# changelog

author: Michal Sekletar <msekleta@redhat.com> - 0.8-21
changelog:
  - fix file attributes on /run/avahi-daemon (RHEL-5633)
  - avahi-client: fix resource leak (RHEL-27722)
  - fix resource leak in avahi_time_event_queue_new (RHEL-27717)


author: Pavel Cahyna <pcahyna@redhat.com> - 11.0.1-5
changelog:
  - Make nagios-plugin build conditional and disabled on RHEL to avoid
    generating this subpackage that has missing dependencies
  - Fix flags for annobin in Qt tools (bat & tray-monitor) build
  - Add a forgotten RHEL 8 patch to use openssl crypto (random numbers, hmac,
    hashing functions)
    Resolves: rhbz#1935458


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Ondrej Kozina <okozina@redhat.com> - 2.4.3-1
changelog:
  - Update to cryptsetup 2.4.3.
  - patch: Fix typo in repair command prompt.
    Resolves: #2022309 #2023316 #2032782


author: Daniel Zatovic <dzatovic@redhat.com> - 2.4.3-5.1
changelog:
  - patch: Run PBKDF benchmark with 8 bytes long well-known passphrase.
  - patch: Change tests to use passphrases with minimal 8 chars length.
  - patch: Add FIPS related error message in keyslot add code.
  - Resolves: #2151576


author: Martin Osvald <mosvald@redhat.com> - 3.4.1-11
changelog:
  - Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly
    for shared mailboxes
  - cyrus-imapd.spec: rename patches to correspond with others


author: José Expósito <jexposit@redhat.com> - 2.4.123-2
changelog:
  - Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches")
    libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x
    Resolves: https://issues.redhat.com/browse/RHEL-53869


author: Marek Kasik <mkasik@redhat.com> - 40.1-5
changelog:
  - Use tmp dir as containing folder for non-native files
  - Backport fixes for issues found by Coverity Scan
  - Fix some other issues found by Coverity Scan
  - Resolves: #1975150


author: Antonio Murdaca <amurdaca@redhat.com> - 0.5.1-1
changelog:
  * chore: update patch for new release by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/625
   * chore: fix require error with commitlint by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636
   * fix(license): replace space with - in Apache 2.0 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/632
   * fix(data-formats): use serde_tuple serializer for error messages by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/629
   * fix: cargo test for non-root users by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/635
   * fix(get_current_user_name): remove trailing whitespaces. by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/638
   * chore: bump mio from 0.8.10 to 0.8.11 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/640
   * fix: vendored tarfile creation by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/634
   * fix: static-mut-refs warning by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/651
   * Enable CentOS 9 builds and add Testing Farm e2e tests by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/650
   * Add an OV re-registration window option when using DB storage by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/643
   * chore: bump pem from 2.0.1 to 3.0.3 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/639
   * chore: bump h2 from 0.3.25 to 0.3.26 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/659
   * feat: verify trusted manufacturers by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/656
   * database enhancements by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/666
   * chore: bump openssl to 0.10.66 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/664
   * chore(store): make the store OVs agnostic by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/671
   * feat(manufacturing-server): implement an export OVs endpoint  by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/673
   * fix(systemd-units): run before powering off the system by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/676
   * fix(dracut): use isolate on error in the manufacturing-client service by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/678
   * fix(systemd-generator): write configuration to '/run' by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/677
   * fix(owner-tool): use the new API to export ovs by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/675
   * chore: update diesel to 2.2.3 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/669
   * chore: bump reqwest from 0.11.27 to 0.12.7 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/683
   * fix: use centos-stream-9 target instead of epel-9 by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/687
   * enhance onboarding testing by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/681
   * ci: add konflux test cases by @yih-redhat in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688
   * fix(make-vendored-tarfile.sh): exclude idna tests with unicode points by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/692
   * chore: bump for 0.5.1 by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/693

   * @miabbott made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636
   * @yih-redhat made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688

   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.0...v0.5.1


author: Adam Jackson <ajax@redhat.com> - 1.3.5-9
changelog:
  - Remove BuildRequires xprop entirely. If present, the configure script will call
    it looking for a property on the root window that Fedora's X server does not
    set, and which would not work anyway since there is no X server running in the
    buildroot, so we can just remove the dependency.


author: Michel Lind <salimma@centosproject.org> - 2.10.4-10
changelog:
  - Fix for CVE-2025-27363 out-of-bound write vulnerability
  - Patch initially by Marc Deslauriers of Canonical
  - https://www.openwall.com/lists/oss-security/2025/03/14/3
  - Adjusted for EL9 by Jonathan Wright of AlmaLinux
  - and a member of the Meta security team
  - Resolves: RHEL-83105


author: Richard Hughes <richard@hughsie.com> 1.9.26-1
changelog:
  - Rebase to get hardware support for CERTPX-13842
  - Resolves: #RHEL-16637
  - Resolves: #RHEL-35373
  - Resolves: #RHEL-61930


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Marek Polacek <polacek@redhat.com> 11.5.0-1
changelog:
  - update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
    - PRs ada/113893, ada/113979, analyzer/104042, c/113262, c/114007, c/114493,
  	c++/89224, c++/92145, c++/92407, c++/97990, c++/99710, c++/100667,
  	c++/100772, c++/101765, c++/103185, c++/104051, c++/111485,
  	c++/111529, c++/113598, c++/113674, c++/114537, c++/114561,
  	c++/114562, c++/114572, c++/114634, c++/114691, d/113125, d/113758,
  	d/114171, debug/111080, debug/112718, driver/115440, fortran/50410,
  	fortran/103715, fortran/104908, fortran/107426, fortran/114474,
  	fortran/114825, gcov-profile/114115, libfortran/110651,
  	libgomp/113192, libquadmath/114533, libstdc++/104259,
  	libstdc++/104606, libstdc++/105417, libstdc++/110054,
  	libstdc++/113250, libstdc++/114147, libstdc++/114401,
  	libstdc++/114750, libstdc++/114803, libstdc++/115269,
  	libstdc++/115454, libstdc++/115575, middle-end/90348,
  	middle-end/95351, middle-end/107385, middle-end/108789,
  	middle-end/110027, middle-end/110115, middle-end/110176,
  	middle-end/111422, middle-end/111632, middle-end/112732,
  	middle-end/113907, middle-end/113921, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/115527,
  	middle-end/115836, objc/101666, objc/101718, preprocessor/105608,
  	rtl-optimization/100303, rtl-optimization/108086,
  	rtl-optimization/110079, rtl-optimization/114768,
  	rtl-optimization/114902, rtl-optimization/115092, sanitizer/97696,
  	sanitizer/111736, sanitizer/114956, sanitizer/115172, target/88309,
  	target/101737, target/101865, target/105522, target/108120,
  	target/108743, target/110411, target/111610, target/111677,
  	target/112397, target/113122, target/113281, target/114049,
  	target/114098, target/114130, target/114184, target/114310,
  	target/114837, target/114846, target/115253, target/115297,
  	target/115360, target/115457, target/115475, target/115611,
  	target/115691, testsuite/113175, testsuite/114034, testsuite/114036,
  	tree-optimization/110386, tree-optimization/110422,
  	tree-optimization/111039, tree-optimization/111070,
  	tree-optimization/111331, tree-optimization/111407,
  	tree-optimization/111445, tree-optimization/111736,
  	tree-optimization/112495, tree-optimization/112505,
  	tree-optimization/112793, tree-optimization/113372,
  	tree-optimization/113552, tree-optimization/113603,
  	tree-optimization/114027, tree-optimization/114115,
  	tree-optimization/114566, tree-optimization/114876,
  	tree-optimization/115192, tree-optimization/115337,
  	tree-optimization/115843
  - fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)


author: Marek Polacek <polacek@redhat.com> 11.5.0-2
changelog:
  - fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - fix wrong code with memcpy from _Complex (PR tree-optimization/116034)


author: Nick Clifton <nickc@redhat.com> - 10.97-1
changelog:
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)


author: Nick Clifton <nickc@redhat.com> - 11.02-1
changelog:
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158386)
  - Annocheck: Add more special glibc filenames.  (#2158100)


author: Nick Clifton <nickc@redhat.com> - 11.05-1
changelog:
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.


author: Nick Clifton <nickc@redhat.com> - 11.06-1
changelog:
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
  - Spec file: Enable annotated building.


author: Nick Clifton <nickc@redhat.com> - 12.20-1
changelog:
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.


author: Nick Clifton <nickc@redhat.com> - 12.32-1
changelog:
  - LLVM Plugin: Fix building with LLVM version 17.  (RHEL-17311)
  - GCC Plugin: Add support for -fhardended.
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)


author: Nick Clifton <nickc@redhat.com> - 12.32-2
changelog:
  - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505)


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Rebase to 12.65.  (RHEL-51018)
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53574)


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Rebase to bring in improvements for locating string notes.  (RHEL-79807)
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.
  - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string.  (RHEL-77328)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Nick Clifton <nickc@redhat.com> - 12.67-1
changelog:
  - Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
  - Annocheck: Stop warnings about known gaps.    (RHEL-53218)
  - Annocheck: Fix stack realign test.  (#2302427)


author: Nick Clifton <nickc@redhat.com> - 12.67-2
changelog:
  - Spec File: Use correct directory for plugin installation.  (RHEL-53209)
  - Spec File: Disable plugin when running on wrong major version of the compiler.


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53209)


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Rebase for GTS 14.1 release.  (RHEL-76932)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Filip Januš <fjanus@redhat.com> - 2.2.5-12
changelog:
  - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src)
  - Resolves: #1599032


author: Filip Januš <fjanus@redhat.com> - 2.3.1-1
changelog:
  - Upstream released new version 2.3.1
  - patch bug615 is no more needed - fixed by upstream in release
  - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on
    x390s - XFAIL_TEST definition for x390s is no more necessary


author: Filip Januš <fjanus@redhat.com> - 2.3.2-1
changelog:
  - Add condition if fedora for packages not available in RHEL
  - enable avif support
  - use bcond
  - rebase to version 2.3.2


author: Tomas Popela <tpopela@redhat.com> - 2.42.6-3
changelog:
  - Backport fixes for CVE-2021-46829 and CVE-2021-44648
  - Resolves: rhbz#2115213
  - Resolves: rhbz#2044346


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16
changelog:
  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-17
changelog:
  - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
  - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
  - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-18
changelog:
  - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable()
  - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Josef Ridky <jridky@redhat.com> - 2:2.99.8-4
changelog:
  - Applying fixes for vulnerabilities that led to possible RCE conditions.
  - Fixes: CVE-2023-44441 CVE-2023-44442 CVE-2023-44443 CVE-2023-44444
  - Resolves: RHEL-86049 RHEL-86046 RHEL-86043 RHEL-86040


author: Milan Crha <mcrha@redhat.com> - 41.0-2
changelog:
  - Resolves: #2012699 (Backport changes from Fedora 35)
  - Add patch to mark compulsory only repos, not apps from it
  - Resolves: #2011176 (flathub repo can't be added through gnome-software)
  - Resolves: #2010660 (gs-repos-dialog: Can show also desktop applications)
  - Resolves: #2010353 (Optional repos cannot be disabled)
  - Resolves: #2010740 (Refresh on repository setup change)
  - Resolves: #2009063 (Correct update notifications)


author: Milan Crha <mcrha@redhat.com> - 41.5-2
changelog:
  - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file)
  - Resolves: #2129021 (Hide some errors in non-debug builds)


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
    CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
    CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
    CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
    CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
    CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
  - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
  - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
  - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
  - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
  - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
  - Resolves: RHEL-71189


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.22.8-2
changelog:
  - Enable asfdemux, dvdlpcmdec, dvdsub, and realmedia plugins
  - Disable AMR plugins in RHEL builds
  - Resolves: rhbz#2236889


author: Tom Stellard <tstellar@redhat.com> - 5.3.3-3
changelog:
  - Fix warning building with clang
  - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type]


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2159650, rhbz#2167513, rhbz#2170367, rhbz#2189721 rhbz#2209688


author: Christine Caulfield <ccaulfie@redhat.com> - 1.24-2
changelog:
  - Fix libnozzle tests failing & covscan warning on api_knet_handle_new test
    Resolves: rhbz#2024090


author: Christine Caulfield <ccaulfie@redhat.com> - 1.28-1
changelog:
  Rebase to 1.28 for startup and performance fixes
     threads: add config check to match min value with pong timeouts
     rx: allow links to be active faster
     links: fix ping interval and pong timeout value checking
     crypto: Try crypt and decrypt on crypto_init
     tx: Remove expensive memsets
     log: Add a TRACE log level
    Resolves: #RHEL-11787


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-34564


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-26
changelog:
  - Add 0100-libmultipath-avoid-temporarily-enabling-queueing-on-.patch
  - Add 0101-multipathd-Make-sure-to-disable-queueing-if-recovery.patch
    * Fixes RHEL-17234 ("RHEL9 dm-multipath no_path_retry [retry number] is
      undone if paths are later lost for an open map.")
  - Add 0102-multipathd-remove-nopath-flushing-code-from-flush_ma.patch
  - Add 0103-multipathd-make-flush_map-delete-maps-like-the-multi.patch
  - Add 0104-multipathd-disable-queueing-when-removing-unknown-ma.patch
    * Fixes RHEL-4998 ("When remove external lun from host, rescan lun status
      will cause the OS hang and no response")
  - Resolves: RHEL-4998
  - Resolves: RHEL-17234


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-27
changelog:
  - Add 0105-multipathd-fix-null-pointer-dereference-in-uev_updat.patch
  - Add 0106-multipathd-fix-auto-resize-configuration.patch
  - Add 0107-libmultipath-fix-displaying-auto_resize-config-setti.patch
    * Fixes RHEL-986 ("Add option to allow multipathd to detect device
      resizes and autoresize.")
  - Resolves: RHEL-986


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-28
changelog:
  - Add 0108-libmultipath-actually-truncate-too-large-vpd-page.patch
  - Add 0109-kpartx-fix-theoretical-overflow-in-loop-device-name.patch
    * Fixes RHEL-31793 ("RHEL SAST Automation: address (selected) true positives")
  - Resolves: RHEL-31793


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-29
changelog:
  - Add 0110-libmultipath-keep-track-of-queueing-state-in-feature.patch
  - Add 0111-libmultipath-export-partmap_in_use.patch
  - Add 0112-libmultipath-change-flush_on_last_del-to-fix-a-multi.patch
  - Add 0113-libmultipath-pad-dev_loss_tmo-to-avoid-race-with-no_.patch
    * Fixes RHEL-30272
  - Add 0114-libmultipath-remove-pathgroup-wildcard-options.patch
  - Add 0115-libmultipath-print-all-values-in-snprint_failback.patch
  - Add 0116-multipathd-Stop-double-counting-map-failures-for-no_.patch
  - Add 0117-multipath-tools-man-pages-add-missing-multipathd-com.patch
  - Add 0118-libmultipath-change-the-vend-prod-rev-printing.patch
  - Add 0119-multipath-tools-man-pages-Add-format-wildcard-descri.patch
    * Fixes RHEL-8304
  - Resolves: RHEL-8304
  - Resolves: RHEL-30272


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-30
changelog:
  - Add 0120-multipath-tools-fix-multipath-ll-bug-for-Native-NVME.patch
    * Fixes RHEL-28068
  - Add 0121-multipathd-set-reply-length-to-zero-for-NULL-replies.patch
    * Fixes RHEL-44569
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-31
changelog:
  - Modify multiple tests especially medium_error_scsi_debug and squelch_scsi_id
    * Fixes RHEL-28068 & RHEL-4459
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-32
changelog:
  - Modify bindings, find_multipaths, and user_friendly_names tests
    * Fixes RHEL-28068 & RHEL-4459
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-35
changelog:
  - Add 0124-libmultipath-add-missing-assert-to-checkers.c.patch
  - Add 0125-libmultipath-foreign-fix-memory-leak-in-nvme-foreign.patch
    * Fixes RHEL-73413
  - Add 0126-libmultipath-export-udev-pthread-cleanup-functions.patch
  - Add 0127-multipathd-set-rport-port_state-to-marginal-for-NVMe.patch
    * Fixes RHEL-67472
  - Resolves: RHEL-73413
  - Resolves: RHEL-67472


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-35.1
changelog:
  - Add 0128-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
  - Add 0129-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
  - Add 0130-libmpathutil-add-support-for-Unix-pathname-sockets.patch
  - Add 0131-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
  - Add 0132-multipathd-move-uxsock_trigger-to-uxlsnr.c.patch
  - Add 0133-multipathd-uxlsnr-use-symbolic-values-for-pollfd-ind.patch
  - Add 0134-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
  - Add 0135-multipathd-allow-receiving-two-socket-fds-from-syste.patch
  - Add 0136-multipathd-listen-on-pathname-and-abstract-socket-by.patch
  - Add 0137-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
  - Add 0138-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
  - Add 0139-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
    * Fixes RHEL-80352 ("RFE: Enable multipathd to communicate with a
      process in another network namespace")
  - Resolves: RHEL-80352


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5367
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2405
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15112
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15298


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15298
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2405


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-3
changelog:
  - Minor fixes for Python 3.12 compatibility
  - Fix Python unit tests to use the right assert methods
  - Explicitly BR python3-setuptools


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Eduard Abdullin <eabdullin@almalinux.org> - 2.15.2-6.alma
changelog:
  - Add support for AlmaLinux Bug Tracker
  - Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Kalev Lember <klember@redhat.com> - 3.39.92-2
changelog:
  - Split sysprof-capture library and header files out to sysprof-capture-devel
  - Update minimum required glib2 version


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-4
changelog:
  - qemuProcessStop: Fix detection of outgoing migration for external devices (rhbz#2161557)
  - qemuExtTPMStop: Restore TPM state label more often (rhbz#2161557)
  - qemuProcessLaunch: Tighten rules for external devices wrt incoming migration (rhbz#2161557)
  - qemu_process: Produce better debug message wrt domain namespaces (rhbz#2167302)
  - qemu_namespace: Deal with nested mounts when umount()-ing /dev (rhbz#2167302)
  - qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (rhbz#2166411)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-5
changelog:
  - qemu_extdevice: Do cleanup host only for VIR_DOMAIN_TPM_TYPE_EMULATOR (rhbz#2168762)
  - qemu: blockjob: Handle 'pending' blockjob state only when we need it (rhbz#2168769)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-6
changelog:
  - rpc: client: Don't check return value of virNetMessageNew (rhbz#2145188)
  - rpc: Don't warn about "max_client_requests" in single-threaded daemons (rhbz#2145188)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-7
changelog:
  - qemu_snapshot: remove memory snapshot when deleting external snapshot (rhbz#2170826)
  - qemu_snapshot: refactor qemuSnapshotDeleteExternalPrepare (rhbz#2170826)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-8
changelog:
  - docs: Fix examples in virt-qemu-sev-validate man page (rhbz#2172347)
  - docs: refer to --firmware instead of --loader (rhbz#2172347)
  - rpm: add missing deps for the virt-qemu-sev-validate (rhbz#2172347)
  - docs/kbase: fix example for SEV validation (rhbz#2172347)
  - qemu_passt: Report error when getting passt PID failed (rhbz#2169244)
  - qemu_passt: Avoid double daemonizing passt (rhbz#2169244)
  - qemu_passt: Report passt's error on failed start (rhbz#2169244)
  - qemu_passt: Deduplicate passt killing code (rhbz#2169244)
  - qemu_passt: Let passt write the PID file (rhbz#2169244)
  - qemu_passt: Remove passt socket file on exit (rhbz#2169244)
  - tests: qemucapabilitiesdata: Update for the qemu-8.0 development cycle (rhbz#2172098)
  - qemu: capabilities: Introduce QEMU_CAPS_NETDEV_STREAM_RECONNECT (rhbz#2172098)
  - qemu: add reconnect=5 to passt qemu commandline options when available (rhbz#2172098)
  - qemu: respond to NETDEV_STREAM_DISCONNECTED event (rhbz#2172098)
  - qemu: domain: Fix logic when tainting domain (rhbz#2174446)
  - qemu: agent: Make fetching of 'can-offline' member from 'guest-query-vcpus' optional (rhbz#2174446)
  - qemu: validate: Fix logic for validating presence of the HPET timer (rhbz#2175813)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-9
changelog:
  - util: add an API to retrieve the resolved path to a virCommand's binary (rhbz#2172267)
  - security: make args to virSecuritySELinuxContextAddRange() const (rhbz#2172267)
  - security: make it possible to set SELinux label of child process from its binary (rhbz#2172267)
  - qemu: set SELinux label of passt process to its own binary's label (rhbz#2172267)
  - rpm: Recommend passt-selinux (rhbz#2172267)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-10.1.el9_2
changelog:
  - virnuma: Move virNumaNodesetToCPUset() out of WITH_NUMACTL (rhbz#2185039)
  - virnuma: Introduce virNumaCPUSetToNodeset() (rhbz#2185039)
  - virnumamock: Introduce virNumaGetNodeOfCPU() mock (rhbz#2185039)
  - qemuxml2argvtest: Use virnuma mock (rhbz#2185039)
  - qemuxml2argvdata: Adjust maximum NUMA node used (rhbz#2185039)
  - qemuxml2argvdata: Extend vCPUs placement in memory-hotplug-dimm-addr.xml (rhbz#2185039)
  - qemuxml2argvmock: Drop virNuma* mocks (rhbz#2185039)
  - qemu: Move cpuset preference evaluation into a separate function (rhbz#2185039)
  - qemu: Fix qemuDomainGetEmulatorPinInfo() (rhbz#2185039)
  - qemuBuildMemoryBackendProps: Join two conditions (rhbz#2185039)
  - qemu: Add @nodemaskRet argument to qemuBuildMemoryBackendProps() (rhbz#2185039)
  - qemu: Add @nodemask argument to qemuBuildThreadContextProps() (rhbz#2185039)
  - qemuBuildThreadContextProps: Prune .node-affinity wrt <emulatorpin/> (rhbz#2185039)
  - docs: Document memory allocation and emulator pinning limitation (rhbz#2185039)
  - conf: Fix migration in some firmware autoselection scenarios (rhbz#2186383)


author: Eduard Abdullin <eabdullin@almalinux.org> - 9.0.0-10.3.el9_2.alma.1
changelog:
  - qemu: Generate shorter channel target paths
  - qemu: Move channelTargetDir into stateDir
  - qemu_domain: Drop unused variables from qemuDomainChrDefDropDefaultPath()


author: Jiri Denemark <jdenemar@redhat.com> - 10.9.0-1
changelog:
  - Rebased to libvirt-10.9.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-7036, RHEL-7122, RHEL-35752, RHEL-46870, RHEL-52314
      RHEL-60030, RHEL-60033, RHEL-64341


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-1
changelog:
  - Rebased to libvirt-10.10.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-23607, RHEL-24850, RHEL-29267, RHEL-30842, RHEL-53963
      RHEL-54325, RHEL-54326, RHEL-55240, RHEL-64341, RHEL-65372
      RHEL-65780, RHEL-65844, RHEL-67702, RHEL-67836, RHEL-68614
      RHEL-69417


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-2
changelog:
  - util: Fix typo in virNetDevOpenvswitchInterfaceSetQos (RHEL-69938)
  - qemu: tpm: do not update profile name for transient domains (RHEL-71072)
  - qemu: Enable I/O APIC if needed (RHEL-65844)
  - cpu_map: Sort data files in meson.build (RHEL-70052)
  - sync_qemu_models_i386: Update meson.build (RHEL-70052)
  - sync_qemu_models_i386: Generate missing -v1 variants (RHEL-70052)
  - cpu_map: Add 486-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium2-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium3-v1 CPU model (RHEL-70052)
  - cpu_map: Add coreduo-v1 CPU model (RHEL-70052)
  - cpu_map: Add n270-v1 CPU model (RHEL-70052)
  - cpu_map: Add core2duo-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu32-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm32-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu64-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm64-v1 CPU model (RHEL-70052)
  - cpu_map: Add Conroe-v1 CPU model (RHEL-70052)
  - cpu_map: Add Penryn-v1 CPU model (RHEL-70052)
  - cpu_map: Add KnightsMill-v1 CPU model (RHEL-70052)
  - cpu_map: Add athlon-v1 CPU model (RHEL-70052)
  - cpu_map: Add phenom-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G1-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G2-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G3-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G4-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G5-v1 CPU model (RHEL-70052)
  - cpu_map: Add EPYC-Genoa-v1 CPU model (RHEL-70052)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-4
changelog:
  - conf, docs: Add support for direct and extended tlbflush features (RHEL-7122)
  - qemu: Add support for direct and extended tlbflush features (RHEL-7122)
  - conf: refactor hyperv features formatting (RHEL-7122)
  - conf: Adjust hyperv tlbflush formatting (RHEL-7122)
  - qemu_migration: Do not consider post-copy active in postcopy-recover (RHEL-73085)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-5
changelog:
  - qemu: allow migration of guest with mdev vGPU to VF vGPU (RHEL-68064)
  - storage_file: Refuse qcow2 images with empty string as 'data_file' (RHEL-73504)
  - virstoragetest: Add case for qcow2 image with empty string as 'data_file' (RHEL-73504)
  - qemu: snapshot: delete disk image only if parent snapshot is external (RHEL-74041)
  - storage_file: de-modularize the local file backend (RHEL-73507)
  - libvirt.spec: Move ownership of 'storage-file' backends directory to gluster (RHEL-73507)
  - qemu: re-use existing ActualNetDef for more interface types during update-device (RHEL-7036)
  - tools: ssh-proxy: Check for domain status before parsing its CID (RHEL-75577)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-6
changelog:
  - build: Bump minimum glib2 version to 2.66.0 (RHEL-77884)
  - qemuProcessHandleIOError: Refactor to extract 'priv' instead of 'driver' (RHEL-77884)
  - qemu: Handle quirks of 'device' field of BLOCK_IO_ERROR event in monitor code (RHEL-77884)
  - qemu: Rename 'diskAlias' to 'device' in qemu IO error event handling (RHEL-77884)
  - qemuProcessHandleIOError: Rename local variables (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Do not munge 'reason' field of IO error event (RHEL-77884)
  - qemuProcessHandleIOError: Prefer lookup by node name (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Propagate new 'qom-path' field (RHEL-77884)
  - virStorageSource: Add fields for storing last I/O error message (RHEL-77884)
  - qemuProcessHandleIOError: Populate I/O error reason to virStorageSource (RHEL-77884)
  - qemuProcessHandleIOError: Log IO errors in the VM log file (RHEL-77884)
  - libxlDomainGetMessages: Add existing flags to 'virCheckFlags' (RHEL-77884)
  - virDomainObjGetMessages: Refactor using GPtrArray (RHEL-77884)
  - virDomainGetMessages: Introduce VIR_DOMAIN_MESSAGE_IOERRORS (RHEL-77884)
  - include: libvirt-domain: Reword documentation for @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - include: libvirt-domain: Add 'message' @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - qemuSnapshotForEachQcow2: Don't initialize 'nrollback' (RHEL-73315)
  - qemu: process: Export qemuPrepareNVRAM for use in snapshot code (RHEL-73315)
  - qemu: snapshot: Ensure that NVRAM image exists when taking inactive internal snapshot (RHEL-73315)
  - qemuxmlconftest: Allow testing of the 'writable' flag for passed FDs for disks (RHEL-37519)
  - qemuxmlconftest: Add testing of FDs with 'writable' flag in 'disk-source-fd' (RHEL-37519)
  - qemu: domain: Initialize FD passthrough for a virStorageSource before using it (RHEL-37519)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-7
changelog:
  - qemu_migration: Refactor qemuMigrationSrcRestoreDomainState (RHEL-79168)
  - qemu_migration: Do not automatically resume domain after I/O error (RHEL-79168)
  - qemucapabilitiestest: Add data for the qemu-10.0 dev cycle on x86_64 (RHEL-79095)
  - qemucapabilitiestest: Update 'caps_10.0.0_x86_64' to 'v9.2.0-1636-gffaf7f0376' (RHEL-79095)
  - qemu: capabilies: Introduce QEMU_CAPS_BLOCKDEV_SET_ACTIVE (RHEL-79095)
  - qemu: monitor: Add monitor backend for 'blockdev-set-active' (RHEL-79095)
  - qemu: migration: Reactivate block nodes after migration if VM is left paused (RHEL-79095)
  - conf: change virDomainHostdevInsert() to return void (RHEL-69455)
  - qemu: fix qemu validation to forbid guest-side IP address for type='vdpa' (RHEL-69455)
  - qemu: validate that model is virtio for vhostuser and vdpa interfaces in the same place (RHEL-69455)
  - qemu: automatically set model type='virtio' for interface type='vhostuser' (RHEL-69455)
  - qemu: do all vhostuser attribute validation in qemu driver (RHEL-69455)
  - conf/qemu: make <source> element *almost* optional for type=vhostuser (RHEL-69455)
  - qemu: use switch instead of if in qemuProcessPrepareDomainNetwork() (RHEL-69455)
  - qemu: make qemuPasstCreateSocketPath() public (RHEL-69455)
  - qemu: complete vhostuser + passt support (RHEL-69455)
  - qemu: fail validation if a domain def has vhostuser/passt but no shared mem (RHEL-69455)
  - docs: improve type='user' docs to higlight differences between SLIRP and passt (RHEL-69455)
  - docs: document using passt backend with <interface type='vhostuser'> (RHEL-69455)
  - utils: Canonicalize paths before comparing them (RHEL-79166)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-2
changelog:
  - Fix SPDX License identifiers.
  - Fix input units for VDO LV's minimim_io_size.
  - Fix stripe count and validation for RAID LVs.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-5
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: José Expósito <jexposit@redhat.com> - 24.2.8-2
changelog:
  - AMD Navi4x support
    Backport fixes for radeonsi and disable GFX12 on radv
    Resolves: https://issues.redhat.com/browse/RHEL-53419


author: Koichiro Iwao <meta@almalinux.org> - 24.2.8-2.alma.1
changelog:
  - Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves:
    https://github.com/AlmaLinux/raspberry-pi/issues/32)


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.78.0-1
changelog:
  - Bump glib2 version 2.78.0
  - Drop DesktopQE gating 
  - Fix CVEs: CVE-2023-32636, CVE-2023-29499, CVE-2023-32611, CVE-2023-32665, DoS
  - Resolves: RHEL-5019
  - Resolves: RHEL-5020
  - Resolves: RHEL-5092
  - Resolves: RHEL-5093
  - Resolves: RHEL-5094


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 0.42.2-3
changelog:
  - Bump pixman version 0.42.2
  - Drop DesktopQE gating 
  - Fix CVEs: CVE-2022-44638
  - Resolves: RHEL-5013


author: Matej Mužila <mmuzila@redhat.com> - 1.2.11-34
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.11-37
changelog:
  - Rebased Power 8 optimization patches
  - Fix for Unnecessary IFUNC resolver for crc32_z
  - Fix for python3.11 broken libxml2 and lxml on s390x


author: Ray Strode <rstrode@redhat.com> - 40.9-18
changelog:
  - Don't allow applications on other workspaces to steal
    focus, unless their timestamps are pristine
    Resolves: RHEL-29537


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-20
changelog:
  - Fix positioning when using always-on-top windows
    Resolves: RHEL-45998
  - Improve handling of always-on-visible-workspace windows
    Resolves: RHEL-45366


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-22
changelog:
  - Fix crash when moving window while switching workspace
    Resolves: RHEL-62997
  - Improve app discovery for workspace logic
    Resolves: RHEL-63000


author: Richard W.M. Jones <rjones@redhat.com> - 1.32.5-4
changelog:
  - Rebase to new stable branch version 1.32.5
    resolves: rhbz#2135765
  - Move stats filter to new subpackage.
  - Improve error message when PasswordAuthentication is set to 'no'
    resolves: rhbz#2158300
  - luks: Avoid crash when image does not contain a LUKS header
    resolves: rhbz#2159581
  - curl: Enable multi-conn for read-only connections
    resolves: rhbz#2166686


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Jan Macku <jamacku@redhat.com> - 10.11.8-1
changelog:
  - netconsole: var/lock -> run/lock
  - netconsole: source sysconfig/network only if it exists
  - netconsole: remove unused variables
  - netconsole: remove trailing whitespaces
  - sync spec with c9s


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-45
changelog:
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465).
    Resolves: RHEL-78700


author: Leo Sandoval <lsandova@redhat.com> - 1.77-11
changelog:
  - 90fallback: include possible kernel parameters from grub's default file
  - common.sh: do not resolve symbolic link on mapped device filesystems
  - Resolves: #RHEL-44705


author: Eduard Abdullin <eabdullin@almalinux.org> - 132-1.alma.1
changelog:
  - Install AlmaLinux repositories
  - Add AlmaLinux support patch (Thanks @pastalian)
  - Remove libreport-rhel-bugzilla from package set


author: Peng Wu <pwu@redhat.com> - 1.48.7-3
changelog:
  - Update pango-emoji-table.h for emoji 14 support
  - Add pango-update-emoji.patch
  - Resolves: #2119674


author: Paul Howarth <paul@city-fan.org> - 1.22-1
changelog:
  - Update to 1.22
    - Removed embedded copy of Config::AutoConf from distro.; instead, this is
      now a configure phase prereq. (GH#19)
    - Moved list of constants in libmagic that we care about to one module (GH#20)
    - Add support for setting libmagic processing limits (GH#15, GH#22)
    - Add two class methods that provide introspection on the available limit
      processing parameters, max_param_constant() and limit_key_is_supported()
      (GH#24)
    - Check all libmagic function return values properly and croak on failure
      (GH#21)
    - Switched to using GitHub issues
  - Package CONTRIBUTING.md


author: Paul Howarth <paul@city-fan.org> - 1.23-1
changelog:
  - Update to 1.23
    - Fixed a bug with the Makefile.PL that caused every call to "make" to
      recompile the object file for the package's XS code (GH#28)


author: Tom Stellard <tstellar@redhat.com> - 1.8-3
changelog:
  - Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Paul Howarth <paul@city-fan.org> - 2.100-1
changelog:
  - Update to 2.100
    - Declare vars with our instead of use vars (GH#7)
    - Quote $VERSION to preserve formatting (GH#6)
  - Use %license unconditionally


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-2
changelog:
  - Rebuild with openssl3, presumably in a buildroot with xmlsec1
    linked against openssl3
  - Resolves: rhbz#1962052 - lasso: Port to OpenSSL 3.0


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Jelen <jjelen@redhat.com> - 1.1.1-2
changelog:
  - Move pinentry-tty to separate subpackage (#1782442)
  - Update the wrapper selecting the appropriate version (#1918969)


author: Neal Gompa <ngompa@centosproject.org> - 0.3.40-1
changelog:
  - Update to version 0.3.40 which drops media-session service for WirePlumber
    Resolves: rhbz#2022694


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/4978898)
  - Resolves: #2124676


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/d520a5c)
  - Resolves: #2136845


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/35c0df3)
  - Resolves: #2120436


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/6742838)
  - Resolves: #2149776


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/bfac4a5)
  - Resolves: #2152026


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-10
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/28df097)
  - Resolves: #2158636


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-11
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/1a116d1)
  - Resolves: #2166104


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/1b2fadd)
  - Resolves: #2232127


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/8bb0204)
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/ea33dce)
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/68e7ae0)
  - Related: Jira:RHEL-2785
  - Related: Jira:RHEL-7452


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:4.6.1-7
changelog:
  - Rebuild for following CVEs:
    CVE-2023-39318 CVE-2023-39319 CVE-2023-39321 CVE-2023-39322 CVE-2023-29409
  - Related: Jira:RHEL-2785
  - Related: Jira:RHEL-7452


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/227b84e)
  - Resolves: RHEL-20911


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/22c2308)
  - Resolves: RHEL-20491


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.8.6-6
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Add manual Obsoletes for python39-psycopg2-doc
  - Related: rhbz#1990421


author: Michal Fabik <mfabik@redhat.com> 0.35-1
changelog:
  - New upstream version
   - Fix leaks in koops stacktrace- and report-handling code
   - Replace utility code with GLib functions
   - Fix unit test portability issue
   - Add build dependency on make


author: Michal Fabik <mfabik@redhat.com> 0.38-1
changelog:
  - New upstream version
   - lib: Use GLib for computing SHA-1 digests
   - sr_distances_cluster_objects: Check arg safety


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-8
changelog:
  - kvm-linux-headers-Update-to-Linux-v6.12-rc5.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-msa10-subfunctions.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-msa11-subfunctions.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-msa12-changes.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-msa13-subfunctions.patch [RHEL-50212]
  - kvm-s390x-cpumodel-Add-ptff-Query-Time-Stamp-Event-QTSE-.patch [RHEL-50212]
  - kvm-linux-headers-Update-to-Linux-6.13-rc1.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-Concurrent-functions-facility-sup.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-Vector-Enhancements-facility-3.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-Miscellaneous-Instruction-Extensi.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-Vector-Packed-Decimal-Enhancement.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-Ineffective-nonconstrained-transa.patch [RHEL-50212]
  - kvm-s390x-cpumodel-Add-Sequential-Instruction-Fetching-f.patch [RHEL-50212]
  - kvm-s390x-cpumodel-correct-PLO-feature-wording.patch [RHEL-50212]
  - kvm-s390x-cpumodel-Add-PLO-extension-facility.patch [RHEL-50212]
  - kvm-s390x-cpumodel-gen17-model.patch [RHEL-50212]
  - kvm-qga-skip-bind-mounts-in-fs-list.patch [RHEL-71940]
  - kvm-vhost-fail-device-start-if-iotlb-update-fails.patch [RHEL-27832]
  - kvm-hw-char-pl011-Use-correct-masks-for-IBRD-and-FBRD.patch [RHEL-67107]
  - Resolves: RHEL-50212
    ([IBM 9.6 FEAT] KVM: CPU model for new IBM Z HW - qemu part)
  - Resolves: RHEL-71940
    (qemu-ga cannot freeze filesystems with sentinelone)
  - Resolves: RHEL-27832
    (The post-copy migration of RT-VM leads to race while accessing vhost-user device and hung/stalled target VM)
  - Resolves: RHEL-67107
    ([aarch64] [rhel-9.6] Backport some important post 9.1 qemu fixes)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-9
changelog:
  - kvm-qdev-Fix-set_pci_devfn-to-visit-option-only-once.patch [RHEL-39948]
  - kvm-tests-avocado-hotplug_blk-Fix-addr-in-device_add-com.patch [RHEL-39948]
  - kvm-qdev-monitor-avoid-QemuOpts-in-QMP-device_add.patch [RHEL-39948]
  - kvm-vl-use-qmp_device_add-in-qemu_create_cli_devices.patch [RHEL-39948]
  - Resolves: RHEL-39948
    (qom-get iothread-vq-mapping is empty on new hotplug disk [rhel-9.5])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-10
changelog:
  - kvm-target-i386-Make-sure-SynIC-state-is-really-updated-.patch [RHEL-53073]
  - kvm-hw-virtio-fix-crash-in-processing-balloon-stats.patch [RHEL-73688]
  - kvm-qemu-ga-Optimize-freeze-hook-script-logic-of-logging.patch [RHEL-52278]
  - kvm-qga-Add-log-to-guest-fsfreeze-thaw-command.patch [RHEL-56340]
  - Resolves: RHEL-53073
    (kvm-unti kvm-hyperv_synic test is stuck on AMD with COS9)
  - Resolves: RHEL-73688
    (VM crashes when requesting domstats)
  - Resolves: RHEL-52278
    (fsfreeze hooks doesn't log error on system logs when running hook fails)
  - Resolves: RHEL-56340
    (qemu-ga logs only "guest-fsfreeze called" (but not "guest-fsthaw called"))


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-11
changelog:
  - kvm-pci-ensure-valid-link-status-bits-for-downstream-por.patch [RHEL-65616]
  - Resolves: RHEL-65616
    (Failed to hot add PCIe device behind xio3130 downstream port)


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-12
changelog:
  - kvm-target-i386-cpu-set-correct-supported-XCR0-features-.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-do-not-rely-on-ExtSaveArea-for-accelerat.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-return-bool-from-x86_cpu_filter_features.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-add-AVX10-feature-and-AVX10-version-prop.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-add-CPUID.24-features-for-AVX10.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-Add-feature-dependencies-for-AVX10.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-Add-AVX512-state-when-AVX10-is-supported.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-Introduce-GraniteRapids-v2-model.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-add-sha512-sm3-sm4-feature-bits.patch [RHEL-30316 RHEL-45111]
  - kvm-arm-disable-pauth-for-virt-rhel9.patch [RHEL-75782]
  - kvm-tests-qtest-disable-most-pauth-tests.patch [RHEL-75782]
  - Resolves: RHEL-30316
    ([Intel 9.6 FEAT] [GNR] Virt-QEMU: Add AVX10.1 instruction support)
  - Resolves: RHEL-45111
    ([Intel 9.6 FEAT] [CWF][DMR] Virt-QEMU: Advertise new instructions SHA2-512NI, SM3, and SM4)
  - Resolves: RHEL-75782
    ([Nvidia "Grace"] Lack of "PAuth" CPU feature results in live migration failure from RHEL 9.6 to 10)


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-13
changelog:
  - kvm-pc-bios-s390-ccw-Abort-IPL-on-invalid-loadparm.patch [RHEL-72716]
  - kvm-pc-bios-s390-ccw-virtio-Add-a-function-to-reset-a-vi.patch [RHEL-72716]
  - kvm-pc-bios-s390-ccw-Fix-boot-problem-with-virtio-net-de.patch [RHEL-72716]
  - kvm-pc-bios-s390-ccw-netmain-Fix-error-messages-with-reg.patch [RHEL-72716]
  - Resolves: RHEL-72716
    (Boot fall back to cdrom from network not always working)


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-14
changelog:
  - kvm-nbd-server-Silence-server-warnings-on-port-probes.patch [RHEL-67863]
  - kvm-vhost-Add-stubs-for-the-migration-state-transfer-int.patch [RHEL-78372]
  - kvm-virtio-net-vhost-user-Implement-internal-migration.patch [RHEL-78372]
  - Resolves: RHEL-67863
    (Ensure qemu as NBD server does not flood logs [rhel 9.6])
  - Resolves: RHEL-78372
    (Add vhost-user internal migration for passt [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-15
changelog:
  - kvm-net-Fix-announce_self.patch [RHEL-73891]
  - kvm-migration-Add-helper-to-get-target-runstate.patch [RHEL-54296 RHEL-78397]
  - kvm-qmp-cont-Only-activate-disks-if-migration-completed.patch [RHEL-54296 RHEL-78397]
  - kvm-migration-block-Make-late-block-active-the-default.patch [RHEL-54296 RHEL-78397]
  - kvm-migration-block-Apply-late-block-active-behavior-to-.patch [RHEL-54296 RHEL-78397]
  - kvm-migration-block-Fix-possible-race-with-block_inactiv.patch [RHEL-54296 RHEL-78397]
  - kvm-migration-block-Rewrite-disk-activation.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Add-active-field-to-BlockDeviceInfo.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Allow-inactivating-already-inactive-nodes.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Inactivate-external-snapshot-overlays-when-nec.patch [RHEL-54296 RHEL-78397]
  - kvm-migration-block-active-Remove-global-active-flag.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Don-t-attach-inactive-child-to-active-node.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Fix-crash-on-block_resize-on-inactive-node.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Add-option-to-create-inactive-nodes.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Add-blockdev-set-active-QMP-command.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Support-inactive-nodes-in-blk_insert_bs.patch [RHEL-54296 RHEL-78397]
  - kvm-block-export-Don-t-ignore-image-activation-error-in-.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Drain-nodes-before-inactivating-them.patch [RHEL-54296 RHEL-78397]
  - kvm-block-export-Add-option-to-allow-export-of-inactive-.patch [RHEL-54296 RHEL-78397]
  - kvm-nbd-server-Support-inactive-nodes.patch [RHEL-54296 RHEL-78397]
  - kvm-iotests-Add-filter_qtest.patch [RHEL-54296 RHEL-78397]
  - kvm-iotests-Add-qsd-migrate-case.patch [RHEL-54296 RHEL-78397]
  - kvm-iotests-Add-NBD-based-tests-for-inactive-nodes.patch [RHEL-54296 RHEL-78397]
  - Resolves: RHEL-73891
    (No RARP packets on the destination after migration [rhel-9.6])
  - Resolves: RHEL-54296
    (Provide QMP command for block device reactivation after migration [rhel-9.5])
  - Resolves: RHEL-78397
    (backport fix for double migration of a paused VM (disk activation rewrite))


author: Eduard Abdullin <eabdullin@almalinux.org> - 17:9.1.0-15.alma.1
changelog:
  - Enable building for ppc64le
  - Don't remove slof.bin for ppc64le
  - usb: add config options for hub and hid devices for ppc


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-6
changelog:
  - kvm-Introduce-event-loop-base-abstract-class.patch [bz#2031024]
  - kvm-util-main-loop-Introduce-the-main-loop-into-QOM.patch [bz#2031024]
  - kvm-util-event-loop-base-Introduce-options-to-set-the-th.patch [bz#2031024]
  - kvm-qcow2-Improve-refcount-structure-rebuilding.patch [bz#2072379]
  - kvm-iotests-108-Test-new-refcount-rebuild-algorithm.patch [bz#2072379]
  - kvm-qcow2-Add-errp-to-rebuild_refcount_structure.patch [bz#2072379]
  - kvm-iotests-108-Fix-when-missing-user_allow_other.patch [bz#2072379]
  - kvm-virtio-net-setup-vhost_dev-and-notifiers-for-cvq-onl.patch [bz#2070804]
  - kvm-virtio-net-align-ctrl_vq-index-for-non-mq-guest-for-.patch [bz#2070804]
  - kvm-vhost-vdpa-fix-improper-cleanup-in-net_init_vhost_vd.patch [bz#2070804]
  - kvm-vhost-net-fix-improper-cleanup-in-vhost_net_start.patch [bz#2070804]
  - kvm-vhost-vdpa-backend-feature-should-set-only-once.patch [bz#2070804]
  - kvm-vhost-vdpa-change-name-and-polarity-for-vhost_vdpa_o.patch [bz#2070804]
  - kvm-virtio-net-don-t-handle-mq-request-in-userspace-hand.patch [bz#2070804]
  - kvm-Revert-globally-limit-the-maximum-number-of-CPUs.patch [bz#2094270]
  - kvm-vfio-common-remove-spurious-warning-on-vfio_listener.patch [bz#2086262]
  - Resolves: bz#2031024
    (Add support for fixing thread pool size [QEMU])
  - Resolves: bz#2072379
    (Fail to rebuild the reference count tables of qcow2 image on host block devices (e.g. LVs))
  - Resolves: bz#2070804
    (PXE boot crash qemu when using multiqueue vDPA)
  - Resolves: bz#2094270
    (Do not set the hard vCPU limit to the soft vCPU limit in downstream qemu-kvm anymore)
  - Resolves: bz#2086262
    ([Win11][tpm]vfio_listener_region_del received unaligned region)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-7
changelog:
  - kvm-coroutine-ucontext-use-QEMU_DEFINE_STATIC_CO_TLS.patch [bz#1952483]
  - kvm-coroutine-use-QEMU_DEFINE_STATIC_CO_TLS.patch [bz#1952483]
  - kvm-coroutine-win32-use-QEMU_DEFINE_STATIC_CO_TLS.patch [bz#1952483]
  - kvm-Enable-virtio-iommu-pci-on-x86_64.patch [bz#2094252]
  - kvm-linux-aio-fix-unbalanced-plugged-counter-in-laio_io_.patch [bz#2092788]
  - kvm-linux-aio-explain-why-max-batch-is-checked-in-laio_i.patch [bz#2092788]
  - Resolves: bz#1952483
    (RFE: QEMU's coroutines fail with CFLAGS=-flto on non-x86_64 architectures)
  - Resolves: bz#2094252
    (Compile the virtio-iommu device on x86_64)
  - Resolves: bz#2092788
    (Stalled IO Operations in VM)


author: Camilla Conte <cconte@redhat.com> - 7.0.0-8
changelog:
  - kvm-tests-avocado-update-aarch64_virt-test-to-exercise-c.patch [bz#2060839]
  - kvm-RHEL-only-tests-avocado-Switch-aarch64-tests-from-a5.patch [bz#2060839]
  - kvm-RHEL-only-AArch64-Drop-unsupported-CPU-types.patch [bz#2060839]
  - kvm-target-i386-deprecate-CPUs-older-than-x86_64-v2-ABI.patch [bz#2060839]
  - kvm-target-s390x-deprecate-CPUs-older-than-z14.patch [bz#2060839]
  - kvm-target-arm-deprecate-named-CPU-models.patch [bz#2060839]
  - kvm-meson.build-Fix-docker-test-build-alpine-when-includ.patch [bz#1968509]
  - kvm-QIOChannel-Add-flags-on-io_writev-and-introduce-io_f.patch [bz#1968509]
  - kvm-QIOChannelSocket-Implement-io_writev-zero-copy-flag-.patch [bz#1968509]
  - kvm-migration-Add-zero-copy-send-parameter-for-QMP-HMP-f.patch [bz#1968509]
  - kvm-migration-Add-migrate_use_tls-helper.patch [bz#1968509]
  - kvm-multifd-multifd_send_sync_main-now-returns-negative-.patch [bz#1968509]
  - kvm-multifd-Send-header-packet-without-flags-if-zero-cop.patch [bz#1968509]
  - kvm-multifd-Implement-zero-copy-write-in-multifd-migrati.patch [bz#1968509]
  - kvm-QIOChannelSocket-Introduce-assert-and-reduce-ifdefs-.patch [bz#1968509]
  - kvm-QIOChannelSocket-Fix-zero-copy-send-so-socket-flush-.patch [bz#1968509]
  - kvm-migration-Change-zero_copy_send-from-migration-param.patch [bz#1968509]
  - kvm-migration-Allow-migrate-recover-to-run-multiple-time.patch [bz#2096143]
  - Resolves: bz#2060839
    (Consider deprecating CPU models like "kvm64" / "qemu64" on RHEL 9)
  - Resolves: bz#1968509
    (Use MSG_ZEROCOPY on QEMU Live Migration)
  - Resolves: bz#2096143
    (The migration port is not released if use it again for recovering postcopy migration)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-9
changelog:
  - kvm-virtio-iommu-Add-bypass-mode-support-to-assigned-dev.patch [bz#2100106]
  - kvm-virtio-iommu-Use-recursive-lock-to-avoid-deadlock.patch [bz#2100106]
  - kvm-virtio-iommu-Add-an-assert-check-in-translate-routin.patch [bz#2100106]
  - kvm-virtio-iommu-Fix-the-partial-copy-of-probe-request.patch [bz#2100106]
  - kvm-virtio-iommu-Fix-migration-regression.patch [bz#2100106]
  - kvm-pc-bios-s390-ccw-virtio-Introduce-a-macro-for-the-DA.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-bootmap-Improve-the-guessing-logic-.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Simplify-fix-virtio_i.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Remove-virtio_assume_.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-Set-missing-status-bits-whil.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-Read-device-config-after-fea.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-Beautify-the-code-for-readin.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-Split-virtio-scsi-code-from-virtio_.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Request-the-right-fea.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-netboot.mak-Ignore-Clang-s-warnings.patch [bz#2098077]
  - kvm-hw-block-fdc-Prevent-end-of-track-overrun-CVE-2021-3.patch [bz#1951522]
  - kvm-tests-qtest-fdc-test-Add-a-regression-test-for-CVE-2.patch [bz#1951522]
  - Resolves: bz#2100106
    (Fix virtio-iommu/vfio bypass)
  - Resolves: bz#2098077
    (virtio-blk: Can't boot fresh installation from used virtio-blk dasd disk under certain conditions)
  - Resolves: bz#1951522
    (CVE-2021-3507 qemu-kvm: QEMU: fdc: heap buffer overflow in DMA read data transfers [rhel-9.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-10
changelog:
  - kvm-vhost-Track-descriptor-chain-in-private-at-SVQ.patch [bz#1939363]
  - kvm-vhost-Fix-device-s-used-descriptor-dequeue.patch [bz#1939363]
  - kvm-hw-virtio-Replace-g_memdup-by-g_memdup2.patch [bz#1939363]
  - kvm-vhost-Fix-element-in-vhost_svq_add-failure.patch [bz#1939363]
  - kvm-meson-create-have_vhost_-variables.patch [bz#1939363]
  - kvm-meson-use-have_vhost_-variables-to-pick-sources.patch [bz#1939363]
  - kvm-vhost-move-descriptor-translation-to-vhost_svq_vring.patch [bz#1939363]
  - kvm-virtio-net-Expose-MAC_TABLE_ENTRIES.patch [bz#1939363]
  - kvm-virtio-net-Expose-ctrl-virtqueue-logic.patch [bz#1939363]
  - kvm-vdpa-Avoid-compiler-to-squash-reads-to-used-idx.patch [bz#1939363]
  - kvm-vhost-Reorder-vhost_svq_kick.patch [bz#1939363]
  - kvm-vhost-Move-vhost_svq_kick-call-to-vhost_svq_add.patch [bz#1939363]
  - kvm-vhost-Check-for-queue-full-at-vhost_svq_add.patch [bz#1939363]
  - kvm-vhost-Decouple-vhost_svq_add-from-VirtQueueElement.patch [bz#1939363]
  - kvm-vhost-Add-SVQDescState.patch [bz#1939363]
  - kvm-vhost-Track-number-of-descs-in-SVQDescState.patch [bz#1939363]
  - kvm-vhost-add-vhost_svq_push_elem.patch [bz#1939363]
  - kvm-vhost-Expose-vhost_svq_add.patch [bz#1939363]
  - kvm-vhost-add-vhost_svq_poll.patch [bz#1939363]
  - kvm-vhost-Add-svq-avail_handler-callback.patch [bz#1939363]
  - kvm-vdpa-Export-vhost_vdpa_dma_map-and-unmap-calls.patch [bz#1939363]
  - kvm-vhost-net-vdpa-add-stubs-for-when-no-virtio-net-devi.patch [bz#1939363]
  - kvm-vdpa-manual-forward-CVQ-buffers.patch [bz#1939363]
  - kvm-vdpa-Buffer-CVQ-support-on-shadow-virtqueue.patch [bz#1939363]
  - kvm-vdpa-Extract-get-features-part-from-vhost_vdpa_get_m.patch [bz#1939363]
  - kvm-vdpa-Add-device-migration-blocker.patch [bz#1939363]
  - kvm-vdpa-Add-x-svq-to-NetdevVhostVDPAOptions.patch [bz#1939363]
  - kvm-redhat-Update-linux-headers-linux-kvm.h-to-v5.18-rc6.patch [bz#2111994]
  - kvm-target-s390x-kvm-Honor-storage-keys-during-emulation.patch [bz#2111994]
  - kvm-kvm-don-t-use-perror-without-useful-errno.patch [bz#2095608]
  - kvm-multifd-Copy-pages-before-compressing-them-with-zlib.patch [bz#2099934]
  - kvm-Revert-migration-Simplify-unqueue_page.patch [bz#2099934]
  - Resolves: bz#1939363
    (vDPA control virtqueue support in Qemu)
  - Resolves: bz#2111994
    (RHEL9: skey test in kvm_unit_test got failed)
  - Resolves: bz#2095608
    (Please correct the error message when try to start qemu with "-M kernel-irqchip=split")
  - Resolves: bz#2099934
    (Guest reboot on destination host after postcopy migration completed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-11
changelog:
  - kvm-QIOChannelSocket-Fix-zero-copy-flush-returning-code-.patch [bz#2107466]
  - kvm-Add-dirty-sync-missed-zero-copy-migration-stat.patch [bz#2107466]
  - kvm-migration-multifd-Report-to-user-when-zerocopy-not-w.patch [bz#2107466]
  - kvm-migration-Avoid-false-positive-on-non-supported-scen.patch [bz#2107466]
  - kvm-migration-add-remaining-params-has_-true-in-migratio.patch [bz#2107466]
  - kvm-QIOChannelSocket-Add-support-for-MSG_ZEROCOPY-IPV6.patch [bz#2107466]
  - kvm-pc-bios-s390-ccw-Fix-booting-with-logical-block-size.patch [bz#2112303]
  - kvm-vdpa-Fix-bad-index-calculus-at-vhost_vdpa_get_vring_.patch [bz#2116876]
  - kvm-vdpa-Fix-index-calculus-at-vhost_vdpa_svqs_start.patch [bz#2116876]
  - kvm-vdpa-Fix-memory-listener-deletions-of-iova-tree.patch [bz#2116876]
  - kvm-vdpa-Fix-file-descriptor-leak-on-get-features-error.patch [bz#2116876]
  - Resolves: bz#2107466
    (zerocopy capability can be enabled when set migrate capabilities with multifd and compress/xbzrle together)
  - Resolves: bz#2112303
    (virtio-blk: Can't boot fresh installation from used 512 cluster_size image under certain conditions)
  - Resolves: bz#2116876
    (Fixes for vDPA control virtqueue support in Qemu)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-12
changelog:
  - kvm-scsi-generic-Fix-emulated-block-limits-VPD-page.patch [bz#2120275]
  - kvm-vhost-Get-vring-base-from-vq-not-svq.patch [bz#2114060]
  - kvm-vdpa-Skip-the-maps-not-in-the-iova-tree.patch [bz#2114060]
  - kvm-vdpa-do-not-save-failed-dma-maps-in-SVQ-iova-tree.patch [bz#2114060]
  - kvm-util-Return-void-on-iova_tree_remove.patch [bz#2114060]
  - kvm-util-accept-iova_tree_remove_parameter-by-value.patch [bz#2114060]
  - kvm-vdpa-Remove-SVQ-vring-from-iova_tree-at-shutdown.patch [bz#2114060]
  - kvm-vdpa-Make-SVQ-vring-unmapping-return-void.patch [bz#2114060]
  - kvm-vhost-Always-store-new-kick-fd-on-vhost_svq_set_svq_.patch [bz#2114060]
  - kvm-vdpa-Use-ring-hwaddr-at-vhost_vdpa_svq_unmap_ring.patch [bz#2114060]
  - kvm-vhost-stop-transfer-elem-ownership-in-vhost_handle_g.patch [bz#2114060]
  - kvm-vhost-use-SVQ-element-ndescs-instead-of-opaque-data-.patch [bz#2114060]
  - kvm-vhost-Delete-useless-read-memory-barrier.patch [bz#2114060]
  - kvm-vhost-Do-not-depend-on-NULL-VirtQueueElement-on-vhos.patch [bz#2114060]
  - kvm-vhost_net-Add-NetClientInfo-start-callback.patch [bz#2114060]
  - kvm-vhost_net-Add-NetClientInfo-stop-callback.patch [bz#2114060]
  - kvm-vdpa-add-net_vhost_vdpa_cvq_info-NetClientInfo.patch [bz#2114060]
  - kvm-vdpa-Move-command-buffers-map-to-start-of-net-device.patch [bz#2114060]
  - kvm-vdpa-extract-vhost_vdpa_net_cvq_add-from-vhost_vdpa_.patch [bz#2114060]
  - kvm-vhost_net-add-NetClientState-load-callback.patch [bz#2114060]
  - kvm-vdpa-Add-virtio-net-mac-address-via-CVQ-at-start.patch [bz#2114060]
  - kvm-vdpa-Delete-CVQ-migration-blocker.patch [bz#2114060]
  - kvm-virtio-scsi-fix-race-in-virtio_scsi_dataplane_start.patch [bz#2099541]
  - Resolves: bz#2120275
    (Wrong max_sectors_kb and Maximum transfer length on the pass-through device [rhel-9.1])
  - Resolves: bz#2114060
    (vDPA state restore support through control virtqueue in Qemu)
  - Resolves: bz#2099541
    (qemu coredump with error Assertion `qemu_mutex_iothread_locked()' failed when repeatly hotplug/unplug disks in pause status)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-13
changelog:
  - kvm-i386-reset-KVM-nested-state-upon-CPU-reset.patch [bz#2117546]
  - kvm-i386-do-kvm_put_msr_feature_control-first-thing-when.patch [bz#2117546]
  - Resolves: bz#2117546
    ([RHEL9.1] Guests in VMX root operation fail to reboot with QEMU's 'system_reset' command)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-13.el9_1.1
changelog:
  - kvm-target-i386-kvm-fix-kvmclock_current_nsec-Assertion-.patch [bz#2134896]
  - Resolves: bz#2134896
    (Windows guest reboot after migration with wsl2 installed inside [rhel-9.1.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-13.el9_1.2
changelog:
  - kvm-migration-Read-state-once.patch [bz#2168221]
  - Resolves: bz#2168221
    (while live-migrating many instances concurrently, libvirt sometimes return internal error: migration was active, but no RAM info was set [rhel-9.1.0.z])


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-4
changelog:
  - Fix specific overflow in qtextlayout
  - Fix incorrect parsing of the strict-transport-security (HSTS) header
  - Fix buffer over-read via a crafted reply from a DNS server
    Resolves: bz#2209492


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-5
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-6
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410) (version #2)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-9
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch fixes
    - pull in candidate fix QTBUG-83890
    Resolves: bz#1988934


author: Clark Williams <williams@redhat.com> - 2.5-1
changelog:
  - remove strip of realtime-entsk and generate debuginfo
  - ensure all files have valid SPDX license identifiers
  - remove Red Hat Makefile targets and specfile
  - Makefile cleanups and added .gitignore
  - drop the 'v' in the version string for the tarball
  - Makefile: add options for passing annocheck
  - Bump version to 2.5
  Resolves: RHEL-30179


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-29
changelog:
  - Actually add --verifydb to the man page (RHEL-14591)
  - Don't warn about missing user/group on skipped files (RHEL-18037)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-30
changelog:
  - Don't segfault on missing priority tag (RHEL-35249)
  - Use unsigned integers for buildtime too for Y2K38 safety (RHEL-22602)
  - Rebuild against libimaevm.so.4 (RHEL-32505)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-31
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-22604)
  - Fix potential use of uninitialized pgp struct (RHEL-22605)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)
  - Add SourceLicense tag to spec syntax (RHEL-28798)
  - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-33
changelog:
  - Fix root relocation regression (RHEL-28967)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-35
changelog:
  - Fix %patch N applying Patch0 implicitly (RHEL-6294)
  - Issue deprecation warning for number-less %patch (RHEL-6294)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-37
changelog:
  - Allow parametric macros to opt out of option processing (RHEL-67161)
  - Report unsafe symlinks during installation as a specific case (RHEL-33393)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.0-2
changelog:
  - properly conflict with pacemaker not providing sync-default we need
    Resolves: rhbz#1979961
    Resolves: rhbz#1979573


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.1-2
changelog:
  - obviously autoconf is defining runstatedir - but with a
    wrong default - directly hand it over to configure
    and skip --with-runstatedir implemented in configure.ac
    for older versions of autoconf

    Resolves: rhbz#2011707


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management

    Resolves: rhbz#2168579


author: Pavel Raiskup <praiskup@redhat.com> - 1.6-1
changelog:
  - new upstream release
  - drop WITH_SELINUX knob and selinux patches, there's built-in support now
  - drop several patches which were incorporated upstream, except for
    changewarnSegv patch (did not apply, and not needed nowadays)


author: Tomas Korbar <tkorbar@redhat.com> - 1.2.0-11
changelog:
  - CVE-2020-23903 speex: divide by zero in read_samples() via crafted WAV file
  - Resolves: CVE-2020-23903


author: systemd maintenance team <systemd-maint@redhat.com> - 250-4
changelog:
  - udev/net-setup-link: change the default MACAddressPolicy to "none" (#2009237)
  - man: mention System Administrator's Guide in systemctl manpage (#1982596)
  - Net naming scheme for RHEL-9.0 (#2052106)
  - core: decrease log level of messages about use of KillMode=none (#2013213)
  - ci: replace apt-key with signed-by (#2013213)
  - ci: fix clang-13 installation (#2013213)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-7
changelog:
  - test: check systemd RPM macros (#2017035)
  - test: do not assume x86-64 arch in TEST-58-REPART (#2017035)
  - tests: add repart tests for block devices with 1024, 2048, 4096 byte sector sizes (#2017035)
  - test: accept both unpadded and padded partition sizes (#2017035)
  - test: lvm 2.03.15 dropped the static autoactivation (#2017035)
  - test: accept GC'ed units in newer LVM (#2017035)
  - shared: Add more dlopen() tests (#2017035)
  - systemctl: Show how long a service ran for after it exited in status output (#2017035)
  - time-util: introduce TIMESTAMP_UNIX (#2017035)
  - systemctl,man: update docs for `--timestamp=` (#2017035)
  - systemctl: make `--timestamp=` affect the `show` verb as well (#2017035)
  - tests: allow running all the services with SYSTEMD_LOG_LEVEL (#2017035)
  - coredump: raise the coredump save size on 64bit systems to 32G (and lower it to 1G on 32bit systems) (#2017035)
  - repart: fix sector size handling (#2017035)
  - mkdir: allow to create directory whose path contains symlink (#2017035)
  - mkdir: CHASE_NONEXISTENT cannot used in chase_symlinks_and_stat() (#2017035)
  - meson: move efi file lists closer to where they are used (#2017035)
  - meson: move efi summary() section to src/boot/efi (#2017035)
  - meson: report SBAT settings (#2017035)
  - boot: Build BCD parser only on arches supported by Windows (#2017035)
  - meson: Remove efi-cc option (#2017035)
  - meson: Get objcopy location from compiler (#2017035)
  - meson: Use files() for source lists for boot and fundamental (#2017035)
  - meson: Use files() for tests (#2017035)
  - tests: add fuzz-bcd (#2017035)
  - meson: Use files() for fuzzers (#2017035)
  - meson: Add check argument to remaining run_command() calls (#2017035)
  - meson: Use echo to list files (#2017035)
  - test: add a test for mkdir_p() (#2017035)
  - util: another set of CVE-2021-4034 assert()s (#2017035)
  - basic: update CIFS magic (#2017035)
  - shared: be extra paranoid and check if argc > 0 (#2017035)
  - core: check if argc > 0 and argv[0] is set (#2017035)
  - core: check argc/argv uncoditionally (#2017035)
  - test: temporary workaround for #21819 (#2017035)
  - test: don't leak local variable to outer scopes (#2017035)
  - tree-wide: don't use strjoina() on getenv() values (#2017035)
  - man: clarify Environmentfile format (#2017035)
  - test-load-fragment: add a basic test for config_parse_unit_env_file() (#2017035)
  - core/execute: use _cleanup_ in exec_context_load_environment() (#2017035)
  - test-env-file: add tests for quoting in env files (#2017035)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-8
changelog:
  - core: shorten long unit names that are based on paths and append path hash at the end (#2083493)
  - tests: add test case for long unit names (#2083493)
  - tests: reflect that we can now handle devices with very long sysfs paths (#2083493)
  - test: extend the "hashed" unit names coverage a bit (#2083493)
  - Revert "kernel-install: also remove modules.builtin.alias.bin" (#2065061)
  - Revert "kernel-install: prefer /boot over /boot/efi for $BOOT_ROOT" (#2065061)
  - kernel-install: 50-depmod: port to /bin/sh (#2065061)
  - kernel-install: 90-loaderentry: port to /bin/sh (#2065061)
  - kernel-install: fix shellcheck (#2065061)
  - kernel-install: port to /bin/sh (#2065061)
  - kernel-install: 90-loaderentry: error out on nonexistent initrds instead of swallowing them quietly (#2065061)
  - kernel-install: don't pull out KERNEL_IMAGE (#2065061)
  - kernel-install: prefer /boot over /boot/efi for $BOOT_ROOT (#2065061)
  - kernel-install: also remove modules.builtin.alias.bin (#2065061)
  - kernel-install: add new variable $KERNEL_INSTALL_INITRD_GENERATOR (#2065061)
  - kernel-install: k-i already creates $ENTRY_DIR_ABS, no need to do it again (#2065061)
  - kernel-install: prefix errors with "Error:", exit immediately (#2065061)
  - kernel-install: add "$KERNEL_INSTALL_STAGING_AREA" directory (#2065061)
  - kernel-install: add missing log line (#2065061)
  - kernel-install: don't try to persist used machine ID locally (#2065061)
  - kernel-install: add a new $ENTRY_TOKEN variable for naming boot entries (#2065061)
  - kernel-install: only generate systemd.boot_id= in kernel command line if used for naming the boot loader spec files/dirs (#2065061)
  - kernel-install: search harder for kernel image/initrd drop-in dir (#2065061)
  - kernel-install: add new "inspect" verb, showing paths and parameters we discovered (#2065061)
  - ci(Mergify): configuration update (#2087652)
  - ci(Mergify): fix copy&paste bug (#2087652)
  - shared: Fix memory leak in bus_append_execute_property() (#2087652)
  - fuzz: no longer skip empty files (#2087652)
  - networkctl: open the bus just once (#2087652)
  - json: align table (#2087652)
  - fuzz-json: optionally allow logging and output (#2087652)
  - shared/json: reduce scope of variables (#2087652)
  - fuzz-json: also do sorting and normalizing and other easy calls (#2087652)
  - shared/json: wrap long comments (#2087652)
  - shared/json: fix memory leak on failed normalization (#2087652)
  - shared/json: add helper to ref first, unref second (#2087652)
  - basic/alloc-util: remove unnecessary parens (#2087652)
  - fuzz-json: also try self-merge operations (#2087652)
  - shared/json: fix another memleak in normalization (#2087652)
  - shared/json: fix memleak in sort (#2087652)
  - execute: fix resource leak (#2087652)
  - tests: ignore dbus-broker-launcher (#2087652)
  - core/timer: fix memleak (#2087652)
  - timedatectl: fix a memory leak (#2087652)
  - test: fix file descriptor leak in test-psi-util (#2087652)
  - test: fix file descriptor leak in test-tmpfiles.c (#2087652)
  - test: fix file descriptor leak in test-fs-util (#2087652)
  - test: fix file descriptor leak in test-oomd-util (#2087652)
  - test: fix file descriptor leak in test-catalog (#2087652)
  - test: make masking of supplementary services configurable (#2087652)
  - test: fuzz our dbus interfaces with dfuzzer (#2087652)
  - test: skip TEST-21-DFUZZER without ASan (#2087652)
  - core: annotate Reexecute() as NoReply (#2087652)
  - test: always force a new image for dfuzzer (#2087652)
  - test: make dfuzzer less verbose (#2087652)
  - test: drop the at_exit() coredump check (#2087652)
  - test: make the shutdown routine a bit more "robust" (#2087652)
  - tree-wide: drop manually-crafted message for missing variables (#2087652)
  - test: allow overriding $QEMU_MEM when running w/ ASan (#2087652)
  - test: don't test buses we don't ship (#2087652)
  - shutdown: get only active md arrays. (#2047682)
  - bus: Use OrderedSet for introspection (#2068131)
  - logind-session-dbus: allow to set display name via dbus (#2100340)
  - ci: limit which env variables we pass through `sudo` (#2087652)
  - ci(Mergify): Add `ci-waived` logic (#2087652)
  - json: use unsigned for refernce counter (#2087652)
  - macro: check over flow in reference counter (#2087652)
  - sd-bus: fix reference counter to be incremented (#2087652)
  - sd-bus: introduce ref/unref function for track_item (#2087652)
  - sd-bus: do not read unused value (#2087652)
  - sd-bus: do not return negative errno when unknown name is specified (#2087652)
  - sd-bus: use hashmap_contains() and drop unnecessary cast (#2087652)
  - test: shorten code a bit (#2087652)
  - test: add several tests for track item (#2087652)
  - core/slice: make slice_freezer_action() return 0 if freezing state is unchanged (#2087652)
  - core/unit: fix use-after-free (#2087652)
  - core/timer: fix potential use-after-free (#2087652)
  - core: command argument can be longer than PATH_MAX (#2073994)
  - shared/install: consistently use 'lp' as the name for the LookupPaths instance (#2082131)
  - shared/specifier: treat NULL the same as "" (#2082131)
  - shared/install: do not print aliases longer than UNIT_NAME_MAX (#2082131)
  - shared/install-printf: drop now-unused install_path_printf() (#2082131)
  - strv: declare iterator of FOREACH_STRING() in the loop (#2082131)
  - basic/unit-file: split out the subroutine for symlink verification (#2082131)
  - basic/stat-util: add null_or_empty_path_with_root() (#2082131)
  - shared/install: reuse the standard symlink verification subroutine (#2082131)
  - shared/install: add a bit more quoting (#2082131)
  - test: add test for systemctl link & enable (#2082131)
  - tests: add helper for creating tempfiles with content (#2082131)
  - man: clarify the descriptions of aliases and linked unit files (#2082131)
  - basic: add new variable $SYSTEMD_OS_RELEASE to override location of os-release (#2082131)
  - test-os-util: add basic tests for os-release parsing (#2082131)
  - basic/env-file: make load-env-file deduplicate entries with the same key (#2082131)
  - man/os-release: add a note about repeating entries (#2082131)
  - shared/specifier: clarify and add test for missing data (#2082131)
  - shared/specifier: provide proper error messages when specifiers fail to read files (#2082131)
  - shared/install: provide proper error messages when invalid specifiers are used (#2082131)
  - shared/install: move scope into InstallContext (#2082131)
  - shared/specifier: fix %u/%U/%g/%G when called as unprivileged user (#2082131)
  - shared/install: simplify unit_file_dump_changes() (#2082131)
  - shared/install: propagate errors about invalid aliases and such too (#2082131)
  - shared/install: return failure when enablement fails, but process as much as possible (#2082131)
  - systemctl: fix silent failure when --root is not found (#2082131)
  - shared/install: also check for self-aliases during installation and ignore them (#2082131)
  - docs: Correct WantedBy= regarding template units (#2082131)
  - man: fix invalid description of template handling in WantedBy= (#2082131)
  - shared/install: drop unnecessary casts (#2082131)
  - strv: make iterator in STRV_FOREACH() declaread in the loop (#2082131)
  - core: ExecContext::restrict_filesystems is set of string (#2082131)
  - install: when linking a file, create the link first or abort (#2082131)
  - shared/install: split unit_file_{disable,enable}() so _reenable doesn't do setup twice (#2082131)
  - shared/install: fix reenable on linked unit files (#2082131)
  - test-systemctl-enable: extend the test for repeated WantedBy/RequiredBy (#2082131)
  - shared/install: when we fail to chase a symlink, show some logs (#2082131)
  - shared/install: do not try to resolve symlinks outside of root directory (#2082131)
  - test-systemctl-enable: enhance the test for unit file linking (#2082131)
  - shared/install: skip unnecessary chasing of symlinks in disable (#2082131)
  - shared/install: also remove symlinks like .wants/foo@one.service → ../foo@one.service (#2082131)
  - shared/install: create relative symlinks for enablement and aliasing (#2082131)
  - shared/install: when looking for symlinks in .wants/.requires, ignore symlink target (#2082131)
  - shared/install: stop passing duplicate root argument to install_name_printf() (#2082131)
  - basic/unit-file: reverse negative conditional (#2082131)
  - shared/install: split UNIT_FILE_SYMLINK into two states (#2082131)
  - shared/install: fix handling of a linked unit file (#2082131)
  - test-systemctl-enable: make shellcheck happy (#2082131)
  - shared/install: when creating symlinks, accept different but equivalent symlinks (#2082131)
  - test-systemctl-enable: use magic syntax to allow inverted tests (#2082131)
  - test-systemctl-enable: also use freshly-built systemd-id128 (#2082131)
  - test-systemctl-enable: disable the test for %a for now (#2082131)
  - Rename UnitFileScope to LookupScope (#2082131)
  - core: handle lookup paths being symlinks (#2082131)
  - shared/install: use correct cleanup function (#2082131)
  - udev/net_id: avoid slot based names only for single function devices (#2073003)
  - test: import logind test from debian/ubuntu test suite (#2087652)
  - test: drop redundant IMAGE_NAME= (#2087652)
  - test: import timedated test from debian/ubuntu test suite (#2087652)
  - test: introduce assert_not_in() helper function (#2087652)
  - test: drop unnecessary --no-pager option (#2087652)
  - test: support debian/ubuntu specific timezone config file (#2087652)
  - test: import hostnamed tests from debian/ubuntu test suite (#2087652)
  - locale-util: fix memleak on failure (#2087652)
  - locale-util: check if enumerated locales are valid (#2087652)
  - locale-util: align locale entries (#2087652)
  - core: inline an iterator variable (#2087652)
  - locale-setup: merge locale handling in PID1 and localed (#2087652)
  - locale: rename keymap-util.[ch] -> localed-util.[ch] (#2087652)
  - test: add one more path to search keymaps (#2087652)
  - test: introduce inst_recursive() helper function (#2087652)
  - hmac/sha256: move size define to sha256.h (#2087652)
  - tpm2: support policies with PIN (#2087652)
  - cryptenroll: add support for TPM2 pin (#2087652)
  - cryptsetup: add support for TPM2 pin (#2087652)
  - cryptsetup: add libcryptsetup TPM2 PIN support (#2087652)
  - cryptenroll: add TPM2 PIN documentation (#2087652)
  - cryptsetup: add manual TPM2 PIN configuration (#2087652)
  - cryptenroll: add tests for TPM2 unlocking (#2087652)
  - env-util: replace unsetenv_erase() by new getenv_steal_erase() helper (#2087652)
  - test: install libxkbcommon and x11 keymaps (#2087652)
  - test: install C.UTF-8 and English locales (#2087652)
  - test: import localed tests from debian/ubuntu test suite (#2087652)
  - unit: check for mount rate limiting before checking active state (#2087652)
  - tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2087652)
  - test: insert space in for loop (#2087652)
  - test: move "do" at the end of line (#2087652)
  - test: use trap RETURN (#2087652)
  - test: ignore the error about our own libraries missing during image creation (#2087652)
  - test: wrap binaries using systemd DSOs when running w/ ASan (#2087652)
  - test: set $ASAN_RT_PATH along with $LD_PRELOAD to the ASan runtime DSO (#2087652)
  - test: drop all LD_PRELOAD-related ASan workarounds (#2087652)
  - test: don't wrap binaries built with ASan (#2087652)
  - test: send stdout/stderr of testsuite units to journal & console (#2087652)
  - test: make the busy loop in TEST-02 less verbose (#2087652)
  - test: always wrap useradd/userdel when running w/ ASan (#2087652)
  - test: don't flush debug logs to the console (#2087652)
  - test: fix a couple of issues found by shellcheck (#2087652)
  - test: pass the initdir to check_result_{qemu,nspawn} hooks (#2087652)
  - test: run the custom check hooks before common checks (#2087652)
  - test: check journal directly instead of capturing console output (#2087652)
  - test: use saved process PID instead of % (#2087652)
  - test: account for ADDR_NO_RANDOMIZE if it's set (#2087652)
  - fuzz-bcd: silence warning about always-true comparison (#2087652)
  - test: disable test_ntp on RHEL (#2087652)
  - core: do not filter out systemd.unit= and run-level specifier from kernel command line (#2087652)
  - test: add a simple test for daemon-reexec (#2087652)
  - test: install /usr/libexec/vi as well (#2087652)
  - test: resize the terminal automagically with INTERACTIVE_DEBUG=yes (#2087652)
  - test: create an ASan wrapper for `getent` and `su` (#2087652)
  - test: mark partition bootable (#2087652)
  - test: bump the data partition size if we don't strip binaries (#2087652)
  - test: use PBKDF2 with capped iterations instead of Argon2 (#2087652)
  - locale: drop unnecessary allocation (#2087652)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-9
changelog:
  - Revert "shared/install: create relative symlinks for enablement and aliasing" (#2118668)
  - glyph-util: add new glyphs for up/down arrows (#2118297)
  - tree-wide: allow ASCII fallback for → in logs (#2118297)
  - tree-wide: allow ASCII fallback for … in logs (#2118297)
  - core: allow to set default timeout for devices (#2116681)
  - man: document DefaultDeviceTimeoutSec= (#2116681)
  - man: update dbus docs (#2116681)
  - hwdb: 60-keyboard: Fix volume-button mapping on Asus TF103C (#2087778)
  - hwdb: CH Pro Pedals not classified correctly due to no buttons (#2087778)
  - hwdb: Add accel orientation quirk for the GPD Pocket 3 (#2087778)
  - hostname: Allow overriding the chassis type from hwdb (#2087778)
  - hwdb: Add Microsoft Surface Pro 1 chassis quirk (#2087778)
  - hwdb: treat logitech craft keyboard as a keyboard (#2087778)
  - test: frequency in mouse DPI is optional (#2087778)
  - hwdb: add two Elecom trackballs (#2087778)
  - hwdb: add new database file for PDA devices (#2087778)
  - hwdb: add support for Surface Laptop 2 & 3 (#22303) (#2087778)
  - hwdb: add HP calculators (#2087778)
  - hwbd: 60-sensor.hwdb: Add Pipo W2Pro (#2087778)
  - hwdb: 60-keyboard: Support the buttons on CZC P10T tablet (#2087778)
  - hwdb: add CST Laser Trackball (#22583) (#2087778)
  - hwdb: Force release calculator key on all HP OMEN laptops (#2087778)
  - Add support for NEC VersaPro VG-S (#2087778)
  - Fix mic mute on Acer TravelMate B311-31 (#22677) (#2087778)
  - Add AV production controllers to hwdb and add uaccess (#2087778)
  - hwdb: Add AV production access to Elgado Stream Deck devices (#2087778)
  - Add HP Elitebook 2760p support (#22766) (#2087778)
  - hwdb: Add mic mute key mapping for HP Elite x360 (#2087778)
  - hwdb: fix parser to work with newer pyparsing (#2087778)
  - hwdb: update for v251 (#2087778)
  - hwdb: update autosuspend entries (#2087778)
  - hwdb: drop boilerplate about match patterns being unstable (#2087778)
  - hwdb: Update 60-keyboard.hwdb (#23074) (#2087778)
  - hwdb: 60-keyboard: Add Acer Aspire One AO532h keymappings (#2087778)
  - hwdb 60-keyboard Add HP/Compaq KBR0133 (#2087778)
  - hwdb: add resolutions for the Vaio FE14 touchpad (#23136) (#2087778)
  - hwdb: Remap micmute to f20 for ASUS WMI hotkeys (#2087778)
  - hwdb: Fix rotation for HP Pro Tablet 408 G1 (#2087778)
  - hwdb: add keyboard mapping for HP ProBook 11G2 (#2087778)
  - hwdb: make sure "ninja update-hwdb" works on f35 (#2087778)
  - hwbd: run "update-hwdb" for v251-rc2 (#2087778)
  - hwdb: run "ninja update-hwdb-autosuspend" for v251-rc2 (#2087778)
  - Fix orientation detection for Asus Transformer T100TAF, copied T100TA rule (#2087778)
  - Fix orientation detection for HP Pavilion X2 10-k010nr (#2087778)
  - fix typo (#2087778)
  - Adding a description of the keyboard shortcut Fn+F12 for the HP EliteBook 845 G7 device. (#23253) (#2087778)
  - hwdb: run "update-hwdb" (#2087778)
  - hwdb: add rammus accelerometer support (#2087778)
  - Add support to set autosuspend delay via hwdb (#2087778)
  - Set autosuspend delay for Fibocom LG850-GL (#2087778)
  - Add HUION Inspiroy H420X to hwdb (#2087778)
  - hwdb: run 'update-hwdb' for v251-rc3 (#2087778)
  - hwdb: add touchpad parameters for Lenovo T15g Gen1 (#23373) (#2087778)
  -  hwdb: Add accel orientation for the I15-TG (#2087778)
  - hwdb: fix accelerometer mount matrix for Aquarius NS483 (#2087778)
  - hwdb: Add Google Hangouts Meet speakermic (#2087778)
  - hwdb: update via ninja -C build update-hwdb (#2087778)
  - hwdb: Add Google Meet speakermic (#2087778)
  - hwdb: Add accel orientation quirk for the Aya Neo Next (#2087778)
  - hwdb: Add HP Dev One (#2087778)
  - hwdb: analyzers: remove generic "STM Device in DFU Mode" (#2087778)
  - hwdb: Add Lenovo ThinkPad C13 Yoga (#2087778)
  - Fix automatic screen rotation for Asus Transformer T100TAM (#2087778)
  - hwdb: Add Acer Aspire A317-33 (#24050) (#2087778)
  - Add ACCEL_MOUNT_MATRIX for OXP Mini (#2087778)
  - Added DERE DBook D10 (#24173) (#2087778)
  - hwdb: analyzers: Clarify the type of devices we want listed (#2087778)
  - hwdb: Add Greaseweazle "drives" to the list of analyzers (#2087778)
  - hwdb: Apply existing accel orientation quirk to all Chromebooks (#2087778)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-11
changelog:
  - scope: allow unprivileged delegation on scopes (#2120604)
  - udev/net_id: add "rhel-9.1" naming scheme (#2121144)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-12
changelog:
  - core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2100464)
  - logind: add option to stop idle sessions after specified timeout (#2100464)
  - tree-wide: fix typo (#2100464)
  - test: several cleanups for TEST-35-LOGIN (#2100464)
  - test: start test user session before idle action setting is changed (#2100464)
  - test: ensure cleanup functions return success (#2100464)
  - test: add test for org.freedesktop.login1.Session SetType (#2100464)
  - test: add a simple test for list-users (#2100464)
  - test: merge grep | awk calls (#2100464)
  - test: wait for user service or slice to be finished (#2100464)
  - test: terminate session and user on cleanup (#2100464)
  - test: do not restart getty@tty2 automatically (#2100464)
  - tests: add test for StopIdleSessionSec= option (#2100464)
  - logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2100464)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-12.2
changelog:
  - coredump: adjust whitespace (#2155516)
  - basic: add STRERROR() wrapper for strerror_r() (#2155516)
  - coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155516)
  - Packit: build SRPMs in Copr (#2155516)
  - test: support non-summer time (#2155516)
  - test: bump the base VM memory to 768M (#2155516)
  - test: don't overwrite existing $QEMU_OPTIONS (#2155516)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-12.3
changelog:
  - shared/json: allow json_variant_dump() to return an error (#2149074)
  - shared/json: use different return code for empty input (#2149074)
  - coredump: avoid deadlock when passing processed backtrace data (#2149074)
  - test: disable flaky subtests that require udevadm wait/lock (#2149074)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-43
changelog:
  - udev-builtin-net_id: skip non-directory entry earlier (RHEL-50103)
  - udev-builtin-net_id: return earlier when hotplug slot is not found (RHEL-50103)
  - udev-builtin-net_id: split-out pci_get_hotplug_slot() and pci_get_hotplug_slot_from_address() (RHEL-50103)
  - udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT (RHEL-50103)
  - Include <threads.h> if possible to get thread_local definition (RHEL-50651)
  - add APIs for detecting confidential virtualization (RHEL-50651)
  - detect-virt: add --cvm option (RHEL-50651)
  - detect-virt: add --list-cvm option (RHEL-50651)
  - unit: add "cvm" option for ConditionSecurity (RHEL-50651)
  - dbus: add 'ConfidentialVirtualization' property to manager object (RHEL-50651)
  - core: log detected confidential virtualization type (RHEL-50651)
  - core: set SYSTEMD_CONFIDENTIAL_VIRTUALIZATION env for generators (RHEL-50651)
  - udev: add 'conf-virt' constant for confidential virtualization tech (RHEL-50651)
  - confidential-virt: split caching of CVM detection into separate method (RHEL-50651)
  - confidential-virt: add detection for s390x target (RHEL-50651)
  - man/systemd-detect-virt: list known CVM technologies (RHEL-50651)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-44
changelog:
  - Revert "udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT" (RHEL-50103)
  - fundamental: share constants for confidential virt detection (RHEL-50651)
  - efi: add helper API for detecting confidential virtualization (RHEL-50651)
  - efi: don't pull kernel cmdline from SMBIOS in a confidential VM (RHEL-50651)
  - Fix detection of TDX confidential VM on Azure platform (RHEL-50651)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-49
changelog:
  - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-24340)
  - Fix configuration for Packit 1.0.0 (RHEL-70884)
  - udev/net_id: introduce naming scheme for RHEL-9.6 (RHEL-25515)
  - hwdb: Fix accelerometer mount matrix for ASUS T100TAS (RHEL-49810)
  - hwdb.d/60-keyboard.hwdb: add Clevo mic mute quirk for V5x dGPU (RHEL-49810)
  - hwdb: add entry for Dell AlpsPS/2 ALPS DualPoint TouchPad (RHEL-49810)
  - hwdb: Mark Apple Wireless keyboards as not having NumLock LED (RHEL-49810)
  - update keyboard hwdb to add acer Predator PHN16-72 (RHEL-49810)
  - hwdb: death to tabs! (RHEL-49810)
  -  hwdb.d/60-keyboard.hwdb: add Clevo mic mute quirk for V5x iGPU, NV41PZ (RHEL-49810)
  - Add ACCEL_MOUNT_MATRIX for Chuwi Hi10 Max. (RHEL-49810)
  - Add HUAWEI MateBook D 15 AMD ACCEL properties (RHEL-49810)
  - hwdb: add Kensington SlimBlade Pro trackball (Bluetooth mode) (RHEL-49810)
  - hwdb: Add accel orientation quirk for the IdeaPad Duet 3 10IGL5-LTE (RHEL-49810)
  - hwdb: add keymaps for Acer Nitro 5 AN515-47 (#34493) (RHEL-49810)
  - hwdb: make key map match comment for one laptop (RHEL-49810)
  - hwdb: there's KEY_BRIGHTNESS_AUTO these days, hence hook it up where a FIXME suggests that (RHEL-49810)
  - hwdb: use KEY_ROTATE_DISPLAY for various cases of display rotation keys (RHEL-49810)
  - hwbd: use newer KEY_PICKUP_PHONE, KEY_HANGUP_PHONE, KEY_SELECTIVE_SCREENSHOT, KEY_NOTIFICATION_CENTER keycodes where appropriate (RHEL-49810)
  - hwdb: add SCAI SKU prefix for Samsung keyboard mapping (#34648) (RHEL-49810)
  - tree-wide: drop doubled empty lines (RHEL-49810)
  - hwdb: move key 66/65 handling from specific to generic HP laptop coverage (RHEL-49810)
  - hwdb: fix key toggle touchpad and programmable buttom for Positivo V142N (#34725) (RHEL-49810)
  - hwdb: add Stream Deck Neo (#34903) (RHEL-49810)
  - hwdb: update autosuspend rules (RHEL-49810)
  - hwdb: import newest autosuspend rules from chromeos (RHEL-49810)
  - update hwdb (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: fix broken numpad paren keys on Lenovo Thinkbook 16 G6+ 2024 (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: add new Cube Mix Plus (i18D) rotation info (RHEL-49810)
  - hwdb: Add quirk for Logitech MX Keys for Mac (RHEL-49810)
  - hwdb: add support for PineTab2 to 60-sensor.hwdb (#35304) (RHEL-49810)
  - hwdb: add entry for Chuwi Hi10 X1 (#35331) (RHEL-49810)
  - hwdb: update (RHEL-49810)
  - hwdb: Make 3D mice work out-of-the-box (RHEL-49810)
  - hwdb: Add Chuwi MiniBook X trackpad fuzz (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: disable inclusion of the PCI domain in MANA network interface naming (RHEL-49810)
  - hwdb: move down touchpad toggle section from generic to product specific (RHEL-49810)
  - hwdb: add scancodes for HP Elitebook 2170p runnning coreboot (RHEL-49810)
  - hwdb: Make remote controllable lights work out-of-the-box (RHEL-49810)
  - hwdb: fix key toggle touchpad for VAIO VJFH52 (#35645) (RHEL-49810)
  - hwdb: comment out the entry for Logitech MX Keys for Mac (RHEL-49810)
  - 60-sensor.hwdb: Loosen model mask to include entire series (RHEL-49810)
  - Correct ACCEL_MOUNT_MATRIX for Chuwi Hi10 Max (RHEL-49810)
  - hwdb: Add macro keys for HP 430 Programmable Wireless Keypad (RHEL-49810)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-50
changelog:
  - journal: again create user journals for users with high uids (RHEL-70103)
  - install: don't translate unit instances to paths when reenabling them (RHEL-5956)
  - test-systemctl-enable: fix typo (RHEL-5956)
  - udev: Handle PTP device symlink properly on udev action 'change' (RHEL-59088)
  - systemctl: print warning about missing /proc only as debug message (RHEL-3906)
  - repart: avoid use of uninitialized TPM2B_PUBLIC data (RHEL-56793)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-51
changelog:
  - ci: use ubuntu 22:04 for deploy of man pages (RHEL-70884)
  - man/tmpfiles: fix off-by-one in example (RHEL-74015)
  - test: drop removed SCSI passthrough feature (RHEL-70884)
  - nspawn: call json_dispatch() with a correct pointer (RHEL-55266)
  - varlink,json: introduce new varlink_dispatch() helper (RHEL-55266)
  - json: add json_dispatch_const_user_group_name() (RHEL-55266)
  - sd-varlink: add new sd_varlink_error_is_invalid_parameter() helper (RHEL-55266)
  - userdb: return ESRCH if userdb service refuses a user/group name as invalid (RHEL-55266)
  - test: rename assert.sh to util.sh (RHEL-55301)
  - core: Don't GC unit if it is in cgroup_empty_queue (RHEL-55301)
  - core: Handle cgroup pruning in on_cgroup_empty_event (RHEL-55301)
  - Fix failing test (RHEL-55301)
  - unit: don't gc unit in oom queue (RHEL-55301)
  - core: do not GC units/jobs that are in the D-Bus queue (RHEL-55301)


author: Kalev Lember <klember@redhat.com> - 3.38.2-2
changelog:
  - Use conflicts for totem-video-thumbnailer split instead of self-obsoletes
  - Resolves: rhbz#1949422


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.17.2-1
changelog:
  - preload: Wrap statx() and fstatat(), to fix `ls` and other tools on
    recent glibc versions. (#160)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.17.6-1
changelog:
  - Increase uevent buffer size (#167)
  - Skip /umockdev-testbed-vala/detects_running_outside_testbed during normal
    builds for the time being, as it is brittle on several architectures (#169)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.17.8-1
changelog:
  - Fix some potential crashes spotted by Coverity
  - Enable Fedora builds and bodhi updates via packit


author: Packit <hello@packit.dev> - 0.17.10-1
changelog:
  - Adjust to systemd 251-rc2: Set $SYSTEMD_DEVICE_VERIFY_SYSFS, parse new udevadm format, update tests


author: Packit <hello@packit.dev> - 0.17.13-1
changelog:
  - preload: Wrap fstatfs(), to work with systemd 251 also with Python tests
  - Fix tests in Gentoo sandbox build


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Brian C. Lane <bcl@redhat.com> - 35.9-1
changelog:
  - Copy rhel-92.json test repository from osbuild-composer
  - Update osbuild-composer test repositories from osbuild-composer
  - New release: 35.9 (bcl)
    Resolves: rhbz#2164560
  - tests: Replace os.MkdirTemp with t.TempDir (bcl)
  - blueprint save: Allow overriding bad blueprint names (bcl)
  - tests: Clean up checking err in tests (bcl)
  - composer-cli: Implement blueprints diff (bcl)
  - saveBlueprint: Return the filename to the caller (bcl)
  - composer-cli: Add tests for using --commit with old servers (bcl)
  - weldr: Return error about the blueprints change route (bcl)
  - weldr: Save the http status code as part of APIResponse (bcl)
  - Add --commit support to blueprints save (bcl)
  - Add --commit to blueprints show (bcl)
  - gitleaks: Exclude the test password used in tests (bcl)
  - ci: add tags to AWS instances (tlavocat)
  - Update github.com/BurntSushi/toml to 1.2.1
  - Update github.com/stretchr/testify to 1.8.1
  - Update bump github.com/spf13/cobra to 1.6.1
  - New release: 35.8 (bcl)
  - completion: Remove providers from bash completion script (bcl)
  - completion: Filter out new headers from compose list (bcl)
  - docs: Remove unneeded Long descriptions (bcl)
  - docs: Use a custom help template (bcl)
  - docs: Add more command documentation (bcl)
  - cmdline: Add package glob support to modules list command (bcl)
  - workflow: Add govulncheck on go v1.18 (bcl)
  - tests: Update to use golangci-lint 1.49.0 (bcl)
  - New release: 35.7 (bcl)
  - spec: Move %gometa macro above %gourl (bcl)
  - weldr: When starting a compose pass size as bytes, not MiB (bcl)
  - tests: Use correct size value in bytes for test (bcl)
  - workflow: Add Go 1.18 to text matrix (bcl)
  - Replace deprecated ioutil functions (bcl)
  - New release: 35.6 (bcl)
  - tests: Update tests for osbuild-composer changes (bcl)
  - CMD: Compose status format (eloy.coto)
  - CMD: Compose list format (eloy.coto)
  - tests: Update tests to check for JSON list output (bcl)
  - composer-cli: Change JSON output to be a list of objects (bcl)
  - weldr: Simplify the old ComposeLog, etc. functions (bcl)
  - composer-cli: Add --filename to blueprints freeze save command (bcl)
  - composer-cli: Add --filename to blueprints save command (bcl)
  - composer-cli: Add --filename to compose logs command (bcl)
  - composer-cli: Add --filename to compose image command (bcl)
  - composer-cli: Add --filename to compose metadata command (bcl)
  - composer-cli: Add --filename to compose results command (bcl)
  - weldr: Add saving to a new filename to GetFilePath function (bcl)
  - github: Fix issue with codecov and forced pushes in PRs (bcl)
  - Use golangci-lint 1.45.2 in workflow (bcl)
  - Run workflow tests for go 1.16.x and 1.17.x (bcl)
  - Move go.mod to go 1.16 (bcl)
  - workflows/trigger-gitlab: run Gitlab CI in new image-builder project (jrusz)
  - Update GitHub actions/setup-go to 3
  - Update GitHub actions/checkout to 3


author: Brian C. Lane <bcl@redhat.com> - 35.12-1
changelog:
  - Copy rhel-9.4.json test repository from osbuild-composer
  - New release: 35.12 (bcl)
    Resolves: RHEL-1035
  - Add support for compose start warning messages (bcl)
  - Update documentation urls for new locations (bcl)
  - weldr: go fmt changes to a couple comments (bcl)
  - weldr: Update ostree test for parentid with no url (bcl)
  - Makefile: Turn off seccomp for build-in-podman (bcl)
  - composer-cli: Update doc links (simon.steinbeiss)
  - docs: fix typo/formatting in HACKING.md (idiez)
  - Add release creation documentation (bcl)
  - spec: Require createrepo_c for weldr-client-tests package (bcl)
  - spec: migrate the license field to SPDX (ondrej)
  - Go: Switch to go 1.19 (bcl)
  - CI: Update terraform hash (bcl)
  - Actions: add workflow for marking and closing stale issues and PRs (thozza)
  - workflows: Stop using golint (bcl)
  - workflows: Add Go 1.21 and 1.22 to test matrix (bcl)
  - workflows: Update to golangci-lint 1.56.2 (bcl)
  - workflow: Ignore govulncheck failures (bcl)
  - workflow: Switch to testing on go 1.18, 1.19, 1.20 (bcl)
  - build(deps): bump actions/setup-go from 3 to 5 (49699333+dependabot[bot])
  - build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.8.0 (49699333+dependabot[bot])
  - build(deps): bump actions/checkout from 3 to 4 (49699333+dependabot[bot])
  - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.2 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4 (49699333+dependabot[bot])


author: Brian C. Lane <bcl@redhat.com> - 35.12-3
changelog:
  - tests: OSTree does not support the qcow2 image type
  - Add test repositories for RHEL 9.6 and 9.7
  - Rebuild for CVE-2025-22871
    Resolves: RHEL-89344


author: Brian C. Lane <bcl@redhat.com> - 35.12-4
changelog:
  - Bump release for y-stream AND z-stream building using
    centpkg build --rhel-target=zstream
    Related: RHEL-89344


author: Michal Srb <michal@redhat.com> - 1.51.0-16
changelog:
  - Drop bundled expat and build against libxml2
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25236


author: Neal Gompa <ngompa13@gmail.com> - 1:7.5-49
changelog:
  - Add OrderWithRequires for freetype to ensure freetype is installed first
  - Move license files to license tag on file list


