-5.14.0-284.21.1.rt14.306.el9_2 [2215122]
  - crypto: jitter - correct health test during initialization (Vladis Dronov) [2215080 2214271]
  - mm: avoid unnecessary page fault retires on shared memory types (Nico Pache) [2213894 2160210]
  - scsi: lpfc: Account for fabric domain ctlr device loss recovery (Dick Kennedy) [2213616 2213029]
  - scsi: lpfc: Clear NLP_IN_DEV_LOSS flag if already in rediscovery (Dick Kennedy) [2213616 2213029]
  - scsi: lpfc: Fix use-after-free rport memory access in lpfc_register_remote_port() (Dick Kennedy) [2213616 2213029]
  - scsi: lpfc: Fix crash involving race between FLOGI timeout and devloss handler (Paul Ely) [2213616 2165043]
  - powerpc/vdso: Fix incorrect CFI in gettimeofday.S (Mamatha Inamdar) [2210074 2203363]
  - powerpc/vdso: Move cvdso_call macro into gettimeofday.S (Mamatha Inamdar) [2210074 2203363]
  - powerpc/vdso: Remove cvdso_call_time macro (Mamatha Inamdar) [2210074 2203363]
  - powerpc/vdso: Merge vdso64 and vdso32 into a single directory (Mamatha Inamdar) [2210074 2203363]
  - powerpc/vdso: Rework VDSO32 makefile to add a prefix to object files (Mamatha Inamdar) [2210074 2203363]
  - powerpc/vdso: augment VDSO32 functions to support 64 bits build (Mamatha Inamdar) [2210074 2203363]
  - redhat: configs: enable CONFIG_DELL_WMI_PRIVACY (Foggy Liu) [2209808 2186163]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.22.1.rt14.307.el9_2]
changelog:
  - [rt] build kernel-rt-5.14.0-284.22.1.rt14.307.el9_2 [2215122]
  - PCI: hv: Add a per-bus mutex state_lock (Vitaly Kuznetsov) [2217066 2182619]
  - Revert "PCI: hv: Fix a timing issue which causes kdump to fail occasionally" (Vitaly Kuznetsov) [2217066 2182619]
  - PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (Vitaly Kuznetsov) [2217066 2182619]
  - PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic (Vitaly Kuznetsov) [2217066 2182619]
  - PCI: hv: Fix a race condition bug in hv_pci_query_relations() (Vitaly Kuznetsov) [2217066 2182619]
  - hwmon: (coretemp) avoid RDMSR interrupts to isolated CPUs (Marcelo Tosatti) [2215552 2182083]
  - prlimit: do_prlimit needs to have a speculation check (Alex Gladkov) [2215107 2196317] {CVE-2023-0458}
  - x86: don't use REP_GOOD or ERMS for small memory clearing (Myron Stowe) [2196230 2190487]
  - x86/cpufeatures: Add macros for Intel's new fast rep string features (Myron Stowe) [2196230 2190487]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.23.1.rt14.308.el9_2]
changelog:
  - [rt] build kernel-rt-5.14.0-284.23.1.rt14.308.el9_2 [2215122]
  - KVM: x86: Don't inhibit APICv/AVIC if xAPIC ID mismatch is due to 32-bit ID (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Don't inhibit APICv/AVIC on xAPIC ID "change" if APIC is disabled (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: fix APICv/x2AVIC disabled when vm reboot by itself (Maxim Levitsky) [2218871 2177720]
  - locking/rwbase: Mitigate indefinite writer starvation (Eder Zulian) [2217939 2037670]
  - rbd: get snapshot context after exclusive lock is ensured to be held (Ilya Dryomov) [2216569 2212511]
  - rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting (Ilya Dryomov) [2216569 2212511]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-284.24.1.rt14.309.el9_2]
changelog:
  - [rt] build kernel-rt-5.14.0-284.24.1.rt14.309.el9_2 [2222796]
  - tracing/hwlat: Replace sched_setaffinity with set_cpus_allowed_ptr (Jerome Marchand) [2221157 2178234]
  - cifs: return a single-use cfid if we did not get a lease (Ronnie Sahlberg) [2221159 2175967]
  - cifs: Check the lease context if we actually got a lease (Ronnie Sahlberg) [2221159 2175967]
  - cifs: set rc to -ENOENT if we can not get a dentry for the cached dir (Ronnie Sahlberg) [2221159 2175967]
  - cifs: use LIST_HEAD() and list_move() to simplify code (Ronnie Sahlberg) [2221159 2175967]
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb (Davide Caratti) [2219662 2218677] {CVE-2023-3090}
  - nvme: fix discard support without oncs (Ming Lei) [2192632 2174443]
  - nvme: fix handling single range discard request (Ming Lei) [2192632 2174443]
  - KVM: x86/mmu: Refresh CR0.WP prior to checking for emulated permission faults (Paolo Bonzini) [2218935 2210042]
  - KVM: x86: Add helpers to query individual CR0/CR4 bits (Paolo Bonzini) [2218935 2210042]
  - KVM: x86: Preserve TDP MMU roots until they are explicitly invalidated (Paolo Bonzini) [2218935 2210042]
  - KVM: x86/mmu: Replace open coded usage of tdp_mmu_page with is_tdp_mmu_page() (Paolo Bonzini) [2218935 2210042]
  - KVM: x86/mmu: fix some comment typos (Paolo Bonzini) [2218935 2210042]
  - KVM: x86/mmu: Move TDP MMU VM init/uninit behind tdp_mmu_enabled (Paolo Bonzini) [2218935 2210042]
  - KVM: x86/mmu: Change tdp_mmu to a read-only parameter (Paolo Bonzini) [2218935 2210042]
  - KVM: VMX: Make CR0.WP a guest owned bit (Paolo Bonzini) [2218935 2210042]
  - KVM: x86: Make use of kvm_read_cr*_bits() when testing bits (Paolo Bonzini) [2218935 2210042]
  - KVM: x86: Ignore CR0.WP toggles in non-paging mode (Paolo Bonzini) [2218935 2210042]
  - KVM: x86: Do not unload MMU roots when only toggling CR0.WP with TDP enabled (Paolo Bonzini) [2218935 2210042]
  - erspan: get the proto with the md version for collect_md (Xin Long) [2217493 2140037]
  - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216991 2214029] {CVE-2023-35788}
  - [redhat-rt] Update RTBZ for batch#3 (Patrick Talbert)


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-284.25.1.rt14.310.el9_2]
changelog:
  - [rt] build kernel-rt-5.14.0-284.25.1.rt14.310.el9_2 [2222796]
  - x86/speculation: Allow enabling STIBP with legacy IBRS (Ricardo Robaina) [2215108 2187267] {CVE-2023-1998}
  - netfilter: nf_dup_netdev: add and use recursion counter (Eric Garver) [2221169 1724795]
  - netfilter: nf_dup_netdev: do not push mac header a second time (Eric Garver) [2221169 1724795]
  - netfilter: egress: silence egress hook lockdep splats (Eric Garver) [2221169 1724795]
  - netfilter: nft_fwd_netdev: Support egress hook (Eric Garver) [2221169 1724795]
  - netfilter: nft_meta: add NFT_META_IFTYPE (Eric Garver) [2221169 1724795]
  - KVM: x86: Allow APICv APIC ID inhibit to be cleared (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Track required APICv inhibits with variable, not callback (Maxim Levitsky) [2218871 2177720]
  - Revert "KVM: SVM: Do not throw warning when calling avic_vcpu_load on a running vcpu" (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Ignore writes to Remote Read Data on AVIC write traps (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Handle multiple logical targets in AVIC kick fastpath (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Require logical ID to be power-of-2 for AVIC entry (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Update svm->ldr_reg cache even if LDR is "bad" (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Always update local APIC on writes to logical dest register (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Inhibit AVIC if vCPUs are aliased in logical mode (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Inhibit APICv/AVIC if the optimized physical map is disabled (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Honor architectural behavior for aliased 8-bit APIC IDs (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Disable APIC logical map if vCPUs are aliased in logical mode (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Disable APIC logical map if logical ID covers multiple MDAs (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Skip redundant x2APIC logical mode optimized cluster setup (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Explicitly track all possibilities for APIC map's logical modes (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Explicitly skip optimized logical map setup if vCPU's LDR==0 (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Add helper to perform final AVIC "kick" of single vCPU (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Document that vCPU ID == APIC ID in AVIC kick fastpatch (Maxim Levitsky) [2218871 2177720]
  - Revert "KVM: SVM: Use target APIC ID to complete x2AVIC IRQs when possible" (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Fix x2APIC Logical ID calculation for avic_kick_target_vcpus_fast (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Compute dest based on sender's x2APIC status for AVIC kick (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Replace "avic_mode" enum with "x2avic_enabled" boolean (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Inhibit APIC memslot if x2APIC and AVIC are enabled (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Move APIC access page helper to common x86 code (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Handle APICv updates for APIC "mode" changes via request (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Don't put/load AVIC when setting virtual APIC mode (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Process ICR on AVIC IPI delivery failure due to invalid target (Maxim Levitsky) [2218871 2177720]
  - KVM: SVM: Flush the "current" TLB when activating AVIC (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Purge "highest ISR" cache when updating APICv state (Maxim Levitsky) [2218871 2177720]
  - KVM: x86: Blindly get current x2APIC reg value on "nodecode write" traps (Maxim Levitsky) [2218871 2177720]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.26.1.rt14.311.el9_2]
changelog:
  - net: openvswitch: fix upcall counter access before allocation (Eelco Chaudron) [2223310 2203263]
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221736 2221737] {CVE-2023-35001}
  - netfilter: nf_tables: do not ignore genmask when looking up chain by id (Florian Westphal) [2221782 2221783] {CVE-2023-31248}
  - rtmutex: Ensure that the top waiter is always woken up (Joel Savitz) [2222121 2176147]
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails (Phil Sutter) [2216167 2214035] {CVE-2023-3390}
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain (Phil Sutter) [2216167 2214035] {CVE-2023-3390}
  - netfilter: nf_tables: fix chain binding transaction logic (Phil Sutter) [2225461 2225462] {CVE-2023-3390 CVE-2023-3610}
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE (Phil Sutter) [2216167 2214035] {CVE-2023-3390}
  - netfilter: nf_tables: validate catch-all set elements (Florian Westphal) [2216167 2214035] {CVE-2023-3390}
  - thunderbolt: Increase DisplayPort Connection Manager handshake timeout (Desnes Nunes) [2219463 2168851]
  - thunderbolt: Increase timeout of DP OUT adapter handshake (Desnes Nunes) [2219463 2212495]
  - ASoC: Intel: sof_sdw: add quick for Dell SKU 0BDA (Jaroslav Kysela) [2218960 2217298]
  - ASoC: Intel: soc-acpi: add tables for Dell SKU 0B34 (Jaroslav Kysela) [2218960 2217298]
  - ASoC: Intel: sof-sdw: add Dell SKU 0B34 (Jaroslav Kysela) [2218960 2217298]
  - ASoC: Intel: soc-acpi: add table for RPL Dell SKU 0BDA (Jaroslav Kysela) [2218960 2217298]
  - ACPI: sleep: Avoid breaking S3 wakeup due to might_sleep() (Mark Langsdorf) [2218026 2215972]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.27.1.rt14.312.el9_2]
changelog:
  - [rt] build kernel-rt-5.14.0-284.27.1.rt14.312.el9_2 [2228482]
  - x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226824 2226826] {CVE-2023-20593}
  - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226824 2226826] {CVE-2023-20593}
  - x86/microcode/core: Return an error only when necessary (Waiman Long) [2226824 2226826] {CVE-2023-20593}
  - x86/microcode/AMD: Fix mixed steppings support (Waiman Long) [2226824 2226826] {CVE-2023-20593}
  - x86/microcode/AMD: Add a @cpu parameter to the reloading functions (Waiman Long) [2226824 2226826] {CVE-2023-20593}
  - x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter (Waiman Long) [2226824 2226826] {CVE-2023-20593}
  - x86/amd: Cache debug register values in percpu variables (Waiman Long) [2226824 2226826] {CVE-2023-20593}
  - x86/microcode: Adjust late loading result reporting message (Waiman Long) [2226824 2226826] {CVE-2023-20593}
  - x86/microcode: Check CPU capabilities after late microcode update correctly (Waiman Long) [2226824 2226826] {CVE-2023-20593}
  - x86/microcode: Add a parameter to microcode_check() to store CPU capabilities (Waiman Long) [2226824 2226826] {CVE-2023-20593}
  - x86/microcode/AMD: Rename a couple of functions (Waiman Long) [2226824 2226826] {CVE-2023-20593}
  - x86/microcode/AMD: Track patch allocation size explicitly (David Arcari) [2226821 1971938]
  - x86/microcode: Print previous version of microcode after reload (David Arcari) [2226821 1971938]
  - x86/cpu: Load microcode during restore_processor_state() (David Arcari) [2226821 1971938]
  - x86/pm: Add enumeration check before spec MSRs save/restore setup (Chris von Recklinghausen) [2226821 2181908] {CVE-2023-1637}
  - x86/tsx: Add a feature bit for TSX control MSR support (Chris von Recklinghausen) [2226821 2181908] {CVE-2023-1637}
  - x86/cpu: Restore AMD's DE_CFG MSR after resume (Chris von Recklinghausen) [2226821 2181908] {CVE-2023-1637}
  - x86/pm: Fix false positive kmemleak report in msr_build_context() (Chris von Recklinghausen) [2226821 2181908] {CVE-2023-1637}
  - x86/speculation: Restore speculation related MSRs during S3 resume (Chris von Recklinghausen) [2226821 2181908] {CVE-2023-1637}
  - x86/pm: Save the MSR validity status at context setup (Chris von Recklinghausen) [2226821 2181908] {CVE-2023-1637}
  - libceph: harden msgr2.1 frame segment length checks (Ilya Dryomov) [2227070 2222253]
  - seccomp: Move copy_seccomp() to no failure path. (Viktor Malik) [2226945 2218682]
  - bpf: Adjust insufficient default bpf_jit_limit (Viktor Malik) [2226945 2218682]
  - crypto: ccp: Get rid of __sev_platform_init_locked()'s local function pointer (Bandan Das) [2224587 2152249]
  - crypto: ccp - Name -1 return value as SEV_RET_NO_FW_CALL (Bandan Das) [2224587 2152249]
  - x86/sev: Change snp_guest_issue_request()'s fw_err argument (Bandan Das) [2224587 2152249]
  - virt/coco/sev-guest: Double-buffer messages (Bandan Das) [2224587 2152249]
  - virt/coco/sev-guest: Add throttling awareness (Bandan Das) [2224587 2152249]
  - virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a switch-case (Bandan Das) [2224587 2152249]
  - virt/coco/sev-guest: Do some code style cleanups (Bandan Das) [2224587 2152249]
  - virt/coco/sev-guest: Carve out the request issuing logic into a helper (Bandan Das) [2224587 2152249]
  - virt/coco/sev-guest: Remove the disable_vmpck label in handle_guest_request() (Bandan Das) [2224587 2152249]
  - virt/coco/sev-guest: Simplify extended guest request handling (Bandan Das) [2224587 2152249]
  - virt/coco/sev-guest: Check SEV_SNP attribute at probe time (Bandan Das) [2224587 2152249]
  - virt/sev-guest: Return -EIO if certificate buffer is not large enough (Bandan Das) [2224587 2152249]
  - virt/sev-guest: Prevent IV reuse in the SNP guest driver (Bandan Das) [2224587 2152249]
  - x86/sev: Don't use cc_platform_has() for early SEV-SNP calls (Bandan Das) [2224587 2152249]
  - [redhat-rt] Update RTBZ for batch#3 (Herton R. Krzesinski)


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.28.1.rt14.313.el9_2]
changelog:
  - [rt] build kernel-rt-5.14.0-284.28.1.rt14.313.el9_2 [2228482]
  - iavf: fix reset task race with iavf_remove() (Petr Oros) [2228156 2223599]
  - iavf: fix a deadlock caused by rtnl and driver's lock circular dependencies (Petr Oros) [2228156 2223599]
  - Revert "iavf: Do not restart Tx queues after reset task failure" (Petr Oros) [2228156 2223599]
  - Revert "iavf: Detach device during reset task" (Petr Oros) [2228156 2223599]
  - iavf: Wait for reset in callbacks which trigger it (Petr Oros) [2228156 2223599]
  - iavf: use internal state to free traffic IRQs (Petr Oros) [2228156 2223599]
  - iavf: Fix out-of-bounds when setting channels on remove (Petr Oros) [2228156 2223599]
  - iavf: Fix use-after-free in free_netdev (Petr Oros) [2228156 2223599]
  - iavf: make functions static where possible (Petr Oros) [2228156 2223599]
  - iavf: fix err handling for MAC replace (Petr Oros) [2228156 2223599]
  - iavf: remove some unused functions and pointless wrappers (Petr Oros) [2228156 2223599]
  - iavf: remove mask from iavf_irq_enable_queues() (Petr Oros) [2228156 2223599]
  - iavf: send VLAN offloading caps once after VFR (Petr Oros) [2228156 2223599]
  - i40e: Wait for pending VF reset in VF set callbacks (Ivan Vecera) [2228158 2215498]
  - i40e: Add helper for VF inited state check with timeout (Ivan Vecera) [2228158 2215498]
  - KEYS: use kfree_sensitive with key (Vladis Dronov) [2227768 2223719]
  - locking/rtmutex: Add a lockdep assert to catch potential nested blocking (Crystal Wood) [2225623 2218724]
  - locking/rtmutex: Avoid pointless blk_flush_plug() invocations (Crystal Wood) [2225623 2218724]
  - locking/rtmutex: Submit/resume work explicitly before/after blocking (Crystal Wood) [2225623 2218724]
  - sched/core: Provide sched_rtmutex() and expose sched work helpers (Crystal Wood) [2225623 2218724]
  - cpufreq: intel_pstate: Enable HWP IO boost for all servers (David Arcari) [2210270 2175626]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.29.1.rt14.314.el9_2]
changelog:
  - [rt] build kernel-rt-5.14.0-284.29.1.rt14.314.el9_2 [2228482]
  - redhat: configs: Disable CONFIG_CRYPTO_STATS since performance issue for storage (Herbert Xu) [2231850 2227964]
  - i2c: tegra: Fix PEC support for SMBUS block read (Steve Best) [2230488 2214531]
  - i2c: tegra: Set ACPI node as primary fwnode (Steve Best) [2230483 2222101]
  - perf vendor events intel: Add Emerald Rapids (Michael Petlan) [2230175 2177180]
  - perf vendor events intel: Refresh sapphirerapids metrics and events (Michael Petlan) [2230175 2177180]
  - perf vendor events: Update Intel sapphirerapids (Michael Petlan) [2230175 2177180]
  - perf/x86/intel/cstate: Add Emerald Rapids (Michael Petlan) [2230175 2177180]
  - perf/x86/intel: Add Emerald Rapids (Michael Petlan) [2230175 2177180]
  - perf/x86/intel/uncore: Add Emerald Rapids (Michael Petlan) [2230175 2177180]
  - perf/x86/msr: Add Emerald Rapids (Michael Petlan) [2230175 2177180]
  - perf/x86/rapl: Add support for Intel Emerald Rapids (Michael Petlan) [2230175 2177180]
  - platform/x86: intel-uncore-freq: add Emerald Rapids support (Michael Petlan) [2230169 2156827]
  - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID (Phil Sutter) [2228992 2228993] {CVE-2023-4147}
  - netfilter: nft_set_pipapo: fix improper element removal (Phil Sutter) [2227518 2227519] {CVE-2023-4004}


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.30.1.rt14.315.el9_2]
changelog:
  - [rt] build kernel-rt-5.14.0-284.30.1.rt14.315.el9_2 [2228482]
  - sched/core: Add __always_inline to schedule_loop() (Crystal Wood) [2233928 2232098]
  - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Tao Liu) [2232700 2182562]
  - arm64: efi: Make efi_rt_lock a raw_spinlock (Mark Salter) [2213502 2213503] {CVE-2023-21102}
  - efi: rt-wrapper: Add missing include (Mark Salter) [2213502 2213503] {CVE-2023-21102}
  - arm64: efi: Execute runtime services from a dedicated stack (Mark Salter) [2213502 2213503] {CVE-2023-21102}
  - crypto: rng - Fix lock imbalance in crypto_del_rng (Herbert Xu) [2232213 2229643]
  - drm/ast: Fix ARM compatibility (Robert Foss) [2232302 2192980]
  - irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 (Mark Salter) [2231962 2179060]
  - genirq: GENERIC_IRQ_EFFECTIVE_AFF_MASK depends on SMP (Mark Salter) [2231962 2179060]
  - scsi: storvsc: Handle SRB status value 0x30 (Cathy Avery) [2231990 2224933]
  - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (Cathy Avery) [2230747 2228298]
  - dm cache policy smq: ensure IO doesn't prevent cleaner policy progress (Benjamin Marzinski) [2228481 2159623]
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225654 2225655] {CVE-2023-3776}
  - md: add error_handlers for raid0 and linear (Nigel Croxon) [2221170 2162219]
  - [redhat-rt] changelog: do not perform an empty Bugzilla query (Luis Claudio R. Goncalves)


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-26
changelog:
  - Add 0100-libmultipath-avoid-temporarily-enabling-queueing-on-.patch
  - Add 0101-multipathd-Make-sure-to-disable-queueing-if-recovery.patch
    * Fixes RHEL-17234 ("RHEL9 dm-multipath no_path_retry [retry number] is
      undone if paths are later lost for an open map.")
  - Add 0102-multipathd-remove-nopath-flushing-code-from-flush_ma.patch
  - Add 0103-multipathd-make-flush_map-delete-maps-like-the-multi.patch
  - Add 0104-multipathd-disable-queueing-when-removing-unknown-ma.patch
    * Fixes RHEL-4998 ("When remove external lun from host, rescan lun status
      will cause the OS hang and no response")
  - Resolves: RHEL-4998
  - Resolves: RHEL-17234


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-27
changelog:
  - Add 0105-multipathd-fix-null-pointer-dereference-in-uev_updat.patch
  - Add 0106-multipathd-fix-auto-resize-configuration.patch
  - Add 0107-libmultipath-fix-displaying-auto_resize-config-setti.patch
    * Fixes RHEL-986 ("Add option to allow multipathd to detect device
      resizes and autoresize.")
  - Resolves: RHEL-986


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-28
changelog:
  - Add 0108-libmultipath-actually-truncate-too-large-vpd-page.patch
  - Add 0109-kpartx-fix-theoretical-overflow-in-loop-device-name.patch
    * Fixes RHEL-31793 ("RHEL SAST Automation: address (selected) true positives")
  - Resolves: RHEL-31793


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-29
changelog:
  - Add 0110-libmultipath-keep-track-of-queueing-state-in-feature.patch
  - Add 0111-libmultipath-export-partmap_in_use.patch
  - Add 0112-libmultipath-change-flush_on_last_del-to-fix-a-multi.patch
  - Add 0113-libmultipath-pad-dev_loss_tmo-to-avoid-race-with-no_.patch
    * Fixes RHEL-30272
  - Add 0114-libmultipath-remove-pathgroup-wildcard-options.patch
  - Add 0115-libmultipath-print-all-values-in-snprint_failback.patch
  - Add 0116-multipathd-Stop-double-counting-map-failures-for-no_.patch
  - Add 0117-multipath-tools-man-pages-add-missing-multipathd-com.patch
  - Add 0118-libmultipath-change-the-vend-prod-rev-printing.patch
  - Add 0119-multipath-tools-man-pages-Add-format-wildcard-descri.patch
    * Fixes RHEL-8304
  - Resolves: RHEL-8304
  - Resolves: RHEL-30272


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-30
changelog:
  - Add 0120-multipath-tools-fix-multipath-ll-bug-for-Native-NVME.patch
    * Fixes RHEL-28068
  - Add 0121-multipathd-set-reply-length-to-zero-for-NULL-replies.patch
    * Fixes RHEL-44569
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-31
changelog:
  - Modify multiple tests especially medium_error_scsi_debug and squelch_scsi_id
    * Fixes RHEL-28068 & RHEL-4459
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-32
changelog:
  - Modify bindings, find_multipaths, and user_friendly_names tests
    * Fixes RHEL-28068 & RHEL-4459
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-35
changelog:
  - Add 0124-libmultipath-add-missing-assert-to-checkers.c.patch
  - Add 0125-libmultipath-foreign-fix-memory-leak-in-nvme-foreign.patch
    * Fixes RHEL-73413
  - Add 0126-libmultipath-export-udev-pthread-cleanup-functions.patch
  - Add 0127-multipathd-set-rport-port_state-to-marginal-for-NVMe.patch
    * Fixes RHEL-67472
  - Resolves: RHEL-73413
  - Resolves: RHEL-67472


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Christine Caulfield <ccaulfie@redhat.com> - 1.24-2
changelog:
  - Fix libnozzle tests failing & covscan warning on api_knet_handle_new test
    Resolves: rhbz#2024090


author: Christine Caulfield <ccaulfie@redhat.com> - 1.28-1
changelog:
  Rebase to 1.28 for startup and performance fixes
     threads: add config check to match min value with pong timeouts
     rx: allow links to be active faster
     links: fix ping interval and pong timeout value checking
     crypto: Try crypt and decrypt on crypto_init
     tx: Remove expensive memsets
     log: Add a TRACE log level
    Resolves: #RHEL-11787


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-34564


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-5
changelog:
  - Allow resizing of inactive LVs with latest LVM
    Resolves: rhbz#2161181
  - Fix test_swapon_pagesize on systems with 64k pages
    Resolves: rhbz#2168220


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5367
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2405
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15112
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15298


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15298
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2405


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-3
changelog:
  - Minor fixes for Python 3.12 compatibility
  - Fix Python unit tests to use the right assert methods
  - Explicitly BR python3-setuptools


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Remi Collet <remi@remirepo.net> - 1.1.0-5
changelog:
  - fix missing HAVE_SSIZE_T macro using patch from
    https://github.com/awesomized/libmemcached/pull/117


author: Richard W.M. Jones <rjones@redhat.com> - 1.8.2-2
changelog:
  - Fix nbdcopy progress bar.
  - Add nbdinfo --map --totals and --can/--is options.
    resolves: rhbz#1950630


author: Richard W.M. Jones <rjones@redhat.com> - 1.10.5-1
changelog:
  - Rebase to new stable branch version 1.10.5
    resolves: rhbz#2011708
  - Map uint32_t to OCaml int64 to avoid signedness problems
    resolves: rhbz#2040610
  - CVE-2022-0485 nbdcopy destination image corruption
  - New upstream API to control initialization of pread buffer
    resolves: rhbz#2046194


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.6-1
changelog:
  - Rebase to new stable branch version 1.12.6
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660
  - Fix remote TLS failures
    resolves: rhbz#2111524
    (and 2111813)


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.8.1-8
changelog:
  - Resolves: rhbz#2134759 Untrusted Macros
  - Resolves: rhbz#2134757 Weak Master Keys
  - Resolves: rhbz#2134755 Static Initialization Vector
  - Resolves: rhbz#2134761 Macro URL arbitrary script execution


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Eduard Abdullin <eabdullin@almalinux.org> - 2.15.2-6.alma
changelog:
  - Add support for AlmaLinux Bug Tracker
  - Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-1
changelog:
  - Resolves: RHEL-36586 - Rebase SSSD for RHEL 9.5
  - Resolves: RHEL-27716 - SSSD fails to process AD groups with 'Global Scope' correctly causing incomplete group-membership on RHEL if cache is empty
  - Resolves: RHEL-17659 - [RfE] SSSD Failover Enhancements
  - Resolves: RHEL-35781 - Passkey errors when handling multiple altSecurityIdentities values
  - Resolves: RHEL-30142 - sssd_pac is crashing
  - Resolves: RHEL-22206 - Errors in krb5_child.log every time a user authenticates - Pre-authentication failed: No pkinit_anchors supplied
  - Resolves: RHEL-32595 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest
  - Resolves: RHEL-28666 - sssctl config-check is reporting false positive error msg
  - Resolves: RHEL-29454 - NULL dereference in inotify handling
  - Resolves: RHEL-1654 - Improve documentation for allowing e-mail address as username


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-2
changelog:
  - Resolves: RHEL-40742 - passkey_child with wrong owner
  - Resolves: RHEL-41047 - sssd is skipping GPO evaluation with auto_private_groups
  - Resolves: RHEL-40570 - GPO access the wrong memory location


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4
changelog:
  - Resolves: RHEL-49711 - SYSDB: remove index on dataExpireTimestamp
  - Resolves: RHEL-49811 - 2FA is being enforced after upgrading 2.9.1->2.9.4


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4.1
changelog:
  - Resolves: RHEL-59876 - EL9/CentOS Stream 9 lost offline smart card authentication
  - Resolves: RHEL-50912 - possible regression of rhbz#2196521


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.6-1
changelog:
  - Resolves: RHEL-70189 - Rebase SSSD for RHEL 9.6
  - Resolves: RHEL-67670 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-9]
  - Resolves: RHEL-68369 - sssd backend process segfaults when krb5.conf is invalid
  - Resolves: RHEL-66266 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-9]


author: Kalev Lember <klember@redhat.com> - 3.39.92-2
changelog:
  - Split sysprof-capture library and header files out to sysprof-capture-devel
  - Update minimum required glib2 version


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-1
changelog:
  - Rebased to libvirt-10.8.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-688, RHEL-7122, RHEL-19379, RHEL-22166, RHEL-24746
      RHEL-28827, RHEL-45200, RHEL-45952, RHEL-53964, RHEL-54550
      RHEL-56611, RHEL-58446


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-2
changelog:
  - Revert "network: *un*set the firewalld zone while shutting down a network" (RHEL-61576)
  - Revert "network: support setting firewalld zone for bridge device of open networks" (RHEL-61576)
  - network: call network(Add|Remove)FirewallRules() for forward mode='open' (RHEL-61576)
  - network: a different way of supporting firewalld zone for mode='open' networks (RHEL-61576)
  - network: a different implementation of *un*setting firewalld zone when network is destroyed (RHEL-61576)


author: Jiri Denemark <jdenemar@redhat.com> - 10.9.0-1
changelog:
  - Rebased to libvirt-10.9.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-7036, RHEL-7122, RHEL-35752, RHEL-46870, RHEL-52314
      RHEL-60030, RHEL-60033, RHEL-64341


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-1
changelog:
  - Rebased to libvirt-10.10.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-23607, RHEL-24850, RHEL-29267, RHEL-30842, RHEL-53963
      RHEL-54325, RHEL-54326, RHEL-55240, RHEL-64341, RHEL-65372
      RHEL-65780, RHEL-65844, RHEL-67702, RHEL-67836, RHEL-68614
      RHEL-69417


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-2
changelog:
  - util: Fix typo in virNetDevOpenvswitchInterfaceSetQos (RHEL-69938)
  - qemu: tpm: do not update profile name for transient domains (RHEL-71072)
  - qemu: Enable I/O APIC if needed (RHEL-65844)
  - cpu_map: Sort data files in meson.build (RHEL-70052)
  - sync_qemu_models_i386: Update meson.build (RHEL-70052)
  - sync_qemu_models_i386: Generate missing -v1 variants (RHEL-70052)
  - cpu_map: Add 486-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium2-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium3-v1 CPU model (RHEL-70052)
  - cpu_map: Add coreduo-v1 CPU model (RHEL-70052)
  - cpu_map: Add n270-v1 CPU model (RHEL-70052)
  - cpu_map: Add core2duo-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu32-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm32-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu64-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm64-v1 CPU model (RHEL-70052)
  - cpu_map: Add Conroe-v1 CPU model (RHEL-70052)
  - cpu_map: Add Penryn-v1 CPU model (RHEL-70052)
  - cpu_map: Add KnightsMill-v1 CPU model (RHEL-70052)
  - cpu_map: Add athlon-v1 CPU model (RHEL-70052)
  - cpu_map: Add phenom-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G1-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G2-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G3-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G4-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G5-v1 CPU model (RHEL-70052)
  - cpu_map: Add EPYC-Genoa-v1 CPU model (RHEL-70052)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-4
changelog:
  - conf, docs: Add support for direct and extended tlbflush features (RHEL-7122)
  - qemu: Add support for direct and extended tlbflush features (RHEL-7122)
  - conf: refactor hyperv features formatting (RHEL-7122)
  - conf: Adjust hyperv tlbflush formatting (RHEL-7122)
  - qemu_migration: Do not consider post-copy active in postcopy-recover (RHEL-73085)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-5
changelog:
  - qemu: allow migration of guest with mdev vGPU to VF vGPU (RHEL-68064)
  - storage_file: Refuse qcow2 images with empty string as 'data_file' (RHEL-73504)
  - virstoragetest: Add case for qcow2 image with empty string as 'data_file' (RHEL-73504)
  - qemu: snapshot: delete disk image only if parent snapshot is external (RHEL-74041)
  - storage_file: de-modularize the local file backend (RHEL-73507)
  - libvirt.spec: Move ownership of 'storage-file' backends directory to gluster (RHEL-73507)
  - qemu: re-use existing ActualNetDef for more interface types during update-device (RHEL-7036)
  - tools: ssh-proxy: Check for domain status before parsing its CID (RHEL-75577)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-6
changelog:
  - build: Bump minimum glib2 version to 2.66.0 (RHEL-77884)
  - qemuProcessHandleIOError: Refactor to extract 'priv' instead of 'driver' (RHEL-77884)
  - qemu: Handle quirks of 'device' field of BLOCK_IO_ERROR event in monitor code (RHEL-77884)
  - qemu: Rename 'diskAlias' to 'device' in qemu IO error event handling (RHEL-77884)
  - qemuProcessHandleIOError: Rename local variables (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Do not munge 'reason' field of IO error event (RHEL-77884)
  - qemuProcessHandleIOError: Prefer lookup by node name (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Propagate new 'qom-path' field (RHEL-77884)
  - virStorageSource: Add fields for storing last I/O error message (RHEL-77884)
  - qemuProcessHandleIOError: Populate I/O error reason to virStorageSource (RHEL-77884)
  - qemuProcessHandleIOError: Log IO errors in the VM log file (RHEL-77884)
  - libxlDomainGetMessages: Add existing flags to 'virCheckFlags' (RHEL-77884)
  - virDomainObjGetMessages: Refactor using GPtrArray (RHEL-77884)
  - virDomainGetMessages: Introduce VIR_DOMAIN_MESSAGE_IOERRORS (RHEL-77884)
  - include: libvirt-domain: Reword documentation for @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - include: libvirt-domain: Add 'message' @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - qemuSnapshotForEachQcow2: Don't initialize 'nrollback' (RHEL-73315)
  - qemu: process: Export qemuPrepareNVRAM for use in snapshot code (RHEL-73315)
  - qemu: snapshot: Ensure that NVRAM image exists when taking inactive internal snapshot (RHEL-73315)
  - qemuxmlconftest: Allow testing of the 'writable' flag for passed FDs for disks (RHEL-37519)
  - qemuxmlconftest: Add testing of FDs with 'writable' flag in 'disk-source-fd' (RHEL-37519)
  - qemu: domain: Initialize FD passthrough for a virStorageSource before using it (RHEL-37519)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-7
changelog:
  - qemu_migration: Refactor qemuMigrationSrcRestoreDomainState (RHEL-79168)
  - qemu_migration: Do not automatically resume domain after I/O error (RHEL-79168)
  - qemucapabilitiestest: Add data for the qemu-10.0 dev cycle on x86_64 (RHEL-79095)
  - qemucapabilitiestest: Update 'caps_10.0.0_x86_64' to 'v9.2.0-1636-gffaf7f0376' (RHEL-79095)
  - qemu: capabilies: Introduce QEMU_CAPS_BLOCKDEV_SET_ACTIVE (RHEL-79095)
  - qemu: monitor: Add monitor backend for 'blockdev-set-active' (RHEL-79095)
  - qemu: migration: Reactivate block nodes after migration if VM is left paused (RHEL-79095)
  - conf: change virDomainHostdevInsert() to return void (RHEL-69455)
  - qemu: fix qemu validation to forbid guest-side IP address for type='vdpa' (RHEL-69455)
  - qemu: validate that model is virtio for vhostuser and vdpa interfaces in the same place (RHEL-69455)
  - qemu: automatically set model type='virtio' for interface type='vhostuser' (RHEL-69455)
  - qemu: do all vhostuser attribute validation in qemu driver (RHEL-69455)
  - conf/qemu: make <source> element *almost* optional for type=vhostuser (RHEL-69455)
  - qemu: use switch instead of if in qemuProcessPrepareDomainNetwork() (RHEL-69455)
  - qemu: make qemuPasstCreateSocketPath() public (RHEL-69455)
  - qemu: complete vhostuser + passt support (RHEL-69455)
  - qemu: fail validation if a domain def has vhostuser/passt but no shared mem (RHEL-69455)
  - docs: improve type='user' docs to higlight differences between SLIRP and passt (RHEL-69455)
  - docs: document using passt backend with <interface type='vhostuser'> (RHEL-69455)
  - utils: Canonicalize paths before comparing them (RHEL-79166)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: Artem Egorenkov <aegorenk@redhat.com> - 3.6.0-7
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: Eduard Abdullin <eabdullin@almalinux.org> - 23.3.3-1.alma.1
changelog:
  - Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux
    Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32


author: Matej Mužila <mmuzila@redhat.com> - 1.2.11-34
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.11-37
changelog:
  - Rebased Power 8 optimization patches
  - Fix for Unnecessary IFUNC resolver for crc32_z
  - Fix for python3.11 broken libxml2 and lxml on s390x


author: Honggang Li <honli@redhat.com> - 5.7-3
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960479


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2015392


author: Ray Strode <rstrode@redhat.com> - 40.9-18
changelog:
  - Don't allow applications on other workspaces to steal
    focus, unless their timestamps are pristine
    Resolves: RHEL-29537


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-20
changelog:
  - Fix positioning when using always-on-top windows
    Resolves: RHEL-45998
  - Improve handling of always-on-visible-workspace windows
    Resolves: RHEL-45366


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-22
changelog:
  - Fix crash when moving window while switching workspace
    Resolves: RHEL-62997
  - Improve app discovery for workspace logic
    Resolves: RHEL-63000


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Richard W.M. Jones <rjones@redhat.com> - 1.32.5-4
changelog:
  - Rebase to new stable branch version 1.32.5
    resolves: rhbz#2135765
  - Move stats filter to new subpackage.
  - Improve error message when PasswordAuthentication is set to 'no'
    resolves: rhbz#2158300
  - luks: Avoid crash when image does not contain a LUKS header
    resolves: rhbz#2159581
  - curl: Enable multi-conn for read-only connections
    resolves: rhbz#2166686


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-9
changelog:
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141902) and (#2141906)
  - fix memory leak when ipv6 disable set to 1 (#2151540)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-14
changelog:
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26649)


author: Jan Macku <jamacku@redhat.com> - 10.11.8-1
changelog:
  - netconsole: var/lock -> run/lock
  - netconsole: source sysconfig/network only if it exists
  - netconsole: remove unused variables
  - netconsole: remove trailing whitespaces
  - sync spec with c9s


author: Steve Dickson <steved@redhat.com> 2.5.4-28
changelog:
  -  Makefile.am: allow mount.nfs to be writeable by owner (RHEL-68701)
  -  mount.nfs: retry NFSv3 mount after NFSv4 failure in auto negotiation (RHEL-68574)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-30
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-72823)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-64340)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-2
changelog:
  - Fix MD-5 decode issue in pkcs #12
  - turn off policy processing for pkcs12 and smime
  - restore the rhel9 pkcs12 defaults for pk12util


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Than Ngo <than@redhat.com> - 3.21.0-8
changelog:
  - Resolves: #2222592, p11sak tool: slot option does not accept argument 0 for slot index 0
  - Resolves: #2222596, p11sak fails as soon as there reside non-key objects


author: Than Ngo <than@redhat.com> - 3.22.0-2
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22792


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-50064, update to 3.24.0
  - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le
  - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-50056, openCryptoki cca token SHA3 support
  - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71053)
  - Avoid SSL context cleanup during library destruction (RHEL-56502)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217442)
  - Fix systemd* probes unit enumeration (rhbz#2219532)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.11-1
changelog:
  - Upgrade to the latest upstream release (RHEL-76355)
  - Introduce "oscap-im", a tool for building hardened bootable container images
  - Fix RPM probes in bootable container images build environment (RHEL-55251)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-45
changelog:
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465).
    Resolves: RHEL-78700


author: Eduard Abdullin <eabdullin@almalinux.org> - 132-1.alma.1
changelog:
  - Install AlmaLinux repositories
  - Add AlmaLinux support patch (Thanks @pastalian)
  - Remove libreport-rhel-bugzilla from package set


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.2-1
changelog:
  - Update to new upstream release 0.25.2
    Resolves: RHEL-14834
  - Add IBM specific mechanisms and attributes
    Resolves: RHEL-10570


author: Chris Lumens <clumens@redhat.com> - 2.1.7-2
changelog:
  - Rebase on upstream 2.1.7-rc4 release
  - Use systemd-sysusers to create user/group
  - Pacemaker Remote nodes can validate against later schema versions
  - Related: RHEL-17225
  - Resolves: RHEL-7665


author: Chris Lumens <clumens@redhat.com> - 2.1.7-3
changelog:
  - Rebase on upstream 2.1.7 final release
  - Fix documentation for Pacemaker Remote schema transfers
  - Do not check CIB feature set version when CIB_file is set
  - Consolidate attrd cache handling
  - Avoid duplicating option metadata across daemons
  - Related: RHEL-7665
  - Related: RHEL-13216
  - Resolves: RHEL-7702


author: Chris Lumens <clumens@redhat.com> - 2.1.7-4
changelog:
  - Properly validate attribute set type in pacemaker-attrd
  - Fix `crm_attribute -t nodes --node localhost`
  - Resolves: RHEL-13216
  - Resolves: RHEL-17225
  - Resolves: RHEL-23498


author: Chris Lumens <clumens@redhat.com> - 2.1.8-1
changelog:
  - Rebase on upstream 2.1.8-rc1 release
  - Fix a typo in the help output of pacemaker-fenced
  - Fix escaping characters in XML attribute output
  - Resolves: RHEL-25819
  - Resolves: RHEL-30822


author: Chris Lumens <clumens@redhat.com> - 2.1.8-2
changelog:
  - Rebase on upstream 2.1.8-rc4 release
  - Add ability to immediately shutdown system with PCMK_panic_action=
  - Fix a memory leak in the attribute daemon
  - Add ability to list options and parameters as parseable metadata
  - crm_verify now reports invalid fence level indexes
  - Fix an error in node ID handling in `crm_node -i`
  - Fix regression in attrd_updater output
  - Resolves: RHEL-39057
  - Resolves: RHEL-40117
  - Resolves: RHEL-23401
  - Resolves: RHEL-2996
  - Resolves: RHEL-47249
  - Resolves: RHEL-45935


author: Chris Lumens <clumens@redhat.com> - 2.1.9-1
changelog:
  - Rebase on upstream 2.1.9 final release
  - Use async communication to establish TLS connections
  - Fix regression in adding alerts to CIB
  - Fix a crash in command line tools when stderr is closed
  - Resolves: RHEL-61382
  - Resolves: RHEL-34276
  - Resolves: RHEL-55458
  - Resolves: RHEL-59043


author: Peng Wu <pwu@redhat.com> - 1.48.7-3
changelog:
  - Update pango-emoji-table.h for emoji 14 support
  - Add pango-update-emoji.patch
  - Resolves: #2119674


author: Nathan Scott <nathans@redhat.com> - 6.2.2-1
changelog:
  - Rebase to latest stable version of PCP (RHEL-30198)
  - Fix pcp2openmetrics on s390x reading from an archive (RHEL-32407)
  - Fix pcp2openmetrics -F output file option (RHEL-32674)
  - Fix pmlogdump version reporting (RHEL-32381)
  - Add timestamps for pcp2openmetrics archive option (RHEL-32369)
  - Add new metrics to monitor VMware balloon usage (RHEL-32198)


author: Lauren Chilton <lchilton@redhat.com> - 6.2.2-4
changelog:
  - Removed excess headers for pcp2openmetrics tool (RHEL-39159)
  - Fix pcp2openmetrics '-s' option (RHEL-39132)
  - Fix pcp2openmetrics timestamps in archive mode (RHEL-32983)
  - Fix pcp2openmetrics output to adhere to prometheus parser (RHEL-39293)


author: Nathan Scott <nathans@redhat.com> - 6.2.2-5
changelog:
  - Add rpm dependency on package providing ps(1) tool (RHEL-39491)
  - Update Java bytecode in pcp-testasuite package (RHEL-40718)


author: Nathan Scott <nathans@redhat.com> - 6.3.1-1
changelog:
  - New pcp-xsos utility for rapid system summaries (RHEL-30590)
  - Fix Upgrade scripts to not rewrite pmcd.conf (RHEL-40631)
  - Add new Hyper-V balloon usage metrics (RHEL-45715)
  - Auto-load pmdaproc in local context (RHEL-50941)
  - Fix a benign potential libpcp buffer overflow (RHEL-58914)
  - Fix pcp-zeroconf pmie.config write permission (RHEL-59366)
  - Rebase to latest stable version of PCP (RHEL-58953)


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Add proc PMDA access control for IO metrics (RHEL-60891)
  - Fix pmdastatsd segfaults within pmdaRehash (RHEL-57717)
  - Multiple hugepage size NUMA metric support (RHEL-45876)
  - Improve pcp-xsos command line diagnostics (RHEL-61597, RHEL-61598)
  - Add pmlogger_farm_check service selinux policy (RHEL-61885)
  - Fix v3 archive replay on big endian machines (RHEL-61501)
  - Rebase to latest stable version of PCP (RHEL-58953)


author: Paul Howarth <paul@city-fan.org> - 1.22-1
changelog:
  - Update to 1.22
    - Removed embedded copy of Config::AutoConf from distro.; instead, this is
      now a configure phase prereq. (GH#19)
    - Moved list of constants in libmagic that we care about to one module (GH#20)
    - Add support for setting libmagic processing limits (GH#15, GH#22)
    - Add two class methods that provide introspection on the available limit
      processing parameters, max_param_constant() and limit_key_is_supported()
      (GH#24)
    - Check all libmagic function return values properly and croak on failure
      (GH#21)
    - Switched to using GitHub issues
  - Package CONTRIBUTING.md


author: Paul Howarth <paul@city-fan.org> - 1.23-1
changelog:
  - Update to 1.23
    - Fixed a bug with the Makefile.PL that caused every call to "make" to
      recompile the object file for the package's XS code (GH#28)


author: Tom Stellard <tstellar@redhat.com> - 1.8-3
changelog:
  - Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Paul Howarth <paul@city-fan.org> - 2.100-1
changelog:
  - Update to 2.100
    - Declare vars with our instead of use vars (GH#7)
    - Quote $VERSION to preserve formatting (GH#6)
  - Use %license unconditionally


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-2
changelog:
  - Rebuild with openssl3, presumably in a buildroot with xmlsec1
    linked against openssl3
  - Resolves: rhbz#1962052 - lasso: Port to OpenSSL 3.0


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Jelen <jjelen@redhat.com> - 1.1.1-2
changelog:
  - Move pinentry-tty to separate subpackage (#1782442)
  - Update the wrapper selecting the appropriate version (#1918969)


author: Neal Gompa <ngompa@centosproject.org> - 0.3.40-1
changelog:
  - Update to version 0.3.40 which drops media-session service for WirePlumber
    Resolves: rhbz#2022694


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/4978898)
  - Resolves: #2124676


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/d520a5c)
  - Resolves: #2136845


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/35c0df3)
  - Resolves: #2120436


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/6742838)
  - Resolves: #2149776


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/bfac4a5)
  - Resolves: #2152026


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-10
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/28df097)
  - Resolves: #2158636


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-11
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/1a116d1)
  - Resolves: #2166104


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/1b2fadd)
  - Resolves: #2232127


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/8bb0204)
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/ea33dce)
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/68e7ae0)
  - Related: Jira:RHEL-2785
  - Related: Jira:RHEL-7452


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:4.6.1-7
changelog:
  - Rebuild for following CVEs:
    CVE-2023-39318 CVE-2023-39319 CVE-2023-39321 CVE-2023-39322 CVE-2023-29409
  - Related: Jira:RHEL-2785
  - Related: Jira:RHEL-7452


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/227b84e)
  - Resolves: RHEL-20911


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/22c2308)
  - Resolves: RHEL-20491


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-1
changelog:
  - Update to 0.17.7
  - Remove insecure hashes SHA-1 and MD5 from the default build (RhBug:1935486)
  - Fix error when updating repo with removed modules metadata
  - Exit with status code 1 when loading of repo's metadata fails
  - Fix memory leaks (RhBug:1998426)
  - Fix valgrind warnings caused by subprocess calls


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-2
changelog:
  - Switch default of --keep-all-metadata to TRUE and add --discard-additional-metadata (RhBug:2055032)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.20.1-1
changelog:
  - Update to 0.20.1
  - createrepo_c shouldn't silently produce duplicate-NEVRA repos
  - Fix bad performance with task queue management
  - Update errno usage to fix incorrect GError messages
  - Install header for createrepo_shared module
  - Remove C API for cr_xml_parse_main_metadata_together
  - Remove python bindings for xml_parse_main_metadata_together
  - Fix '&' encoding in attributes when parsing repodata
  - Add a streaming parsing API that is user-controllable.
  - Fix a memory leak of primary pkg when parsing interrupted
  - Fix a memory leak when removing the first link in a list
  - Remove `allow_out_of_order` option for `xml_parse_main_metadata_together`
  - Make parse warnings visible through cr.Repomd(), cr.UpdateInfo()
  - Use --error-exit-val option by default
  - If new and old repomd matches during --update don't update
  - Add `cr_repomd_compare` for comparing two repomds
  - Store parsed repomd in `cr_MetadataLocation`
  - Set database version only for the database records, not everything
  - Use copy+delete fallback when moving of a dir fails
  - Fix memory leaks
  - [spec] Option for legacy hashes, enable on RHEL <= 8 (RhBug:2022271)


author: Jaroslav Rohel <jrohel@redhat.com> - 0.69.0-7
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-12123)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279, RHEL-6304)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-12124)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-9
changelog:
  - Grow memory if applying a query after increasing a number of available
    packages (RHEL-27657)
  - Fix a memory leak in get_best_solution() (RHEL-26226)
  - Fix destructing libdnf::TransactionItem from a base class (RHEL-26240)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-11
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-1454)


author: Peter Robinson <pbrobinson@fedoraproject.org> - 4.2-2
changelog:
  - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package)
  - Drop/obsolete eepromer subpackage, deprecated for 6 years
  - Drop python2 conditionals
  - Minor cleanups


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.8.6-6
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Add manual Obsoletes for python39-psycopg2-doc
  - Related: rhbz#1990421


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-29
changelog:
  - Actually add --verifydb to the man page (RHEL-14591)
  - Don't warn about missing user/group on skipped files (RHEL-18037)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-30
changelog:
  - Don't segfault on missing priority tag (RHEL-35249)
  - Use unsigned integers for buildtime too for Y2K38 safety (RHEL-22602)
  - Rebuild against libimaevm.so.4 (RHEL-32505)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-31
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-22604)
  - Fix potential use of uninitialized pgp struct (RHEL-22605)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)
  - Add SourceLicense tag to spec syntax (RHEL-28798)
  - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-33
changelog:
  - Fix root relocation regression (RHEL-28967)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-35
changelog:
  - Fix %patch N applying Patch0 implicitly (RHEL-6294)
  - Issue deprecation warning for number-less %patch (RHEL-6294)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-37
changelog:
  - Allow parametric macros to opt out of option processing (RHEL-67161)
  - Report unsafe symlinks during installation as a specific case (RHEL-33393)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)


author: Michal Fabik <mfabik@redhat.com> 0.35-1
changelog:
  - New upstream version
   - Fix leaks in koops stacktrace- and report-handling code
   - Replace utility code with GLib functions
   - Fix unit test portability issue
   - Add build dependency on make


author: Michal Fabik <mfabik@redhat.com> 0.38-1
changelog:
  - New upstream version
   - lib: Use GLib for computing SHA-1 digests
   - sr_distances_cluster_objects: Check arg safety


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.21-1
changelog:
  - Update to 3.9.21
  - Security fix for CVE-2024-11168 and CVE-2024-9287
  Resolves: RHEL-64889
  Resolves: RHEL-69942


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-6
changelog:
  - kvm-virtio-net-Add-queues-before-loading-them.patch [RHEL-69477]
  - kvm-docs-system-s390x-bootdevices-Update-loadparm-docume.patch [RHEL-68440]
  - kvm-docs-system-bootindex-Make-it-clear-that-s390x-can-a.patch [RHEL-68440]
  - kvm-hw-s390x-Restrict-loadparm-property-to-devices-that-.patch [RHEL-68440]
  - kvm-hw-Add-loadparm-property-to-scsi-disk-devices-for-bo.patch [RHEL-68440]
  - kvm-scsi-fix-allocation-for-s390x-loadparm.patch [RHEL-68440]
  - kvm-pc-bios-s390x-Initialize-cdrom-type-to-false-for-eac.patch [RHEL-68440]
  - kvm-pc-bios-s390x-Initialize-machine-loadparm-before-pro.patch [RHEL-68440]
  - kvm-pc-bios-s390-ccw-Re-initialize-receive-queue-index-b.patch [RHEL-68440]
  - kvm-vnc-fix-crash-when-no-console-attached.patch [RHEL-61633]
  - Resolves: RHEL-69477
    (qemu crashed when migrate vm with multiqueue from rhel9.4 to rhel9.6)
  - Resolves: RHEL-68440
    (The new "boot order" feature is sometimes not working as expected [RHEL 9])
  - Resolves: RHEL-61633
    (Qemu-kvm  crashed  if  no display device setting and switching display by remote-viewer [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-7
changelog:
  - kvm-migration-Allow-pipes-to-keep-working-for-fd-migrati.patch [RHEL-66089]
  - Resolves: RHEL-66089
    (warning: fd: migration to a file is deprecated when create or revert a snapshot)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-8
changelog:
  - kvm-linux-headers-Update-to-Linux-v6.12-rc5.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-msa10-subfunctions.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-msa11-subfunctions.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-msa12-changes.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-msa13-subfunctions.patch [RHEL-50212]
  - kvm-s390x-cpumodel-Add-ptff-Query-Time-Stamp-Event-QTSE-.patch [RHEL-50212]
  - kvm-linux-headers-Update-to-Linux-6.13-rc1.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-Concurrent-functions-facility-sup.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-Vector-Enhancements-facility-3.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-Miscellaneous-Instruction-Extensi.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-Vector-Packed-Decimal-Enhancement.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-Ineffective-nonconstrained-transa.patch [RHEL-50212]
  - kvm-s390x-cpumodel-Add-Sequential-Instruction-Fetching-f.patch [RHEL-50212]
  - kvm-s390x-cpumodel-correct-PLO-feature-wording.patch [RHEL-50212]
  - kvm-s390x-cpumodel-Add-PLO-extension-facility.patch [RHEL-50212]
  - kvm-s390x-cpumodel-gen17-model.patch [RHEL-50212]
  - kvm-qga-skip-bind-mounts-in-fs-list.patch [RHEL-71940]
  - kvm-vhost-fail-device-start-if-iotlb-update-fails.patch [RHEL-27832]
  - kvm-hw-char-pl011-Use-correct-masks-for-IBRD-and-FBRD.patch [RHEL-67107]
  - Resolves: RHEL-50212
    ([IBM 9.6 FEAT] KVM: CPU model for new IBM Z HW - qemu part)
  - Resolves: RHEL-71940
    (qemu-ga cannot freeze filesystems with sentinelone)
  - Resolves: RHEL-27832
    (The post-copy migration of RT-VM leads to race while accessing vhost-user device and hung/stalled target VM)
  - Resolves: RHEL-67107
    ([aarch64] [rhel-9.6] Backport some important post 9.1 qemu fixes)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-9
changelog:
  - kvm-qdev-Fix-set_pci_devfn-to-visit-option-only-once.patch [RHEL-39948]
  - kvm-tests-avocado-hotplug_blk-Fix-addr-in-device_add-com.patch [RHEL-39948]
  - kvm-qdev-monitor-avoid-QemuOpts-in-QMP-device_add.patch [RHEL-39948]
  - kvm-vl-use-qmp_device_add-in-qemu_create_cli_devices.patch [RHEL-39948]
  - Resolves: RHEL-39948
    (qom-get iothread-vq-mapping is empty on new hotplug disk [rhel-9.5])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-10
changelog:
  - kvm-target-i386-Make-sure-SynIC-state-is-really-updated-.patch [RHEL-53073]
  - kvm-hw-virtio-fix-crash-in-processing-balloon-stats.patch [RHEL-73688]
  - kvm-qemu-ga-Optimize-freeze-hook-script-logic-of-logging.patch [RHEL-52278]
  - kvm-qga-Add-log-to-guest-fsfreeze-thaw-command.patch [RHEL-56340]
  - Resolves: RHEL-53073
    (kvm-unti kvm-hyperv_synic test is stuck on AMD with COS9)
  - Resolves: RHEL-73688
    (VM crashes when requesting domstats)
  - Resolves: RHEL-52278
    (fsfreeze hooks doesn't log error on system logs when running hook fails)
  - Resolves: RHEL-56340
    (qemu-ga logs only "guest-fsfreeze called" (but not "guest-fsthaw called"))


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-11
changelog:
  - kvm-pci-ensure-valid-link-status-bits-for-downstream-por.patch [RHEL-65616]
  - Resolves: RHEL-65616
    (Failed to hot add PCIe device behind xio3130 downstream port)


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-12
changelog:
  - kvm-target-i386-cpu-set-correct-supported-XCR0-features-.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-do-not-rely-on-ExtSaveArea-for-accelerat.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-return-bool-from-x86_cpu_filter_features.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-add-AVX10-feature-and-AVX10-version-prop.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-add-CPUID.24-features-for-AVX10.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-Add-feature-dependencies-for-AVX10.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-Add-AVX512-state-when-AVX10-is-supported.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-Introduce-GraniteRapids-v2-model.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-add-sha512-sm3-sm4-feature-bits.patch [RHEL-30316 RHEL-45111]
  - kvm-arm-disable-pauth-for-virt-rhel9.patch [RHEL-75782]
  - kvm-tests-qtest-disable-most-pauth-tests.patch [RHEL-75782]
  - Resolves: RHEL-30316
    ([Intel 9.6 FEAT] [GNR] Virt-QEMU: Add AVX10.1 instruction support)
  - Resolves: RHEL-45111
    ([Intel 9.6 FEAT] [CWF][DMR] Virt-QEMU: Advertise new instructions SHA2-512NI, SM3, and SM4)
  - Resolves: RHEL-75782
    ([Nvidia "Grace"] Lack of "PAuth" CPU feature results in live migration failure from RHEL 9.6 to 10)


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-13
changelog:
  - kvm-pc-bios-s390-ccw-Abort-IPL-on-invalid-loadparm.patch [RHEL-72716]
  - kvm-pc-bios-s390-ccw-virtio-Add-a-function-to-reset-a-vi.patch [RHEL-72716]
  - kvm-pc-bios-s390-ccw-Fix-boot-problem-with-virtio-net-de.patch [RHEL-72716]
  - kvm-pc-bios-s390-ccw-netmain-Fix-error-messages-with-reg.patch [RHEL-72716]
  - Resolves: RHEL-72716
    (Boot fall back to cdrom from network not always working)


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-14
changelog:
  - kvm-nbd-server-Silence-server-warnings-on-port-probes.patch [RHEL-67863]
  - kvm-vhost-Add-stubs-for-the-migration-state-transfer-int.patch [RHEL-78372]
  - kvm-virtio-net-vhost-user-Implement-internal-migration.patch [RHEL-78372]
  - Resolves: RHEL-67863
    (Ensure qemu as NBD server does not flood logs [rhel 9.6])
  - Resolves: RHEL-78372
    (Add vhost-user internal migration for passt [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-15
changelog:
  - kvm-net-Fix-announce_self.patch [RHEL-73891]
  - kvm-migration-Add-helper-to-get-target-runstate.patch [RHEL-54296 RHEL-78397]
  - kvm-qmp-cont-Only-activate-disks-if-migration-completed.patch [RHEL-54296 RHEL-78397]
  - kvm-migration-block-Make-late-block-active-the-default.patch [RHEL-54296 RHEL-78397]
  - kvm-migration-block-Apply-late-block-active-behavior-to-.patch [RHEL-54296 RHEL-78397]
  - kvm-migration-block-Fix-possible-race-with-block_inactiv.patch [RHEL-54296 RHEL-78397]
  - kvm-migration-block-Rewrite-disk-activation.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Add-active-field-to-BlockDeviceInfo.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Allow-inactivating-already-inactive-nodes.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Inactivate-external-snapshot-overlays-when-nec.patch [RHEL-54296 RHEL-78397]
  - kvm-migration-block-active-Remove-global-active-flag.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Don-t-attach-inactive-child-to-active-node.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Fix-crash-on-block_resize-on-inactive-node.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Add-option-to-create-inactive-nodes.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Add-blockdev-set-active-QMP-command.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Support-inactive-nodes-in-blk_insert_bs.patch [RHEL-54296 RHEL-78397]
  - kvm-block-export-Don-t-ignore-image-activation-error-in-.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Drain-nodes-before-inactivating-them.patch [RHEL-54296 RHEL-78397]
  - kvm-block-export-Add-option-to-allow-export-of-inactive-.patch [RHEL-54296 RHEL-78397]
  - kvm-nbd-server-Support-inactive-nodes.patch [RHEL-54296 RHEL-78397]
  - kvm-iotests-Add-filter_qtest.patch [RHEL-54296 RHEL-78397]
  - kvm-iotests-Add-qsd-migrate-case.patch [RHEL-54296 RHEL-78397]
  - kvm-iotests-Add-NBD-based-tests-for-inactive-nodes.patch [RHEL-54296 RHEL-78397]
  - Resolves: RHEL-73891
    (No RARP packets on the destination after migration [rhel-9.6])
  - Resolves: RHEL-54296
    (Provide QMP command for block device reactivation after migration [rhel-9.5])
  - Resolves: RHEL-78397
    (backport fix for double migration of a paused VM (disk activation rewrite))


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-6
changelog:
  - kvm-Introduce-event-loop-base-abstract-class.patch [bz#2031024]
  - kvm-util-main-loop-Introduce-the-main-loop-into-QOM.patch [bz#2031024]
  - kvm-util-event-loop-base-Introduce-options-to-set-the-th.patch [bz#2031024]
  - kvm-qcow2-Improve-refcount-structure-rebuilding.patch [bz#2072379]
  - kvm-iotests-108-Test-new-refcount-rebuild-algorithm.patch [bz#2072379]
  - kvm-qcow2-Add-errp-to-rebuild_refcount_structure.patch [bz#2072379]
  - kvm-iotests-108-Fix-when-missing-user_allow_other.patch [bz#2072379]
  - kvm-virtio-net-setup-vhost_dev-and-notifiers-for-cvq-onl.patch [bz#2070804]
  - kvm-virtio-net-align-ctrl_vq-index-for-non-mq-guest-for-.patch [bz#2070804]
  - kvm-vhost-vdpa-fix-improper-cleanup-in-net_init_vhost_vd.patch [bz#2070804]
  - kvm-vhost-net-fix-improper-cleanup-in-vhost_net_start.patch [bz#2070804]
  - kvm-vhost-vdpa-backend-feature-should-set-only-once.patch [bz#2070804]
  - kvm-vhost-vdpa-change-name-and-polarity-for-vhost_vdpa_o.patch [bz#2070804]
  - kvm-virtio-net-don-t-handle-mq-request-in-userspace-hand.patch [bz#2070804]
  - kvm-Revert-globally-limit-the-maximum-number-of-CPUs.patch [bz#2094270]
  - kvm-vfio-common-remove-spurious-warning-on-vfio_listener.patch [bz#2086262]
  - Resolves: bz#2031024
    (Add support for fixing thread pool size [QEMU])
  - Resolves: bz#2072379
    (Fail to rebuild the reference count tables of qcow2 image on host block devices (e.g. LVs))
  - Resolves: bz#2070804
    (PXE boot crash qemu when using multiqueue vDPA)
  - Resolves: bz#2094270
    (Do not set the hard vCPU limit to the soft vCPU limit in downstream qemu-kvm anymore)
  - Resolves: bz#2086262
    ([Win11][tpm]vfio_listener_region_del received unaligned region)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-7
changelog:
  - kvm-coroutine-ucontext-use-QEMU_DEFINE_STATIC_CO_TLS.patch [bz#1952483]
  - kvm-coroutine-use-QEMU_DEFINE_STATIC_CO_TLS.patch [bz#1952483]
  - kvm-coroutine-win32-use-QEMU_DEFINE_STATIC_CO_TLS.patch [bz#1952483]
  - kvm-Enable-virtio-iommu-pci-on-x86_64.patch [bz#2094252]
  - kvm-linux-aio-fix-unbalanced-plugged-counter-in-laio_io_.patch [bz#2092788]
  - kvm-linux-aio-explain-why-max-batch-is-checked-in-laio_i.patch [bz#2092788]
  - Resolves: bz#1952483
    (RFE: QEMU's coroutines fail with CFLAGS=-flto on non-x86_64 architectures)
  - Resolves: bz#2094252
    (Compile the virtio-iommu device on x86_64)
  - Resolves: bz#2092788
    (Stalled IO Operations in VM)


author: Camilla Conte <cconte@redhat.com> - 7.0.0-8
changelog:
  - kvm-tests-avocado-update-aarch64_virt-test-to-exercise-c.patch [bz#2060839]
  - kvm-RHEL-only-tests-avocado-Switch-aarch64-tests-from-a5.patch [bz#2060839]
  - kvm-RHEL-only-AArch64-Drop-unsupported-CPU-types.patch [bz#2060839]
  - kvm-target-i386-deprecate-CPUs-older-than-x86_64-v2-ABI.patch [bz#2060839]
  - kvm-target-s390x-deprecate-CPUs-older-than-z14.patch [bz#2060839]
  - kvm-target-arm-deprecate-named-CPU-models.patch [bz#2060839]
  - kvm-meson.build-Fix-docker-test-build-alpine-when-includ.patch [bz#1968509]
  - kvm-QIOChannel-Add-flags-on-io_writev-and-introduce-io_f.patch [bz#1968509]
  - kvm-QIOChannelSocket-Implement-io_writev-zero-copy-flag-.patch [bz#1968509]
  - kvm-migration-Add-zero-copy-send-parameter-for-QMP-HMP-f.patch [bz#1968509]
  - kvm-migration-Add-migrate_use_tls-helper.patch [bz#1968509]
  - kvm-multifd-multifd_send_sync_main-now-returns-negative-.patch [bz#1968509]
  - kvm-multifd-Send-header-packet-without-flags-if-zero-cop.patch [bz#1968509]
  - kvm-multifd-Implement-zero-copy-write-in-multifd-migrati.patch [bz#1968509]
  - kvm-QIOChannelSocket-Introduce-assert-and-reduce-ifdefs-.patch [bz#1968509]
  - kvm-QIOChannelSocket-Fix-zero-copy-send-so-socket-flush-.patch [bz#1968509]
  - kvm-migration-Change-zero_copy_send-from-migration-param.patch [bz#1968509]
  - kvm-migration-Allow-migrate-recover-to-run-multiple-time.patch [bz#2096143]
  - Resolves: bz#2060839
    (Consider deprecating CPU models like "kvm64" / "qemu64" on RHEL 9)
  - Resolves: bz#1968509
    (Use MSG_ZEROCOPY on QEMU Live Migration)
  - Resolves: bz#2096143
    (The migration port is not released if use it again for recovering postcopy migration)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-9
changelog:
  - kvm-virtio-iommu-Add-bypass-mode-support-to-assigned-dev.patch [bz#2100106]
  - kvm-virtio-iommu-Use-recursive-lock-to-avoid-deadlock.patch [bz#2100106]
  - kvm-virtio-iommu-Add-an-assert-check-in-translate-routin.patch [bz#2100106]
  - kvm-virtio-iommu-Fix-the-partial-copy-of-probe-request.patch [bz#2100106]
  - kvm-virtio-iommu-Fix-migration-regression.patch [bz#2100106]
  - kvm-pc-bios-s390-ccw-virtio-Introduce-a-macro-for-the-DA.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-bootmap-Improve-the-guessing-logic-.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Simplify-fix-virtio_i.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Remove-virtio_assume_.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-Set-missing-status-bits-whil.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-Read-device-config-after-fea.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-Beautify-the-code-for-readin.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-Split-virtio-scsi-code-from-virtio_.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Request-the-right-fea.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-netboot.mak-Ignore-Clang-s-warnings.patch [bz#2098077]
  - kvm-hw-block-fdc-Prevent-end-of-track-overrun-CVE-2021-3.patch [bz#1951522]
  - kvm-tests-qtest-fdc-test-Add-a-regression-test-for-CVE-2.patch [bz#1951522]
  - Resolves: bz#2100106
    (Fix virtio-iommu/vfio bypass)
  - Resolves: bz#2098077
    (virtio-blk: Can't boot fresh installation from used virtio-blk dasd disk under certain conditions)
  - Resolves: bz#1951522
    (CVE-2021-3507 qemu-kvm: QEMU: fdc: heap buffer overflow in DMA read data transfers [rhel-9.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-10
changelog:
  - kvm-vhost-Track-descriptor-chain-in-private-at-SVQ.patch [bz#1939363]
  - kvm-vhost-Fix-device-s-used-descriptor-dequeue.patch [bz#1939363]
  - kvm-hw-virtio-Replace-g_memdup-by-g_memdup2.patch [bz#1939363]
  - kvm-vhost-Fix-element-in-vhost_svq_add-failure.patch [bz#1939363]
  - kvm-meson-create-have_vhost_-variables.patch [bz#1939363]
  - kvm-meson-use-have_vhost_-variables-to-pick-sources.patch [bz#1939363]
  - kvm-vhost-move-descriptor-translation-to-vhost_svq_vring.patch [bz#1939363]
  - kvm-virtio-net-Expose-MAC_TABLE_ENTRIES.patch [bz#1939363]
  - kvm-virtio-net-Expose-ctrl-virtqueue-logic.patch [bz#1939363]
  - kvm-vdpa-Avoid-compiler-to-squash-reads-to-used-idx.patch [bz#1939363]
  - kvm-vhost-Reorder-vhost_svq_kick.patch [bz#1939363]
  - kvm-vhost-Move-vhost_svq_kick-call-to-vhost_svq_add.patch [bz#1939363]
  - kvm-vhost-Check-for-queue-full-at-vhost_svq_add.patch [bz#1939363]
  - kvm-vhost-Decouple-vhost_svq_add-from-VirtQueueElement.patch [bz#1939363]
  - kvm-vhost-Add-SVQDescState.patch [bz#1939363]
  - kvm-vhost-Track-number-of-descs-in-SVQDescState.patch [bz#1939363]
  - kvm-vhost-add-vhost_svq_push_elem.patch [bz#1939363]
  - kvm-vhost-Expose-vhost_svq_add.patch [bz#1939363]
  - kvm-vhost-add-vhost_svq_poll.patch [bz#1939363]
  - kvm-vhost-Add-svq-avail_handler-callback.patch [bz#1939363]
  - kvm-vdpa-Export-vhost_vdpa_dma_map-and-unmap-calls.patch [bz#1939363]
  - kvm-vhost-net-vdpa-add-stubs-for-when-no-virtio-net-devi.patch [bz#1939363]
  - kvm-vdpa-manual-forward-CVQ-buffers.patch [bz#1939363]
  - kvm-vdpa-Buffer-CVQ-support-on-shadow-virtqueue.patch [bz#1939363]
  - kvm-vdpa-Extract-get-features-part-from-vhost_vdpa_get_m.patch [bz#1939363]
  - kvm-vdpa-Add-device-migration-blocker.patch [bz#1939363]
  - kvm-vdpa-Add-x-svq-to-NetdevVhostVDPAOptions.patch [bz#1939363]
  - kvm-redhat-Update-linux-headers-linux-kvm.h-to-v5.18-rc6.patch [bz#2111994]
  - kvm-target-s390x-kvm-Honor-storage-keys-during-emulation.patch [bz#2111994]
  - kvm-kvm-don-t-use-perror-without-useful-errno.patch [bz#2095608]
  - kvm-multifd-Copy-pages-before-compressing-them-with-zlib.patch [bz#2099934]
  - kvm-Revert-migration-Simplify-unqueue_page.patch [bz#2099934]
  - Resolves: bz#1939363
    (vDPA control virtqueue support in Qemu)
  - Resolves: bz#2111994
    (RHEL9: skey test in kvm_unit_test got failed)
  - Resolves: bz#2095608
    (Please correct the error message when try to start qemu with "-M kernel-irqchip=split")
  - Resolves: bz#2099934
    (Guest reboot on destination host after postcopy migration completed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-11
changelog:
  - kvm-QIOChannelSocket-Fix-zero-copy-flush-returning-code-.patch [bz#2107466]
  - kvm-Add-dirty-sync-missed-zero-copy-migration-stat.patch [bz#2107466]
  - kvm-migration-multifd-Report-to-user-when-zerocopy-not-w.patch [bz#2107466]
  - kvm-migration-Avoid-false-positive-on-non-supported-scen.patch [bz#2107466]
  - kvm-migration-add-remaining-params-has_-true-in-migratio.patch [bz#2107466]
  - kvm-QIOChannelSocket-Add-support-for-MSG_ZEROCOPY-IPV6.patch [bz#2107466]
  - kvm-pc-bios-s390-ccw-Fix-booting-with-logical-block-size.patch [bz#2112303]
  - kvm-vdpa-Fix-bad-index-calculus-at-vhost_vdpa_get_vring_.patch [bz#2116876]
  - kvm-vdpa-Fix-index-calculus-at-vhost_vdpa_svqs_start.patch [bz#2116876]
  - kvm-vdpa-Fix-memory-listener-deletions-of-iova-tree.patch [bz#2116876]
  - kvm-vdpa-Fix-file-descriptor-leak-on-get-features-error.patch [bz#2116876]
  - Resolves: bz#2107466
    (zerocopy capability can be enabled when set migrate capabilities with multifd and compress/xbzrle together)
  - Resolves: bz#2112303
    (virtio-blk: Can't boot fresh installation from used 512 cluster_size image under certain conditions)
  - Resolves: bz#2116876
    (Fixes for vDPA control virtqueue support in Qemu)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-12
changelog:
  - kvm-scsi-generic-Fix-emulated-block-limits-VPD-page.patch [bz#2120275]
  - kvm-vhost-Get-vring-base-from-vq-not-svq.patch [bz#2114060]
  - kvm-vdpa-Skip-the-maps-not-in-the-iova-tree.patch [bz#2114060]
  - kvm-vdpa-do-not-save-failed-dma-maps-in-SVQ-iova-tree.patch [bz#2114060]
  - kvm-util-Return-void-on-iova_tree_remove.patch [bz#2114060]
  - kvm-util-accept-iova_tree_remove_parameter-by-value.patch [bz#2114060]
  - kvm-vdpa-Remove-SVQ-vring-from-iova_tree-at-shutdown.patch [bz#2114060]
  - kvm-vdpa-Make-SVQ-vring-unmapping-return-void.patch [bz#2114060]
  - kvm-vhost-Always-store-new-kick-fd-on-vhost_svq_set_svq_.patch [bz#2114060]
  - kvm-vdpa-Use-ring-hwaddr-at-vhost_vdpa_svq_unmap_ring.patch [bz#2114060]
  - kvm-vhost-stop-transfer-elem-ownership-in-vhost_handle_g.patch [bz#2114060]
  - kvm-vhost-use-SVQ-element-ndescs-instead-of-opaque-data-.patch [bz#2114060]
  - kvm-vhost-Delete-useless-read-memory-barrier.patch [bz#2114060]
  - kvm-vhost-Do-not-depend-on-NULL-VirtQueueElement-on-vhos.patch [bz#2114060]
  - kvm-vhost_net-Add-NetClientInfo-start-callback.patch [bz#2114060]
  - kvm-vhost_net-Add-NetClientInfo-stop-callback.patch [bz#2114060]
  - kvm-vdpa-add-net_vhost_vdpa_cvq_info-NetClientInfo.patch [bz#2114060]
  - kvm-vdpa-Move-command-buffers-map-to-start-of-net-device.patch [bz#2114060]
  - kvm-vdpa-extract-vhost_vdpa_net_cvq_add-from-vhost_vdpa_.patch [bz#2114060]
  - kvm-vhost_net-add-NetClientState-load-callback.patch [bz#2114060]
  - kvm-vdpa-Add-virtio-net-mac-address-via-CVQ-at-start.patch [bz#2114060]
  - kvm-vdpa-Delete-CVQ-migration-blocker.patch [bz#2114060]
  - kvm-virtio-scsi-fix-race-in-virtio_scsi_dataplane_start.patch [bz#2099541]
  - Resolves: bz#2120275
    (Wrong max_sectors_kb and Maximum transfer length on the pass-through device [rhel-9.1])
  - Resolves: bz#2114060
    (vDPA state restore support through control virtqueue in Qemu)
  - Resolves: bz#2099541
    (qemu coredump with error Assertion `qemu_mutex_iothread_locked()' failed when repeatly hotplug/unplug disks in pause status)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-13
changelog:
  - kvm-i386-reset-KVM-nested-state-upon-CPU-reset.patch [bz#2117546]
  - kvm-i386-do-kvm_put_msr_feature_control-first-thing-when.patch [bz#2117546]
  - Resolves: bz#2117546
    ([RHEL9.1] Guests in VMX root operation fail to reboot with QEMU's 'system_reset' command)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-13.el9_1.1
changelog:
  - kvm-target-i386-kvm-fix-kvmclock_current_nsec-Assertion-.patch [bz#2134896]
  - Resolves: bz#2134896
    (Windows guest reboot after migration with wsl2 installed inside [rhel-9.1.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-13.el9_1.2
changelog:
  - kvm-migration-Read-state-once.patch [bz#2168221]
  - Resolves: bz#2168221
    (while live-migrating many instances concurrently, libvirt sometimes return internal error: migration was active, but no RAM info was set [rhel-9.1.0.z])


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-4
changelog:
  - Fix specific overflow in qtextlayout
  - Fix incorrect parsing of the strict-transport-security (HSTS) header
  - Fix buffer over-read via a crafted reply from a DNS server
    Resolves: bz#2209492


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-5
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-6
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410) (version #2)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-9
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch fixes
    - pull in candidate fix QTBUG-83890
    Resolves: bz#1988934


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Jun Aruga <jaruga@redhat.com> - 3.0.4-160
changelog:
  - Bypass git submodule test failure on Git >= 2.38.1.
  - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b.
  - Fix for tzdata-2022g.
  - Fix File.utime test.


author: Jun Aruga <jaruga@redhat.com> - 3.0.4-161
changelog:
  - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS.
    Resolves: RHEL-12724
  - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters
    Related: RHEL-12724


author: Jun Aruga <jaruga@redhat.com> - 3.0.7-162
changelog:
  - Upgrade to Ruby 3.0.7.
    Resolves: RHEL-35740
  - Fix HTTP response splitting in CGI.
    Resolves: RHEL-35741
  - Fix ReDoS vulnerability in URI.
    Resolves: RHEL-35742
  - Fix ReDoS vulnerability in Time.
    Resolves: RHEL-35743
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-35744
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-35746
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-35747


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.0-2
changelog:
  - properly conflict with pacemaker not providing sync-default we need
    Resolves: rhbz#1979961
    Resolves: rhbz#1979573


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.1-2
changelog:
  - obviously autoconf is defining runstatedir - but with a
    wrong default - directly hand it over to configure
    and skip --with-runstatedir implemented in configure.ac
    for older versions of autoconf

    Resolves: rhbz#2011707


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management

    Resolves: rhbz#2168579


author: Pavel Raiskup <praiskup@redhat.com> - 1.6-1
changelog:
  - new upstream release
  - drop WITH_SELINUX knob and selinux patches, there's built-in support now
  - drop several patches which were incorporated upstream, except for
    changewarnSegv patch (did not apply, and not needed nowadays)


author: Tomas Korbar <tkorbar@redhat.com> - 1.2.0-11
changelog:
  - CVE-2020-23903 speex: divide by zero in read_samples() via crafted WAV file
  - Resolves: CVE-2020-23903


author: systemd maintenance team <systemd-maint@redhat.com> - 250-4
changelog:
  - udev/net-setup-link: change the default MACAddressPolicy to "none" (#2009237)
  - man: mention System Administrator's Guide in systemctl manpage (#1982596)
  - Net naming scheme for RHEL-9.0 (#2052106)
  - core: decrease log level of messages about use of KillMode=none (#2013213)
  - ci: replace apt-key with signed-by (#2013213)
  - ci: fix clang-13 installation (#2013213)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-7
changelog:
  - test: check systemd RPM macros (#2017035)
  - test: do not assume x86-64 arch in TEST-58-REPART (#2017035)
  - tests: add repart tests for block devices with 1024, 2048, 4096 byte sector sizes (#2017035)
  - test: accept both unpadded and padded partition sizes (#2017035)
  - test: lvm 2.03.15 dropped the static autoactivation (#2017035)
  - test: accept GC'ed units in newer LVM (#2017035)
  - shared: Add more dlopen() tests (#2017035)
  - systemctl: Show how long a service ran for after it exited in status output (#2017035)
  - time-util: introduce TIMESTAMP_UNIX (#2017035)
  - systemctl,man: update docs for `--timestamp=` (#2017035)
  - systemctl: make `--timestamp=` affect the `show` verb as well (#2017035)
  - tests: allow running all the services with SYSTEMD_LOG_LEVEL (#2017035)
  - coredump: raise the coredump save size on 64bit systems to 32G (and lower it to 1G on 32bit systems) (#2017035)
  - repart: fix sector size handling (#2017035)
  - mkdir: allow to create directory whose path contains symlink (#2017035)
  - mkdir: CHASE_NONEXISTENT cannot used in chase_symlinks_and_stat() (#2017035)
  - meson: move efi file lists closer to where they are used (#2017035)
  - meson: move efi summary() section to src/boot/efi (#2017035)
  - meson: report SBAT settings (#2017035)
  - boot: Build BCD parser only on arches supported by Windows (#2017035)
  - meson: Remove efi-cc option (#2017035)
  - meson: Get objcopy location from compiler (#2017035)
  - meson: Use files() for source lists for boot and fundamental (#2017035)
  - meson: Use files() for tests (#2017035)
  - tests: add fuzz-bcd (#2017035)
  - meson: Use files() for fuzzers (#2017035)
  - meson: Add check argument to remaining run_command() calls (#2017035)
  - meson: Use echo to list files (#2017035)
  - test: add a test for mkdir_p() (#2017035)
  - util: another set of CVE-2021-4034 assert()s (#2017035)
  - basic: update CIFS magic (#2017035)
  - shared: be extra paranoid and check if argc > 0 (#2017035)
  - core: check if argc > 0 and argv[0] is set (#2017035)
  - core: check argc/argv uncoditionally (#2017035)
  - test: temporary workaround for #21819 (#2017035)
  - test: don't leak local variable to outer scopes (#2017035)
  - tree-wide: don't use strjoina() on getenv() values (#2017035)
  - man: clarify Environmentfile format (#2017035)
  - test-load-fragment: add a basic test for config_parse_unit_env_file() (#2017035)
  - core/execute: use _cleanup_ in exec_context_load_environment() (#2017035)
  - test-env-file: add tests for quoting in env files (#2017035)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-8
changelog:
  - core: shorten long unit names that are based on paths and append path hash at the end (#2083493)
  - tests: add test case for long unit names (#2083493)
  - tests: reflect that we can now handle devices with very long sysfs paths (#2083493)
  - test: extend the "hashed" unit names coverage a bit (#2083493)
  - Revert "kernel-install: also remove modules.builtin.alias.bin" (#2065061)
  - Revert "kernel-install: prefer /boot over /boot/efi for $BOOT_ROOT" (#2065061)
  - kernel-install: 50-depmod: port to /bin/sh (#2065061)
  - kernel-install: 90-loaderentry: port to /bin/sh (#2065061)
  - kernel-install: fix shellcheck (#2065061)
  - kernel-install: port to /bin/sh (#2065061)
  - kernel-install: 90-loaderentry: error out on nonexistent initrds instead of swallowing them quietly (#2065061)
  - kernel-install: don't pull out KERNEL_IMAGE (#2065061)
  - kernel-install: prefer /boot over /boot/efi for $BOOT_ROOT (#2065061)
  - kernel-install: also remove modules.builtin.alias.bin (#2065061)
  - kernel-install: add new variable $KERNEL_INSTALL_INITRD_GENERATOR (#2065061)
  - kernel-install: k-i already creates $ENTRY_DIR_ABS, no need to do it again (#2065061)
  - kernel-install: prefix errors with "Error:", exit immediately (#2065061)
  - kernel-install: add "$KERNEL_INSTALL_STAGING_AREA" directory (#2065061)
  - kernel-install: add missing log line (#2065061)
  - kernel-install: don't try to persist used machine ID locally (#2065061)
  - kernel-install: add a new $ENTRY_TOKEN variable for naming boot entries (#2065061)
  - kernel-install: only generate systemd.boot_id= in kernel command line if used for naming the boot loader spec files/dirs (#2065061)
  - kernel-install: search harder for kernel image/initrd drop-in dir (#2065061)
  - kernel-install: add new "inspect" verb, showing paths and parameters we discovered (#2065061)
  - ci(Mergify): configuration update (#2087652)
  - ci(Mergify): fix copy&paste bug (#2087652)
  - shared: Fix memory leak in bus_append_execute_property() (#2087652)
  - fuzz: no longer skip empty files (#2087652)
  - networkctl: open the bus just once (#2087652)
  - json: align table (#2087652)
  - fuzz-json: optionally allow logging and output (#2087652)
  - shared/json: reduce scope of variables (#2087652)
  - fuzz-json: also do sorting and normalizing and other easy calls (#2087652)
  - shared/json: wrap long comments (#2087652)
  - shared/json: fix memory leak on failed normalization (#2087652)
  - shared/json: add helper to ref first, unref second (#2087652)
  - basic/alloc-util: remove unnecessary parens (#2087652)
  - fuzz-json: also try self-merge operations (#2087652)
  - shared/json: fix another memleak in normalization (#2087652)
  - shared/json: fix memleak in sort (#2087652)
  - execute: fix resource leak (#2087652)
  - tests: ignore dbus-broker-launcher (#2087652)
  - core/timer: fix memleak (#2087652)
  - timedatectl: fix a memory leak (#2087652)
  - test: fix file descriptor leak in test-psi-util (#2087652)
  - test: fix file descriptor leak in test-tmpfiles.c (#2087652)
  - test: fix file descriptor leak in test-fs-util (#2087652)
  - test: fix file descriptor leak in test-oomd-util (#2087652)
  - test: fix file descriptor leak in test-catalog (#2087652)
  - test: make masking of supplementary services configurable (#2087652)
  - test: fuzz our dbus interfaces with dfuzzer (#2087652)
  - test: skip TEST-21-DFUZZER without ASan (#2087652)
  - core: annotate Reexecute() as NoReply (#2087652)
  - test: always force a new image for dfuzzer (#2087652)
  - test: make dfuzzer less verbose (#2087652)
  - test: drop the at_exit() coredump check (#2087652)
  - test: make the shutdown routine a bit more "robust" (#2087652)
  - tree-wide: drop manually-crafted message for missing variables (#2087652)
  - test: allow overriding $QEMU_MEM when running w/ ASan (#2087652)
  - test: don't test buses we don't ship (#2087652)
  - shutdown: get only active md arrays. (#2047682)
  - bus: Use OrderedSet for introspection (#2068131)
  - logind-session-dbus: allow to set display name via dbus (#2100340)
  - ci: limit which env variables we pass through `sudo` (#2087652)
  - ci(Mergify): Add `ci-waived` logic (#2087652)
  - json: use unsigned for refernce counter (#2087652)
  - macro: check over flow in reference counter (#2087652)
  - sd-bus: fix reference counter to be incremented (#2087652)
  - sd-bus: introduce ref/unref function for track_item (#2087652)
  - sd-bus: do not read unused value (#2087652)
  - sd-bus: do not return negative errno when unknown name is specified (#2087652)
  - sd-bus: use hashmap_contains() and drop unnecessary cast (#2087652)
  - test: shorten code a bit (#2087652)
  - test: add several tests for track item (#2087652)
  - core/slice: make slice_freezer_action() return 0 if freezing state is unchanged (#2087652)
  - core/unit: fix use-after-free (#2087652)
  - core/timer: fix potential use-after-free (#2087652)
  - core: command argument can be longer than PATH_MAX (#2073994)
  - shared/install: consistently use 'lp' as the name for the LookupPaths instance (#2082131)
  - shared/specifier: treat NULL the same as "" (#2082131)
  - shared/install: do not print aliases longer than UNIT_NAME_MAX (#2082131)
  - shared/install-printf: drop now-unused install_path_printf() (#2082131)
  - strv: declare iterator of FOREACH_STRING() in the loop (#2082131)
  - basic/unit-file: split out the subroutine for symlink verification (#2082131)
  - basic/stat-util: add null_or_empty_path_with_root() (#2082131)
  - shared/install: reuse the standard symlink verification subroutine (#2082131)
  - shared/install: add a bit more quoting (#2082131)
  - test: add test for systemctl link & enable (#2082131)
  - tests: add helper for creating tempfiles with content (#2082131)
  - man: clarify the descriptions of aliases and linked unit files (#2082131)
  - basic: add new variable $SYSTEMD_OS_RELEASE to override location of os-release (#2082131)
  - test-os-util: add basic tests for os-release parsing (#2082131)
  - basic/env-file: make load-env-file deduplicate entries with the same key (#2082131)
  - man/os-release: add a note about repeating entries (#2082131)
  - shared/specifier: clarify and add test for missing data (#2082131)
  - shared/specifier: provide proper error messages when specifiers fail to read files (#2082131)
  - shared/install: provide proper error messages when invalid specifiers are used (#2082131)
  - shared/install: move scope into InstallContext (#2082131)
  - shared/specifier: fix %u/%U/%g/%G when called as unprivileged user (#2082131)
  - shared/install: simplify unit_file_dump_changes() (#2082131)
  - shared/install: propagate errors about invalid aliases and such too (#2082131)
  - shared/install: return failure when enablement fails, but process as much as possible (#2082131)
  - systemctl: fix silent failure when --root is not found (#2082131)
  - shared/install: also check for self-aliases during installation and ignore them (#2082131)
  - docs: Correct WantedBy= regarding template units (#2082131)
  - man: fix invalid description of template handling in WantedBy= (#2082131)
  - shared/install: drop unnecessary casts (#2082131)
  - strv: make iterator in STRV_FOREACH() declaread in the loop (#2082131)
  - core: ExecContext::restrict_filesystems is set of string (#2082131)
  - install: when linking a file, create the link first or abort (#2082131)
  - shared/install: split unit_file_{disable,enable}() so _reenable doesn't do setup twice (#2082131)
  - shared/install: fix reenable on linked unit files (#2082131)
  - test-systemctl-enable: extend the test for repeated WantedBy/RequiredBy (#2082131)
  - shared/install: when we fail to chase a symlink, show some logs (#2082131)
  - shared/install: do not try to resolve symlinks outside of root directory (#2082131)
  - test-systemctl-enable: enhance the test for unit file linking (#2082131)
  - shared/install: skip unnecessary chasing of symlinks in disable (#2082131)
  - shared/install: also remove symlinks like .wants/foo@one.service → ../foo@one.service (#2082131)
  - shared/install: create relative symlinks for enablement and aliasing (#2082131)
  - shared/install: when looking for symlinks in .wants/.requires, ignore symlink target (#2082131)
  - shared/install: stop passing duplicate root argument to install_name_printf() (#2082131)
  - basic/unit-file: reverse negative conditional (#2082131)
  - shared/install: split UNIT_FILE_SYMLINK into two states (#2082131)
  - shared/install: fix handling of a linked unit file (#2082131)
  - test-systemctl-enable: make shellcheck happy (#2082131)
  - shared/install: when creating symlinks, accept different but equivalent symlinks (#2082131)
  - test-systemctl-enable: use magic syntax to allow inverted tests (#2082131)
  - test-systemctl-enable: also use freshly-built systemd-id128 (#2082131)
  - test-systemctl-enable: disable the test for %a for now (#2082131)
  - Rename UnitFileScope to LookupScope (#2082131)
  - core: handle lookup paths being symlinks (#2082131)
  - shared/install: use correct cleanup function (#2082131)
  - udev/net_id: avoid slot based names only for single function devices (#2073003)
  - test: import logind test from debian/ubuntu test suite (#2087652)
  - test: drop redundant IMAGE_NAME= (#2087652)
  - test: import timedated test from debian/ubuntu test suite (#2087652)
  - test: introduce assert_not_in() helper function (#2087652)
  - test: drop unnecessary --no-pager option (#2087652)
  - test: support debian/ubuntu specific timezone config file (#2087652)
  - test: import hostnamed tests from debian/ubuntu test suite (#2087652)
  - locale-util: fix memleak on failure (#2087652)
  - locale-util: check if enumerated locales are valid (#2087652)
  - locale-util: align locale entries (#2087652)
  - core: inline an iterator variable (#2087652)
  - locale-setup: merge locale handling in PID1 and localed (#2087652)
  - locale: rename keymap-util.[ch] -> localed-util.[ch] (#2087652)
  - test: add one more path to search keymaps (#2087652)
  - test: introduce inst_recursive() helper function (#2087652)
  - hmac/sha256: move size define to sha256.h (#2087652)
  - tpm2: support policies with PIN (#2087652)
  - cryptenroll: add support for TPM2 pin (#2087652)
  - cryptsetup: add support for TPM2 pin (#2087652)
  - cryptsetup: add libcryptsetup TPM2 PIN support (#2087652)
  - cryptenroll: add TPM2 PIN documentation (#2087652)
  - cryptsetup: add manual TPM2 PIN configuration (#2087652)
  - cryptenroll: add tests for TPM2 unlocking (#2087652)
  - env-util: replace unsetenv_erase() by new getenv_steal_erase() helper (#2087652)
  - test: install libxkbcommon and x11 keymaps (#2087652)
  - test: install C.UTF-8 and English locales (#2087652)
  - test: import localed tests from debian/ubuntu test suite (#2087652)
  - unit: check for mount rate limiting before checking active state (#2087652)
  - tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2087652)
  - test: insert space in for loop (#2087652)
  - test: move "do" at the end of line (#2087652)
  - test: use trap RETURN (#2087652)
  - test: ignore the error about our own libraries missing during image creation (#2087652)
  - test: wrap binaries using systemd DSOs when running w/ ASan (#2087652)
  - test: set $ASAN_RT_PATH along with $LD_PRELOAD to the ASan runtime DSO (#2087652)
  - test: drop all LD_PRELOAD-related ASan workarounds (#2087652)
  - test: don't wrap binaries built with ASan (#2087652)
  - test: send stdout/stderr of testsuite units to journal & console (#2087652)
  - test: make the busy loop in TEST-02 less verbose (#2087652)
  - test: always wrap useradd/userdel when running w/ ASan (#2087652)
  - test: don't flush debug logs to the console (#2087652)
  - test: fix a couple of issues found by shellcheck (#2087652)
  - test: pass the initdir to check_result_{qemu,nspawn} hooks (#2087652)
  - test: run the custom check hooks before common checks (#2087652)
  - test: check journal directly instead of capturing console output (#2087652)
  - test: use saved process PID instead of % (#2087652)
  - test: account for ADDR_NO_RANDOMIZE if it's set (#2087652)
  - fuzz-bcd: silence warning about always-true comparison (#2087652)
  - test: disable test_ntp on RHEL (#2087652)
  - core: do not filter out systemd.unit= and run-level specifier from kernel command line (#2087652)
  - test: add a simple test for daemon-reexec (#2087652)
  - test: install /usr/libexec/vi as well (#2087652)
  - test: resize the terminal automagically with INTERACTIVE_DEBUG=yes (#2087652)
  - test: create an ASan wrapper for `getent` and `su` (#2087652)
  - test: mark partition bootable (#2087652)
  - test: bump the data partition size if we don't strip binaries (#2087652)
  - test: use PBKDF2 with capped iterations instead of Argon2 (#2087652)
  - locale: drop unnecessary allocation (#2087652)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-9
changelog:
  - Revert "shared/install: create relative symlinks for enablement and aliasing" (#2118668)
  - glyph-util: add new glyphs for up/down arrows (#2118297)
  - tree-wide: allow ASCII fallback for → in logs (#2118297)
  - tree-wide: allow ASCII fallback for … in logs (#2118297)
  - core: allow to set default timeout for devices (#2116681)
  - man: document DefaultDeviceTimeoutSec= (#2116681)
  - man: update dbus docs (#2116681)
  - hwdb: 60-keyboard: Fix volume-button mapping on Asus TF103C (#2087778)
  - hwdb: CH Pro Pedals not classified correctly due to no buttons (#2087778)
  - hwdb: Add accel orientation quirk for the GPD Pocket 3 (#2087778)
  - hostname: Allow overriding the chassis type from hwdb (#2087778)
  - hwdb: Add Microsoft Surface Pro 1 chassis quirk (#2087778)
  - hwdb: treat logitech craft keyboard as a keyboard (#2087778)
  - test: frequency in mouse DPI is optional (#2087778)
  - hwdb: add two Elecom trackballs (#2087778)
  - hwdb: add new database file for PDA devices (#2087778)
  - hwdb: add support for Surface Laptop 2 & 3 (#22303) (#2087778)
  - hwdb: add HP calculators (#2087778)
  - hwbd: 60-sensor.hwdb: Add Pipo W2Pro (#2087778)
  - hwdb: 60-keyboard: Support the buttons on CZC P10T tablet (#2087778)
  - hwdb: add CST Laser Trackball (#22583) (#2087778)
  - hwdb: Force release calculator key on all HP OMEN laptops (#2087778)
  - Add support for NEC VersaPro VG-S (#2087778)
  - Fix mic mute on Acer TravelMate B311-31 (#22677) (#2087778)
  - Add AV production controllers to hwdb and add uaccess (#2087778)
  - hwdb: Add AV production access to Elgado Stream Deck devices (#2087778)
  - Add HP Elitebook 2760p support (#22766) (#2087778)
  - hwdb: Add mic mute key mapping for HP Elite x360 (#2087778)
  - hwdb: fix parser to work with newer pyparsing (#2087778)
  - hwdb: update for v251 (#2087778)
  - hwdb: update autosuspend entries (#2087778)
  - hwdb: drop boilerplate about match patterns being unstable (#2087778)
  - hwdb: Update 60-keyboard.hwdb (#23074) (#2087778)
  - hwdb: 60-keyboard: Add Acer Aspire One AO532h keymappings (#2087778)
  - hwdb 60-keyboard Add HP/Compaq KBR0133 (#2087778)
  - hwdb: add resolutions for the Vaio FE14 touchpad (#23136) (#2087778)
  - hwdb: Remap micmute to f20 for ASUS WMI hotkeys (#2087778)
  - hwdb: Fix rotation for HP Pro Tablet 408 G1 (#2087778)
  - hwdb: add keyboard mapping for HP ProBook 11G2 (#2087778)
  - hwdb: make sure "ninja update-hwdb" works on f35 (#2087778)
  - hwbd: run "update-hwdb" for v251-rc2 (#2087778)
  - hwdb: run "ninja update-hwdb-autosuspend" for v251-rc2 (#2087778)
  - Fix orientation detection for Asus Transformer T100TAF, copied T100TA rule (#2087778)
  - Fix orientation detection for HP Pavilion X2 10-k010nr (#2087778)
  - fix typo (#2087778)
  - Adding a description of the keyboard shortcut Fn+F12 for the HP EliteBook 845 G7 device. (#23253) (#2087778)
  - hwdb: run "update-hwdb" (#2087778)
  - hwdb: add rammus accelerometer support (#2087778)
  - Add support to set autosuspend delay via hwdb (#2087778)
  - Set autosuspend delay for Fibocom LG850-GL (#2087778)
  - Add HUION Inspiroy H420X to hwdb (#2087778)
  - hwdb: run 'update-hwdb' for v251-rc3 (#2087778)
  - hwdb: add touchpad parameters for Lenovo T15g Gen1 (#23373) (#2087778)
  -  hwdb: Add accel orientation for the I15-TG (#2087778)
  - hwdb: fix accelerometer mount matrix for Aquarius NS483 (#2087778)
  - hwdb: Add Google Hangouts Meet speakermic (#2087778)
  - hwdb: update via ninja -C build update-hwdb (#2087778)
  - hwdb: Add Google Meet speakermic (#2087778)
  - hwdb: Add accel orientation quirk for the Aya Neo Next (#2087778)
  - hwdb: Add HP Dev One (#2087778)
  - hwdb: analyzers: remove generic "STM Device in DFU Mode" (#2087778)
  - hwdb: Add Lenovo ThinkPad C13 Yoga (#2087778)
  - Fix automatic screen rotation for Asus Transformer T100TAM (#2087778)
  - hwdb: Add Acer Aspire A317-33 (#24050) (#2087778)
  - Add ACCEL_MOUNT_MATRIX for OXP Mini (#2087778)
  - Added DERE DBook D10 (#24173) (#2087778)
  - hwdb: analyzers: Clarify the type of devices we want listed (#2087778)
  - hwdb: Add Greaseweazle "drives" to the list of analyzers (#2087778)
  - hwdb: Apply existing accel orientation quirk to all Chromebooks (#2087778)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-11
changelog:
  - scope: allow unprivileged delegation on scopes (#2120604)
  - udev/net_id: add "rhel-9.1" naming scheme (#2121144)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-12
changelog:
  - core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2100464)
  - logind: add option to stop idle sessions after specified timeout (#2100464)
  - tree-wide: fix typo (#2100464)
  - test: several cleanups for TEST-35-LOGIN (#2100464)
  - test: start test user session before idle action setting is changed (#2100464)
  - test: ensure cleanup functions return success (#2100464)
  - test: add test for org.freedesktop.login1.Session SetType (#2100464)
  - test: add a simple test for list-users (#2100464)
  - test: merge grep | awk calls (#2100464)
  - test: wait for user service or slice to be finished (#2100464)
  - test: terminate session and user on cleanup (#2100464)
  - test: do not restart getty@tty2 automatically (#2100464)
  - tests: add test for StopIdleSessionSec= option (#2100464)
  - logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2100464)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-12.2
changelog:
  - coredump: adjust whitespace (#2155516)
  - basic: add STRERROR() wrapper for strerror_r() (#2155516)
  - coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155516)
  - Packit: build SRPMs in Copr (#2155516)
  - test: support non-summer time (#2155516)
  - test: bump the base VM memory to 768M (#2155516)
  - test: don't overwrite existing $QEMU_OPTIONS (#2155516)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-12.3
changelog:
  - shared/json: allow json_variant_dump() to return an error (#2149074)
  - shared/json: use different return code for empty input (#2149074)
  - coredump: avoid deadlock when passing processed backtrace data (#2149074)
  - test: disable flaky subtests that require udevadm wait/lock (#2149074)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-43
changelog:
  - udev-builtin-net_id: skip non-directory entry earlier (RHEL-50103)
  - udev-builtin-net_id: return earlier when hotplug slot is not found (RHEL-50103)
  - udev-builtin-net_id: split-out pci_get_hotplug_slot() and pci_get_hotplug_slot_from_address() (RHEL-50103)
  - udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT (RHEL-50103)
  - Include <threads.h> if possible to get thread_local definition (RHEL-50651)
  - add APIs for detecting confidential virtualization (RHEL-50651)
  - detect-virt: add --cvm option (RHEL-50651)
  - detect-virt: add --list-cvm option (RHEL-50651)
  - unit: add "cvm" option for ConditionSecurity (RHEL-50651)
  - dbus: add 'ConfidentialVirtualization' property to manager object (RHEL-50651)
  - core: log detected confidential virtualization type (RHEL-50651)
  - core: set SYSTEMD_CONFIDENTIAL_VIRTUALIZATION env for generators (RHEL-50651)
  - udev: add 'conf-virt' constant for confidential virtualization tech (RHEL-50651)
  - confidential-virt: split caching of CVM detection into separate method (RHEL-50651)
  - confidential-virt: add detection for s390x target (RHEL-50651)
  - man/systemd-detect-virt: list known CVM technologies (RHEL-50651)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-44
changelog:
  - Revert "udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT" (RHEL-50103)
  - fundamental: share constants for confidential virt detection (RHEL-50651)
  - efi: add helper API for detecting confidential virtualization (RHEL-50651)
  - efi: don't pull kernel cmdline from SMBIOS in a confidential VM (RHEL-50651)
  - Fix detection of TDX confidential VM on Azure platform (RHEL-50651)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-49
changelog:
  - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-24340)
  - Fix configuration for Packit 1.0.0 (RHEL-70884)
  - udev/net_id: introduce naming scheme for RHEL-9.6 (RHEL-25515)
  - hwdb: Fix accelerometer mount matrix for ASUS T100TAS (RHEL-49810)
  - hwdb.d/60-keyboard.hwdb: add Clevo mic mute quirk for V5x dGPU (RHEL-49810)
  - hwdb: add entry for Dell AlpsPS/2 ALPS DualPoint TouchPad (RHEL-49810)
  - hwdb: Mark Apple Wireless keyboards as not having NumLock LED (RHEL-49810)
  - update keyboard hwdb to add acer Predator PHN16-72 (RHEL-49810)
  - hwdb: death to tabs! (RHEL-49810)
  -  hwdb.d/60-keyboard.hwdb: add Clevo mic mute quirk for V5x iGPU, NV41PZ (RHEL-49810)
  - Add ACCEL_MOUNT_MATRIX for Chuwi Hi10 Max. (RHEL-49810)
  - Add HUAWEI MateBook D 15 AMD ACCEL properties (RHEL-49810)
  - hwdb: add Kensington SlimBlade Pro trackball (Bluetooth mode) (RHEL-49810)
  - hwdb: Add accel orientation quirk for the IdeaPad Duet 3 10IGL5-LTE (RHEL-49810)
  - hwdb: add keymaps for Acer Nitro 5 AN515-47 (#34493) (RHEL-49810)
  - hwdb: make key map match comment for one laptop (RHEL-49810)
  - hwdb: there's KEY_BRIGHTNESS_AUTO these days, hence hook it up where a FIXME suggests that (RHEL-49810)
  - hwdb: use KEY_ROTATE_DISPLAY for various cases of display rotation keys (RHEL-49810)
  - hwbd: use newer KEY_PICKUP_PHONE, KEY_HANGUP_PHONE, KEY_SELECTIVE_SCREENSHOT, KEY_NOTIFICATION_CENTER keycodes where appropriate (RHEL-49810)
  - hwdb: add SCAI SKU prefix for Samsung keyboard mapping (#34648) (RHEL-49810)
  - tree-wide: drop doubled empty lines (RHEL-49810)
  - hwdb: move key 66/65 handling from specific to generic HP laptop coverage (RHEL-49810)
  - hwdb: fix key toggle touchpad and programmable buttom for Positivo V142N (#34725) (RHEL-49810)
  - hwdb: add Stream Deck Neo (#34903) (RHEL-49810)
  - hwdb: update autosuspend rules (RHEL-49810)
  - hwdb: import newest autosuspend rules from chromeos (RHEL-49810)
  - update hwdb (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: fix broken numpad paren keys on Lenovo Thinkbook 16 G6+ 2024 (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: add new Cube Mix Plus (i18D) rotation info (RHEL-49810)
  - hwdb: Add quirk for Logitech MX Keys for Mac (RHEL-49810)
  - hwdb: add support for PineTab2 to 60-sensor.hwdb (#35304) (RHEL-49810)
  - hwdb: add entry for Chuwi Hi10 X1 (#35331) (RHEL-49810)
  - hwdb: update (RHEL-49810)
  - hwdb: Make 3D mice work out-of-the-box (RHEL-49810)
  - hwdb: Add Chuwi MiniBook X trackpad fuzz (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: disable inclusion of the PCI domain in MANA network interface naming (RHEL-49810)
  - hwdb: move down touchpad toggle section from generic to product specific (RHEL-49810)
  - hwdb: add scancodes for HP Elitebook 2170p runnning coreboot (RHEL-49810)
  - hwdb: Make remote controllable lights work out-of-the-box (RHEL-49810)
  - hwdb: fix key toggle touchpad for VAIO VJFH52 (#35645) (RHEL-49810)
  - hwdb: comment out the entry for Logitech MX Keys for Mac (RHEL-49810)
  - 60-sensor.hwdb: Loosen model mask to include entire series (RHEL-49810)
  - Correct ACCEL_MOUNT_MATRIX for Chuwi Hi10 Max (RHEL-49810)
  - hwdb: Add macro keys for HP 430 Programmable Wireless Keypad (RHEL-49810)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-50
changelog:
  - journal: again create user journals for users with high uids (RHEL-70103)
  - install: don't translate unit instances to paths when reenabling them (RHEL-5956)
  - test-systemctl-enable: fix typo (RHEL-5956)
  - udev: Handle PTP device symlink properly on udev action 'change' (RHEL-59088)
  - systemctl: print warning about missing /proc only as debug message (RHEL-3906)
  - repart: avoid use of uninitialized TPM2B_PUBLIC data (RHEL-56793)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-51
changelog:
  - ci: use ubuntu 22:04 for deploy of man pages (RHEL-70884)
  - man/tmpfiles: fix off-by-one in example (RHEL-74015)
  - test: drop removed SCSI passthrough feature (RHEL-70884)
  - nspawn: call json_dispatch() with a correct pointer (RHEL-55266)
  - varlink,json: introduce new varlink_dispatch() helper (RHEL-55266)
  - json: add json_dispatch_const_user_group_name() (RHEL-55266)
  - sd-varlink: add new sd_varlink_error_is_invalid_parameter() helper (RHEL-55266)
  - userdb: return ESRCH if userdb service refuses a user/group name as invalid (RHEL-55266)
  - test: rename assert.sh to util.sh (RHEL-55301)
  - core: Don't GC unit if it is in cgroup_empty_queue (RHEL-55301)
  - core: Handle cgroup pruning in on_cgroup_empty_event (RHEL-55301)
  - Fix failing test (RHEL-55301)
  - unit: don't gc unit in oom queue (RHEL-55301)
  - core: do not GC units/jobs that are in the D-Bus queue (RHEL-55301)


author: Frank Ch. Eigler <fche@redhat.com> - 5.0-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Martin Cermak <mcermak@redhat.com> - 5.1-4
changelog:
  - RHEL-50107.patch:  Make systemtap compatible with kernel
    commit 68cbd415dd4b .  Related: RHEL-56962 .


author: Frank Ch. Eigler <fche@redhat.com> - 5.2-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
  - https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Martin Cermak <mcermak@redhat.com> - 4.6-9
changelog:
  - rhbz2027683: python tapset regression
  - rhbz2027683: systemtap.examples/io/iostat-scsi.stp PR28633


author: Than Ngo <than@redhat.com> - 9:20200327-19
changelog:
  - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-8
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188916)
  - tests: Use stronger passphrases for LUKS tests (#2188750,#2188752)
  - integration-test: Fix scsi_debug cd drive read-only detection (#2211191)
  - lvm2: Improve uevent processing (#2031673)
  - tests: Mark test_job.UdisksJobTest.test_job as unstable (#2148844)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.17.2-1
changelog:
  - preload: Wrap statx() and fstatat(), to fix `ls` and other tools on
    recent glibc versions. (#160)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.17.6-1
changelog:
  - Increase uevent buffer size (#167)
  - Skip /umockdev-testbed-vala/detects_running_outside_testbed during normal
    builds for the time being, as it is brittle on several architectures (#169)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.17.8-1
changelog:
  - Fix some potential crashes spotted by Coverity
  - Enable Fedora builds and bodhi updates via packit


author: Packit <hello@packit.dev> - 0.17.10-1
changelog:
  - Adjust to systemd 251-rc2: Set $SYSTEMD_DEVICE_VERIFY_SYSFS, parse new udevadm format, update tests


author: Packit <hello@packit.dev> - 0.17.13-1
changelog:
  - preload: Wrap fstatfs(), to work with systemd 251 also with Python tests
  - Fix tests in Gentoo sandbox build


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-1
changelog:
  - rebase usbguard to 1.0.0
  - added support for rules covering combination of classes
  - fix usbguard being killed
  Resolves: rhbz#1916039
  Resolves: rhbz#1861330
  Resolves: rhbz#1905257


author: Radovan Sroka <rsroka@redhat.com> - 1.0.0-7
changelog:
  RHEL 9 BETA
  - starting usbguard service complains about PIDFile= references a path below legacy directory /var/run/
  Resolves: rhbz#1985627
  - file conflict when installing usbguard on rhel
  Resolves: rhbz#1986785


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-10
changelog:
  - fix DSP module definition in spec file
  Resolves: rhbz#2014442
  - fix IPC access control files override
  Resolves: rhbz#2009227
  - validate ACL permission existence
  Resolves: rhbz#2009229
  - decrease usbguard-notifier spam when denied connection
  Resolves: rhbz#2009226


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-10.2
changelog:
  - Fix dbus memory leak on connection failure
  - Fix unauthorized access via D-bus
  Resolves: rhbz#2127877


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Rebase to latest upstream: 0.13.0
  - Keeps usbredirserver binary (removed upstream)
    Related: rhbz#2135760


author: Victor Toso <victortoso@redhat.com> - 0.13.0-2
changelog:
  - Fixes 100% CPU usage when usbredirect used as TCP server
    Related: rhbz#2157520
  - Fixes USB redirection of identical devices
    Resolves: rhbz#2157520


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Debarshi Ray <rishi@fedoraproject.org> - 0.64.2-1
changelog:
  - Update to 0.64.2
  - Add missing _VTE_CXX_NOEXCEPT to downstream patches (#1973174)
  - Fix the License fields and ship the correct license texts (#1973299)


author: Brian C. Lane <bcl@redhat.com> - 35.9-1
changelog:
  - Copy rhel-92.json test repository from osbuild-composer
  - Update osbuild-composer test repositories from osbuild-composer
  - New release: 35.9 (bcl)
    Resolves: rhbz#2164560
  - tests: Replace os.MkdirTemp with t.TempDir (bcl)
  - blueprint save: Allow overriding bad blueprint names (bcl)
  - tests: Clean up checking err in tests (bcl)
  - composer-cli: Implement blueprints diff (bcl)
  - saveBlueprint: Return the filename to the caller (bcl)
  - composer-cli: Add tests for using --commit with old servers (bcl)
  - weldr: Return error about the blueprints change route (bcl)
  - weldr: Save the http status code as part of APIResponse (bcl)
  - Add --commit support to blueprints save (bcl)
  - Add --commit to blueprints show (bcl)
  - gitleaks: Exclude the test password used in tests (bcl)
  - ci: add tags to AWS instances (tlavocat)
  - Update github.com/BurntSushi/toml to 1.2.1
  - Update github.com/stretchr/testify to 1.8.1
  - Update bump github.com/spf13/cobra to 1.6.1
  - New release: 35.8 (bcl)
  - completion: Remove providers from bash completion script (bcl)
  - completion: Filter out new headers from compose list (bcl)
  - docs: Remove unneeded Long descriptions (bcl)
  - docs: Use a custom help template (bcl)
  - docs: Add more command documentation (bcl)
  - cmdline: Add package glob support to modules list command (bcl)
  - workflow: Add govulncheck on go v1.18 (bcl)
  - tests: Update to use golangci-lint 1.49.0 (bcl)
  - New release: 35.7 (bcl)
  - spec: Move %gometa macro above %gourl (bcl)
  - weldr: When starting a compose pass size as bytes, not MiB (bcl)
  - tests: Use correct size value in bytes for test (bcl)
  - workflow: Add Go 1.18 to text matrix (bcl)
  - Replace deprecated ioutil functions (bcl)
  - New release: 35.6 (bcl)
  - tests: Update tests for osbuild-composer changes (bcl)
  - CMD: Compose status format (eloy.coto)
  - CMD: Compose list format (eloy.coto)
  - tests: Update tests to check for JSON list output (bcl)
  - composer-cli: Change JSON output to be a list of objects (bcl)
  - weldr: Simplify the old ComposeLog, etc. functions (bcl)
  - composer-cli: Add --filename to blueprints freeze save command (bcl)
  - composer-cli: Add --filename to blueprints save command (bcl)
  - composer-cli: Add --filename to compose logs command (bcl)
  - composer-cli: Add --filename to compose image command (bcl)
  - composer-cli: Add --filename to compose metadata command (bcl)
  - composer-cli: Add --filename to compose results command (bcl)
  - weldr: Add saving to a new filename to GetFilePath function (bcl)
  - github: Fix issue with codecov and forced pushes in PRs (bcl)
  - Use golangci-lint 1.45.2 in workflow (bcl)
  - Run workflow tests for go 1.16.x and 1.17.x (bcl)
  - Move go.mod to go 1.16 (bcl)
  - workflows/trigger-gitlab: run Gitlab CI in new image-builder project (jrusz)
  - Update GitHub actions/setup-go to 3
  - Update GitHub actions/checkout to 3


author: Brian C. Lane <bcl@redhat.com> - 35.12-1
changelog:
  - Copy rhel-9.4.json test repository from osbuild-composer
  - New release: 35.12 (bcl)
    Resolves: RHEL-1035
  - Add support for compose start warning messages (bcl)
  - Update documentation urls for new locations (bcl)
  - weldr: go fmt changes to a couple comments (bcl)
  - weldr: Update ostree test for parentid with no url (bcl)
  - Makefile: Turn off seccomp for build-in-podman (bcl)
  - composer-cli: Update doc links (simon.steinbeiss)
  - docs: fix typo/formatting in HACKING.md (idiez)
  - Add release creation documentation (bcl)
  - spec: Require createrepo_c for weldr-client-tests package (bcl)
  - spec: migrate the license field to SPDX (ondrej)
  - Go: Switch to go 1.19 (bcl)
  - CI: Update terraform hash (bcl)
  - Actions: add workflow for marking and closing stale issues and PRs (thozza)
  - workflows: Stop using golint (bcl)
  - workflows: Add Go 1.21 and 1.22 to test matrix (bcl)
  - workflows: Update to golangci-lint 1.56.2 (bcl)
  - workflow: Ignore govulncheck failures (bcl)
  - workflow: Switch to testing on go 1.18, 1.19, 1.20 (bcl)
  - build(deps): bump actions/setup-go from 3 to 5 (49699333+dependabot[bot])
  - build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.8.0 (49699333+dependabot[bot])
  - build(deps): bump actions/checkout from 3 to 4 (49699333+dependabot[bot])
  - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.2 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4 (49699333+dependabot[bot])


author: Pavel Reichl <preichl@redhat.com> - 5.19.0-1
changelog:
  - New upstream release
  - Tolerate tiny (<300MB) filesystems
  - Rename xfsprogs-5.12.0-default-bigtime-inobtcnt-on.patch to
      xfsprogs-5.19.0-disable-old-kernel-bigtime-inobtcnt-on.patch
      and amend it to reflect upstream changes
  - Backport all "Fixing" patches relevant to 5.19
    Related: rhbz#2142910


author: Pavel Reichl <preichl@redhat.com> - 6.3.0-1
changelog:
  - Rebase to upstream version 6.3.0
  -
  - Following is a list of dropped backported patches which
  - are contained in the current rebase:
  - xfsprogs-5.19.0-xfs-hoist-refcount-record-merge-predicates.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs_db-fix-dir3-block-magic-check.patch (v6.1.0)
  - xfsprogs-5.19.0-xfs-estimate-post-merge-refcounts-correctly.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-get-rid-of-assert-from-xfs_btree_islastblock.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-fix-off-by-one-error-in-xfs_btree_space_to_heigh.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-fix-sb-write-verify-for-lazysbcount.patch (v6.1.0)
  - xfsprogs-5.19.0-xfs-removed-useless-condition-in-function-xfs_attr_n.patch (v6.0.0)
  - xfsprogs-5.19.0-xfs_repair-retain-superblock-buffer-to-avoid-write-h.patch (v6.1.0)
  -
  - Rename the remaining patches so the name contains upstream version in which
  - they are implemented, or "rhelonly".
  -
  - Drop Eric Sandeen's public key used to check tarball signature and replace it by
  - Carlos Maiolino's (current upstream xfsprogs maintainer).
  -
  - Following is a list of newly backported patches from versions released after 6.3
  - which are fixing patches present in version 6.3:
  - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
  -
  - Backport:
  - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
  - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
  - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
  - to implement RHEL-RHEL-8284
  -
  - Backport xfsprogs-rhelonly-xfs_quota-fix-missing-mount-point-warning.patch
  - to implement RHEL-7900
  -
  - Related: RHEL-15399
  - Related: RHEL-8284
  - Related: RHEL-7900


author: Pavel Reichl <preichl@redhat.com> - 6.4.0-1
changelog:
  - Rebase to a more recent upstream release
  - Related: RHEL-28339
  - Following is a list of dropped backported patches which
  - are contained in the current rebase:
  - xfsprogs-6.4.0-set-bnobt-cntbt-numrecs-correctly-when-formattin.patch
  - xfsprogs-6.4.0-mkfs-fix-man-s-default-value-for-sparse-option.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
  - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
  - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
  - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
  -
  - Rename xfs_quota-fix-missing-mount-point-warning.patch to reflect upstream
  -	version it was merged in.


author: Bill O'Donnell <bodonnel@redhat.com> - 6.4.0-2
changelog:
  - Fix various CVE issues.
  - Related: RHEL-32996
  - Following is the patch list:
  - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-fix-leak-in-flist_find_ftyp.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-make-duration-take-time_t.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_scrub-don-t-call-phase_end-if-phase_rusage-was-n.patch
  - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-convert-fsrallfs-to-use-time_t-instead-of-in.patch
  - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-replace-atoi-with-strtol.patch
  - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-add-helper-for-flist_find_type-for-clearer-fi.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-catch-strtol-errors.patch
  - xfsprogs-rhelonly-xfs_db-fix-unitialized-variable-in-check_parents-function.patch


author: Bill O'Donnell <bodonnel@redhat.com> - 6.4.0-3
changelog:
  - Fix coverity issue
  - Related: RHEL-39449
  - Following is the patch list:
  - xfsprogs-6.5.0-xfs.8-xfs-fix-bounds-check-in-xfs_defer_agfl_block.patch


author: Michal Srb <michal@redhat.com> - 1.51.0-16
changelog:
  - Drop bundled expat and build against libxml2
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25236


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.1-2
changelog:
  - xf86-input-libinput 1.0.1 (#1951879)
  - Fix the upstream source URL
  - Use autosetup instead of manual patch handling


author: Neal Gompa <ngompa13@gmail.com> - 1:7.5-49
changelog:
  - Add OrderWithRequires for freetype to ensure freetype is installed first
  - Move license files to license tag on file list


author: José Expósito <jexposit@redhat.com> - 1.20.11-22
changelog:
  - CVE fix for: CVE-2023-6377, CVE-2023-6478
    Resolves: https://issues.redhat.com/browse/RHEL-18322
    Resolves: https://issues.redhat.com/browse/RHEL-18329


author: José Expósito <jexposit@redhat.com> - 1.20.11-23
changelog:
  - CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408 and CVE-2024-0409
    Resolves: https://issues.redhat.com/browse/RHEL-21203
    Resolves: https://issues.redhat.com/browse/RHEL-20531
    Resolves: https://issues.redhat.com/browse/RHEL-20380
    Resolves: https://issues.redhat.com/browse/RHEL-20386
    Resolves: https://issues.redhat.com/browse/RHEL-21193
    Resolves: https://issues.redhat.com/browse/RHEL-21200


author: José Expósito <jexposit@redhat.com> - 1.20.11-25
changelog:
  - CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and
    CVE-2024-31083
  - Add util-linux as a dependency of Xvfb
  - Fix compilation error on i686


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-28
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186),
                 CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191),
                 CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199),
                 CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200)


