# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 2.5.2-1
changelog:
  - Bump version to 2.5.2-1
  - Resolves: RHEL-5108 - ns-slapd crash in referint_get_config
  - Resolves: RHEL-5113 - nsslapd-numlisteners limit is not enforced
  - Resolves: RHEL-5115 - `dscreate ds-root` accepts relative path
  - Resolves: RHEL-5131 - ldif2db can be very slow
  - Resolves: RHEL-5138 - Logconv.pl CSV file contains mismatched header and data columns
  - Resolves: RHEL-14760 - ns-slapd crash in vlvIndex_delete
  - Resolves: RHEL-17511 - nsslapd-idletimeout is ignored
  - Resolves: RHEL-49454 - perf search result investigation for many large static groups and members
  - Resolves: RHEL-49458 - subsuffix are not returned in one level scoped search


author: Viktor Ashirov <vashirov@redhat.com> - 2.5.2-2
changelog:
  - Bump version to 2.5.2-2
  - Resolves: RHEL-55744 - ipahealthcheck.ds.backends.BackendsCheck.DSBLE0006: BDB is deprecated and should not be used as a backend


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-1
changelog:
  - Update to 2.6.1
  - Resolves: RHEL-5151 - [RFE] defer memberof nested updates
  - Resolves: RHEL-54148 - leaked_storage: Variable "childelems" going out of scope leaks the storage it points to.
  - Resolves: RHEL-60135 - deadlock during cleanAllRuv
  - Resolves: RHEL-61341 - After an initial failure, subsequent online backups will not work.
  - Resolves: RHEL-61349 - Remove deprecated setting for HR time stamps in logs
  - Resolves: RHEL-62875 - Passwords are not being updated to use the configured storage scheme ( nsslapd-enable-upgrade-hash is enabled ).
  - Resolves: RHEL-64438 - VLV errors with RSNv3 and pruning enabled [rhel-9]
  - Resolves: RHEL-64854 - cleanallruv consums CPU and is slow
  - Resolves: RHEL-65506 - AddressSanitizer: double-free
  - Resolves: RHEL-65512 - AddressSanitizer: heap-use-after-free in import_abort_all
  - Resolves: RHEL-65561 - LeakSanitizer: detected memory leaks in dbmdb_public_db_op
  - Resolves: RHEL-65662 - Replication issue between masters using cert based authentication
  - Resolves: RHEL-65664 - LDAP unprotected search query during certificate based authentication
  - Resolves: RHEL-65665 - Ambiguous warning about SELinux in dscreate for non-root user
  - Resolves: RHEL-65741 - LeakSanitizer: memory leak in ldbm_entryrdn.c
  - Resolves: RHEL-65776 - Wrong set of entries returned for some search filters [rhel-9]
  - Resolves: RHEL-67004 - "dsconf config replace" should handle multivalued attributes.
  - Resolves: RHEL-67005 - Online backup hangs sporadically.
  - Resolves: RHEL-67008 - Some replication status data are reset upon a restart.
  - Resolves: RHEL-67020 - 389DirectoryServer Process Stops When Setting up Sorted VLV Index
  - Resolves: RHEL-67024 - Some nsslapd-haproxy-trusted-ip values are discarded upon a restart.
  - Resolves: RHEL-69806 - ipahealthcheck.ds.replication displays WARNING '1 conflict entries found under the replication suffix'
  - Resolves: RHEL-69826 - "Duplicated DN detected" errors when creating indexes or importing entries. [rhel-9]
  - Resolves: RHEL-70127 - Crash in attrlist_find() when the Account Policy plugin is enabled. [rhel-9]
  - Resolves: RHEL-70252 - Freelist ordering causes high wtime
  - Resolves: RHEL-71218 - Sub suffix causes "id2entry - Could not open id2entry err 0" error when the Directory Server starts [rhel-9]
  - Resolves: RHEL-74153 - backup/restore broken [rhel-9]
  - Resolves: RHEL-74158 - If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex [rhel-9]
  - Resolves: RHEL-74163 - Crash during bind when acct policy plugin does not have "alwaysrecordlogin" set [rhel-9]
  - Resolves: RHEL-74168 - On replica consumer, account policy plugin fails to manage the last login history [rhel-9]
  - Resolves: RHEL-74174 - Replication broken after backup restore with freeipa configuration [rhel-9]
  - Resolves: RHEL-74353 - nsslapd-haproxy-trusted-ip is not in schema [rhel-9]
  - Resolves: RHEL-76019 - IPA LDAP error code T3 when no exceeded time limit from a paged search result [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-3
changelog:
  - Resolves: RHEL-18333 Can't rename users member of automember rule
  - Resolves: RHEL-61341 After an initial failure, subsequent online backups will not work.
  - Resolves: RHEL-63887 nsslapd-mdb-max-dbs autotuning doesn't work properly
  - Resolves: RHEL-63891 dbscan crashes when showing statistics for MDB
  - Resolves: RHEL-63998 dsconf should check for number of available named databases
  - Resolves: RHEL-78344 During import of entries without nsUniqueId, a supplier generates duplicate nsUniqueId (LMDB only) [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-4
changelog:
  - Resolves: RHEL-78722 - Failed to set sslversionmax to TLS1.3 in FIPS mode with dsconf $INSTANCE security set --tls-protocol-max TLS1.3


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-3
changelog:
  - Resolves: RHEL-77983 - Defects found by OpenScanHub
  - Resolves: RHEL-79673 - Improve the "result" field of ipa-healthcheck if replicas are busy
  - Resolves: RHEL-80496 - Can't rename users member of automember rule [rhel-9]
  - Resolves: RHEL-81141 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9]
  - Resolves: RHEL-89736 - dsconf backend replication monitor fails if replica id starts with 0 [rhel-9]
  - Resolves: RHEL-89745 - ns-slapd crash in dbmdb_import_prepare_worker_entry() [rhel-9]
  - Resolves: RHEL-89753 - Nested group does not receive memberOf attribute [rhel-9]
  - Resolves: RHEL-89769 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-9]
  - Resolves: RHEL-89782 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-9]
  - Resolves: RHEL-95768 - Improve error message when bulk import connection is closed [rhel-9]
  - Resolves: RHEL-101189 - lib389/replica.py is using unexisting datetime.UTC in python3.9


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-4
changelog:
  - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-5
changelog:
  - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9]
  - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry
  - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9]
  - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore.
  - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9]
  - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9]
  - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9]
  - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9]
  - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9]
  - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-7
changelog:
  - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9]
  - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9]
  - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9]
  - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9]
  - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9]
  - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9]
  - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9]
  - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9]


author: Caolán McNamara <caolanm@redhat.com> - 2.4.1-5
changelog:
  - disable building BOX2D_BUILD_UNIT_TESTS due to "SIGSTKSZ ... no
    longer constant on Linux ... redefined to sysconf(_SC_SIGSTKSZ)"
    https://github.com/bminor/glibc/blob/master/NEWS causing build failure


author: Paul Howarth <paul@city-fan.org> - 1.0.5-23
changelog:
  - Don't pass gcc-only compiler flags to other compilers, e.g. clang
    (based on https://src.fedoraproject.org/rpms/Judy/pull-request/3 from
    Timm Baeder)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.51.7-2
changelog:
  - Remove the build argument -flto-partition to avoid compilation crashes due
    to high memory usage.


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.52.0-1
changelog:
  - Update to 1.52.0
  - Add support for creating VLANs for secondary VNICs in nm-cloud-setup (RHEL-36423)
  - Always reset retries when unblocking children or ports (RHEL-78122)
  - Prevent the activation of unavailable OVS interfaces (RHEL-79997)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.53.1-1
changelog:
  - Update to 1.53.1 (dev)
  - Update MPTCP endpoints creation order (RHEL-78752)
  - Print all warnings from nmcli to stderr (RHEL-74255)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.2-1
changelog:
  - Update to 1.53.2 (dev)
  - Fix invalid memory access on Dnsconfd DBUS error (RHEL-83175)
  - Avoid getting transient hostname when "localhost" set in /etc/hostname (RHEL-55730)


author: Filip Pokrývka <fpokryvk@redhat.com> - 1:1.53.3-1
changelog:
  - Update to 1.53.3 (dev)
  - Add more IPv6 prefix delegation options (RHEL-85765)
  - Fix order of parsing port/controller properties in nmcli (RHEL-85767)
  - Improve interface activation logic (RHEL-85766)
  - Fix WireGuard IPv6 firewall rules (RHEL-85763)
  - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.4-1
changelog:
  - Update to 1.53.4 (dev)
  - initrd: add new NBFT parser (RHEL-83061)
  - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
  - Support reapply on OVS settings (RHEL-86877)
  - Add support for configuring the loopback interface in nmtui (RHEL-85770)
  - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
  - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
  - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

  Resolves: RHEL-83061
  Resolves: RHEL-59083
  Resolves: RHEL-87596
  Resolves: RHEL-85770
  Resolves: RHEL-85764
  Resolves: RHEL-85778
  Resolves: RHEL-87168


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.90-1
changelog:
  - Update to 1.54.0 (rc1)
  - Devices not becoming managed sometimes (RHEL-93108)
  - Crash on _l3cfg_notify_cb (RHEL-92314)
  - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.91-1
changelog:
  - Update to 1.54.0 (rc2)
  - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
  - Fix a race condition in ovs tun interface (RHEL-98551)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.92-1
changelog:
  - Update to 1.54.0 (rc3)
  - Fix ipv6 static route deleted with dualstack (RHEL-102772)
  - Allow setting IP method to disabled in port connection (RHEL-102768)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.54.0-1
changelog:
  - Update to 1.54.0
  - Fix reaply on bridge port VLAN (RHEL-102743)
  - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)


author: Vladimír Beneš <vbenes@redhat.com>- 1:1.54.1-1
changelog:
  - Update to 1.54.1
  - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
  - Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
  - Global DNS config without domains silently ignored from D-Bus (RHEL-115973)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.54.2-1
changelog:
  - Update to 1.54.2
  - Support setting protocol version of HSR/PRP (RHEL-122172)
  - Support interlink for HSR/PRP (RHEL-122175)
  - Improve logging of networking off (RHEL-122173 )
  - Don't delete unrelated OVS ports (RHEL-121104)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1.2.18-2
changelog:
  - Support point-to-point IPSec tunnel (RHEL-20690)
  - Fix crash in libreswan_nmstate_iface_dpd_rsa (RHEL-21221)
  - Support configuring IPSec mode with 'type' (RHEL-21554)


author: Vladimír Beneš <vbenes@redhat.com> - 1.2.27-1
changelog:
  - Update to later upstream release to address regressions (RHEL-56551)
  - Support rightca in ipsec section (RHEL-118819)


author: Vladimír Beneš <vbenes@redhat.com> - 1.2.27-2
changelog:
  - Symetric import/export with nm-auto-default (RHEL-122306)
  - Esp param properly exported (RHEL-122626)
  - Correct leftid export when it contains @


author: Gris Ge <fge@redhat.com> - 1.2.29-1
changelog:
  - Upgrade to 1.2.29
  - Support creating both ends of IPsec (Libreswan) tunnels. (RHEL-85789)
  - Support leftprotoport and rightprotoport options. (RHEL-130907)
  - Fix error on duplicate key 'phase2alg'. (RHEL-131233)
  - Fix import connection with RSA key. (RHEL-127863)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-2
changelog:
  - Resolve issues found by rpmdiff
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-3
changelog:
  - Add a patch to resolve one more issue found by rpmdiff/rpminspect:
    fix getaddrinfo detection to avoid using gethostbyname.


author: Richard Hughes <rhughes@redhat.com> - 1.2.2-1
changelog:
  - New upstream release
  - Notify systemd when beginning to shutdown
  - Fix possible information disclosure


author: Richard Hughes <rhughes@redhat.com> - 1.2.3-1
changelog:
  - New upstream release
  - Add support for coercing upgrade to distupgrade
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon disappears
  - Remove large transaction size sanity check


author: Milan Crha <mcrha@redhat.com> - 1.2.4-1
changelog:
  - New upstream release
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Honor install_weak_deps=False
  - Improve thread safety on an operation cancellation
  - Let the finish understand the 'cancelled' exit code
  - Only set polkit interactive flag if method call has too
  - Read update information also when getting list of updates
  - Use 'hy_query_get_advisory_pkgs', if available


author: Pete Walter <pwalter@fedoraproject.org> - 2.0.14-1
changelog:
  - Update to 2.0.14
  - Rebase multilib.patch
  - Don't use globs in the form of libFOO.so.* for listing files


author: Neal Gompa <ngompa13@gmail.com> - 2.0.14-6
changelog:
  - Switch to CMake to build SDL2
  - Build JACK support unconditionally since PipeWire-JACK exists in RHEL 9


author: Neal Gompa <ngompa@centosproject.org> - 2.0.18-1
changelog:
  - Update to 2.0.18
    Resolves: rhbz#2028076
  - Fix multilib conflict with SDL_revision.h (rhbz#2008838)
  - Backport fix for building against wayland-1.20+
  - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359)


author: Ray Strode <rstrode@redhat.com> - 0.6.55-10
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations.
    Resolves: #2057576


author: Kalev Lember <klember@redhat.com> - 3.28-12
changelog:
  - Split highcontrast-icon-theme out to a new subpackage
  - Explicitly require cursor and icon themes required for the gtk2 themes


author: Radovan Sroka <rsroka@redhat.com> - 0.16-102
changelog:
  RHEL 9.5.0 ERRATUM
  - aide fails with "Not enough parameters in db:15384. Trying to continue." unexpectedly
  Resolves: RHEL-27606
  - AIDE fails when using root_prefix option
  Resolves: RHEL-28882


author: Radovan Sroka <rsroka@redhat.com> - 0.16-103
changelog:
  RHEL 9.6.0 ERRATUM
  - /boot/grub2/grubenv's timestamp is getting modified continuously due to "boot_success" implementation
  Resolves: RHEL-4331


author: Attila Lakatos <alakatos@redhat.com> - 0.16-105
changelog:
  RHEL 9.7 ERRATUM
  - CVE-2025-54389 aide: improper output neutralization enables bypassing
  Resolves: RHEL-109912


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-1
changelog:
  RHEL 9.8.0 ERRATUM
  - rebase to 0.19.2
  Resolves: RHEL-110573
  - Switch to libnettle for hashing
  - prevent aide from crashing if database is a HTTPS URL
  Resolves: RHEL-76014
  - prevent aide from exiting if a file is truncated during check
  Resolves: RHEL-1569


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-4
changelog:
  - /boot/grub2/grubenv is excluded from check due to boot_success implementation
  Resolves: RHEL-83776


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.1-1
changelog:
  - network: disable NM autoconnections also when BOOTIF is used (rvykydal)
    Resolves: RHEL-78272
  - network: support inst.net.noautodefault option (rvykydal)
    Related: RHEL-78272
  - security: fix dnsconfd backend option check in initramfs (rvykydal)
    Resolves: RHEL-83214
  - Support leavebootorder for bootupd (jkonecny)
    Resolves: RHEL-40897
  - bootupd: call bootupctl with --update-firmware (awilliam)
    Resolves: RHEL-40897


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.2-1
changelog:
  - Fix typo in systemd service (jstodola)
    Resolves: RHEL-78272
  - s390x - enable raid1 as a stage2 device (dan)
    Resolves: INSTALLER-4148
    Resolves: RHEL-21691
  - edns: restart dnsconfd only after the first kickstart parsing (rvykydal)
    Resolves: RHEL-82694
  - edns: allow dnsconfd name resolution for kickstart fetching (rvykydal)
    Resolves: RHEL-82694


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.3-1
changelog:
  - Sort RPM versions via rpm.labelCompare() and not via
    packaging.version.LegacyVersion() (miro)
    Resolves: RHEL-87358
  - rpm_ostree/installation.py: fix image deployment on s390x (rvykydal)
    Resolves: RHEL-63237
  - Add additional config_get Dracut function tests (jkonecny)
    Related: RHEL-48837
  - Update the tests/README.rst file (jkonecny)
    Related: RHEL-48837
  - Move shell testing to a separated directory (jkonecny)
    Related: RHEL-48837
  - Enable dynamic bash commands disable for tests (jkonecny)
    Related: RHEL-48837
  - Add test for config_get dracut function (jkonecny)
    Related: RHEL-48837
  - Fix trailing `/` when downloading stage2 image (jkonecny)
    Resolves: RHEL-48837
  - Fix whitespace chars broke Dracut config parsing (jkonecny)
    Related: RHEL-48837


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.4-1
changelog:
  - Revert "s390x - enable raid1 as a stage2 device" (jkonecny)
    Reverts: RHEL-21691
  - test_module_part_blivet: fix pylint disable (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module.common.task fix cyclic import (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module_manager: fix ciclic import (k.koukiou)
    Related: RHEL-85416
  - pyanaconda: bootloader: fix ImportError (k.koukiou)
    Related: RHEL-85416
  - ruff: enable isort rules and autofix all isort warnings Autofixed with: ruff
    check --exclude pyanaconda/core/kickstart/commands.py --fix --select I .
    (jkonecny)
    Resolves: RHEL-85416
  - Add ruff, a very fast linter (vslavik)
    Related: RHEL-85416
  - Relabel /var/log/ and /root/original-ks.cfg (champetier.etienne)
    Resolves: RHEL-85298


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.5-1
changelog:
  - bootloader: drop write_config_console, just preserve console= (awilliam)
    Resolves: RHEL-98670
  - payload/rpm-ostree: Include program output in exception (walters)
    Resolves: RHEL-45184


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.6-1
changelog:
  - Fix vconsole layout doesn't work for ostree (jkonecny)
    Resolves: RHEL-101057
  - test: make dnf substitutions test check only relevant values (rvykydal)
  - test: add new substitution members in dnf tests (rvykydal)


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.7-1
changelog:
  - pyanaconda: payload: return exception details for payload failures
    (k.koukiou)
  - ui: tui: installation_source: show error message in the TUI screen
    (k.koukiou)
    Resolves: RHEL-4705
  - storage: fix mount point assignment of non-formatted swap partitions
    (rvykydal)
    Related: RHEL-16355
  - storage: include only fstab devices in fsset swap devices property (rvykydal)
    Resolves: RHEL-16355


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.8-1
changelog:
  - Fix: UnboundLocalError: local variable 'e' referenced before assignment
    (k.koukiou)
    Related to: RHEL-4705
  - Emit authselect in KS when fingerprint is enabled (adamkankovsky)
    Resolves: RHEL-85175


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.9-1
changelog:
  - Set Authselect agruments after run in Security module (adamkankovsky)
    Resolves: RHEL-85175
  - Authselect code simplification (adamkankovsky)
    Resolves: RHEL-85175
  - custom: Reallocate partitions when removing a partition (vtrefny)
    Resolves: RHEL-114169


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.10-1
changelog:
  - Fixing authselect logical differences not resolved during backporting
    (adamkankovsky)
    Resolves: RHEL-85175


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.11-1
changelog:
  - bootloader: efi: utilize grub2-common script for handling config file
    generation (k.koukiou)
    Resolves: RHEL-36187


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.5.13-1
changelog:
  - security: require pykickstart version with %certificates support (rvykydal)
    Resolves: RHEL-61430
  - security: do not crash initramfs ks parsing on failing certificate dump
    (rvykydal)
    Resolves: RHEL-61430
  - security: add service to transfer certificates from initramfs (rvykydal)
    Resolves: RHEL-61430
  - security: import certificates in initramfs (rvykydal)
    Resolves: RHEL-61430
  - security: install certificates in pre-install phase only for dnf payload
    (rvykydal)
    Resolves: RHEL-61430
  - security: raise exception if certificate destination is unknown (rvykydal)
    Resolves: RHEL-61430
  - security: log a warning when dumping certificate over an existing file
    (rvykydal)
    Resolves: RHEL-61430
  - security: pre-install certificates before payload installation (rvykydal)
    Resolves: RHEL-61430
  - security: add API to install certificates early before payload (rvykydal)
    Resolves: RHEL-61430
  - security: install certificates on target system (rvykydal)
    Resolves: RHEL-61430
  - security: Add API for installation on target system (rvykydal)
    Resolves: RHEL-61430
  - security: import certificates early after Anaconda start (rvykydal)
    Resolves: RHEL-61430
  - security: add API to import certificates to Anaconda environment (rvykydal)
    Resolves: RHEL-61430
  - security: add API: Certificate getter (rvykydal)
    Resolves: RHEL-61430
  - kickstart: extend section specification for list of section data (rvykydal)
  - security: implement the support to install certificates to Anaconda
    (rvykydal)
    Resolves: RHEL-61430
  - translations: bump dependency to l10n repo because of branch switch
    (k.koukiou)
  - util: correct errors and suppress stderr for common cases (riehecky)
  - util: Add additional information for EFI systems (riehecky)
    Resolves: RHEL-55128


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.15-1
changelog:
  - security: add a development note for certificates import in initramfs
    (rvykydal)
    Related: RHEL-77155
  - security: do not issue warning on existing certificate file during dump
    (rvykydal)
    Resolves: RHEL-77155
  - network: pass NM global dns configuration to the installed system (rvykydal)
    Resolves: RHEL-71824
  - network: pass global dns initrd option to the installed system (rvykydal)
    Resolves: RHEL-71824


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.16-1
changelog:
  - network: add dnsconfd to selected packages if used in installer (rvykydal)
    Resolves: RHEL-79803
  - network: add dnsconfd to installer environment (rvykydal)
    Resolves: RHEL-79804


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.17-1
changelog:
  - network: start dnsconfd in initramfs (rvykydal)
    Resolves: RHEL-80303
  - network: enable dnsconfd service on installed system if required (rvykydal)
    Resolves: RHEL-80023
  - network: pass 16-dns-backend.conf to target system (rvykydal)
    Resolves: RHEL-80233
  - netowrk: enable dnsconfd service in installer environment (rvykydal)
    Resolves: RHEL-80023


author: Nick Clifron <nickc@redhat.com> - 12.64-1
changelog:
  - Rebase to 12.64, allowing build with LLVM 18.  (RHEL-49953)
  - Retire: annobin-strings-no-attach.patch
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)
  - Annocheck: Add OpenSSL Engine test.  (PTG-319)
  - Annocheck: Test for gaps even when only one note is present.
  - Annocheck: Skip AArch64 branch protection test for GO binaries.
  - GCC Plugin: Disable active check for -Wimplicit-int for non-C sources.  (#2275884)
  - Annocheck: Ignore stack checks for AMD GPU binaries.
  - Annocheck: Do not produce FAIL result for i686 binaries in the RHEL-10 profile.
  - Annocheck: Test for __stack_chk_guard being writeable.
  - Annocheck: Update heuristics for detecting glibc code in executables.  (RHEL-30579)
  - Clang & LLVM Plugins: Allow environment to override fortification level.  (RHEL-30579)
  - Annocheck: Improve detection of -mbranch-protection option.
  - Clang Plugin: Add global-file-syms option.
  - LLVM Plugin: Add global-file-syms option.
  - Plugins: Add support for ANNOBIN environment variable.
  - GCC Plugin: Fix bug extracing the value of target specific command line options.
  - Configure: Remove check for FrontendPluginRegistry.h header as it is stored in a non-standard location on Debian systems.
  - Debuginfod test: Allow for the libdwfl library silently contacting the debuginfod server.
  - LLVM Plugin: Use llvm-config to get the correct paths and options for building executables.
  - Clang Plugin: Likewise.
  - Enable silent rules for most building.
  - Annocheck: Correctly extract DWARF attributes from DT_REL files.
  - Annocheck: Improve heuristics for locating debug info files.  (#2267097)
  - Configure: Harmonize configure options.    
  - Clang Plugin: Fix building with Clang 18.  (#31414)
  - GCC Plugin: Add support for MIPS specific target functions.
  - GCC Plugin: Use .dc.a for address expressions in 64-bit ELF format notes.
  - Annocheck: Improve heuristic for skipping LTO and FORTIFY tests.  (#2264000)
  - Annocheck: Also skip property note test for i686 binaries. (#2258571)
  - Annocheck: Also skip the entry point test for i686 binaries. (#2258571)
  - GCC Plugin: Do not use section groups with string format notes.
  - Annocheck: Disable cf-protection test for i686 architecture. (#2258571)
  - Annocheck: Improve detection of FIPS compliant GO binaries.
  - GCC Plugin: Fix recording of the -Wimplicit-int and -Wimplicit-function-declaration warnings.  Add active checks for when they are deliberately disabled.
  - Tests: Fix implicit-values test so that it will compile with gcc 14+.
  - GCC Plugin: Add support for -fhardended.


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - Spec File: Add LTO option to clang and llvm plugin builds.  (RHEL-50796)


author: Nick Clifton <nickc@redhat.com> - 12.83-1
changelog:
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.
  - Clang & LLVM Plugins: Include install directory in binary.  (RHEL-54069)
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
  - Annocheck: Stop warnings about known gaps.    (RHEL-53218)
  - Annocheck: Fix stack realign test.  (#2302427)


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76809)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-76040)


author: Nick Clifton <nickc@redhat.com> - 12.91-1
changelog:
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)


author: Nick Clifton <nickc@redhat.com> - 12.93-1
changelog:
  - Rebuild against LLVM v20.  (RHEL-82001)
  - Rebase to 12.93.
  - Annocheck: Fix test for GO revision.  (RHEL-56031)


author: Nick Clifton <nickc@redhat.com> - 12.96-1
changelog:
  - Annocheck: Fix bugs in debug rpm location code.  Add more glibc exceptions.  (RHEL-95216)
  - Annocheck: Improve performance with multiple debug info files and multiple files to scan.  (#2366180)
  - Annocheck: Update heuristic for detecting gcc files to cope with gcc 15.  (#2365824)


author: Nick Clifton <nickc@redhat.com> - 12.98-1
changelog:
  - Rebase to 12.98.  (RHEL-105574)
  - Improve configure and meson files for consistent builds.
  - Annocheck: Delete the temporary debug info directory after the tests have finished.


author: Neal Gompa <ngompa@centosproject.org> - 0.15.5-2
changelog:
  - Create symlinks manually to make it build
    (the symlinks were not created because of reverting the patch to
    upgrade to Meson 0.62)


author: Neal Gompa <ngompa@centosproject.org> - 0.16.1-1
changelog:
  - Rebase to 0.16.1
    Resolves: rhbz#2169103
  - Drop unneeded downstream hacks to build with older Meson


author: Tom Stellard <tstellar@redhat.com> - 1.6.1-13
changelog:
  - Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Kalev Lember <klember@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1
  - Switch to meson build system
  - Update source URLs
  - Tighten -devel subpackage deps
  - Tighten soname globs


author: Richard W.M. Jones <rjones@redhat.com> - 1.13.0-2
changelog:
  - Parse auto_reset_crashkernel in kdump
    resolves: rhbz#2042772
  - Add new directives and options for chrony


author: Richard W.M. Jones <rjones@redhat.com> - 1.13.0-4
changelog:
  - Fix parsing of /usr/lib/tmpfiles.d/provision.conf
  - Fix parsing of /etc/kernel/cmdline
    resolves: rhbz#2155136, rhbz#2159282


author: Michal Sekletar <msekleta@redhat.com> - 0.8-21
changelog:
  - fix file attributes on /run/avahi-daemon (RHEL-5633)
  - avahi-client: fix resource leak (RHEL-27722)
  - fix resource leak in avahi_time_event_queue_new (RHEL-27717)


author: Nils Philippsen <nils@tiptoe.de> - 0.1.72-2
changelog:
  - BR: librsvg2-tools for rsvg-convert
  - mark license files as %license
  - use %apiver macro consistently
  - don't ship .gitignore file


author: Pavel Cahyna <pcahyna@redhat.com> - 11.0.1-5
changelog:
  - Make nagios-plugin build conditional and disabled on RHEL to avoid
    generating this subpackage that has missing dependencies
  - Fix flags for annobin in Qt tools (bat & tray-monitor) build
  - Add a forgotten RHEL 8 patch to use openssl crypto (random numbers, hmac,
    hashing functions)
    Resolves: rhbz#1935458


author: Jerome Marchand <jmarchan@redhat.com> - 0.30.0-3
changelog:
  - Really prevent the loading of compromised headers (RHEL-28769, CVE-2024-2314)
  - Add python3-pyelftools dependency (RHEL-36583)


author: Jerome Marchand <jmarchan@redhat.com> - 0.34.0-1
changelog:
  - Rebase to version 0.34.0 (RHEL-78920)
  - Rebuild with LLVM 20 (RHEL-81773)
  - Fix biosnoop pattern option (RHEL-90848)
  - Fix bpf-klockstat on aarch64 and ppc64le (RHEL-78619)
  - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-78166)
  - Remove unsupported slaratetop tool (RHEL-78162)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-22
changelog:
  - Resolve CVE-2024-1975
  - Resolve CVE-2024-1737
  - Resolve CVE-2024-4076
  - Add ability to change runtime limits for max types and records per name


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-35
changelog:
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
  - Replace downstream fixes with upstream changes
  - Address various spoofing attacks (CVE-2025-40778)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.27-2
changelog:
  - Disable building of DLZ packages
  - Conflict explicitly with more bind subpackages
  - Merge license subpackage into libs


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-2
changelog:
  - Backport nsupdate TLS support into 9.18 (RHEL-76331)
  - Update nsupdate manual about new TLS options
  - Test nsupdate TLS support


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-3
changelog:
  - Limit additional section records CPU processing (CVE-2024-11187)
  - Read HTTPS requests in limited chunks and prevent overload (CVE-2024-12705)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-6
changelog:
  - Refuse malformed DNSKEY records (CVE-2025-8677)
  - Address various spoofing attacks (CVE-2025-40778)
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-7
changelog:
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream created test to this regression


author: Hans de Goede <hdegoede@redhat.com> - 5.56-3
changelog:
  - Drop obsolete udev rule + systemd service to call btattach on BT-HCIs
    connected via UART from userspace, this is all handled in the kernel now
  - Add the btmgmt util to the packaged files


author: Adrian Reber <adrian@lisas.de> - 1.2.5-1
changelog:
  - Updated to 1.2.5
  - No longer necessary to re-package sources: All problematic files have
    been re-licensed
  - All 19 patches are part of the 1.2.5 release and have been removed


author: Patrick Palka <ppalka@redhat.com> - 1.75.0-9
changelog:
  - Apply upstream Boost.Asio patch to resolve RHEL-67973
  - Fix %patch directive compatibility with RPM 4.20


author: Jonathan Wakely <jwakely@redhat.com> - 1.75.0-7
changelog:
  - Build with zstd support (#2091041)
  - Fix rpminspect CI warnings about missing versioned dependencies


author: Colin Walters <walters@verbum.org> - 0.2.11-2
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.11
    Resolves: https://issues.redhat.com/browse/RHEL-5273


author: Colin Walters <walters@verbum.org> - 0.2.15-2
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.15
    Related: https://issues.redhat.com/browse/RHEL-14388


author: Joseph Marrero <jmarrero@fedoraproject.org> - 0.2.18-1
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.18
    backport patch to support GRUB console.cfg
    Resolves: RHEL-26439


author: Viktor Malik <vmalik@redhat.com> - 0.16.0-1
changelog:
  - Rebase on bpftrace 0.16.0 (rhbz#2121920)
  - Rebuild for LLVM 15 (rhbz#2118995)
  - Download the cereal library (not packaged into RHEL9)
  - Fixed several tools (rhbz#1975148, rhbz#2088577, rhbz#2128208, rhbz#2073675,
    rhbz#2073770)
  - Resolve conflicts between bpftrace and bcc manpages (rhbz#2075076)


author: Viktor Malik <vmalik@redhat.com> - 0.16.0-2
changelog:
  - Fix missing kprobe attachpoints for bio* tools (s390x, ppc64le)
  - Rebuild for libbpf 1.0.0
  - Resolves: rhbz#2157829
  - Related: rhbz#2157592


author: Viktor Malik <vmalik@redhat.com> - 0.17.0-1
changelog:
  - Rebase on bpftrace 0.17.0 (RHEL-286)
  - Fix runqlat.bt, tcpdrop.bt, and undump.bt on aarch64 (rhbz#2170838)


author: Viktor Malik <vmalik@redhat.com> - 0.19.1-1
changelog:
  - Rebase on bpftrace 0.19.1 (RHEL-10693)
  - Rebuild for LLVM 17 (RHEL-10592)
  - Enhancements and fixes for PowerPC (RHEL-3690, RHEL-11476)


author: Viktor Malik <vmalik@redhat.com> - 0.20.3-1
changelog:
  - Rebase on bpftrace 0.20.3 (RHEL-30779)
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)
  - Fix bpftrace creating BPF programs with truncated names (RHEL-8502)


author: Viktor Malik <vmalik@redhat.com> - 0.20.4-1
changelog:
  - Rebase on bpftrace 0.20.4
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Jindrich Novy <jnovy@redhat.com> - 2:1.37.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.37
    (https://github.com/containers/buildah/commit/f31d99d)
  - Resolves: RHEL-61148


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.37
    (https://github.com/containers/buildah/commit/c060201)
  - Related: RHEL-60277


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-3
changelog:
  - Switch from autotools to meson; enable the tests, since the meson build system
    permits us to use a shared boost library
  - Install examples in the -doc subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-4
changelog:
  - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual
    Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name
    of a future package that continues to provide API/ABI version 1.0 after the
    upgrade.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-7
changelog:
  - Working (but weak, dependent on SHA1) source signature verification
  - Added API/ABI version to descriptions


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-5
changelog:
  - Certmonger SCEP renewal should not use old challenges (#1990926)
  - Certmonger certificates stuck in NEED_GUIDANCE (#2001082)
  - certmonger creates CSRs with invalid DER syntax for X509v3 extensions
    with critical=FALSE (#2012261)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-6
changelog:
  - Certificate format validation when adding the SCEP server's CA
    (#1492112)
  - Replace some SHA1 usages with SHA256 in the unit tests


author: Jerry James <loganjerry@gmail.com> - 0.15.0-1
changelog:
  - Version 0.15.0
  - Add -formatspec and -attribute-format patches
  - Build with both cmake and autotools


author: <thalman@redhat.com> - 0.6.1-16
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: Konrad Kleine <kkleine@redhat.com> - 19.1.5-1
changelog:
  - Update to 19.1.5
  - Enable LLVM_ENABLE_ZSTD (rhbz#2321848)
  - Remove HTML documentation
  - Add lldb man pages
  - Fix profiling after a binutils NOTE change (rhbz#2322754)
  - Install i386 config files on x86_64


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Tom Stellard <tstellar@redhat.com> - 20.1.8-2
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-2
changelog:
  - Remove support for building FIPS mode binaries for the
    compat libraries
  - Ships openssl11.cnf as the configuration file.
  - Resolves: rhbz#1993795
  - Related: rhbz#1947584


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-4
changelog:
  - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    Resolves: rhbz#2063148
  - Disable FIPS mode; it does not work and will not be certified
    Resolves: rhbz#2013669


author: Jindrich Novy <jnovy@redhat.com> - 2:2.1.2-2
changelog:
  - update to latest content of https://github.com/containers/conmon/releases/tag/2.1.2
    (https://github.com/containers/conmon/commit/2bc95ee697e87d5f7b77063cf83fc32739addafe)
  - Related: #2061316


author: Phil Sutter <psutter@redhat.com> - 1.4.5-15
changelog:
  - conntrack: fix compiler warnings
  - src: fix strncpy -Wstringop-truncation warnings
  - connntrack: Fix for memleak when parsing -j arg
  - Drop pointless assignments
  - Don't call exit() from signal handler
  - read_config_yy: Drop extra argument from dlog() call
  - helpers: ftp: Avoid ugly casts
  - Fix potential buffer overrun in snprintf() calls
  - cache: Fix features array allocation
  - hash: Flush tables when destroying


author: Phil Sutter <psutter@redhat.com> - 1.4.7-1
changelog:
  - config: Fix -Wimplicit-function-declaration
  - network: Fix -Wstrict-prototypes
  - build: don't suppress various warnings
  - build: conntrack-tools requires libnetfilter_conntrack >= 1.0.9
  - New version 1.4.7


author: Jindrich Novy <jnovy@redhat.com> - 1:1.3.0-2
changelog:
  - rebuild for following CVEs:
  CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2179960
  - Resolves: #2187333
  - Resolves: #2187376
  - Resolves: #2203705
  - Resolves: #2207519


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.4.1
  - Resolves: RHEL-28855


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.1
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.2-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.7.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.7.1
  - Resolves: RHEL-89428


author: Jindrich Novy <jnovy@redhat.com> - 1:1.8.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.8.0
  - Related: RHEL-111919


author: Aashish Radhakrishnan <aaradhak@redhat.com> - 0.24.0-2
changelog:
  - Restore single-decimal precision to stream output
    Backport https://github.com/coreos/coreos-installer/pull/1654


author: Joel Capitao <jcapitao@redhat.com> - 0.24.0-3
changelog:
  - Use the full path for the 'root=' kernel arg when rootfs on mpath
    Backport https://github.com/coreos/coreos-installer/pull/1677


author: Marek Polacek <polacek@redhat.com> 11.5.0-2
changelog:
  - fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - fix wrong code with memcpy from _Complex (PR tree-optimization/116034)


author: Florian Weimer <fweimer@redhat.com> - 11.5.0-10
changelog:
  - Exception handling performance improvements (RHEL-105072)
  - libgcc: Use _dl_find_object to find DWARF data in unwinder
  - libgcc: Use lock-free data structures for run-time unwinder registration


author: David Malcolm <dmalcolm@redhat.com> - 11.5.0-14
changelog:
  - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
    branches and calls to gcov output, but not conditions (RHEL-105416).


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
  	c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
  	c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
  	c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
  	c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
  	c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
  	c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
  	c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
  	debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
  	fortran/85877, fortran/95107, fortran/96024, fortran/96025,
  	fortran/99036, fortran/103259, fortran/104332, fortran/106209,
  	fortran/106945, fortran/107576, fortran/107872, fortran/108131,
  	fortran/108349, fortran/108420, fortran/108421, fortran/108451,
  	fortran/108453, fortran/108501, fortran/108502, fortran/108527,
  	fortran/108529, fortran/108609, fortran/108937, fortran/109186,
  	fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
  	libquadmath/87204, libquadmath/94756, libstdc++/91456,
  	libstdc++/103934, libstdc++/104866, libstdc++/104875,
  	libstdc++/105844, libstdc++/106183, libstdc++/107801,
  	libstdc++/107814, libstdc++/108030, libstdc++/108118,
  	libstdc++/108265, libstdc++/108636, libstdc++/108856,
  	libstdc++/108952, libstdc++/109064, libstdc++/109261,
  	libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
  	middle-end/106190, middle-end/107317, middle-end/108237,
  	middle-end/108264, middle-end/108435, middle-end/108459,
  	middle-end/108546, middle-end/108625, middle-end/108685,
  	middle-end/108854, other/108560, other/109306,
  	rtl-optimization/106751, rtl-optimization/107482,
  	rtl-optimization/108193, rtl-optimization/108596,
  	rtl-optimization/109585, target/70243, target/90458, target/96373,
  	target/98776, target/100758, target/104871, target/104921,
  	target/105554, target/105599, target/106736, target/106875,
  	target/107568, target/107714, target/107863, target/108272,
  	target/108348, target/108589, target/108699, target/108807,
  	target/108812, target/108881, target/109067, target/109140,
  	target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
  	testsuite/108973, testsuite/108985, tree-optimization/105484,
  	tree-optimization/106809, tree-optimization/107107,
  	tree-optimization/107212, tree-optimization/107254,
  	tree-optimization/107323, tree-optimization/107451,
  	tree-optimization/107554, tree-optimization/107898,
  	tree-optimization/107997, tree-optimization/108068,
  	tree-optimization/108076, tree-optimization/108095,
  	tree-optimization/108199, tree-optimization/108498,
  	tree-optimization/108688, tree-optimization/108692,
  	tree-optimization/108821, tree-optimization/108950,
  	tree-optimization/109176, tree-optimization/109410,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109573,
  	tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
  	tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Marek Polacek <polacek@redhat.com> 11.5.0-1
changelog:
  - update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
    - PRs ada/113893, ada/113979, analyzer/104042, c/113262, c/114007, c/114493,
  	c++/89224, c++/92145, c++/92407, c++/97990, c++/99710, c++/100667,
  	c++/100772, c++/101765, c++/103185, c++/104051, c++/111485,
  	c++/111529, c++/113598, c++/113674, c++/114537, c++/114561,
  	c++/114562, c++/114572, c++/114634, c++/114691, d/113125, d/113758,
  	d/114171, debug/111080, debug/112718, driver/115440, fortran/50410,
  	fortran/103715, fortran/104908, fortran/107426, fortran/114474,
  	fortran/114825, gcov-profile/114115, libfortran/110651,
  	libgomp/113192, libquadmath/114533, libstdc++/104259,
  	libstdc++/104606, libstdc++/105417, libstdc++/110054,
  	libstdc++/113250, libstdc++/114147, libstdc++/114401,
  	libstdc++/114750, libstdc++/114803, libstdc++/115269,
  	libstdc++/115454, libstdc++/115575, middle-end/90348,
  	middle-end/95351, middle-end/107385, middle-end/108789,
  	middle-end/110027, middle-end/110115, middle-end/110176,
  	middle-end/111422, middle-end/111632, middle-end/112732,
  	middle-end/113907, middle-end/113921, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/115527,
  	middle-end/115836, objc/101666, objc/101718, preprocessor/105608,
  	rtl-optimization/100303, rtl-optimization/108086,
  	rtl-optimization/110079, rtl-optimization/114768,
  	rtl-optimization/114902, rtl-optimization/115092, sanitizer/97696,
  	sanitizer/111736, sanitizer/114956, sanitizer/115172, target/88309,
  	target/101737, target/101865, target/105522, target/108120,
  	target/108743, target/110411, target/111610, target/111677,
  	target/112397, target/113122, target/113281, target/114049,
  	target/114098, target/114130, target/114184, target/114310,
  	target/114837, target/114846, target/115253, target/115297,
  	target/115360, target/115457, target/115475, target/115611,
  	target/115691, testsuite/113175, testsuite/114034, testsuite/114036,
  	tree-optimization/110386, tree-optimization/110422,
  	tree-optimization/111039, tree-optimization/111070,
  	tree-optimization/111331, tree-optimization/111407,
  	tree-optimization/111445, tree-optimization/111736,
  	tree-optimization/112495, tree-optimization/112505,
  	tree-optimization/112793, tree-optimization/113372,
  	tree-optimization/113552, tree-optimization/113603,
  	tree-optimization/114027, tree-optimization/114115,
  	tree-optimization/114566, tree-optimization/114876,
  	tree-optimization/115192, tree-optimization/115337,
  	tree-optimization/115843
  - fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-2
changelog:
  - vmware_guestdump: Version 7 support
  - Fix incorrect task state during exit
  - Add multi-threads support in crash target
  - Call cmd_bt silently after "set pid"
  - x86_64: Add gdb multi-stack unwind support
  - arm64: Add gdb multi-stack unwind support
  - ppc64: Add gdb multi-stack unwind support
  - Fix the issue of "page excluded" messages flooding
  - Fix "kmem -p" option on Linux 6.16-rc1 and later kernels


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-3
changelog:
  - x86_64: filter unwanted warning message for "bt -T" cmd
  - doc: Update requirements for building on Fedora
  - gdb: Fix a regression for eppic extension on gdb-16.2
  - Fix crash initialization failure on LoongArch with recent GDB versions
  - gdb: Disable DT_DEBUG lookup by GDB inside the vmcore


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.2-1
changelog:
  - Update to 0.17.2
  - Fix Python deprecation (PY_SSIZE_T_CLEAN) (RhBug:1891785)
  - Revert back to old c API for destination file of cr_compress_file_with_stat and cr_compress_file to prevent a memory leak
  - Never leave behind .repodata lock on exit (RhBug:1906831)
  - Disable drpm for RHEL >= 9 (RhBug:1914828)
  - Setting updated/issued_date to None doesn't produce garbage values (RhBug:1921715)
  - Allow taking __repr__ (__str__) of closed xmlfile and sqlite (RhBug:1913465)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-1
changelog:
  - Update to 0.17.7
  - Remove insecure hashes SHA-1 and MD5 from the default build (RhBug:1935486)
  - Fix error when updating repo with removed modules metadata
  - Exit with status code 1 when loading of repo's metadata fails
  - Fix memory leaks (RhBug:1998426)
  - Fix valgrind warnings caused by subprocess calls


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-2
changelog:
  - Switch default of --keep-all-metadata to TRUE and add --discard-additional-metadata (RhBug:2055032)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.20.1-1
changelog:
  - Update to 0.20.1
  - createrepo_c shouldn't silently produce duplicate-NEVRA repos
  - Fix bad performance with task queue management
  - Update errno usage to fix incorrect GError messages
  - Install header for createrepo_shared module
  - Remove C API for cr_xml_parse_main_metadata_together
  - Remove python bindings for xml_parse_main_metadata_together
  - Fix '&' encoding in attributes when parsing repodata
  - Add a streaming parsing API that is user-controllable.
  - Fix a memory leak of primary pkg when parsing interrupted
  - Fix a memory leak when removing the first link in a list
  - Remove `allow_out_of_order` option for `xml_parse_main_metadata_together`
  - Make parse warnings visible through cr.Repomd(), cr.UpdateInfo()
  - Use --error-exit-val option by default
  - If new and old repomd matches during --update don't update
  - Add `cr_repomd_compare` for comparing two repomds
  - Store parsed repomd in `cr_MetadataLocation`
  - Set database version only for the database records, not everything
  - Use copy+delete fallback when moving of a dir fails
  - Fix memory leaks
  - [spec] Option for legacy hashes, enable on RHEL <= 8 (RhBug:2022271)


author: Adrian Reber <areber@redhat.com> - 3.15-11
changelog:
  - Remove unnecessary Requires: criu-libs
  - Remove wrong BR nftables-devel
  - Bump release for rebuild


author: Radostin Stoyanov <radostin@redhat.com> - 3.15-12
changelog:
  - Increase release number from 11 to 12
  - Disable podman test when crun doesn't support checkpoint/restore


author: Vladis Dronov <vdronov@redhat.com> - 15.9-10
changelog:
  - Bring in important patches from the upstream (39fb38..eaea31 in a git repo)
  - Fix the upstream tarball URL
  - Remove outdated patch files


author: Vladis Dronov <vdronov@redhat.com> - 15.9-14
changelog:
  - Add distrubution patches which were not upstreamed (bz 2072635)
  - Add self-tests
  - Add OSCI harness


author: Vladis Dronov <vdronov@redhat.com> - 15.9-26
changelog:
  - Update cscope to 15.9-26 from Fedora (RHEL-65465)
  - Fix signal handling at exit
  - Minor edits in the rpm scripts and the changelog
  - Make xemacs a bcond


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-22
changelog:
  - RHEL-14931 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off"
  - RHEL-15308 cupsd fails to open cups-files.conf and the resulting error message is lost


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-23
changelog:
  - RHEL-19205 Recommend new cups-filters subpackages with weak dep for better upgrade exp
  - RHEL-19495 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents


author: Pavol Zacik <pzacik@redhat.com> - 1:2.3.3op2-28
changelog:
  - RHEL-39940 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.2.3.3op2-34
changelog:
  - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
  - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-35
changelog:
  - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-14
changelog:
  - RHEL-19201 redhat-lsb unnecessary pulls in cups and avahi dependencies
  - RHEL-16026 Cups Browsed does not correctly pull printer location and description information from print server


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-18
changelog:
  - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file
  - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes
  - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-3
changelog:
  - fix TLS session caching disaster (CVE-2021-22901)
  - fix TELNET stack contents disclosure (CVE-2021-22898)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-8
changelog:
  - fix TELNET stack contents disclosure again (CVE-2021-22925)
  - fix bad connection reuse due to flawed path name checks (CVE-2021-22924)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-12
changelog:
  - fix STARTTLS protocol injection via MITM (CVE-2021-22947)
  - fix protocol downgrade required TLS bypass (CVE-2021-22946)
  - fix use-after-free and double-free in MQTT sending (CVE-2021-22945)


author: Bryan Gurney <bgurney@redhat.com> - 71.1-7
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
  - Fix enable-namespace all reporting errors incorrectly
  - Add support for inject-smart on papr scm
  - Related: rhbz#2040075
  - Related: rhbz#1873851
  - Related: rhbz#1880578
  - Related: rhbz#1922538
  - Related: rhbz#2087707


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Jeff Moyer <jmoyer@redhat.com> - 78-1
changelog:
  - Rebase to v78
  - Add support for legacy monitor.conf file location
  - Fix a test failure.
  - Resolves: RHEL-10382
  - Resolves: RHEL-8204
  - Resolves: RHEL-29151


author: Martin Osvald <mosvald@redhat.com> - 3.4.1-7
changelog:
  - Resolves: #2096149 - Fatal error when running "squatter -r user"
  - Resolves: #2096885 - Enhanced TMT testing for centos-stream


author: Martin Osvald <mosvald@redhat.com> - 3.4.1-11
changelog:
  - Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly
    for shared mailboxes
  - cyrus-imapd.spec: rename patches to correspond with others


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-11
changelog:
  - Set default sasldb database to GDBM instead of BerkeleyDB
  - Add the migration tool from BerkeleyDB
  - Add some PLAIN auth tests
  - Resolves rhbz#1947971


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Bryan Gurney <bgurney@redhat.com> - 1.10-8.el9
changelog:
  - Supersede uninitialized value patch with upstream version
  - Add upstream patch: common: fix mismatch between prototype and body
  - Makefile: bypass check-doc in check target
  - Related: rhbz#1985096


author: Bryan Gurney <bgurney@redhat.com> - 1.10.1-1
changelog:
  - Update to PMDK version 1.10.1
  - Related: rhbz#1874208
  - Remove BuildRequires line for libfabric-devel
  - Related: rhbz#2009502


author: Mark Wielaard <mjw@redhat.com> - 5.0-8
changelog:
  - Add 0001-debug_str_offsets-header-version-and-padding-are-2-b.patch
  - Add 0001-debugedit-Handle-unused-.debug_str_offsets-entries.patch


author: Mark Wielaard <mjw@redhat.com> - 5.0-11
changelog:
  - Add 0001-Add-basic-find-debuginfo-script-tests.patch
  - Add debugedit-5.0-find-debuginfo-tests-fixups.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 0.1-3
changelog:
  - Fix some rpmlint issues, add comments, add license and doc,
    gpg verification, use pkgconfig BuildRequires, enable _hardened_build


author: Mark Wielaard <mjw@redhat.com> - 5.0-1
changelog:
  - Upgrade to upstream 5.0 release.
    - Removes find-debuginfo .sh suffix.
    - This release still has a find-debuginfo.sh -> find-debuginfo symlink.


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-1
changelog:
  - Rebase to 1.21.2
  - Add support for ppc64le and aarch64
  - Enable the test suite
  - Resolves: RHEL-22429


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-2
changelog:
  - Modify ports: Some CI systems complain about the usage of the 8888 port.
  - Improve the way PPC64LE support is enabled.
  - Resolves: RHEL-22429


author: Kalev Lember <klember@redhat.com> - 0.26-1
changelog:
  - Update to 0.26
  - Switch to the meson build system
  - Avoid hardcoding man page extensions
  - Drop old emacs-desktop-file-utils obsoletes/provides


author: Omair Majid <omajid@redhat.com> - 10.0.100~rc.2.25502.107-0.10
changelog:
  - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
  - Resolves: RHEL-121559


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-14
changelog:
  - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
  - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Jiri Olsa <jolsa@redhat.com> - 1.22-1
changelog:
  - New release: v1.22
  - Resolves: rhbz#2010414
  - Introduce -j/--jobs option to specify the number of threads to use.
  - Multithreaded DWARF loading, requires elfutils >= 0.178.
  - Preparatory work for multithreaded BTF encoding, the focus for 1.23.
  - Allow encoding BTF to a separate file.
  - Show all different types with the same name, not just the first one found.
  - Stop assuming that reading from stdin means pretty, add --prettify.
  - Improve type resolution for the --header command line option.
  - Do not consider the ftrace filter when encoding BTF for kernel functions.
  - Lock calls to non-thread safe elfutils' dwarf_decl_file() and dwarf_decl_line().
  - Change hash table size to one that performs better with current typical vmlinux files.
  - Allow tweaking the hash table size from the command line.
  - Add --kabi_prefix to avoid deduplication woes when using _RH_KABI_REPLACE().
  - Add --with_flexible_array to show just types with flexible arrays.
  - Support btfdiff with a detached BTF file.
  - Introduce sorted type output (--sort).
  - Disable incomplete CTF encoder.


author: Viktor Malik <vmalik@redhat.com> - 1.24-1
changelog:
  - Resolves: rhbz#2140020
  - New release: v1.23
  - Process DW_TAG_LLVM_annotation tags.
  - Initial support for DW_TAG_skeleton_unit.
  - Encode BTF_KIND_TYPE_TAG and BTF_KIND_DECL_TAG
  - Fix handling of percpu symbols on s390.
  - Use cacheline size to infer struct member alignment from BTF.
  - Add --skip_missing to not stop when not finding one of -C arguments.
  - Fix __attribute__((__aligned__(N)) printing alignment for struct members.
  - Fix nested __attribute__(__aligned__(N)) struct printing order.
  - New release: v1.24
  - Add support to BTF_KIND_ENUM64.
  - Support multithreaded BTF encoding.
  - Encode char type as signed in BTF.
  - Introduce --lang and --lang_exclude to pahole.
  - Introduce --compile to pahole.
  - Don't segfault when processing bogus files.


author: Viktor Malik <vmalik@redhat.com> - 1.25-1
changelog:
  - Resolves: rhbz#2190484
  - Build with system libbpf
  - New release: v1.25
  - Support for DW_TAG_unspecified_type more generally.
  - Make sure struct member offsets are in ascending order. Rust BTF needs this.
  - Support C atomic types (DW_TAG_atomic_type).
  - Initial support for DW_TAG_LLVM_annotation, used for BTF type tags, for __rcu, __user, etc
  - Exclude functions with the same name (static functions in different CUs), inconsistent prototypes or not following calling convention.
  - Allow generation of BTF for optimized functions, those that end with a .isra*, .constprop*.
  - Support 'pahole --lang=/--lang_exclude=asm'
  - Support --compile from DWARF in addition to from BTF.
  - Exclude RUST CUs in 'btfdiff', as those are not yet being BTF encoded.


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-30780
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Gregory Bell <grbell@redhat.com> - 1.30-1
changelog:
  - New release: 1.30
  - Better detection of abort during DWARF loader thread processing
  - pahole now detects presence of libbpf APIs and BTF features using weak function
    declarations when built using a shared library libbpf
  - Type tags are emitted for BPF arena pointers with new BTF "attributes" feature
  - New release: 1.29
  - Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads.
  - The BTF encoding now is always reproducible, and as fast/faster than before.
  - The memory consumption is reduced.
  - Support for multiple BTF_DECL_TAGs pointing to same tag.
  - Verify that pfunct prints btf_decl_tags read from BTF.
  - Don't print functions twice when using 'pfunct -f function_name'.
  - New release: 1.28
  - Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding.
  - Show flexible arrays statistics
  - Add '--padding N' and '--padding_ge N' to show structs with paddings
  - Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel.
  - Don't stop pfunct output at the first function that matches a filter, show all of them
  - Allow encoding data about all global variables, not just per CPU ones
  - Handle .BTF_ids section endianness, fully supporting cross builds
  - Generate decl tags for bpf_fastcall for eligible kfuncs
  - Add "distilled_base" BTF feature to split BTF generation.
  - Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization
  - Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var
  - Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var
  - Serialize access to elfutils dwarf_getlocation().
  - Honour --lang_exclude when merging LTO built CUs.
  - Add the debuginfod client cache directory to the vmlinux search path.
  - Print the CU's language when a tag isn't supported.
  - Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags.
  - Improve the parameter parsing by checking DW_OP_[GNU_]entry_value
  - Introduce a tests/ directory with regression tests


author: Gregory Bell <grbell@redhat.com> - 1.31-1
changelog:
  - Rework the selection of functions to represent in BTF, for instance:
  - Skip functions that passes values thru the stack when those structs don't
  have expected alignment due to some attribute usage that then causes
  problems with BTF trampolines due to lack of expressiveness in BTF to
  signal such special cases.
  - Skip objects (compile units) without DWARF: don't stop a multi object
  encoding session just because one doesn't have any DWARF in it.
  - Fix BTF dedup by updating libbpf. 
  - Fix the inference of the explicit alignment attribute of zero length arrays,
  like struct skb_ext->data[] in the Linux kernel. Important as BTF has no no
  explicit alignment attribute encoding.
  - Fix the inference of alignments after bitfields, such as in struct
  nft_rule_dp->data[] after ->handle:42, also in the Linux kernel.    
  - Fix segfault with --show_reorg_steps option, e.g. pahole -R -S -C task_struct.
  - Add comparision of functions encoded in BTF between baseline 'master' branch
  and current branch, i.e. 'next'.


author: Jakub Jelinek <jakub@redhat.com> 0.13-6
changelog:
  - DW_FORM_implicit_const handling fixes (sw#27212, sw#27213)
  - temporarily build odr tests with -gdwarf-4 as they are incompatible with
    DWARF 5


author: Mark Wielaard <mjw@redhat.com> - 0.189-3
changelog:
  - Add elfutils-0.189-elf_getdata_rawchunk.patch
  - Add elfutils-0.189-debuginfod_config_cache-double-close.patch


author: Mark Wielaard <mjw@redhat.com> - 0.190-1
changelog:
  - Upgrade to upstream elfutils 0.190
  - Add eu-srcfiles
  - Drop upstreamed patches
    elfutils-0.189-debuginfod_config_cache-double-close.patch
    elfutils-0.189-elf_getdata_rawchunk.patch
    elfutils-0.189-elfcompress.patch
  - Only package debuginfod-client-config.7 manpage for debuginfod-client


author: Aaron Merey <amerey@redhat.com> - 0.191-1
changelog:
  - Upgrade to upstream elfutils 0.191
  - Drop upstreamed patches
    elfutils-0.190-fix-core-noncontig.patch
    elfutils-0.190-gcc-14.patch
    elfutils-0.190-remove-ET_REL-unstrip-test.patch
  - Drop testcore-noncontig.bz2
  - Add elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.191-riscv-flatten.patch
  - Add feature flag for reenabling elfutils-libelf-devel-static and elfutils-devel-static


author: Aaron Merey <amerey@redhat.com> - 0.191-3
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends.


author: Aaron Merey <amerey@redhat.com> - 0.192-1
changelog:
  - Upgrade to upstream elfutils 0.192
  - Drop upstreamed patches
    elfutils-0.190-riscv-flatten.patch
    elfutils-0.191-riscv-flatten.patch
    elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.192-libelf-static.patch


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-fix-free.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-stacktrace-lto.patch


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-9
changelog:
  - Fix etags local command injection vulnerability (#2175190)
  - Fix htmlfontify.el command injection vulnerability (#2175179)
  - Fix ruby-mode.el local command injection vulnerability (#2175142)
  - Fix ob-latex.el command injection vulnerability (#2180590)


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-10
changelog:
  - Disable xwidgets (RHEL-14551)
  - org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
  - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
  - Add protection for LaTeX preview (CVE-2024-30204)
  - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-18
changelog:
  - Fix nsm-should-check for "google.com" failure (RHEL-94297)
  - Fix package tests for tetris no longer existing as a package (RHEL-94297)
  - Introduce untrusted-content variable (RHEL-94297)


author: Jeff Law <law@redhat.com> - 1.1.2-7
changelog:
  - Force C++14 as this code is not C++17 ready
  - Fix sprintf format issue
  - Fix ordered comparison of a pointer against zero issue


author: Jeff Law <law@redhat.com> - 1.1.2-7
changelog:
  - Force C++14 as this code is not C++17 ready
  - Fix sprintf format issue
  - Fix ordered comparison of a pointer against zero issue
  -


author: Jack Magne <jmagne@redhat.com> - 1.1.2-14
changelog:
  Resolves: rhbs #2007544,2000928,2000929
  - Bugzilla Bug  2007544 - The esc provides outdated configuration for opensc
  - Bugzilla Bug  2000928 - ESC does not detect smart cards and crashes upon launch [rhel-9.0.0]
  - Bugzilla Bug  2000929 - [RHEL-9][AppStream] esc present in comps but missing from repository [rhel-9.0.0]


author: Jack Magne <jmagne@redhat.com> - 1.1.2-16
changelog:
  Resolves: rhbs #2050849
  - Bug 2050849 - Volkswagen Siemens CardOS M4.4 and 5.0 cards display incorrect status in ESC [RHEL 9.1]


author: Kalev Lember <klember@redhat.com> - 40.1-1
changelog:
  - Update to 40.1
  - Remove various minimum version requires
  - Remove old obsoletes
  - Don't use ldconfig_scriptlets
  - Filter private library provides


author: Felipe Borges <feborges@redhat.com> - 40.1-3
changelog:
  - Split evince-previewer into its own package
  - See https://github.com/fedora-silverblue/issue-tracker/issues/122


author: Marek Kasik <mkasik@redhat.com> - 40.1-5
changelog:
  - Use tmp dir as containing folder for non-native files
  - Backport fixes for issues found by Coverity Scan
  - Fix some other issues found by Coverity Scan
  - Resolves: #1975150


author: Milan Crha <mcrha@redhat.com> - 3.40.4-10
changelog:
  - Related: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add dependency on newly introduced evolution-data-server-ui


author: Milan Crha <mcrha@redhat.com> - 3.40.4-4
changelog:
  - Resolves: #2071056 (Addressbook: Switch from GData Contacts API to CardDAV API for Google books)
  - Resolves: #2071742 (Add patch to use correct colors in mail preview with webkit2gtk3 2.36.x)


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: #2129703 (EShellWindow: The 'New' menu is not filled after start)
  - Correct Requires for the 'devel' subpackage to enchant-2


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add requirement on ui subpackage into ui-devel subpackage


author: Milan Crha <mcrha@redhat.com> - 3.40.4-2
changelog:
  - Resolves: RHEL-19371 (Backport upstream patch to workaround broken text/calendar mail attachments by the server)


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-7
changelog:
  - CVE-2021-3482: Fix heap-based buffer overflow in Jp2Image::readMetadata()
    CVE-2021-29458 exiv2: out-of-bounds read in Exiv2::Internal::CrwMap::encode
    CVE-2021-29457 exiv2: heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata
    CVE-2021-29470 exiv2: out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    CVE-2021-29473 exiv2: out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1956174


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-8
changelog:
  - CVE-2021-29623 exiv2: a read of uninitialized memory may lead to information leak
    Resolves: bz#1964183

  - CVE-2021-32617 exiv2: DoS due to quadratic complexity in ProcessUTF8Portion
    Resolves: bz#1964189


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-4
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993247

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993284


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018421

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003670


author: Radovan Sroka <rsroka@redhat.com> - 1.3.2-100
changelog:
  RHEL 9.3.0 ERRATUM
  - Rebase fapolicyd to the latest stable version
  Resolves: RHEL-430
  - fapolicyd can leak FDs and never answer request, causing target process to hang forever
  Resolves: RHEL-621
  - RFE: send rule number to fanotify so it gets audited
  Resolves: RHEL-624
  - fapolicyd needs to make sure the FD limit is never reached
  Resolves: RHEL-623
  - fapolicyd still allows execution of a program after "untrusting" it
  Resolves: RHEL-622
  - Default q_size doesn't match manpage's one
  Resolves: RHEL-627
  - fapolicyd-cli --update then mount/umount twice causes fapolicyd daemon to block (state 'D')
  Resolves: RHEL-817
  - Fix broken backwards compatibility backend numbers
  Resolves: RHEL-730
  - SELinux prevents the fapolicyd from reading symlink (cert_t)
  Resolves: RHEL-816


author: Radovan Sroka <rsroka@redhat.com> - 1.3.3-105
changelog:
  RHEL 9.7.0 ERRATUM
  - RPMDB crashes with SIGBUS when updating the RPMDB repeatedly
  Resolves: RHEL-63090
  - File /run/fapolicyd differs from RPM expectations
  Resolves: RHEL-59626
  - fapolicyd.service badly instructs how to start after nss-user-lookup.target
  Resolves: RHEL-21871
  - fapolicy rule containing 'pattern=normal' produces error
  Resolves: RHEL-30020
  - "fapolicyd-cli --file add" crashes when processing sockets
  Resolves: RHEL-69136


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4-1
changelog:
  - fapolicyd-1.4 and fapolicyd-selinux-1.0
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-81
changelog:
  - fence_ibm_powervs: add private endpoint and token file support
    Resolves: RHEL-62206
  - ha-cloud-support: bundle libs for the powervs-subnet resource agent
    Resolves: RHEL-64023


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-85
changelog:
  - fence_azure_arm: use azure-identity instead of msrestazure, which has
    been deprecated
    Resolves: RHEL-76493


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-87
changelog:
  - fence_ibm_vpc: refresh bearer-token if token data is corrupt, and
    avoid edge-case of writing empty token file
    Resolves: RHEL-83255


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-88
changelog:
  - fence_compute/fence_evacuate: dont use deprecated inspect.getargspec()
    Resolves: RHEL-84448
  - fence_sbd: get devices from SBD_DEVICE env variable if devices
    parameter isnt set
    Resolves: RHEL-79798


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-95
changelog:
  - fence_kubevirt: use hard poweroff
    Resolves: RHEL-82193
  - bundled setuptools: fix CVE-2025-47273
    Resolves: RHEL-95901


author: W. Michael Petullo <mike@flyn.org> - 2.5.0-8
changelog:
  - Remove empty lib subpackage
  - Fix make command line (add missing '\')
  - Use -p with install
  - Do not create /etc/festival
  - Do not create /usr/share/info
  - Simplify %files
  - Note BSD license for hts_engine module
  - Split data into noarch package
  - The festival-devel package now provides festival-static
  - Markup additional files as licenses


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #2005307, #1999276


author: Richard W.M. Jones <rjones@redhat.com> 3.23-5
changelog:
  - Disable automatic provides for fio engines (RHBZ#1884954).
  - Apply patch to change SONAME of fio engines (see comment 8 of above bug).


author: Eric Sandeen <sandeen@redhat.com> 3.25-3
changelog:
  - Fix segfault with external IO engines and multiple threads
  - Enable dev-dax, pmemblk, libpmem engines for ppc64le


author: Pavel Reichl <preichl@redhat.com> - 3.35-1
changelog:
  - Rebase to new upstream release
  - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc
  - Add signature check
  - Related: rhbz#2188805


author: Richard Hughes <richard@hughsie.com> 1.2-7
changelog:
  - Disable JLink support to remove one extra dep we are not going to support
  - Resolves: rhbz#1948597


author: Debarshi Ray <rishi@fedoraproject.org> - 1.12.4-2
changelog:
  - Don't try to add Fedora's OCI Flatpak repository on RHEL
  - Remove an obsolete Fedora-specific update path
  Resolves: #2051697


author: Kalev Lember <klember@redhat.com> - 1.12.9-2
changelog:
  - Backport upstream patches for CVE-2024-42472
  - Require bubblewrap version that has new --bind-fd option backported for
    addressing CVE-2024-42472


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Adam Jackson <ajax@redhat.com> - 1.3.5-9
changelog:
  - Remove BuildRequires xprop entirely. If present, the configure script will call
    it looking for a property on the root window that Fedora's X server does not
    set, and which would not work anyway since there is no X server running in the
    buildroot, so we can just remove the dependency.


author: Akira TAGOH <tagoh@redhat.com> - 2.13.93-3
changelog:
  - Add back fullname property at the scan matching phase for the backward compatibility.
    Resolves: rhbz#1902881


author: Akira TAGOH <tagoh@redhat.com> - 2.13.93-4
changelog:
  - cherry pick some upstream patches
    - Skip leading white space in style.
    - Remove abort from FcCompareSize.
    - Fix memory leaks
    - Check qual and compare for family tests.
  -


author: Akira TAGOH <tagoh@redhat.com> - 2.13.94-2
changelog:
  - Fix the score calculation on matching for multiple values.
  - Enable 11-lcdfilter-default.conf.
    Resolves: rhbz#1965684
  - Rebase to the latest release.
    Resolves: rhbz#2023161


author: Akira TAGOH <tagoh@redhat.com> - 2.13.95-1
changelog:
  - New upstream release.
  - Update deps to font(notosans)
    https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts


author: Akira TAGOH <tagoh@redhat.com> - 2.14.0-1
changelog:
  - New upstream release.
  - Rebase to 2.14 and revert Noto Default change happened in f36.
    Resolves: rhbz#2075393


author: Benjamin Berg <bberg@redhat.com> - 1.94.0-3
changelog:
  - Use GFDL abbreviation as GFDLv1.1+ is not listed
  - Install PAM module into /usr
  - Pull in further test fixes


author: José Expósito <jexposit@redhat.com> - 3.2.1-10
changelog:
  - Fix CVE-2024-24258 and CVE-2024-24259
    Resolves: https://issues.redhat.com/browse/RHEL-25176
    Resolves: https://issues.redhat.com/browse/RHEL-25178


author: Pavel Cahyna <pcahyna@redhat.com> - 1.6.14-2
changelog:
  - Apply upstream patch 41d0d70f
    ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type


author: Ondrej Holy <oholy@redhat.com> - - 2:2.4.1-4
changelog:
  - CVE-2022-39282: Fix length checks in parallel driver (#2136152)
  - CVE-2022-39283: Add missing length check in video channel (#2136154)
  - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145140)
  - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145140)
  - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145140)
  - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145140)
  - CVE-2022-39347: Fix path validation in drive channel (#2145140)
  - CVE-2022-41877: Add missing length check in drive channel (#2145140)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.2-1
changelog:
  - Update to 2.11.2 (RHEL-4290, RHEL-4292, RHEL-4296, RHEL-4298, RHEL-4300,
    RHEL-4302, RHEL-4304, RHEL-4306, RHEL-4308, RHEL-4310, RHEL-4312,
    RHEL-10060)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
    CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
    CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)


author: Akira TAGOH <tagoh@redhat.com> - 1.0.10-6.el9.2
changelog:
  - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310
    Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063


author: Akira TAGOH <tagoh@redhat.com> - 1.0.8-2
changelog:
  - Restore the deprecated API that was accidentally removed in the previous release.
    Resolves: rhbz#1787293


author: Michal Ruprich <mruprich@redhat.com> - 8.5.3-2
changelog:
  - Resolves: RHEL-15915 - crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message
  - Resolves: RHEL-15918 - crash from malformed EOR-containing BGP UPDATE message


author: Michal Ruprich <mruprich@redhat.com> - 8.5.3-9
changelog:
  - Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions
  - Resolves: RHEL-87731 - FRR bgp session not recovered due to incorect error no AF activated for peer


author: Michal Ruprich <mruprich@redhat.com> - 8.3.1-12
changelog:
  - Resolves: RHEL-3541 - Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router


author: Michal Ruprich <mruprich@redhat.com> - 0.17-85
changelog:
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Hughes <richard@hughsie.com> 1.5.9-4
changelog:
  - Rebuilt to use redhatsecureboot503 signatures
  - Undo last Fedora sync to use the RHEL-specific patches
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.1-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Dell TBT4 Docking stations
  - Resolves: rhbz#1974347
  - Resolves: rhbz#1991426


author: Richard Hughes <richard@hughsie.com> 1.7.4-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Lenovo TBT4 Docking stations
  - Do not cause systemd-modules-load failures
  - Build against a new enough pesign
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.4-3
changelog:
  - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c
    which lives in AppStream, not BaseOS.
  - Use the efi_vendor variable from EFI-RPM
  - Resolves: rhbz#2064904


author: Richard Hughes <rhughes@redhat.com> 1.7.9-2
changelog:
  - Include the new dbx updates on the filesystem; clients typically do not have LVFS enabled.
  - Resolves: rhbz#2120708


author: Richard Hughes <richard@hughsie.com> 1.8.10-1
changelog:
  - Rebase to latest upstream release to fix multiple ESP detection problems
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.8.10-2
changelog:
  - Rebuild because distrobaker did entirely the wrong thing.
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.9.26-1
changelog:
  - Rebase to get hardware support for CERTPX-13842
  - Resolves: #RHEL-16637
  - Resolves: #RHEL-35373
  - Resolves: #RHEL-61930


author: Nick Clifton <nickc@redhat.com> - 10.69-1
changelog:
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries if compiled using LTO.  (#2082146)


author: Nick Clifton <nickc@redhat.com> - 10.73-2
changelog:
  - Annocheck: Fix handling of command line options that take arguments.  (#2086850)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)


author: Nick Clifton <nickc@redhat.com> - 10.75-1
changelog:
  - Annocheck: Fix covscan detected race condition between stat() and open().
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)


author: Nick Clifton <nickc@redhat.com> - 10.76-1
changelog:
  - Spec file: Correct the Provides for the annobin-doc subpackage.  (#2097065)
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.
  - Annocheck: Fix covscan detected race condition between stat() and open().


author: Nick Clifton <nickc@redhat.com> - 11.08-4
changelog:
  - Fix building with Clang-16.  (#2216918)
  - Re-enable building with LTO.  (#2166579)
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
  - Spec file: Enable annotated building.
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158386)
  - Annocheck: Add more special glibc filenames.  (#2158100)
  - Annocheck: Improve handling of tool versions.
  - GCC Plugin: Fix building with gcc-13.
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
  - Annocheck: Use real filename rather than debuginfo filename.  (#2152280)
  - Rename gcc plugin to gts-annobin.  (#2111977)
  - Rebase to 10.94, brining in support for LLVM 15.  (#2118992)
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
  - Annocheck: Try harder not to run mutually exclusive tests.
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
  - Libannocheck: Actually set result fields after tests are run.
  - Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
  - Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
  - Libannocheck: Move into separate sub-package.
  - Libannocheck: Add libannocheck.pc pkgconfig file.
  - Libannocheck: Add libannocheck_reinit().
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Clang Plugin: Fix for building with Clang-15.  (#2125875)
  - Annocheck: Add a test for the inconsistent use of -Ofast.  (#1248744)
  - Plugin: Fix top level configuration support for RiscV.
  - Annocheck: Improvements to the size tool.
  - Annocheck: Fixes for libannocheck.h.
  - Annocheck: Add automatic profile selection.
  - Annocheck: Improve gap detection and reporting.
  - Spec File: Use the %dir directive in the %files section to ensure that
  -  plugin directories are useable.  (#2080454)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17
changelog:
  - NVR Bump: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216446)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17.1
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2220917)


author: Nick Clifton <nickc@redhat.comn> - 2.38-18
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216456)


author: Marek Polacek <polacek@redhat.com> 12.1.1-3
changelog:
  - update from releases/gcc-12 branch
    - PRs c++/49387, c++/102307, c++/102651, c++/104470, c++/105491, c++/105589,
  	c++/105623, c++/105652, c++/105655, c++/105725, c++/105734,
  	c++/105756, c++/105761, c++/105779, c++/105795, c++/105852,
  	c++/105871, c++/105885, c++/105908, c++/105925, c++/105931,
  	c++/105964, c++/106001, c/105635, d/105544, fortran/105230,
  	gcov-profile/105535, ipa/100413, ipa/105600, ipa/105639, ipa/105739,
  	libgomp/105745, libgomp/106045, libstdc++/104731, libstdc++/105284,
  	libstdc++/105671, libstdc++/105681, middle-end/105537,
  	middle-end/105604, middle-end/105711, middle-end/105951,
  	middle-end/105998, middle-end/106030, other/105527,
  	preprocessor/105732, rtl-optimization/105455, rtl-optimization/105559,
  	rtl-optimization/105577, sanitizer/105714, sanitizer/105729,
  	target/101891, target/104871, target/105162, target/105209,
  	target/105292, target/105472, target/105556, target/105599,
  	target/105854, target/105879, target/105953, target/105960,
  	target/105970, target/105981, target/106096, tree-optimization/103116,
  	tree-optimization/105431, tree-optimization/105458,
  	tree-optimization/105528, tree-optimization/105562,
  	tree-optimization/105618, tree-optimization/105726,
  	tree-optimization/105736, tree-optimization/105786,
  	tree-optimization/105940
  - enable tsan and lsan on s390x (#2101610)
  - fix up libtsan on s390x
  - fix nvptx build (PRs bootstrap/105551, target/105938)


author: Marek Polacek <polacek@redhat.com> 12.2.1-4
changelog:
  - update from releases/gcc-12 branch (#2110583)
  - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST
    (PR libstdc++/107468)


author: Marek Polacek <polacek@redhat.com> 12.2.1-7.5
changelog:
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832)


author: Kevin Buettner - 11.2-2
changelog:
  - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
    (This is a workaround for the bogus warning/error that we now see
    on i686 regarding a "may write a terminating nul past the end of
    the destination" message for the sprintf() call in
    global_symbol_searcher::search() in gdb/symtab.c.)


author: Kevin Buettner - 11.2-3
changelog:
  - Backport upstream patch which removes sizes from debuginfod download
    messages when the size is not available (RHBZ 2068280, Aaron Merey).


author: Nick Clifton <nickc@redhat.com> - 12.14-1
changelog:
  - Annocheck: Do not ignore separate debuginfo files that do not contain any DWARF.  (#2144553)
  - Annocheck: Ignore /dev/null filename in string notes.
  - Annocheck: More tweaks to glibc detection heuristics.  (#2215968)


author: Nick Clifton <nickc@redhat.com> - 12.16-1
changelog:
  - Spec File: Rebuild with annobin annotation.  (#2217814)
  - Annocheck: Ignore weak/undef function symbols when checking to see if a binary contains code.  (#2217840)
  - Annocheck: Add --suppress-version-warnings option.


author: Nick Clifton <nickc@redhat.com> - 12.20-1
changelog:
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.


author: Nick Clifton <nickc@redhat.com> - 12.32-1
changelog:
  - LLVM Plugin: Fix building with LLVM version 17.  (RHEL-17311)
  - GCC Plugin: Add support for -fhardended.
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)


author: Nick Clifton <nickc@redhat.com> - 12.32-2
changelog:
  - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505)


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Rebase to 12.65.  (RHEL-51018)
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53574)


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Rebase to bring in improvements for locating string notes.  (RHEL-79807)
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.
  - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string.  (RHEL-77328)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Nick Clifton <nickc@redhat.com> - 2.40-1
changelog:
  - Rebase to 2.40.
  - Retire: binutils-package-metadata.patch
  - Retire: binutils-gas-dwarf-skip-empty-functions.patch
  - Retire: binutils-CVE-38128-dwarf-abbrev-parsing.patch
  - Retire: binutils-readelf-no-sections.patch
  - Retire: binutils-libiberty-configure-compile-warnings.patch
  - Retire: binutils-CVE-2022-4285.patch


author: Nick Clifton <nickc@redhat.com> - 2.40-2
changelog:
  - Spec file: Remove duplicate gprofng debug file entries.
  - Spec file: Fix testsuite failures for RiscV64.


author: Nick Clifton <nickc@redhat.com> - 2.40-7
changelog:
  - Spec File: Fix typo.  (#2186396)
  - BFD library: Fix illegal memory access when loading corrupt symbol version info.  (#2186579)


author: Nick Clifton <nickc@redhat.com> - 2.40-12
changelog:
  - Spec File: Enable building with GTS-13 gcc.  (#2217819)
  - Spec File: Sync version number with c8s.


author: Nick Clifton <nickc@redhat.com> - 2.40-17
changelog:
  - Spec File: Do not use of the system zlib by default.  (RHEL-19373)
  - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303)


author: Nick Clifton <nickc@redhat.com> - 2.40-19
changelog:
  - Spec File: Restore the SElinux context to %{_libdir}.  (RHEL-22818)
  - [2.40-18: was a failed attempt to fix RHEL-22818]


author: Marek Polacek <polacek@redhat.com> 13.1.1-4
changelog:
  - update from releases/gcc-13 branch (#2188499)
    - PRs bootstrap/110085, c++/109871, fortran/100607, libgcc/109670,
  	libgcc/109685, libstdc++/108178, libstdc++/109261, libstdc++/109758,
  	libstdc++/109822, libstdc++/109949, libstdc++/110139,
  	middle-end/110200, target/82931, target/92729, target/104327,
  	target/105753, target/106907, target/109547, target/109650,
  	target/109800, target/109939, target/109954, target/110036,
  	target/110044, target/110088, target/110108, target/110227,
  	tree-optimization/109505, tree-optimization/110165,
  	tree-optimization/110166


author: Marek Polacek <polacek@redhat.com> 13.2.1-4
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/110488, ada/111434, c++/99631, c++/111471, c++/111485, c++/111493,
  	c++/111512, fortran/68155, fortran/92586, fortran/111674,
  	libstdc++/108046, libstdc++/111050, libstdc++/111102,
  	libstdc++/111511, middle-end/111699, modula2/111510, target/111121,
  	target/111411, tree-optimization/110315, tree-optimization/110386,
  	tree-optimization/111331, tree-optimization/111519


author: Marek Polacek <polacek@redhat.com> 13.2.1-5
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245,
  	fortran/111837, fortran/112316, libbacktrace/111315,
  	libbacktrace/112263, libstdc++/110944, libstdc++/111172,
  	libstdc++/111936, libstdc++/112089, libstdc++/112314,
  	middle-end/111253, middle-end/111818, modula2/111756, modula2/112110,
  	target/101177, target/110170, target/111001, target/111366,
  	target/111367, target/111380, target/111935, target/112443,
  	tree-optimization/111397, tree-optimization/111445,
  	tree-optimization/111489, tree-optimization/111583,
  	tree-optimization/111614, tree-optimization/111622,
  	tree-optimization/111694, tree-optimization/111764,
  	tree-optimization/111820, tree-optimization/111833,
  	tree-optimization/111917
    - fix aarch64 RA ICE (#2241139, PR target/111528)
  - fix ia32 doubleword rotates (#2238781, PR target/110792)


author: Marek Polacek <polacek@redhat.com> 13.2.1-6
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633,
  	c/112339, fortran/111880, fortran/112764, libgomp/111413,
  	libstdc++/112348, libstdc++/112491, libstdc++/112607,
  	middle-end/111497, target/53372, target/110411, target/111408,
  	target/111815, target/111828, target/112672, tree-optimization/111137,
  	tree-optimization/111465, tree-optimization/111967,
  	tree-optimization/112496
  - add -fno-stack-protector to aarch64 tests (RHEL-17684)


author: Marek Polacek <polacek@redhat.com> 13.3.1-1
changelog:
  - update from releases/gcc-13 branch
    - GCC 13.3 release
    - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577,
  	analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882,
  	analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969,
  	analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473,
  	bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224,
  	c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769,
  	c++/113141, c++/113966, c++/114303, c++/114377, c++/114537,
  	c++/114561, c++/114562, c++/114572, c++/114580, c++/114634,
  	c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337,
  	fortran/50410, fortran/55978, fortran/89462, fortran/93678,
  	fortran/95374, fortran/101135, fortran/102003, fortran/103707,
  	fortran/103715, fortran/103716, fortran/104352, fortran/106987,
  	fortran/106999, fortran/107426, fortran/110987, fortran/112407,
  	fortran/113799, fortran/113866, fortran/113885, fortran/113956,
  	fortran/114001, fortran/114474, fortran/114535, fortran/114739,
  	fortran/114825, fortran/115039, gcov-profile/114115,
  	gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616,
  	ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731,
  	libquadmath/114533, libstdc++/66146, libstdc++/93672,
  	libstdc++/104606, libstdc++/107800, libstdc++/108976,
  	libstdc++/110050, libstdc++/110054, libstdc++/113841,
  	libstdc++/114147, libstdc++/114316, libstdc++/114359,
  	libstdc++/114367, libstdc++/114401, libstdc++/114750,
  	libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655,
  	middle-end/110027, middle-end/111151, middle-end/111632,
  	middle-end/111683, middle-end/112684, middle-end/112732,
  	middle-end/113396, middle-end/113622, middle-end/114070,
  	middle-end/114348, middle-end/114552, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/114907,
  	rtl-optimization/54052, rtl-optimization/114415,
  	rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696,
  	sanitizer/114687, sanitizer/114743, sanitizer/114956,
  	sanitizer/115172, target/88309, target/101865, target/105522,
  	target/110621, target/111234, target/111600, target/111610,
  	target/111822, target/112397, target/113095, target/113233,
  	target/113950, target/114049, target/114130, target/114160,
  	target/114172, target/114175, target/114272, target/114747,
  	target/114752, target/114794, target/114837, target/114848,
  	target/114981, testsuite/111066, testsuite/112297, testsuite/114034,
  	testsuite/114036, testsuite/114662, tree-optimization/91838,
  	tree-optimization/109925, tree-optimization/110838,
  	tree-optimization/111009, tree-optimization/111268,
  	tree-optimization/111407, tree-optimization/111736,
  	tree-optimization/111882, tree-optimization/112281,
  	tree-optimization/112303, tree-optimization/112793,
  	tree-optimization/112961, tree-optimization/112991,
  	tree-optimization/113552, tree-optimization/113630,
  	tree-optimization/113670, tree-optimization/113831,
  	tree-optimization/113910, tree-optimization/114027,
  	tree-optimization/114115, tree-optimization/114121,
  	tree-optimization/114203, tree-optimization/114231,
  	tree-optimization/114246, tree-optimization/114375,
  	tree-optimization/114396, tree-optimization/114485,
  	tree-optimization/114566, tree-optimization/114672,
  	tree-optimization/114733, tree-optimization/114736,
  	tree-optimization/114749, tree-optimization/114787,
  	tree-optimization/114799, tree-optimization/114876,
  	tree-optimization/114965, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154
  - add --without-clang-plugin --without-llvm-plugin to annobin configure
    options


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-13
changelog:
  - Backport fix for problems associated with GCC 13's self-move warning.
    (Jan-Benedict Glaw)
  - Tweak gdb-6.6-buildid-locate-rpm.patch so that running GDB's configure
    script will not error out due to GCC 13's warnings.


author: Keith Seitz <keiths@redhat.com> - 12.1-14
changelog:
  From Sergey Mende:
  - Backport upstream patch "gdb: call check_typedef at beginning of
    dwarf_expr_context::fetch_result". (Simon Marchi)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-16
changelog:
  - Tweak gdb-6.3-rh-testversion-20041202.patch so that $_gdb_major
    and $_gdb_minor will be obtained correctly.


author: Keith Seitz <keiths@redhat.com> - 12.1-2.el9
changelog:
  - Backport binutls/29699 "Fix an illegal memory access when parsing..."
    (Nick Clifton, RHBZ 2153228)


author: Guinevere Larsen <blarsen@redhat.com> - 12.1-4.el9
changelog:
  - Backport "Fix typo in recent code to add stack recursion limit to the Rust demangler."
    (Nick Clifton)
  - Backport "Add a recursion limit to the demangle_const function in the Rust demangler."
    (Nick Clifton, RHEL-4234)


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Rebase to 12.65.  (RHEL-51056)
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Nick Clifton <nickc@redhat.com> - 12.67-1
changelog:
  - Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
  - Annocheck: Stop warnings about known gaps.    (RHEL-53218)
  - Annocheck: Fix stack realign test.  (#2302427)


author: Nick Clifton <nickc@redhat.com> - 12.67-2
changelog:
  - Spec File: Use correct directory for plugin installation.  (RHEL-53209)
  - Spec File: Disable plugin when running on wrong major version of the compiler.


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53209)


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Rebase for GTS 14.1 release.  (RHEL-76932)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Marek Polacek <polacek@redhat.com> 14.2.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.2 release
    - PRs analyzer/114899, c++/99241, c++/99242, c++/104981, c++/106760,
  	c++/111890, c++/115165, c++/115476, c++/115550, c++/115561,
  	c++/115583, c++/115623, c++/115754, c++/115783, c++/115865,
  	c++/115897, c++/115900, c++/115986, fortran/59104, fortran/84006,
  	fortran/93635, fortran/98534, fortran/99798, fortran/100027,
  	fortran/103115, fortran/103312, fortran/113363, fortran/115700,
  	ipa/111613, ipa/113291, ipa/113787, ipa/114207, ipa/115033,
  	ipa/115277, ipa/116055, libstdc++/113376, libstdc++/114387,
  	libstdc++/115399, libstdc++/115482, libstdc++/115522,
  	libstdc++/115585, libstdc++/115807, libstdc++/115854,
  	libstdc++/116070, middle-end/115527, middle-end/115836,
  	middle-end/115887, pch/115312, rtl-optimization/115049,
  	rtl-optimization/115565, target/87376, target/88236, target/97367,
  	target/98762, target/105090, target/113715, target/114759,
  	target/114890, target/114936, target/114988, target/115068,
  	target/115153, target/115188, target/115351, target/115389,
  	target/115456, target/115457, target/115459, target/115475,
  	target/115526, target/115554, target/115562, target/115591,
  	target/115611, target/115691, target/115725, target/115726,
  	target/115752, target/115763, target/115840, target/115872,
  	target/115978, target/115981, target/115988, target/116035,
  	testsuite/115826, testsuite/116061, tree-optimization/113673,
  	tree-optimization/115382, tree-optimization/115646,
  	tree-optimization/115669, tree-optimization/115694,
  	tree-optimization/115701, tree-optimization/115723,
  	tree-optimization/115841, tree-optimization/115843,
  	tree-optimization/115867, tree-optimization/115868,
  	tree-optimization/116034, tree-optimization/116057


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-74061)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-70192)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-74059)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)
  - have gfortran require install-info (RHEL-62417)


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-39736)


author: Marek Polacek <polacek@redhat.com> 15.1.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.1 release
    - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407


author: Marek Polacek <polacek@redhat.com> 15.1.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
     c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
     c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
     fortran/102900, fortran/119928, fortran/119986, fortran/120049,
     fortran/120107, fortran/120139, fortran/120163, fortran/120179,
     fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
     libfortran/120152, libfortran/120153, libfortran/120158,
     libfortran/120196, libstdc++/118260, libstdc++/119427,
     libstdc++/119714, libstdc++/120029, libstdc++/120114,
     libstdc++/120159, libstdc++/120187, libstdc++/120190,
     libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
     modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
     preprocessor/120061, target/119610, testsuite/119909,
     tree-optimization/111873, tree-optimization/119712,
     tree-optimization/120043, tree-optimization/120048,
     tree-optimization/120074, tree-optimization/120089,
     tree-optimization/120143, tree-optimization/120211


author: Filip Januš <fjanus@redhat.com> - 2.2.5-12
changelog:
  - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src)
  - Resolves: #1599032


author: Filip Januš <fjanus@redhat.com> - 2.3.1-1
changelog:
  - Upstream released new version 2.3.1
  - patch bug615 is no more needed - fixed by upstream in release
  - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on
    x390s - XFAIL_TEST definition for x390s is no more necessary


author: Filip Januš <fjanus@redhat.com> - 2.3.2-1
changelog:
  - Add condition if fedora for packages not available in RHEL
  - enable avif support
  - use bcond
  - rebase to version 2.3.2


author: Bruno Larsen <blarsen@redhat.com>
changelog:
  - Bakport "Fix assertion failure in copy_type"
    (Tom Tromey, RHBZ 2155439)
  - Bakport "[gdb/testsuite] Fix PR20630 regression test in gdb.base/printcmds.exp"
    (Tom de Vries)


author: Bruno Larsen <blarsen@redhat.com> - 10.2-11.el9
changelog:
  - Backport "libiberty: prevent buffer overflow when decoding user input"
    (Luís Ferreira, RHBZ2132600)


author: Guinevere Larsen <blarsen@redhat.com> - 10.2-12.el9
changelog:
  - Backport "libiberty: Fix infinite recursion in rust demangler."
    (Nick Clifton)
  - Backport Add a recursion limit to the demangle_const function in the Rust demangler.
    (Nick Clifton, RHEL-4234)
  - Backport Fix typo in recent code to add stack recursion limit to the Rust demangler.
    (Nick Clifton)


author: Keith Seitz - 10.2-13.el9
changelog:
  - Backport patches for "Fix undefined behaviour dereferencing empty string"
    (Magne Hov et al, RHEL-17631)


author: Guinevere Larsen <blarsen@redhat.com>
changelog:
  - Remove gdb-6.5-BEA-testsuite.patch, as it was upstreamed and
    will make its way back with the next rebase.


author: Kevin Buettner <kevinb@redhat.com> - 14.1-8
changelog:
  - Backport upstream workaround for GCC 14 problem which is causing
    GDB internal errors (RHBZ 261580, Tom de Vries).


author: Keith Seitz <keiths@redhat.com>
changelog:
  - Backport "gdb: s390: Add arch14 record/replay support"
    (Andreas Arnez, RHEL-36225)
  - Backport "Add support for Power11 options"
    (Peter Bergner, RHEL-36518)
  - Backport "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (many authors, RHEL-36527)


author: Guinevere Larsen <blarsen@redhat.com>
changelog:
  - Backport series Infcalls from B/P conditions in multi-threaded inferiors
    (Andrew Burgess, RHEL-13298)


author: Guinevere Larsen <blarsen@redhat.com> - 14.2-1.el9
changelog:
  - Rebase to gdb-14.2 and update all bug references
    (Resolves: RHEL-39554)
    (Resolves: RHEL-39553)
    (Resolves: RHEL-10550)
    (Resolves: RHEL-39555)
    (Resolves: RHEL-39585)
    (Resolves: RHEL-36211)


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Remove gdb-rhbz1261564-aarch64-hw-watchpoint-test.patch.  This test
    should be covered by gdb.base/watchpoint-unaligned.exp which was
    added upstream in commit a3b60e4588606354b93508a0008a5.


author: Guinevere Larsen <guinevere@redhat.com>
changelog:
  - remove gdb-test-bt-cfi-without-die.patch.  This test has been
    accepted upstream and will make its way back to testing with
    the GDB 17 release.


author: Alexandra Hájková <ahajkova@redhat.com> - 16.2-1
changelog:
  - Rebase to FSF GDB 16.2.
    Dropped:  gdb-backport-buildid-related-changes.patch
              gdb-catchpoint-re-set.patch
              gdb-remove-qnx-neutrino-support.patch
    Modified: gdb-add-rpm-suggestion-script.patch


author: Tomas Popela <tpopela@redhat.com> - 2.42.6-3
changelog:
  - Backport fixes for CVE-2021-46829 and CVE-2021-44648
  - Resolves: rhbz#2115213
  - Resolves: rhbz#2044346


author: Joan Torres <joantolo@redhat.com> - 40.1-31
changelog:
  - Fix legacy-xorg session switching
    The fix that intended to fix the issue wasn't complete and also,
    introduced a bug on user switching for non legacy-xorg servers.
    This fix addresses both issues.
  - Avoid waiting 10s when starting GDM in legacy-xorg mode
    Resolves: RHEL-72694


author: Joan Torres <joantolo@redhat.com> - 40.1-32
changelog:
  - Leave session-opened signature the same as before and use a new
    session-opened-with-session-id signal to keep ABI compatibility
    Related: RHEL-46383


author: Joan Torres <joantolo@redhat.com> - 40.1-35
changelog:
  - Instead of allowing adding custom parameters to Xorg,
    only allow adding -nocursor. Allowing adding custom parameters
    is a potential security issue.
    Related: RHEL-81194


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16
changelog:
  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-17
changelog:
  - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
  - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
  - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-18
changelog:
  - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable()
  - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Josef Ridky <jridky@redhat.com> - 2:3.0.4-2
changelog:
  - fix CVE-2025-10920
  - fix CVE-2025-10921
  - fix CVE-2025-10922
  - fix CVE-2025-10923
  - fix CVE-2025-10924
  - fix CVE-2025-10925
  - fix CVE-2025-10934


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-17
changelog:
  - Add patches for CVE-2024-52533 and CVE-2025-4373
  - Update GDateTime test for new tzdata
  - Resolves: RHEL-94483
  - Resolves: RHEL-102844


author: Frédéric Bérat <fberat@redhat.com> - 2.34-244
changelog:
  - x86-64: Add GLIBC_ABI_DT_X86_64_PLT version to enable DT_X86_64_PLT	
    compatibility. (RHEL-109622)


author: Tamar Shacked <tshacked@redhat.com> - 6.0-56.3
changelog:
  - Rebase with latest RHGS-3.5.4
  - Fix changlog chronological order by removing unneeded changelogs
  - fixes bug bz#1939340


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-13
changelog:
  - Fix: previous commit removed one function from the library and thus broke the ABI
  - function gmpn_preinv_divrem_1 should now not be removed
  Related: rhbz#2044216


author: Bastien Nocera <bnocera@redhat.com> - 3.34.3-4
changelog:
  + gnome-bluetooth-3.34.3-4
  - Revert “Require PulseAudio _or_ Pipewire for Bluetooth audio”
  - Closes: #1928166


author: Kalev Lember <klember@redhat.com> - 40.0-1
changelog:
  - Update to 40.0
  - Require hicolor-icon-theme for icon directories rather than adwaita
  - Use https source URL
  - Validate appdata file
  - Filter private libraries
  - Don't install various development files


author: Felipe Borges <feborges@redhat.com> - 40.0-38
changelog:
  - Scale up monitors drawing in display arrangment settings when multiple monitors
    Related: RHEL-4196


author: Ray Strode <rstrode@redhat.com> - 40.0-6
changelog:
  - Copy and run the script from XDG_RUNTIME_DIR
    Resolves: https://issues.redhat.com/browse/RHEL-25536


author: Olivier Fourdan <ofourdan@redhat.com> - 40.0-8
changelog:
  - Add Xwayland and dbus-daemon as weak dependencies
    Resolves: https://issues.redhat.com/browse/RHEL-66572


author: Milan Crha <mcrha@redhat.com> - 3.40.0-4
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)


author: Milan Crha <mcrha@redhat.com> - 3.40.0-5
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)
  - backport upstream fix to use external browser for OAuth2


author: Joan Torres <joantolo@redhat.com> - 40.1.1-11
changelog:
  - Add race fixes needed when terminating a conflicting session
    on GDM greeter.
    Resolves: RHEL-92341


author: Felipe Borges <feborges@redhat.com> - 40.0.1-10
changelog:
  - Default power-button-action to poweroff on servers
    (except when power-button-action=nothing)
    Resolves: #1885639


author: Ray Strode <rstrode@redhat.com> - 40.0.1-13
changelog:
  - Revert hard dependency on subscription-manager since we're going to put it in gnome-session instead
    Related: #2175675


author: Ray Strode <rstrode@redhat.com> - 40.0.1-15
changelog:
  - Fix crashers in g-s-d and control-center related to
    making subscription-manager a soft dep
    Related: RHEL-20449


author: Felipe Borges <feborges@redhat.com> - 40.0.1-22
changelog:
  - Use mount path in "Low disk" notification when multiple mount points have same name
    Related: RHEL-11910


author: Joan Torres <joantolo@redhat.com> - 40.10-27
changelog:
  - session-opened signature is reverted to keep ABI compatibility,
    use session-opened-with-session-id instead
    Related: RHEL-92307


author: Joan Torres <joantolo@redhat.com> - 40.10-30
changelog:
  - Fix regression on multiple remote sessions and same user
    Also, add missing fix to keep API/ABI compatibility on GDM greeter proxy.
    Resolves: RHEL-109190


author: Milan Crha <mcrha@redhat.com> - 41.0-2
changelog:
  - Resolves: #2012699 (Backport changes from Fedora 35)
  - Add patch to mark compulsory only repos, not apps from it
  - Resolves: #2011176 (flathub repo can't be added through gnome-software)
  - Resolves: #2010660 (gs-repos-dialog: Can show also desktop applications)
  - Resolves: #2010353 (Optional repos cannot be disabled)
  - Resolves: #2010740 (Refresh on repository setup change)
  - Resolves: #2009063 (Correct update notifications)


author: Milan Crha <mcrha@redhat.com> - 41.5-2
changelog:
  - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file)
  - Resolves: #2129021 (Hide some errors in non-debug builds)


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.1-1
changelog:
  - Update to 3.40.1
  - Rebase the patches
  - Backport yet-to-be-released patches from upstream to avoid translation
    conflicts
  Resolves: #1959384


author: Jakub Jelen <jjelen@redhat.com> - 2.3.3-3
changelog:
  - Mark SHA-1 digest as weak to follow SHA-1 disablement in RHEL9 (#2070722)
  - Fix interaction with SSH by not requiring the MD5 digest (#2073567)
  - Fix creation of AEAD packets (#2128058)


author: Daiki Ueno <dueno@redhat.com> - 3.8.3-2
changelog:
  - Fix timing side-channel in deterministic ECDSA (RHEL-28959)
  - Fix potential crash during chain building/verification (RHEL-28954)


author: Alexander Sosedkin <asosedkin@redhat.com> - 3.8.10-1
changelog:
  - rebase to 3.8.10
  - revert defaulting to PBMAC1 in FIPS mode
  - revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification


author: Daiki Ueno <dueno@redhat.com> - 3.8.2-2
changelog:
  - Bump nettle dependency to 3.9.1
  - Skip KTLS test exercising ChaCha20-Poly1305 in TLS 1.2 (RHEL-18498)


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.20.7-20
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Add upstream commits for git master which contains patches 9, 10 and 11
  - Add GCC10 fix
  - Cleanups


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-2
changelog:
  - Fixes patch 1002 for update to golang-fips
  - Remove unused code under apsl-1.1 and apsl-1.2 licenses
  - Resolves RHEL-33655


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-15
changelog:
  - Resolves RHEL-97518: Rework grafana-selinux spec file sections
  - Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-18
changelog:
  - Resolves RHEL-125696: CVE-2025-58183
  - Resolves RHEL-132757: Grafana-selinux prevents plugins from searching cgroups


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-13
changelog:
  - Resolves RHEL-19296
  - Fixes coredump issue introduced by selinux
  - Patches out call to panic when trying to walk "/" directory


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.1.0-1
changelog:
  - update to 3.1.0 tagged upstream community sources, see CHANGELOG
  - remove unused cryptographic implementations


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.2.0-2
changelog:
  - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header
  - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working
  - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read
  - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
  - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
  - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode


author: Andreas Gerstmayr <agerstmayr@redhat.com> 5.0.0-4
changelog:
  - update to 5.0.0 tagged upstream community sources, see CHANGELOG
  - install plugin in /usr/share and create symlink from /var using
    systemd-tmpfiles to work on rpm-ostree based distributions
  - revert the breaking change (change of internal plugin IDs) of upstream v5.0.0,
    i.e. there are no breaking changes when performing this upgrade
  - enable Go modules in build process
  - make vendor and webpack tarballs reproducible
  - drop makefile in favor of create_bundles.sh script


author: Andreas Gerstmayr <agerstmayr@redhat.com> 5.1.1-1
changelog:
  - update to 5.1.1 tagged upstream community sources, see CHANGELOG
  - resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.44.0-19
changelog:
  - Conditionalized guile support
    Resolves: rhbz#1953974
  - Updated RHEL macros
    Resolves: rhbz#1957653


author: Paul Whalen <pwhalen@fedoraproject.org> - 0.16.0-2
changelog:
  - Update src to greenboot-rs, binaries remain greenboot
  - Obsoletes/Conflicts for bash greenboot, Provides greenboot


author: Sayan Paul <saypaul@redhat.com> - 0.16.1
changelog:
  - Ensure rollback trigger runs before systemd-update-done and only on updates
  - Log the correct system type when reporting rollback decisions
  - Fix CI/tests (Ansible callback config, GI deps) to keep gating green
  - Refresh Packit release config for Fedora delivery


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-2
changelog:
  - Patch CVE-2023-44429: AV1 codec parser heap-based buffer overflow
  - Patch CVE-2023-44446: MXF demuxer use-after-free
  - Resolves: RHEL-17030, RHEL-17039


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-4
changelog:
  - CVE-2023-40474: Integer overflow leading to heap overwrite in MXF
  - CVE-2023-40475: Integer overflow leading to heap overwrite in MXF
  - CVE-2023-40476: Integer overflow in H.265 video parser
  - ZDI-CAN-22300: buffer overflow vulnerability
  - Resolves: RHEL-19501, RHEL-19505, RHEL-19506, RHEL-20201


author: Wim Taymans <wtaymans@redhat.com> - 1.18.4-5
changelog:
  - Handle both compressed and uncompressed man pages
  - Fix build with small patch
  - Resolves: rhbz#2005247


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Bump version
  - Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542,
    CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835
    Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037
    Resolves: RHEL-71019, RHEL-70995, RHEL-71163


author: Wim Taymans <wtaymans@redhat.com> - 1.18.4-6
changelog:
  - Fixes for CVE-2022-1920, CVE-2022-1921, CVE-2022-1922, CVE-2022-1923,
    CVE-2022-1924, CVE-2022-1925, CVE-2022-2122
    Resolves: rhbz#2131034, rhbz#2131039, rhbz#2131045, rhbz#2131049,
              rhbz#2131054, rhbz#2131060, rhbz#2131064


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-2
changelog:
  - CVE-2023-37327: integer overflow leading to heap overwrite in FLAC
    image tag handling
  - Resolves: RHEL-19471


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
    CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
    CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
    CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
    CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
    CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
  - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
  - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
  - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
  - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
  - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
  - Resolves: RHEL-71189


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.22.8-2
changelog:
  - Enable asfdemux, dvdlpcmdec, dvdsub, and realmedia plugins
  - Disable AMR plugins in RHEL builds
  - Resolves: rhbz#2236889


author: Daniel P. Berrangé <berrange@redhat.com> - 1.2.0-1
changelog:
  - Update to 1.2.0 release
  - Drop outdated conditionals
  - Drop outdated ldconfig script
  - Use versioned obsoletes tags
  - Resolves: rhbz#1949474


author: Kalev Lember <klember@redhat.com> - 2.24.33-3
changelog:
  - Drop imsettings dependency on Fedora as well
  - Recommend libcanberra-gtk2 for sound theme events in gtk2 apps


author: Kalev Lember <klember@redhat.com> - 4.1.2-1
changelog:
  - Update to 4.1.2
  - Disable gtk-doc support as we don't have gi-docgen in Fedora yet
  - Remove old obsoletes


author: Kalev Lember <klember@redhat.com> - 3.24.3-1
changelog:
  - Update to 3.24.3
  - Use https source URLs
  - Re-enable LTO now that we have upstream fix in place (#1898054)
  - Switch to meson build system
  - Tighten soname globs


author: Tom Stellard <tstellar@redhat.com> - 5.3.3-3
changelog:
  - Fix warning building with clang
  - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type]


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.4
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.5
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.0-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.1-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1
  - Resolves: RHEL-69761


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.2-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.3-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4
  - Resolves: RHEL-83036


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.6-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.7-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.7
  - Resolves: RHEL-112184


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-16
changelog:
  - fence_openstack: add support for reading config from clouds.yaml
    and openrc
    Resolves: rhbz#2041933, rhbz#2041935


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-22
changelog:
  - all agents: unify ssl parameters to avoid having to use --ssl when
    using --ssl-secure/--ssl-insecure for some agents
    Resolves: rhbz#2072420
  - fence_gce: update fence agent
    Resolves: rhbz#2079889


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-23
changelog:
  - fence_ibm_vpc: remove unused instance parameter and make limit
    optional
    Resolves: rhbz#2081235


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-25
changelog:
  - all agents: unify ssl parameters to avoid having to use --ssl when
    using --ssl-secure/--ssl-insecure for some agents
    Resolves: rhbz#2072420


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-27
changelog:
  - fence_ibm_powervs: add support for proxy, private API servers and
    get token via API key
    Resolves: rhbz#2093216


author: Ryan O'Hara <rohara@redhat.com> - 2.4.7-1
changelog:
  - Update to 2.4.7 (#1966688)
  - Fix domain parts in :scheme and :path fields (CVE-2021-39240, #1998196)
  - Fix spaces in the :method field (CVE-2021-39241, #1998198)
  - Fix mismatch between :authority and Host fields (CVE-2021-39242, #1998200)
  - Fix request smuggling attack or response splitting (CVE-2021-40346, #2000621)


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.4.22-4
changelog:
  - Always clear retry flags in read/write functions to avoid CPU
    usage spikes
  - Fix "unable to load certificate chain from file" issue
    Resolves: RHEL-71925, RHEL-68780


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.8.14-2
changelog:
  - Add tmpfiles.d file to make systemd-tmpfiles create/set correct
    ownership/permissions of /var/lib/haproxy
    Resolves: RHEL-120178


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Filip Januš <fjanus@redhat.com> - 1.5-1
changelog:
  - Nwe upstream version 1.5
  - Add patch to solve inconsistency between configure.ac and filename
  - Add Build requirement autoconf


author: Davide Caratti <dcaratti@redhat.com> - 2.9-15
changelog:
  - Disable 'badfuncs' in rpminspect tests
  - Build with -fPIE, and enable verbose build log
  - enable CONFIG_SUITEB192


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-4
changelog:
  - 1912147 - Enable matching for '<model>_series' drivers in PPD search algorithm
  - rework optional gui messages


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-5
changelog:
  - 1925259 - %pre scriptlet enables and starts cups.service, which is unnecessary
  - 1919556 - hp-fab crashed: QFileDialog.getOpenFileName is not used correctly


author: Joe Orton <jorton@redhat.com> - 2.4.57-8
changelog:
  - mod_xml2enc: fix media type handling
    Resolves: RHEL-17686
  - mod_dav: add DavBasePath
    Resolves: RHEL-6600


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.59-1
changelog:
  - new version 2.4.59
  - Resolves: RHEL-14668 - RFE: httpd rebase to 2.4.59
  - Resolves: RHEL-31856 - httpd: HTTP response splitting
    (CVE-2023-38709)
  - Resolves: RHEL-31859 - httpd: HTTP Response Splitting in multiple
    modules (CVE-2024-24795)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-3
changelog:
  - Resolves: RHEL-68660 - RewriteRule proxying to UDS (unix domain socket)
    configured in .htaccess doesn't work on httpd-2.4.62-1


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-4
changelog:
  - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode
    characters in the name


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-7
changelog:
  - Resolves: RHEL-99815 - stickysession field does not work when specifying
    it in the query parameter after upgrade to 9.5
  - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS
    upgrade (CVE-2025-49812)
  - Resolves: RHEL-99968 - httpd: access control bypass by trusted
    clients is possible using TLS 1.3 session resumption (CVE-2025-23048)
  - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied
    data in mod_ssl (CVE-2024-47252)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-8
changelog:
  - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when
    updating system in image mode


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-9
changelog:
  - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child
    process is reclaimed


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-10
changelog:
  - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check
    to avoid unnecessary 421 errors after CVE-2025-23048 fix
  - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default


author: Peter Robinson <pbrobinson@fedoraproject.org> - 4.2-2
changelog:
  - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package)
  - Drop/obsolete eepromer subpackage, deprecated for 6 years
  - Drop python2 conditionals
  - Minor cleanups


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.11-10
changelog:
  - Replace kasumi with kausmi-unicode
  - Delete to require intltool
  - Delete to call gettext.bind_textdomain_codeset()


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.24-5
changelog:
  - Fix covscan reviews. Related: rhbz#1963071

  - Implement ibus_im_context_set_surrounding_with_selection()


author: Mike FABIAN <mfabian@redhat.com> - 1.4.2-1
changelog:
  - Update to  1.4.2
  - New translations: tr (Turkish) 100%, uk (Ukrainian) 100%,
    id (Indonesian) 100%, ja_JP (Japanese) 100%.
  - Translation updates: zh_CN, pt_BR


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.2.1-1
changelog:
  - Rebase to JSS 5.2.1
  - Bug 2100807 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.3.0-0.3.beta2
changelog:
  - Rebase to JSS 5.3.0-beta2
  - Bug 2017098 - pki pkcs12-cert-add command failing with 'Unable to validate PKCS #12 file: Digests do not match' exception


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.3.0-1
changelog:
  - Rebase to PKI 11.3.0
  - Bug #2091993 - IdM Install fails on RHEL 8.5 Beta when DISA STIG is applied
  - Bug #2122409 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Miguel Martín <mmartinv@redhat.com> - 2.19.0-3
changelog:
  - Update ignition-edge commit to support FIPS
      - https://github.com/fedora-iot/ignition-edge/pull/2


author: Yasmin Valim <ydesouza@redhat.com> - 2.21.0-1
changelog:
  - Re-sync with upstream changes adding ignition-grub subpackage
    and a few minor changes
  - New release


author: Packit <hello@packit.dev> - 23-1
changelog:
  Changes with 23
  ----------------
    * cmd/describe: ensure that all image types can be described (HMS-7044) (#231)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-06-25


author: Packit <hello@packit.dev> - 24-1
changelog:
  Changes with 24
  ----------------
    * Always set rhsm.Facts when generating manifests (#239)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * doc/01-usage.md: avoid multiple h1 in one document (#235)
      * Author: Florian Schüller, Reviewers: Michael Vogt, Simon de Vlieger
    * doc/10-faq.md: add image types documentation (#236)
      * Author: Florian Schüller, Reviewers: Michael Vogt, Simon de Vlieger
    * docs: subscription basic info (#205)
      * Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Michael Vogt
    * readme: mention mount for container (#232)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane, Jelle van der Waa, Michael Vogt

  — Somewhere on the Internet, 2025-07-09


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2159650, rhbz#2167513, rhbz#2170367, rhbz#2189721 rhbz#2209688


author: Kamal Heib <kheib@redhat.com> - 57.0-1
changelog:
  - Rebase to upstream release v57.0
  - Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449


author: Thomas Woerner <twoerner@redhat.com> - 4.12.2-14
changelog:
  - Resolves: RHEL-80345 Use new bind9.18-dyndb-ldap and bind9.18 only for DNS over TLS with the ipa-server-encrypted-dns package


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-15
changelog:
  - Resolves: RHEL-84481 Protect all IPA service principals
  - Resolves: RHEL-84277 [RFE] IDM support UIDs up to 4,294,967,293
  - Resolves: RHEL-84276 Ipa client --raw --structured throws internal error
  - Resolves: RHEL-82707 Search size limit tooltip has Search time limit tooltip text
  - Resolves: RHEL-82089 IPU 9 -> 10: ipa-server breaks the in-place upgrade due to failed scriptlet
  - Resolves: RHEL-68800 ipa-migrate with LDIF file from backup of remote server, fails with error 'change collided with another change'
  - Resolves: RHEL-30658 ipa-cacert-manage install fails with CAs having the same subject DN (subject key mismatch info)


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-16
changelog:
  - Resolves: RHEL-88900 [RFE] Add check on CA cert expiry for ipa-cert-fix
  - Resolves: RHEL-88037 Server installation: dot-forwarder not added as a forwarder
  - Resolves: RHEL-86483 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-41178 ipa-sidgen: fix memory leak in ipa_sidgen_add_post_op()


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-17
changelog:
  - Resolves: RHEL-95010 [RFE] Give warning when adding user with UID out of any ID range
  - Resolves: RHEL-93890 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-93887 ipa idrange-add --help should be more clear about required options
  - Resolves: RHEL-93483 Unable to modify IPA config; --ipaconfigstring="" causes internal error
  - Resolves: RHEL-88834 kdb: ipadb_get_connection() succeeds but returns null LDAP context
  - Resolves: RHEL-68800 ipa-migrate with LDIF file from backup of remote server, fails with error 'change collided with another change'


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-19
changelog:
  - Resolves: RHEL-100450 eDNS: multiple issues during encrypted DNS setup
  - Resolves: RHEL-89907 Privilege escalation from host to domain admin in FreeIPA
  - Resolves: RHEL-99315 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-98565 ipa-idrange-fix: 'Env' object has no attribute 'basedn'
  - Resolves: RHEL-96920 Nightly test failure (rawhide) in test_trust.py::TestTrust::test_server_option_with_unreachable_ad
  - Resolves: RHEL-31907 kdb: support storing and retrieving multiple master keys


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-20
changelog:
  - Resolves: RHEL-106285 Incorrect use of external IdP GitHub trademark
  - Resolves: RHEL-106026 Include fixes in python3-ipatests package
  - Resolves: RHEL-105512 kdb: prevent double crash in RBCD ACL free
  - Resolves: RHEL-101707 ipatests: use "sos report" instead of "sosreport" command
  - Resolves: RHEL-101544 ipa-client-encrypted-dns does not ensure bind-utils >= 9.18 for DoT-compatible nsupdate
  - Resolves: RHEL-100450 eDNS: multiple issues during encrypted DNS setup


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-22
changelog:
  - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-24
changelog:
  - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-25
changelog:
  - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9]
  - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9]
  - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
  - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9]
  - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9]
  - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package 
  - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8]
  - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.0-1
changelog:
  - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache 
  - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls
  - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service 
  - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix
  - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py
  - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8


author: Václav Doležal <vdolezal@redhat.com> - 1.8.18-18
changelog:
  - Backport patch to autoselect best cipher suite when working over lanplus backend
  - Fixed 'ipmitool pef status/info' not printing final newline
  - Expanded column for sensor name in 'ipmi sdr/sensor' output so longer names are aligned


author: Václav Doležal <vdolezal@redhat.com> - 1.8.18-19
changelog:
  - Backport fix for CVE-2020-5208 (#1798722); for details see
    https://github.com/ipmitool/ipmitool/security/advisories/GHSA-g659-9qxw-p7cp


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-26
changelog:
  - Backport upstream PR 120 to fix segfault on invalid unit types
    Resolves: rhbz#2224578
  - Add vendor ID for NVIDIA BMCs
    Resolves: rhbz#2218358
  - Update /var/run to /run in ipmievd.service that systemd warns about
    Resolves: rhbz#2100475
  - Add upstream ipmievd patch to check received msg id against expectation
    Fixes problem where SEL response is not recognized correctly
    when SEL request times out
    Resolves: rhbz#2224569


author: Jan Macku <jamacku@redhat.com> - 20210202-10
changelog:
  - arping: Fix 1s delay on exit for unsolicited arpings (RHEL-34110)
  - arping: exit 0 if running in deadline mode and we see replies (RHEL-27718)
  - ping: Print reply with wrong source with warning & some follow-up fixes (RHEL-12789, RHEL-13480)
  - ping: Fix socket error reporting (RHEL-4608)


author: Jan Macku <jamacku@redhat.com> - 20210202-12
changelog:
  - Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (RHEL-94334)


author: Marian Koncek <mkoncek@redhat.com> - 2.3.3-4
changelog:
  - Avoid possible NullPointerException
  - Resolves: rhbz#1993889
  - Load native library from the correct location
  - Resolves: rhbz#1994935


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-2
changelog:
  - Update to shenandoah-jdk8u342-b07 (GA)
  - Update release notes for 8u342-b07.
  - Switch to GA mode for final release.
  - Resolves: rhbz#2106509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-2
changelog:
  - Update to shenandoah-jdk8u345-b01 (GA)
  - Update release notes for 8u345-b01.
  - Resolves: rhbz#2112405


author: Stephan Bergmann <sbergman@redhat.com> - 1:1.8.0.345.b01-3
changelog:
  - Disable copy-jdk-configs for Flatpak builds
  - Fix flatpak builds by exempting them from bootstrap
  - Resolves: rhbz#2102727


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-4
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121273


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-5
changelog:
  - Allow the default keystore to be configured using security.systemCACerts
  - Use of the property can now be disabled using -Dsecurity.systemCACerts=
  - Move cacerts replacement to install section and retain original of this and tzdb.dat
  - Resolves: rhbz#2077006


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b07-0.2.ea
changelog:
  - Update to shenandoah-jdk8u352-b07 (EA)
  - Update release notes for shenandoah-8u352-b07.
  - Switch to EA mode for 8u352 pre-release builds.
  - Rebase FIPS patch against 8u352-b07
  - Resolves: rhbz#2130623


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Switch to GA mode for final release.
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b01-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b01 (EA)
  - Update release notes for shenandoah-8u362-b01.
  - Switch to EA mode for 8u362 pre-release builds.
  - Drop JDK-8195607/PR3776/RH1760437 now this is upstream
  - Related: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b07 (EA)
  - Update release notes for shenandoah-8u362-b07.
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-3
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Fix broken links and missing release notes in older releases.
  - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
    - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
    - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
    - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-3
changelog:
  - Update cacerts patch to fix OPENJDK-1433 SecurityManager issue
  - Update to shenandoah-jdk8u352-b09 (GA)
  - Update release notes for shenandoah-8u352-b09.
  - Resolves: rhbz#2162714


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Resolves: rhbz#2150202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - Drop use of portable build on s390x due to libffi compatibility issue (needs libffi.so.6)
  - Related: rhbz#2150202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b05-0.2.ea
changelog:
  - Update to 8u442-b05 (EA).
  - Update release notes for 8u442-b05.
  - Switch to EA mode for pre-release.
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-73990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b05-0.3.ea
changelog:
  - Add zero_arches to the portable_build_arches now that the portable build bundles libffi
  - Temporarily workaround libffi.so not being in lib/%{archinstall} by copying it
  - Exclude libffi.so from the debugedit run
  - Add a simple -version check on both the JDK and JRE bin/java
  - Add libffi.so to the filelist, including expanding the lib/%{archinstall} contents as with jre/lib
  - Sync the copy of the portable specfile and new patches with the latest update
  - Resolves: RHEL-74302


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b06-2
changelog:
  - Update to 8u442-b06 (GA)
  - Update release notes for 8u442-b06.
  - Switch to GA mode for final release
  - Revise JDK-8141590 backport to install libffi.so* in lib as well as jre/lib
  - Sync the copy of the portable specfile with the latest update
  - Remove libffi.so copying workaround now the portable build installs it in lib
  - Add bundled libffi.so to _privatelibs
  - Remove libffi.so copy if we are building on the same platform as the portable
  - Resolves: RHEL-73554
  - Related: RHEL-74302


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b06-3
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-73554
  - Related: RHEL-74302
  - Related: RHEL-73990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.452.b09-2
changelog:
  - Update to 8u452-b09 (GA)
  - Update release notes for 8u452-b09.
  - Remove long option documentation from JDK-8335912/JDK-8337499 as not present in 8u
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86967
  - Resolves: RHEL-86620


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-3
changelog:
  - Update to 8u462-b08 (GA)
  - Update release notes for 8u462-b08.
  - Require tzdata 2025b due to upstream inclusion of JDK-8352716
  - Add early backport of JDK-8339414
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-101648
  - Resolves: RHEL-102312
  - Resolves: RHEL-97496


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-4
changelog:
  - Bump rpmrelease for CentOS build
  - Remove obsolete hack to hardcode newer portable version on RHEL
  - Related: RHEL-101648
  - Related: RHEL-102312
  - Related: RHEL-97496


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-5
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-119329


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.472.b08-1
changelog:
  - Update to 8u472-b08 (GA).
  - Update release notes for 8u472-b08.
  - Drop local JDK-8339414 fix as this is now included upstream
  - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118767
  - Resolves: RHEL-119455


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.472.b08-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118767
  - Related: RHEL-119455
  - Related: RHEL-118775


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:11.0.15.0.10-3
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2102434


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.10-4
changelog:
  - Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Resolves: rhbz#2099839
  - Resolves: rhbz#2100676


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.7-0.1.ea
changelog:
  - Add additional patch during tarball generation to align tests with ECC changes
  - Related: rhbz#2083325


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.7-0.1.ea
changelog:
  - Update to jdk-11.0.16+7
  - Update release notes to 11.0.16+7
  - Switch to EA mode for 11.0.16 pre-release builds.
  - Use same tarball naming style as java-17-openjdk and java-latest-openjdk
  - Drop JDK-8257794 patch now upstreamed
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Make use of the vendor version string to store our version & release rather than an upstream release date
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Resolves: rhbz#2083325


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-2
changelog:
  - Update to jdk-11.0.16+8
  - Update release notes to 11.0.16+8
  - Switch to GA mode for release
  - Resolves: rhbz#2106517


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-2
changelog:
  - Update to jdk-11.0.16.1+1
  - Update release notes to 11.0.16.1+1
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2119528


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-3
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121275


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.2.ea
changelog:
  - Update to jdk-11.0.17+1
  - Update release notes to 11.0.17+1
  - Switch to EA mode for 11.0.17 pre-release builds.
  - Bump HarfBuzz bundled version to 4.4.1 following JDK-8289853
  - Bump FreeType bundled version to 2.12.1 following JDK-8290334
  - Related: rhbz#2130619


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2
changelog:
  - Update to jdk-11.0.17+8 (GA)
  - Update release notes to 11.0.17+8
  - Switch to GA mode for release
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds
  - Remove freetype sources along with zlib sources
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.3.ea
changelog:
  - Update to jdk-11.0.18+1
  - Update release notes to 11.0.18+1
  - Switch to EA mode for 11.0.18 pre-release builds.
  - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
  - Drop local copy of JDK-8275535 which is finally upstream
  - Related: rhbz#2150197


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.3.ea
changelog:
  - Update to jdk-11.0.18+9
  - Update release notes to 11.0.18+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150197


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-3
changelog:
  - Update to jdk-11.0.18+10 (GA)
  - Update release notes to 11.0.18+10
  - Switch to GA mode for release
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Backport SHA-3 support for PKCS11 provider
  - Sync patch set with portable build we are using by removing rh1648644-java_access_bridge_privileged_security.patch
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-2
changelog:
  - Update to jdk-11.0.19.0+7
  - Update release notes to 11.0.19.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Rebase FIPS support against 11.0.19+6
  - Rebase RH1750419 alt-java patch against 11.0.19+6
  - Replace local copies of JDK portable binaries with build dependencies
  - Use portable build on x86_32 now one is available
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-3
changelog:
  - Revert "Restore native build for x86 as there is no portable build"
  - Reintroduce useful cleanups from x86 reversion
  - Adjust oj_vendor_version & oj_vendor_bug_url to match the portable so test passes
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-4
changelog:
  - Include the java-11-openjdk-portable.spec file with instructions on how to rebuild.
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1
changelog:
  - Update to jdk-11.0.20.0+8 (GA)
  - Update release notes to 11.0.20.0+8
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
  - Bump tzdata requirement to 2023c now it is available in the buildroot
  - Bump bundled LCMS version to 2.15 as in jdk-11.0.20+1.
  - Bump bundled HarfBuzz version to 7.0.1 as in jdk-11.0.20+7
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2217715
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-3
changelog:
  - Fix tzdata requirement copy-and-paste error that led to two BuildRequires and no Requires
  - Resolves: rhbz#2224420


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1
changelog:
  - Update to jdk-11.0.20.1+1 (GA)
  - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
  - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Resolves: rhbz#2236590


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.12.0.7-3
changelog:
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set rpmrelease to 3
  - Set portablesuffix to el9


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.13+1 (EA)
  - Update .gitignore to ignore openjdk-17.0.13+1-ea.tar.xz
  - Synchronize java-17-openjdk-portable.specfile
  - Set updatever to 13
  - Set buildver to 1
  - Set is_ga to 0
  - Update sources to openjdk-17.0.13+1-ea.tar.xz
  - Related: RHEL-58785
  - Remove 0001-8332174-Remove-2-unpaired-RLO-Unicode-characters-in-.patch
  - Remove unicode section from rpminspect.yml, fixed instead by
    https://gitlab.cee.redhat.com/osci/rpminspect-data-redhat/-/merge_requests/180
    (OPENJDK-2904)
  - Related: RHEL-58785


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.9-0.1.ea
changelog:
  - Update to jdk-17.0.13+9 (EA)
  - Update .gitignore to ignore openjdk-17.0.13+9-ea.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set buildver to 9
  - Set rpmrelease to 1
  - Set portablerelease to 1
  - Update sources to openjdk-17.0.13+9-ea.tar.xz
  - Related: RHEL-58785


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.10-0.1.ea
changelog:
  - Update to jdk-17.0.13+10 (EA)
  - Update .gitignore to ignore openjdk-17.0.13+10-ea.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set buildver to 10
  - Update sources to openjdk-17.0.13+10-ea.tar.xz
  - Related: RHEL-58785


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.13.0.10-0.2.ea
changelog:
  - Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
  - Set rpmrelease to 2
  - Related: RHEL-58785


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.11-2
changelog:
  - Update to jdk-17.0.13+11 (GA)
  - Update .gitignore to ignore openjdk-17.0.13+11.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set buildver to 11
  - Set is_ga to 1
  - Update sources to openjdk-17.0.13+11.tar.xz
  - Resolves: RHEL-58785
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.13.0.11-4
changelog:
  - Set this to be the default/system JDK providing 'java', 'jre', 'java-devel', etc.
  - Set rpmrelease to 4
  - Resolves: RHEL-63034


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.14+1 (EA)
  - Add to .gitignore openjdk-17.0.14+1-ea.tar.xz
  - Set updatever to 14
  - Set buildver to 1
  - Set rpmrelease to 2
  - Set is_ga to 0
  - Update sources to openjdk-17.0.14+1-ea.tar.xz
  - Double percent signs consistently throughout comments
  - Set bundled giflib provide version to 5.2.2
  - Set bundled libpng provide version to 1.6.43
  - Warn about bundled provide version bumps and backouts in openjdk_news.sh
  - Remove 0001-8332174-Remove-2-unpaired-RLO-Unicode-characters-in-.patch file
  - Revert: Use component in EPEL and Fedora bug URLs


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.7-2
changelog:
  - Update to jdk-17.0.14+7 (GA)
  - Add to .gitignore openjdk-17.0.14+7.tar.xz
  - Set buildver to 7
  - Set is_ga to 1
  - Update sources to openjdk-17.0.14+7.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Resolves: RHEL-73981
  - Resolves: RHEL-73559
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.15.0.6-2
changelog:
  - Update to jdk-17.0.15+6 (GA)
  - Add to .gitignore openjdk-17.0.15+6.tar.xz
  - Set updatever to 15
  - Set buildver to 6
  - Update sources to openjdk-17.0.15+6.tar.xz
  - Set bundled freetype provide version to 2.13.2
  - Set bundled harfbuzz provide version to 8.2.2
  - Require tzdata-java 2025a at runtime and for build
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Update FIPS patch
  - Resolves: RHEL-86627
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.16.0.8-2
changelog:
  - Update to jdk-17.0.16+8
  - Add to .gitignore openjdk-17.0.16+8.tar.xz
  - Set updatever to 16
  - Set buildver to 8
  - Set rpmrelease to 2
  - Update sources to openjdk-17.0.16+8.tar.xz
  - Resolves: RHEL-101788
  - Resolves: RHEL-101795
  - Resolves: RHEL-101796
  - Resolves: RHEL-101797
  - Resolves: RHEL-102283
  - Resolves: RHEL-102286
  - Resolves: RHEL-102285
  - Resolves: RHEL-102284
  - Require tzdata-java 2025b at runtime and for build
  - Set bundled freetype provide version to 2.13.3
  - Set bundled harfbuzz provide version to 10.4.0
  - Set bundled lcms2 provide version to 2.17.0
  - Set bundled libpng provide version to 1.6.47
  - Recommend pipewire
  - Related: RHEL-102667
  - Resolves: RHEL-102669
  - Resolves: RHEL-102670
  - Resolves: RHEL-102672
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.17.0.10-1
changelog:
  - Update to jdk-17.0.17+10 (GA)
  - Add to .gitignore openjdk-17.0.17+10.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set updatever to 17
  - Set buildver to 10
  - Set rpmrelease to 1, remove 'must start at 2' comment
  - Set bundled harfbuzz version to 11.2.0
  - Update sources to openjdk-17.0.17+10.tar.xz
  - Resolves: RHEL-119458
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.7-0.1.ea
changelog:
  - Update to jdk-21.0.3+7 (EA)
  - Update release notes to 21.0.3+7
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - Drop JDK-8009550 which is now available upstream
  - Re-generate FIPS patch against 21.0.3+7 following backport of JDK-8325254
  - Resolves: RHEL-30946


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.9-1
changelog:
  - Update to jdk-21.0.3+9 (GA)
  - Update release notes to 21.0.3+9
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-32424


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.4+1 (EA)
  - Update release notes to 21.0.4+1
  - Switch to EA mode
  - Bump LCMS 2 version to 2.16.0 following JDK-8321489
  - Add zlib build requirement or bundled version (1.3.1), depending on system_libs setting
  - Restore NEWS file so portable can be rebuilt
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-45355
  - Resolves: RHEL-46029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.5-0.1.ea
changelog:
  - Update to jdk-21.0.4+5 (EA)
  - Update release notes to 21.0.4+5
  - Limit Java only tests to one architecture using jdk_test_arch
  - Actually require tzdata 2024a now it is available in the buildroot
  - Resolves: RHEL-45355
  - Resolves: RHEL-47395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-1
changelog:
  - Update to jdk-21.0.4+7 (GA)
  - Update release notes to 21.0.4+7
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - Add missing section headers in NEWS
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
  - Resolves: RHEL-47023


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-2
changelog:
  - Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
  - Handle debugedit being a separate package installed in /usr on RHEL/CentOS 10
  - Add build scripts to repository to ease remembering all CentOS & RHEL targets and options
  - Related: RHEL-58797


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.9-0.2.ea
changelog:
  - Update to jdk-21.0.5+9 (EA)
  - Update release notes to 21.0.5+9
  - Switch to EA mode
  - Bump giflib version to 5.2.2 following JDK-8328999
  - Bump libpng version to 1.6.43 following JDK-8329004
  - Sync with RHEL 7 portable build:
    - Use ExclusiveArch over ExcludeArch
    - pkgos definition needs to be early enough to be used in portablesuffix
  - Make build scripts executable
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-58797
  - Resolves: RHEL-17191


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-2
changelog:
  - Update to jdk-21.0.5+10 (GA)
  - Update release notes to 21.0.5+10
  - Switch to GA mode.
  - Revert JDK-8327501 & JDK-8328366 backport until more mature.
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Resolves: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-3
changelog:
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Related: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-2
changelog:
  - Update to jdk-21.0.5+11 (GA)
  - Update release notes to 21.0.5+11
  - Remove local JDK-8327501 & JDK-8328366 backport as this is now upstream.
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-3
changelog:
  - Transition to the devkit build by not defining pkgos
  - Exempt x86_64 from the static libs debuginfo test until portable uses an older DWARF version
  - Sync the copy of the portable specfile with the devkit version
  - Include the devkit specfile and patches
  - Document the devkit in README.md
  - Resolves: RHEL-74403


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-1
changelog:
  - Update to jdk-21.0.6+7 (GA)
  - Update release notes to 21.0.6+7
  - Sync the copy of the portable & devkit specfiles with the latest update
  - Include the latest devkit patches
  - Update README.md to list an easier way of disabling the devkit
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **
  - Resolves: RHEL-73562


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-1
changelog:
  - Update to jdk-21.0.7+6 (GA)
  - Update release notes to 21.0.7+6
  - Rebase FIPS support against 21.0.7+5
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86984
  - Resolves: RHEL-86635


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-2
changelog:
  - Add local version of JDK-8351500 for early interim release before 21.0.8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-90309


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.8+1 (EA)
  - Update release notes to 21.0.8+1
  - Bump freetype version to 2.13.3 following JDK-8348596
  - Bump harfbuzz version to 10.4.0 following JDK-8348597
  - Bump lcms2 version to 2.17.0 following JDK-8348110
  - Bump libpng version to 1.6.47 following JDK-8348598
  - Switch to EA mode
  - Drop JDK-8351500 local patch which is now available in 21.0.8+1 upstream
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-101798


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Related: RHEL-103209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.2-0.1.ea
changelog:
  - Update to jdk-21.0.8+2 (EA)
  - Update release notes to 21.0.8+2
  - Sync the copy of the portable specfile with the latest update
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Related: RHEL-101798
  - Resolves: RHEL-103209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.8-0.1.ea
changelog:
  - Update to jdk-21.0.8+8 (EA)
  - Update release notes to 21.0.8+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-101798


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland
  - Resolves: RHEL-102677


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1.1
changelog:
  - Update to jdk-21.0.8+9 (GA)
  - Update release notes to 21.0.8+9
  - Switch to GA mode
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-102289


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-1
changelog:
  - Update to jdk-21.0.9+10 (GA)
  - Update release notes to 21.0.9+10
  - Bump harfbuzz version to 11.2.0 following JDK-8355528
  - Add NEWS corrections from Thomas
  - Use double spacing consistently in notes for this release
  - Correct 11u release reference to corresponding 21u release as pointed out by Kieran
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118774
  - Resolves: RHEL-119466


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118774
  - Related: RHEL-119466


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Create java-25-openjdk package based on java-21-openjdk
  - Update to jdk-25.0.1+8 (GA)
  - Update release notes with features of JDK 22, 23, 24 & 25
  - Mention finalisation JEP for features finalised in JDK 22, 23 & 24
  - Update release notes to 25.0.1+8
  - Update README file for java-25-openjdk
  - Make sure this is not the default/system JDK providing 'java', 'jre', 'java-devel' ,etc.
  - Remove 21u FIPS patch and disable use until we are ready for the 25 version
  - Adjust CLDR expectations in TestTranslations.java after JDK-8317979 started using tzdata values
  - Adjust TestTranslations.java to expect the same short name throughout for fr_FR and de_DE (bug?)
  - Remove references to libsystemconf.so and nss.fips.cfg from the 21u FIPS patch
  - Include static libraries in the vm_variant subdirectory after JDK-8307858 (libjvm.a)
  - Flip equals test in TestSecurityProperties.java to handle null values from Security.getProperty
  - Introduce crypto_policy_active to designate whether we should expect policy adherence in testing
  - Flip crypto_policy_active to false while the crypto policy & FIPS patch is not present
  - Handle new libsimdsort.so introduced on x86_64 only by JDK-8309130
  - Remove lible.so handling following its removal in JDK-8327476: "Upgrade JLine to 3.26.1"
  - Install jaxp-strict.properties.template added by JDK-8330542: "Template for Creating Strict JAXP Configuration File"
  - alt-java man page installation is now handled by the OpenJDK build
  - Adjust TestTranslations.java with updated German translations from CLDR 46 (JDK-8333582) (Mountain->Mountains)
  - Run javap with the disassembled code (-c) option now required for -l by JDK-8345145
  - Remove default.policy and java.policy following JDK-8338411: "Permanently Disable the Security Manager"
  - Make man page handling dependent on pandoc being available during the portable build
  - Handle new CDS archive variants (*_coh*) added by Compact Object Headers (JDK-8305895)
  - Add missing man page alternatives for jdeprscan, jfr, jhsdb, jimage, jlink & jmod and fix alphabetical ordering
  - Support jnativescan added by JDK-8317611: "Add a tool like jdeprscan to find usage of restricted methods"
  - Add recent native libraries to _privatelibs (libjsvml.so, libsimdsort.so, libsyslookup.so)
  - Support libsleef on AArch64 & RISC-V added by JDK-8329816, JDK-8320500 (RISC-V) & JDK-8312425 (AArch64)
  - Remove superfluous backslashes that cause two alternative commands to be combined
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-126022


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Add libnssadapter.so
  - Add FIPS crypto-policies configuration
  - Remove obsolete security.useSystemPropertiesFile setup
  - Update TestSecurityProperties.java test and calling convention
  - Resolves: RHEL-128414
  - Resolves: RHEL-128412


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS
  - Patch the nssadapter build to recognise LDFLAGS
  - Resolves: RHEL-131898


author: Orion Poplawski <orion@nwra.com> - 0.19-3
changelog:
  - Use autoreconf -f to remove rpath
  - Use --disable-static to disable static builds
  - Use current make macros


author: Jiri Vanek <jvanek@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - criu-devel moved to BR
  - now requires criu-libs
  - enabled debuginfo generation
  - excluded i686 build as criu is 64b only
  - .so file moved out of jar. Required teo patches:
  - added and applied patch0 output_loc.patch
  - added and applied patch1 load_library.patch
  - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.3.20210802a3007aa
changelog:
  - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9.
  - This also ensures use of the standard build flags and installs the jar in the expected location.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.4.20210807b2d3751
changelog:
  - Update to latest upstream version with renamed package and consistent use of "jigawatts"
  - Drop library patch which is no longer needed.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.0~SNAPSHOT^20210827.a5f8e31-1
changelog:
  - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.21.0.0.0-4
changelog:
  - Bump release number to make RHEL 9.1 build later than RHEL 9 Beta & RHEL 9 GA builds
  - Resolves: rhbz#2071920


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.2-1
changelog:
  - Rebase to JSS 5.0.2
  - Bug 2029838 - SHA1withRSA being listed in signing certificates while approving certificate via Agent page in browser


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.3-1
changelog:
  - Rebase to JSS 5.0.3
  - Bug 2046023 - CVE-2021-4213 jss: memory leak in TLS connection leads to OOM [rhel-9.0]


author: Zamir SUN <zsun@fedoraproject.org> - 0-0.17.20191127gitbd56a60
changelog:
  - Workaround "multiple definition of `yyin'"
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=1799559


author: Cestmir Kalina <ckalina@redhat.com> - 0.24
changelog:
  - Fix annocheck failures
  - Fix osci tier0 test reference
  - Fix ET_DYN vmlinux namespace support
  - Resolves: rhbz#2038913
  - Resolves: rhbz#2045976
  - Resolves: rhbz#2038892


author: Akira TAGOH <tagoh@redhat.com> - 2.5-35
changelog:
  - Drop gtk2 dependency completely.
  - Make anthy build conditionally for Fedora release only.
    Resolves: rhbz#1939777
  - Fix build fail without anthy-devel.


author: Christine Caulfield <ccaulfie@redhat.com> - 2.2.8-6
changelog:
  - fix "Keepalived claims that blackhole route doesn't have interface and can't be tracked"
    Resolves: RHEL-40520


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Set supplementary groups when dropping privileges
  - Show more descriptive error messages on missing files errors
  - Create /usr/libexec/keylime directory


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Use classic release instead of autorelease macro
  - Use classic changelog instead of autochangelog macro


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.6-1
changelog:
  - Rebase to non-beta version, because upstream says it should to be used
    https://github.com/ksh93/ksh/issues/667#issuecomment-1653665697
  - fix acl test case regression
    Resolves: #2034188


author: Steve Dickson <steved@redhat.com> 0.10-0
changelog:
  - Initial package
  - Upstream contributions by:
      - Chuck Lever <chuck.lever@oracle.com>
      - Hannes Reinecke <hare@suse.de>
      - Jeff Layton <jlayton@kernel.org>
      - Benjamin Coddington <bcodding@redhat.com>
      - David Härdeman <david@hardeman.nu>
      - Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
      - Moritz "WanzenBug" Wanzenböck <moritz.wanzenboeck@linbit.com>


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-2
changelog:
  - Rebuild with openssl3, presumably in a buildroot with xmlsec1
    linked against openssl3
  - Resolves: rhbz#1962052 - lasso: Port to OpenSSL 3.0


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Tomas Halman <thalman@redhat.com> - 2.7.0-12
changelog:
  - Fixing CVE-2025-47151
    Resolves: RHEL-126685 CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso


author: Petr Menšík <pemensik@redhat.com> - 1.7.1-2
changelog:
  - Use make_build and make_install macro instead of make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Lescak <rlescak@redhat.com> - 1.7.1-9
changelog:
  - Fix for CVE-2020-19860 ldns: heap overread vulnerability (#2051211)
  - Added also patch for deprecated distutils Python module used in build


author: Michal Ruprich <mruprich@redhat.com> - 4.9.2-8
changelog:
  - Adding a timeout for TLS close
  - Resolves: RHEL-113471 - "cannot seek on data source" in TLS lftp sessions


author: José Expósito <jexposit@redhat.com> - 1.7.0-9
changelog:
  - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
  - Fix CVE-2023-43786: stack exhaustion from infinite recursion in
    PutSubImage()
  - Fix CVE-2023-43787: integer overflow in XCreateImage() leading to
    a heap overflow


author: RHEL Packaging Agent <jotnar@redhat.com> - 1.8.12-1
changelog:
  - Rebase to version 1.8.12
  - Update license to MIT AND X11 (SPDX migration)
  - Change source format from .tar.bz2 to .tar.xz
  - Add libtool as BuildRequires
  - Remove CVE patches (now included upstream)
  - Add patch to lower autoconf requirement to 2.69
  - Update dont-forward-keycode-0.patch for new codebase
  - Remove NEWS from %doc (file not present in 1.8.12)
  - Resolves: RHEL-111537


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: José Expósito <jexposit@redhat.com> - 3.5.13-9
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.16-1
changelog:
  - Update to 0.7.15
  - Add UPL short name to SPDX conversion
  - Allow parsing desktop files using as_app_parse_data()
  - Do not preserve restrictive permissions when installing AppStream files
  - Modernize the validation requirements
  - Remove relative path from icon names
  - Support loading YAML from as_store_from_bytes()
  - Update list of allowed metadata licences
  - Update the SPDX license list to v3.5


author: Richard Hughes <richard@hughsie.com> 0.7.17-1
changelog:
  - New upstream release
  - Add "icon-theme" as recognised component type
  - Fix CI by moving 'future' back a bit
  - Make default content rating values match OARS semantics
  - Properly initialize unique_id_mutex


author: Richard Hughes <richard@hughsie.com> 0.7.18-1
changelog:
  - New upstream release
  - Add content rating system APIs from gnome-software
  - Add "validate-version" command
  - Allow timestamp in the future in validate-relax
  - Don't ignore localized strings that are the same as original
  - Fix crash with invalid children of <ul/>
  - Properly initialize mutexes
  - Test launchable tags in validation


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.3.0 base"


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-4
changelog:
  - nvme: Fix namespace identifiers
    Resolves: rhbz#2151535
  - nvme: Avoid sending NVME_IDENTIFY_CNS_NS_DESC_LIST on older devices
    Related: rhbz#2151535


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-5
changelog:
  - Allow resizing of inactive LVs with latest LVM
    Resolves: rhbz#2161181
  - Fix test_swapon_pagesize on systems with 64k pages
    Resolves: rhbz#2168220


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: José Expósito <jexposit@redhat.com> - 2.4.123-2
changelog:
  - Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches")
    libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x
    Resolves: https://issues.redhat.com/browse/RHEL-53869


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040454


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.19.3-6
changelog:
  - Add support for the Wacom Intuos Pro (RHEL-105483)
  - Rename existing patches for better order clarity


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-3
changelog:
  - Minor fixes for Python 3.12 compatibility
  - Fix Python unit tests to use the right assert methods
  - Explicitly BR python3-setuptools


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Michal Ruprich <mruprich@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64
  - Fix for CVE-2020-28241


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.6-1
changelog:
  - Rebase to new stable branch version 1.12.6
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660
  - Fix remote TLS failures
    resolves: rhbz#2111524
    (and 2111813)


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Adrian Reber <areber@redhat.com> - 1.2-5
changelog:
  - Repack tarball to remove problematic license from unused code
  - Apply fixes for warnings found by gcc -fanalyzer


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: Michel Normand <normand@linux.vnet.ibm.com> 1.1.0-5
changelog:
  - Add remove_2_backslashes_in_shell_call.patch
    Add remove_eng_inc_in_version_pl.patch
    to avoid f33 build failure


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Remi Collet <remi@remirepo.net> - 0.11.0-1
changelog:
  - update to 0.11.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/665


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.8.1-8
changelog:
  - Resolves: rhbz#2134759 Untrusted Macros
  - Resolves: rhbz#2134757 Weak Master Keys
  - Resolves: rhbz#2134755 Static Initialization Vector
  - Resolves: rhbz#2134761 Macro URL arbitrary script execution


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Daiki Ueno <dueno@redhat.com> - 4.9-2
changelog:
  - Fix CVE-2023-23009: remote DoS via crafted TS payload with an
    incorrect selector length (rhbz#2173674)


author: Sahana Prasad <sahana@redhat.com> - 4.9-3
changelog:
  - Fix CVE-2023-30570:Malicious IKEv1 Aggressive Mode packets can crash
    libreswan
  - Resolves: rhbz#2187171


author: Sahana Prasad <sahana@redhat.com> - 4.9-5
changelog:
  - Just bumping up the version to include bugs for CVE-2023-2295. There is no
    code fix for it. Fix for it is including the code fix for CVE-2023-30570.
  - Fix CVE-2023-2295 Regression of CVE-2023-30570 fixes in the
    Red Hat Enterprise Linux
  - Resolves: rhbz#2189777, rhbz#2190148


author: Daiki Ueno <dueno@redhat.com> - 4.15-2
changelog:
  - Fix auto=ondemand connection initialization with TCP (RHEL-51879)
  - Make use of Netlink extack for additional error reporting (RHEL-51881)


author: Daiki Ueno <dueno@redhat.com> - 4.15-4
changelog:
  - pluto: fix refcounting of whack FD at CREATE_CHILD_SA request (RHEL-61461)
  - pluto: ignore CREATE_CHILD_SA request if crypto is in progress (RHEL-61461)


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.99.20-1
changelog:
  - 1900160 - sane-airscan-0.99.20 is available
  - 1897935 - Crash on libsane-airscan when trying to activate scanner


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    Resolves: rhbz#1970826 rhbz#1970839 rhbz#1970857 rhbz#1970847


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.31-6
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985029)


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-9
changelog:
  - Add patches for CVE-2024-52530, CVE-2024-52531, and CVE-2024-52532
    Resolves: RHEL-67069
    Resolves: RHEL-67081


author: Kalev Lember <klember@redhat.com> - 2.72.0-2
changelog:
  - Tighten soname globs
  - Avoid automatic requires on sysprof-devel package
  - Update required glib2 version


author: Kalev Lember <klember@redhat.com> - 2.72.0-5
changelog:
  - Don't try to avoid sysprof dep any more now that sysprof-capture-devel is
    split out to a separate subpackage


author: Matej Mužila <mmuzila@redhat.com> 4.4.0-2
changelog:
  - Update to version 4.4.0
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354
    CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Michal Hlavinka <mhlavink@redhat.com> - 4.4.0-14
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337)


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-8
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188916)
  - tests: Use stronger passphrases for LUKS tests (#2188750,#2188752)
  - integration-test: Fix scsi_debug cd drive read-only detection (#2211191)
  - lvm2: Improve uevent processing (#2031673)
  - tests: Mark test_job.UdisksJobTest.test_job as unstable (#2148844)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-4
changelog:
  - Fix a couple of issues found by Coverity (#1938890)
  - Ignore systemd "Extended Boot Loader" GPT partition


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-1
changelog:
  - Version 2.9.4 (#2010363)
  - CVE-2021-3802: Harden the default mount options for ext filesystems (#2004423)
  - Fix double free on daemon exit (unaligned fastbin chunk) (#2001549)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.5-1
changelog:
  - Update license to GPL-2.0 OR MIT
  - Add io_uring_prep_epoll_ctl()
  - Add io_uring_get_probe(), io_uring_get_probe_ring()
  - Add io_uring_register_probe()
  - Add io_uring_{register,unregister}_personality()
  - Add io_uring_prep_{recv,send}()
  - Add io_uring_prep_openat2()
  - Add io_uring_ring_dontfork()
  - Add io_uring_prep_read() and io_uring_prep_write()
  - Documentation fixes and improvements


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.6-1
changelog:
  - add io_uring_prep_splice()
  - add io_uring_prep_provide_buffers()
  - add io_uring_prep_remove_buffers()
  - add io_uring_register_eventfd_async()
  - reinstate io_uring_unregister_eventfd() (it was accidentally removed in 0.4)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.7-1
changelog:
  - Add io_uring_cq_eventfd_toggle() helper for new IORING_CQ_EVENTFD_DISABLED flag
  - Add IORING_OP_TEE
  - Documentation fixes and improvements


author: Jeff Moyer <jmoyer@redhat.com> - 2.12-1.el9
changelog:
  - Rebase to version 2.12.  Follow fedora and get rid of explicit %
    attr for library files
  - Resolves: RHEL-114115


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-4
changelog:
  - conf, docs: Add support for direct and extended tlbflush features (RHEL-7122)
  - qemu: Add support for direct and extended tlbflush features (RHEL-7122)
  - conf: refactor hyperv features formatting (RHEL-7122)
  - conf: Adjust hyperv tlbflush formatting (RHEL-7122)
  - qemu_migration: Do not consider post-copy active in postcopy-recover (RHEL-73085)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-5
changelog:
  - qemu: allow migration of guest with mdev vGPU to VF vGPU (RHEL-68064)
  - storage_file: Refuse qcow2 images with empty string as 'data_file' (RHEL-73504)
  - virstoragetest: Add case for qcow2 image with empty string as 'data_file' (RHEL-73504)
  - qemu: snapshot: delete disk image only if parent snapshot is external (RHEL-74041)
  - storage_file: de-modularize the local file backend (RHEL-73507)
  - libvirt.spec: Move ownership of 'storage-file' backends directory to gluster (RHEL-73507)
  - qemu: re-use existing ActualNetDef for more interface types during update-device (RHEL-7036)
  - tools: ssh-proxy: Check for domain status before parsing its CID (RHEL-75577)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-6
changelog:
  - build: Bump minimum glib2 version to 2.66.0 (RHEL-77884)
  - qemuProcessHandleIOError: Refactor to extract 'priv' instead of 'driver' (RHEL-77884)
  - qemu: Handle quirks of 'device' field of BLOCK_IO_ERROR event in monitor code (RHEL-77884)
  - qemu: Rename 'diskAlias' to 'device' in qemu IO error event handling (RHEL-77884)
  - qemuProcessHandleIOError: Rename local variables (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Do not munge 'reason' field of IO error event (RHEL-77884)
  - qemuProcessHandleIOError: Prefer lookup by node name (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Propagate new 'qom-path' field (RHEL-77884)
  - virStorageSource: Add fields for storing last I/O error message (RHEL-77884)
  - qemuProcessHandleIOError: Populate I/O error reason to virStorageSource (RHEL-77884)
  - qemuProcessHandleIOError: Log IO errors in the VM log file (RHEL-77884)
  - libxlDomainGetMessages: Add existing flags to 'virCheckFlags' (RHEL-77884)
  - virDomainObjGetMessages: Refactor using GPtrArray (RHEL-77884)
  - virDomainGetMessages: Introduce VIR_DOMAIN_MESSAGE_IOERRORS (RHEL-77884)
  - include: libvirt-domain: Reword documentation for @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - include: libvirt-domain: Add 'message' @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - qemuSnapshotForEachQcow2: Don't initialize 'nrollback' (RHEL-73315)
  - qemu: process: Export qemuPrepareNVRAM for use in snapshot code (RHEL-73315)
  - qemu: snapshot: Ensure that NVRAM image exists when taking inactive internal snapshot (RHEL-73315)
  - qemuxmlconftest: Allow testing of the 'writable' flag for passed FDs for disks (RHEL-37519)
  - qemuxmlconftest: Add testing of FDs with 'writable' flag in 'disk-source-fd' (RHEL-37519)
  - qemu: domain: Initialize FD passthrough for a virStorageSource before using it (RHEL-37519)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-7
changelog:
  - qemu_migration: Refactor qemuMigrationSrcRestoreDomainState (RHEL-79168)
  - qemu_migration: Do not automatically resume domain after I/O error (RHEL-79168)
  - qemucapabilitiestest: Add data for the qemu-10.0 dev cycle on x86_64 (RHEL-79095)
  - qemucapabilitiestest: Update 'caps_10.0.0_x86_64' to 'v9.2.0-1636-gffaf7f0376' (RHEL-79095)
  - qemu: capabilies: Introduce QEMU_CAPS_BLOCKDEV_SET_ACTIVE (RHEL-79095)
  - qemu: monitor: Add monitor backend for 'blockdev-set-active' (RHEL-79095)
  - qemu: migration: Reactivate block nodes after migration if VM is left paused (RHEL-79095)
  - conf: change virDomainHostdevInsert() to return void (RHEL-69455)
  - qemu: fix qemu validation to forbid guest-side IP address for type='vdpa' (RHEL-69455)
  - qemu: validate that model is virtio for vhostuser and vdpa interfaces in the same place (RHEL-69455)
  - qemu: automatically set model type='virtio' for interface type='vhostuser' (RHEL-69455)
  - qemu: do all vhostuser attribute validation in qemu driver (RHEL-69455)
  - conf/qemu: make <source> element *almost* optional for type=vhostuser (RHEL-69455)
  - qemu: use switch instead of if in qemuProcessPrepareDomainNetwork() (RHEL-69455)
  - qemu: make qemuPasstCreateSocketPath() public (RHEL-69455)
  - qemu: complete vhostuser + passt support (RHEL-69455)
  - qemu: fail validation if a domain def has vhostuser/passt but no shared mem (RHEL-69455)
  - docs: improve type='user' docs to higlight differences between SLIRP and passt (RHEL-69455)
  - docs: document using passt backend with <interface type='vhostuser'> (RHEL-69455)
  - utils: Canonicalize paths before comparing them (RHEL-79166)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-8
changelog:
  - remote: add sysusers file to create 'libvirt' group (RHEL-81749)
  - qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU (RHEL-81747)
  - qemu_snapshot: allow reverting to external disk only snapshot (RHEL-21549)
  - qemu: snapshot: error out early when reverting snapshot for VM with non-file disk (RHEL-30971)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-9
changelog:
  - util: introduce object for holding a system inhibitor lock (RHEL-83064)
  - src: convert drivers over to new virInhibitor APIs (RHEL-83064)
  - rpc: remove logind support for virNetDaemon (RHEL-83064)
  - util: fix off-by-1 in inhibitor constants (RHEL-83064)
  - util: don't attempt to acquire logind inhibitor if not requested (RHEL-83064)
  - network: Free inhibitor in networkStateCleanup() (RHEL-83064)
  - conf: introduce support for multiple ACPI tables (RHEL-81041)
  - src: validate permitted ACPI table types in libxl/qemu drivers (RHEL-81041)
  - src: introduce 'raw' and 'rawset' ACPI table types (RHEL-81041)
  - qemu: support 'raw' ACPI table type (RHEL-81041)
  - libxl: support 'rawset' ACPI table type (RHEL-81041)
  - conf: support MSDM ACPI table type (RHEL-81041)
  - qemu: support MSDM ACPI table type (RHEL-81041)
  - qemuxmlconftest: Include shared memory 'net-vhostuser' test cases (RHEL-84133)
  - qemuValidateDomainDeviceDefNetwork: Require shared memory for all vhost-user interfaces (RHEL-84133)
  - qemu: process: Remove un-updated 'qemuProcessStartWarnShmem' (RHEL-84133)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-10
changelog:
  - esxConnectListAllDomains: Don't propagate failure to lookup a single domain (RHEL-80606)
  - conf: parse interface/source/@dev for all interface types (with backend type='passt') (RHEL-82539)
  - libvirt-host: Clarify/fix description of the CPU frequency field (RHEL-86197)
  - virNodeGetInfo: Improve description of the case when fake data is reported (RHEL-86197)
  - manpages: virsh: Use disclaimer from 'virNodeGetInfo()' for 'virsh nodeinfo' (RHEL-86197)
  - esx: Accept empty "path" URI component same way as "/" (RHEL-86459)
  - qemu: Rename outgoingMigration parameter in various TPM functions (RHEL-86800)
  - qemu: Properly propagate migration state to TPM cleanup code (RHEL-86800)
  - qemuDomainBlockCopyCommon: Don't revoke access to file twice on failure (RHEL-7357)
  - qemuxmlconftest: Drop s390-default-cpu-...ccw-virtio-2.7 test cases (RHEL-72976)
  - tests: add capabilities for QEMU 10.0.0 on s390x (RHEL-72976)
  - qemu: Do NOT autoadd NUMA node for s390 (RHEL-72976)
  - qemu_command: Use qemuBuildVirtioDevProps() to build cmd line for virtio-mem and virtio-pmem (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-pci-s390x.xml (RHEL-72976)
  - qemu_caps: Introduce QEMU_CAPS_DEVICE_VIRTIO_MEM_CCW (RHEL-72976)
  - qemu: Validate virtio-mem-ccw (RHEL-72976)
  - qemu: Allow virtio-mem on CCW (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-ccw-s390x.xml (RHEL-72976)
  - qemu_domain_address: fix CCW virtio-mem hotplug (RHEL-72976)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-11
changelog:
  - Add load average information type into virDomainGetGuestInfo (RHEL-88447)
  - qemu_agent: Add qemuAgentGetLoadAvg() (RHEL-88447)
  - qemu: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88447)
  - virsh: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88447)
  - qemu_capabilities: Fetch caps for virtio-mem-ccw too (RHEL-87532)
  - cpu_map: Add avx10* CPU features (RHEL-87796)
  - cpu_map: Add GraniteRapids-v2 CPU model (RHEL-87796)
  - cpu_map: Add sha512, sm3, and sm4 CPU features (RHEL-87796)
  - virsh: Introduce new hypervisor-cpu-models command (RHEL-11435)
  - qemu: remove nonsensical sanity check in processNetdevStreamDisconnectedEvent() (RHEL-80169)
  - qemu: make processNetDevStreamDisconnectedEvent() reusable (RHEL-80169)
  - qemu: respond to NETDEV_VHOST_USER_DISCONNECTED event (RHEL-80169)
  - qemu: put vhost-user code that's special for passt in a helper function (RHEL-80169)
  - qemu: make passt+vhostuser reconnect behave identically to passt+user (RHEL-80169)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-12
changelog:
  - qemuMonitorJSONGetCPUModelExpansion: refactor parsing functions (RHEL-89415)
  - qemu: parse deprecated-props from query-cpu-model-expansion response (RHEL-89415)
  - qemu_capabilities: query deprecated features for host-model (RHEL-89415)
  - libvirt-domain: introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_DISABLE_DEPRECATED_FEATURES (RHEL-89415)
  - qemu_capabilities: filter deprecated features if requested (RHEL-89415)
  - virsh: add --disable-deprecated-features flag to domcapabilities (RHEL-89415)
  - conf: add deprecated_features attribute (RHEL-89415)
  - redhat: Restore hunks in tests/qemucapabilitiesdata/caps_10.0.0_s390x.* (RHEL-89415)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-14
changelog:
  - qemu: introduce QEMU_CAPS_AMD_IOMMU (RHEL-50560)
  - qemu: introduce QEMU_CAPS_PCI_ID (RHEL-50560)
  - docs: formatdomain: document intel-only IOMMU attributes (RHEL-50560)
  - qemu: add IOMMU model amd (RHEL-50560)
  - conf: add passthrough and xtsup attributes for IOMMU (RHEL-50560)
  - esx: Allow specifying different CA bundle for remote connections (RHEL-97440)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-15
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-106276)
  - qemu: sanitize blank lines in config file (RHEL-106276)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-106276)


author: Jiri Denemark <jdenemar@redhat.com> - 11.8.0-1
changelog:
  - Rebased to libvirt-11.8.0 (RHEL-118197)
  - The rebase also fixes the following bugs:
      RHEL-15693, RHEL-95397, RHEL-111609, RHEL-116847, RHEL-117774


author: Jiri Denemark <jdenemar@redhat.com> - 11.9.0-1
changelog:
  - Rebased to libvirt-11.9.0 (RHEL-118197)
  - The rebase also fixes the following bugs:
      RHEL-114003


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-2
changelog:
  - Drop libwacom-show-stylus, it's a debugging tool that requires extra
    dependencies that we shouldn't pull in everywhere (#2044710)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-4
changelog:
  - Add support for the Cintiq Pro 27 (RHEL-101886)
  - Add support for the Intuos Pro 3rd Gen series (RHEL-101881)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-5
changelog:
  - Rearrange the OSD buttons for the Intuos Pro 3rd Gen (RHEL-101881)
  - Use separate Ring/Ring2 assignments


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-6
changelog:
  - Add stylus definitions for the propen group (RHEL-122207)
  - Add tablet definitions for the latest Cintiqs (RHEL-122206)
  - Fix the overlap for button assignments in the SVG (RHEL-126355)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.8-17
changelog:
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update flags, enable LTO
  - Remove RANDFILE and increase default bits in ssleay.conf


author: Toke Høiland-Jørgensen <toke@redhat.com> 1.5.7-1
changelog:
  - Upstream version bump
  - Add annocheck exceptions for BPF objects (Felix)
  - Re-enable debug builds (Felix)
  - Add libcap-ng-devel to BuildDepends


author: Jakub Jelen <jjelen@redhat.com> - 1.1.33-4
changelog:
  - Do not build python bindings even if the python is available
  - Fix CVE-2019-13117 (#1728547)
  - Fix CVE-2019-13118 (#1728542)


author: Simo Sorce <simo@redhat.com> - 1.1.34-3
changelog:
  - Drop crypto dependency.
  - The "cryptography" implemented in exslt is outdated and bad supporting only
    insecure algorithms (RC4, SHA1, MD5, MD4), and should not be used anyway.


author: Michal Ruprich <mruprich@redhat.com> - 1.0.225-3
changelog:
  - Resolves: #1965253 - CVE-2021-28902 libyang: NULL pointer dereference in read_yin_container()
  - Resolves: #1965255 - CVE-2021-28903 libyang: recursive call to lyxml_parse_mem() lead to crash


author: Remi Collet <remi@remirepo.net> - 1.7.2-1
changelog:
  - update to 1.7.2
  - fix installation layout using merged patch from
    https://github.com/nih-at/libzip/pull/190


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "ppc64le-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j20  
    cd -


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-6
changelog:
  - add support for VLAN over bond (#2120521)
  - handle EINTR when waiting for transmit timestamp (#2128786)
  - check for unexpected changes in frequency offset (#2150815)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (RHEL-2026 RHEL-2342 RHEL-12182 RHEL-15929)
  - fix ts2phc to handle large NMEA delay (RHEL-23208)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-3
changelog:
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-39387)
  - fix ts2phc to correctly handle leap seconds (RHEL-40216)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-40947)
  - add options to configure multicast IP addresses (RHEL-31178)
  - add holdover support to ts2phc (RHEL-50216)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58213 RHEL-57040)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60027)
  - support static sink clocks in phc2sys automatic mode (RHEL-62864)
  - don't require -O option without -a and -w in phc2sys (RHEL-69138)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-2
changelog:
  - add experimental option for external PPS in ts2phc automatic mode
    (RHEL-72468)
  - add command to set external grandmaster properties (RHEL-90585)
  - refresh link status on faults (RHEL-56168)


author: Artem Egorenkov <aegorenk@redhat.com> - 3.6.0-7
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Tom Callaway <spot@fedoraproject.org> - 33.3.1-17
changelog:
  - hack this ancient beastie to work with lua 5.4
  - maintainer, please update this to the current upstream release at your earliest convenience


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: Marian Csontos <mcsontos@redhat.com> - 2.03.21-3
changelog:
  - Fix lvresize fail in case of multiple mountpoints.
  - Fix allocator for RAID LVs allocating multiple legs on single device.
  - Fix device id handling of WWIDs with trailing spaces.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-2
changelog:
  - Fix SPDX License identifiers.
  - Fix input units for VDO LV's minimim_io_size.
  - Fix stripe count and validation for RAID LVs.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-5
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-5
changelog:
  - Revert the CMake change regarding the in-source builds for now
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug buildchnages to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers the CMAKE_INSTALL_PREFIX="%{_prefix}" option
  - Default to %cmake commands instead fo %make commands
  - Update the WITH_UNITTEST macro to the one upstream use now
  - Introduce macro to enable / disable testusite (and building of the *-test subpackage)


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: Cornelia Huck <cohuck@redhat.com> - 0.69-1
changelog:
  - a2621934aa37 ("Merge pull request #18 from cohuck/validate")
  - ffbcef5a1c84 ("Merge pull request #25 from etrunko/master")
  - 5ec75a83bf30 ("Remove never used 'available' option")
  - d49b0f0db6b3 ("Merge pull request #23 from eskultety/man-fix")
  - 4cfe37eb2d99 ("man: Point --verbose to the 'list' command rather than 'types'")
  - a0ae49eb7178 ("Merge pull request #17 from cohuck/install_symlinks")
  - 504beba6e8f9 ("Force symlink cretion")
  - 522c5ded00ff ("Fix attribute validation")


author: Alex Williamson <alex.williamson@redhat.com> - 0.78-1
changelog:
  - e029640033d3 ("Automatic version commit for tag 0.78")
  - e32f506656fd ("use standard bash path")
  - 70690b64401f ("avoid other tags spilling into the .spec changelog")
  - 70b89c18cf5b ("Merge pull request #31 from awilliam/20201113.0")
  - 80187bc9ba03 ("Merge pull request #30 from fiuczy/fix-error-cleanup")
  - 97ea8bbeefb7 ("mdevctl: fix cleanup on error when creating and removing mdev")
  - b45d33dfd36c ("version support")
  - 2b1c16ce6fb0 ("Fix attributes getting applied via start-parent-mdevs")
  - 25d5e8d24d57 ("mdevctl: fix cleanup on error when writing to attribute")


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: José Expósito <jexposit@redhat.com> - 24.2.8-2
changelog:
  - AMD Navi4x support
    Backport fixes for radeonsi and disable GFX12 on radv
    Resolves: https://issues.redhat.com/browse/RHEL-53419


author: Anusha Srivatsa <asrivats@redhat.com> - 25.0.7-2
changelog:
  - NV dGFX fix for firefox crashing
    Backport fixes for NV dGFX driver crashing firefox
    Resolves: https://issues.redhat.com/browse/RHEL-93219


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Jakub Hrozek <jhrozek@redhat.com> - 0.17.0-6
changelog:
  - Related: rhbz#1986806 - CVE-2021-3639 mod_auth_mellon: Open Redirect
                            vulnerability in logout URLs


author: Tomas Halman <thalman@redhat.com> - 0.17.0-9
changelog:
  - Fixing mellon_create_metadata.sh script
    Resolves: RHEL-35898
  - Publishing diagnostic module in CRB repository
    Resolves: RHEL-33585


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-2
changelog:
  - Resolves: rhbz#2153656 - CVE-2022-23527 - Open Redirect in
    oidc_validate_redirect_url() using tab character


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-3
changelog:
  - Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference
    when OIDCStripCookies is set and a crafted Cookie header is supplied


author: Tomas Halman <thalman@redhat.com> - 2.4.10-1
changelog:
  Rebase to 2.4.10 version improves `state cookies piling up` problem
    Resolves: RHEL-32450 Race condition in mod_auth_openidc filecache
    Resolves: RHEL-25422 mod_auth_openidc: DoS when using
              `OIDCSessionType client-cookie` and manipulating cookies
              (CVE-2024-24814)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.4.9.1-1
changelog:
  - Resolves: rhbz#1987223 - CVE-2021-32792 mod_auth_openidc: XSS when using
                             OIDCPreservePost On [rhel-9.0]
  - Resolves: rhbz#1987217 - CVE-2021-32791 mod_auth_openidc: hardcoded
                             static IV and AAD with a reused key in AES GCM
                             encryption [rhel-9.0]
  - Resolves: rhbz#1987204 - CVE-2021-32786 mod_auth_openidc: open redirect in
                             oidc_validate_redirect_url() [rhel-9.0]


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-1
changelog:
  - Resolves: rhbz#2001852 - CVE-2021-39191 mod_auth_openidc: open redirect
                             by supplying a crafted URL in the target_link_uri
                             parameter


author: Paul Howarth <paul@city-fan.org> - 2.3.9-24
changelog:
  - Drop EL-6 support
    - Use %license unconditionally
    - _httpd_* macros always available
    - Run directory is always /run on tmpfs
    - Assume httpd ≥ 2.4 filesystem layout
    - systemd-units always provided by systemd


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-26
changelog:
  - Resolves: #1958882 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-3
changelog:
  - Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
    in forward proxy configurations


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-5
changelog:
  - Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with
    mod_rewrite and mod_proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.26-5
changelog:
  - Resolves: RHEL-108706 - CVE-2025-49630 httpd: untrusted input from a client
    causes an assertion to fail in the Apache mod_proxy_http2 module


author: Coty Sutherland <csutherl@redhat.com> - 1.2.48-20
changelog:
  - Cleanup spec file and remove .redhat-N suffix from release
  - Remove ap24 subpackage since we only need to build for one version of httpd


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-1
changelog:
  - Resolves: RHEL-25075 - new version 2.4.26
  - Resolves: RHEL-11838 - [RFE] add support of dns_01 challenge to mod_md
  - Resolves: RHEL-17462 - OCSP response rejected when nextUpdate field not set
  - Resolves: RHEL-17467 - mod_md should trigger the reissue of new pair
    key/certificate when OCSP reports a revoked status


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release


author: Fedora Release Engineering <releng@fedoraproject.org> - 2.9.3-10
changelog:
  - Resolves: #1930664 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules
  - rename mlogc to mod_security-mlogc


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-2
changelog:
  - Resolves: RHEL-93014 - mod_security: ModSecurity Has Possible DoS
    Vulnerability (CVE-2025-47947)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-3
changelog:
  - Resolves: RHEL-100098 - mod_security: ModSecurity Denial of Service
    Vulnerability (CVE-2025-48866)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-4
changelog:
  - Resolves: RHEL-30628 - mod_security: httpd doesn't close read side of pipe
    to rotatelogs for SecAuditLog leading to frozen state during graceful restart


author: Tomas Orsava <torsava@redhat.com> - 4.7.1-9
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Use the modern way of filtering Provides not to interfere with modern Python
    RPM generators
  - Related: rhbz#1990421


author: Adam Jackson <ajax@redhat.com> - 2.3.4-25
changelog:
  - Fix invoking autogen/configure so the default CFLAGS actually get applied
    Resolves: rhbz#2044881


author: José Expósito <jexposit@redhat.com> - 2.3.4-28
changelog:
  - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
  - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap


author: Olivier Fourdan <ofourdan@redhat.com> - 2.3.4-30
changelog:
  - Keep drop-down menus on the same monitor as the pull-down button with
    Xinerama
    Resolves: RHEL-92832


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Honggang Li <honli@redhat.com> - 5.7-3
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960479


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2015392


author: Davide Caratti <dcaratti@redhat.com> - 0.7-2
changelog:
  - add a simple sanity test and enable gating. Related: rhbz#1962741
  - don't overwrite global build options. Related: rhbz#1967697
  - fix 'check_conflicts' on multilib. Related: rhbz#1967697


author: Davide Caratti <dcaratti@redhat.com> - 0.8-2
changelog:
  - fix mptcpize to work also when protocol number is 0 (upstream issue #159)
    and when command resides in another file system (upstream issue #161)
    Related: rhbz#2015623


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 0.5.13-6
changelog:
  - updating line in /usr/lib/tmpfiles.d/munge.conf: /var/run/munge → /run/munge
  - add license tag
  - add requires logrotate


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Ray Strode <rstrode@redhat.com> - 40.9-18
changelog:
  - Don't allow applications on other workspaces to steal
    focus, unless their timestamps are pristine
    Resolves: RHEL-29537


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-20
changelog:
  - Fix positioning when using always-on-top windows
    Resolves: RHEL-45998
  - Improve handling of always-on-visible-workspace windows
    Resolves: RHEL-45366


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-22
changelog:
  - Fix crash when moving window while switching workspace
    Resolves: RHEL-62997
  - Improve app discovery for workspace logic
    Resolves: RHEL-63000


author: Olivier Fourdan <ofourdan@redhat.com> - 40.9-31
changelog:
  - Backport linux-dmabuf v4 support to restore hardware acceleration
    in Xwayland 24.1 with Mesa 25.2
    Resolves: RHEL-129832


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-6
changelog:
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85510
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89353


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-10
changelog:
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95814


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-9
changelog:
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141902) and (#2141906)
  - fix memory leak when ipv6 disable set to 1 (#2151540)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-14
changelog:
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26649)


author: Thomas Haller <thaller@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0 release
  - Drop NotShowIn=GNOME
  - Use wireless-security code from libnma
  - Add flatpak build configuration
  - applet: hide unmanaged ethernet devices in nm-applet
  - applet: fix Wi-Fi scan requests with appindicator
  - editor: fix drop down list for connection.secondaries


author: Steve Dickson <steved@redhat.com> 2.5.4-28
changelog:
  -  Makefile.am: allow mount.nfs to be writeable by owner (RHEL-68701)
  -  mount.nfs: retry NFSv3 mount after NFSv4 failure in auto negotiation (RHEL-68574)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-30
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-72823)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-64340)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Steve Dickson <steved@redhat.com> 2.5.4-35
changelog:
  - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
  - nfsd: allow more than 64 backlogged connections (RHEL-87752)


author: Steve Dickson <steved@redhat.com> 2.5.4-37
changelog:
  - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
  - gssd: do not use krb5_cc_initialize (RHEL-85412)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-16
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-17
changelog:
  - bump package epoch to resolve RHEL-33939
  - Resolves: RHEL-33939 - Update path for nginx broken for existing CS
    installations


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-23
changelog:
  - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER
    at nginx with reverse-proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-24
changelog:
  - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause
    denial of service (CVE-2024-7347)
  - Resolves: RHEL-85556 - nginx: Memory disclosure in the
    ngx_http_mp4_module (CVE-2022-41742)
  - Resolves: RHEL-91446 - nginx: Memory corruption in the
    ngx_http_mp4_module (CVE-2022-41741)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-25
changelog:
  - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log
    is not created when updating system in image mode


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Martin Osvald <mosvald@redhat.com> - 3:7.92-1
changelog:
  - New version 7.92
  - Resolves: #2180330 - Rebase nmap for TLS v1.3 support
  - Resolves: #2164833 - Remove duplicate tests


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 2.2.40-1
changelog:
  - Upgrade to 2.2.40
  - Do not deactivate connection when removing routes. RHEL-70138
  - Use specific libnmstate logger. RHEL-72016
  - Do not deactivate connection if mptcp flags didn't change. RHEL-53211


author: Gris Ge <fge@redhat.com> - 2.2.41-1
changelog:
  - Upgrade to 2.2.41
  - Fix the lose of OVS DB system-id. RHEL-78652
  - Support overriding interface config. RHEL-59935


author: Mingyu Shi <mshi@redhat.com> - 2.2.43-1
changelog:
  - Upgrade to 2.2.43
  - Support for vlan-egress-priority-map configuration. RHEL-67631
  - Support FEC. RHEL-80725
  - Support quickack. RHEL-80418


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Refer route next hop interface by MAC. RHEL-32495
  - Support reapply on mac-ref interface. RHEL-87794


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91291
  - Support nmpolicy against down iface. RHEL-88989
  - Support removal VLAN connection with empty ifname. RHEL-93146


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-85787
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784
  - Support matching by PCI adress. RHEL-88993
  - Apply dispatch changes first. RHEL-101742
  - Fix SRIOV VF reference. RHEL-93180


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526
  - Fix setting DNS only with search or option. RHEL-104797


author: Mingyu Shi <mshi@redhat.com> - 2.2.50-1
changelog:
  - Upgrade to 2.2.50
  - Support MAC referring for VLAN in gen_conf. RHEL-110369
  - Introduce state: ignore for route. RHEL-107130
  - Support PCI address matching in gen_conf. RHEL-110369
  - Support MacSec interface in gen_conf. RHEL-110369


author: Gris Ge <fge@redhat.com> - 2.2.54-1
changelog:
  - Upgrade to 2.2.54.
  - Automatically set HSR port MAC address. RHEL-122171
  - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992


author: Gris Ge <fge@redhat.com> - 2.2.56-1
changelog:
  - Upgrade to 2.2.56
  - Allow using VRF name to specify route table. RHEL-123541
  - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052
  - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731
  - Support rightca ipsec option. RHEL-123542


author: Jan Staněk <jstanek@redhat.com> - 1:22.13.1-1
changelog:
  - Update to version 22.13.1
    Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76354


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.13.1-2
changelog:
  - Remove obsolete lua pretransaction script from spec file
    Resolves: RHEL-81119
  - Disable npm update notifications for users
    Resolves: RHEL-81079


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-4
changelog:
  - FIPS review changes
  -   add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
  -   update the indicators for this release
  -   allow hashing of longer than int32 values in a single PKCS #11 call.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-5
changelog:
  - Pick up validated constant time implementations of p256, p384, and p521
    from upsream
  - More Fips indicator changes


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-2
changelog:
  - Fix MD-5 decode issue in pkcs #12
  - turn off policy processing for pkcs12 and smime
  - restore the rhel9 pkcs12 defaults for pk12util


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally remvoed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Andreas Schneider <asn@redhat.com> - 1.1.11-8
changelog:
  - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install
                             smaller footprint


author: Jan Macku <jamacku@redhat.com> - 1.15-1
changelog:
  - spec: sync specfile with Fedora
  - makefile: Use rpmdev-bumpspec's legacy date option
  - Add feature to generate specfile entry, commit and archive


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Tomas Orsava <torsava@redhat.com> - 1.20.1-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Jindrich Novy <jnovy@redhat.com> - 1.2.5-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.5
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.6-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.6
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.8-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.8
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1.2.9-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 1.2.10-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.2.11-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11
  - simplify spec
  - Resolves: RHEL-86603


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.5-1
changelog:
  - apply patch from Matthias Gerstner of the SUSE security team to fix a
    possible race condition in the mkhomedir helper (CVE-2020-10737)
  - only process SELinux contexts if SELinux is not disabled (Alexander Bokovoy)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.6-1
changelog:
  - update license on src/buffer.h
  - change /var/run -> /run in systemd service file (Orion Poplawski)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Milan Crha <mcrha@redhat.com> - 2.3-38
changelog:
  - Related: #2013578 (Add patch to build against samba 4.15)
  - Avoid build time dependencies related to server, when it's not built


author: Than Ngo <than@redhat.com> - 3.21.0-3
changelog:
  - Resolves: #2110497, concurrent MK rotation for cca token
  - Resolves: #2110498, concurrent MK rotation for ep11 token
  - Resolves: #2110499, ep11 token: PKCS #11 3.0 - support AES_XTS
  - Resolves: #2111010, cca token: protected key support 
  - Resolves: #2160061, rebase to 3.21.0
  - Resolves: #2160105, pkcsslotd hardening
  - Resolves: #2160107, p11sak support Dilithium and Kyber keys
  - Resolves: #2160109, ica and soft tokens: PKCS #11 3.0 - support AES_XTS


author: Than Ngo <than@redhat.com> - 3.21.0-8
changelog:
  - Resolves: #2222592, p11sak tool: slot option does not accept argument 0 for slot index 0
  - Resolves: #2222596, p11sak fails as soon as there reside non-key objects


author: Than Ngo <than@redhat.com> - 3.22.0-2
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22792


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-50064, update to 3.24.0
  - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le
  - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-50056, openCryptoki cca token SHA3 support
  - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2109485)
  - Remove oscap-remediate service (rhbz#2111358)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159286)
  - Fix error when processing OVAL filters (rhbz#2126883)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2138884)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217442)
  - Fix systemd* probes unit enumeration (rhbz#2219532)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.11-1
changelog:
  - Upgrade to the latest upstream release (RHEL-76355)
  - Introduce "oscap-im", a tool for building hardened bootable container images
  - Fix RPM probes in bootable container images build environment (RHEL-55251)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-11
changelog:
  - Initialize crypto API only once (rhbz#2020044)
  - Add support for Blueprint remediations (rhbz#2020052)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-12
changelog:
  - Allow using local files instead of remote resources (rhbz#2015518)
  - Add an alternative source of hostname (rhbz#2021509)
  - Lower memory limits and improve their checking (rhbz#2022362)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041782)
  - Select and exclude groups of rules on the command line (rhbz#2020580, rhbz#2020581)
  - The boot-time remediation service for systemd's Offline Update mode


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-45
changelog:
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465).
    Resolves: RHEL-78700


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-2
changelog:
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-119515
  - Canonicalize username when matching a user
    Resolves: RHEL-118372


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-3
changelog:
  - Enable support for DSA keys
    Resolves: RHEL-127624
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-133959
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-133960


author: Colin Walters <walters@verbum.org> - 2024.4-3
changelog:
  - Backport
    https://github.com/ostreedev/ostree/pull/3205/commits/e47b37096343efa3bea8295f3f44c4dc90cc04e2


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.2-1
changelog:
  - Update to new upstream release 0.25.2
    Resolves: RHEL-14834
  - Add IBM specific mechanisms and attributes
    Resolves: RHEL-10570


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.3-3
changelog:
  - Fix regression in trust where file creation fails for long cert labels
    Resolves: RHEL-58899
  - Fix usage message in p11-kit list-tokens command
    Resolves: RHEL-31810


author: Chris Lumens <clumens@redhat.com> - 2.1.7-2
changelog:
  - Rebase on upstream 2.1.7-rc4 release
  - Use systemd-sysusers to create user/group
  - Pacemaker Remote nodes can validate against later schema versions
  - Related: RHEL-17225
  - Resolves: RHEL-7665


author: Chris Lumens <clumens@redhat.com> - 2.1.7-3
changelog:
  - Rebase on upstream 2.1.7 final release
  - Fix documentation for Pacemaker Remote schema transfers
  - Do not check CIB feature set version when CIB_file is set
  - Consolidate attrd cache handling
  - Avoid duplicating option metadata across daemons
  - Related: RHEL-7665
  - Related: RHEL-13216
  - Resolves: RHEL-7702


author: Chris Lumens <clumens@redhat.com> - 2.1.7-4
changelog:
  - Properly validate attribute set type in pacemaker-attrd
  - Fix `crm_attribute -t nodes --node localhost`
  - Resolves: RHEL-13216
  - Resolves: RHEL-17225
  - Resolves: RHEL-23498


author: Chris Lumens <clumens@redhat.com> - 2.1.8-1
changelog:
  - Rebase on upstream 2.1.8-rc1 release
  - Fix a typo in the help output of pacemaker-fenced
  - Fix escaping characters in XML attribute output
  - Resolves: RHEL-25819
  - Resolves: RHEL-30822


author: Chris Lumens <clumens@redhat.com> - 2.1.8-2
changelog:
  - Rebase on upstream 2.1.8-rc4 release
  - Add ability to immediately shutdown system with PCMK_panic_action=
  - Fix a memory leak in the attribute daemon
  - Add ability to list options and parameters as parseable metadata
  - crm_verify now reports invalid fence level indexes
  - Fix an error in node ID handling in `crm_node -i`
  - Fix regression in attrd_updater output
  - Resolves: RHEL-39057
  - Resolves: RHEL-40117
  - Resolves: RHEL-23401
  - Resolves: RHEL-2996
  - Resolves: RHEL-47249
  - Resolves: RHEL-45935


author: Chris Lumens <clumens@redhat.com> - 2.1.9-1
changelog:
  - Rebase on upstream 2.1.9 final release
  - Use async communication to establish TLS connections
  - Fix regression in adding alerts to CIB
  - Fix a crash in command line tools when stderr is closed
  - Resolves: RHEL-61382
  - Resolves: RHEL-34276
  - Resolves: RHEL-55458
  - Resolves: RHEL-59043


author: Chris Lumens <clumens@redhat.com> - 2.1.10-1
changelog:
  - Rebase on upstream 2.1.10-rc1 release
  - Use dbus to detect completion of systemd resource start/stop actions
  - Add an option for controlling remote node fencing behavior
  - Related: RHEL-89134
  - Resolves: RHEL-86143
  - Resolves: RHEL-84018


author: Chris Lumens <clumens@redhat.com> - 2.1.10-2
changelog:
  - Handle large timeouts correctly in crm_resource --wait
  - Do not try to connect to subdaemons before they're respawned
  - Don't evict IPC clients as long as they're still processing messages
  - Don't overwhelm the FSA queue with repeated CIB queries
  - Resolves: RHEL-45869
  - Resolves: RHEL-87484
  - Resolves: RHEL-114894


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: Peng Wu <pwu@redhat.com> - 1.48.7-3
changelog:
  - Update pango-emoji-table.h for emoji 14 support
  - Add pango-update-emoji.patch
  - Resolves: #2119674


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.42.2-3
changelog:
  - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use
    cairomm1.0, which may be a virtual Provides, in the manual lib Requires


author: Lauren Chilton <lchilton@redhat.com> - 6.2.2-4
changelog:
  - Removed excess headers for pcp2openmetrics tool (RHEL-39159)
  - Fix pcp2openmetrics '-s' option (RHEL-39132)
  - Fix pcp2openmetrics timestamps in archive mode (RHEL-32983)
  - Fix pcp2openmetrics output to adhere to prometheus parser (RHEL-39293)


author: Nathan Scott <nathans@redhat.com> - 6.2.2-5
changelog:
  - Add rpm dependency on package providing ps(1) tool (RHEL-39491)
  - Update Java bytecode in pcp-testasuite package (RHEL-40718)


author: Nathan Scott <nathans@redhat.com> - 6.3.1-1
changelog:
  - New pcp-xsos utility for rapid system summaries (RHEL-30590)
  - Fix Upgrade scripts to not rewrite pmcd.conf (RHEL-40631)
  - Add new Hyper-V balloon usage metrics (RHEL-45715)
  - Auto-load pmdaproc in local context (RHEL-50941)
  - Fix a benign potential libpcp buffer overflow (RHEL-58914)
  - Fix pcp-zeroconf pmie.config write permission (RHEL-59366)
  - Rebase to latest stable version of PCP (RHEL-58953)


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Add proc PMDA access control for IO metrics (RHEL-60891)
  - Fix pmdastatsd segfaults within pmdaRehash (RHEL-57717)
  - Multiple hugepage size NUMA metric support (RHEL-45876)
  - Improve pcp-xsos command line diagnostics (RHEL-61597, RHEL-61598)
  - Add pmlogger_farm_check service selinux policy (RHEL-61885)
  - Fix v3 archive replay on big endian machines (RHEL-61501)
  - Rebase to latest stable version of PCP (RHEL-58953)


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039)
  - Fix a multilib regression in PCP header files (RHEL-93186)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories


author: Lauren Chilton <lchilton@redhat.com> - 6.3.7-6
changelog:
  - Backport fix for pmdaopenmetrics metric removal (RHEL-101745)
  - Backport fix for pcp2openmetrics metric hanging (RHEL-106772)
  - Backport fix for atop cpu utilization bug (RHEL-79767)


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Petr Pisar <ppisar@redhat.com> - 10.36-4
changelog:
  - Fix a mismatch if \K was involved in a recursion
  - Restore single character repetition optimization in JIT (upstream bug #2698)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-1
changelog:
  - Rebase to the 10.37
  - libpcre2-posix.so.2* SONAME bump to libpcre2-posix.so.3*
  - Enable JIT for s390x arch
  - Patches upstreamed: Patch 1,2,3,4
  - Resolves: rhbz#1970765, BZ#1965025


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-636.el9]
changelog:
  - powerpc/pseries: Define __u{8,32} types in papr_hvpipe_hdr struct (Mamatha Inamdar) [RHEL-101849]
  - powerpc/pseries: HVPIPE changes to support migration (Mamatha Inamdar) [RHEL-101849]
  - powerpc/pseries: Enable hvpipe with ibm,set-system-parameter RTAS (Mamatha Inamdar) [RHEL-101849]
  - powerpc/pseries: Enable HVPIPE event message interrupt (Mamatha Inamdar) [RHEL-101849]
  - powerpc/pseries: Wakeup hvpipe FD when the payload is pending (Mamatha Inamdar) [RHEL-101849]
  - powerpc/pseries: Receive payload with ibm,receive-hvpipe-msg RTAS (Mamatha Inamdar) [RHEL-101849]
  - powerpc/pseries: Send payload with ibm,send-hvpipe-msg RTAS (Mamatha Inamdar) [RHEL-101849]
  - powerpc/pseries: Add papr-hvpipe char driver for HVPIPE interfaces (Mamatha Inamdar) [RHEL-101849]
  - powerpc/pseries: Define HVPIPE specific macros (Mamatha Inamdar) [RHEL-101849]
  - powerpc/pseries: Define papr-hvpipe ioctl (Mamatha Inamdar) [RHEL-101849]
  - Documentation: ioctl-number: Fix linuxppc-dev mailto link (Mamatha Inamdar) [RHEL-101849]
  - tracing/osnoise: Replace kmalloc + copy_from_user with memdup_user_nul (Tomas Glozar) [RHEL-117873]
  - tracing/osnoise: Fix slab-out-of-bounds in _parse_integer_limit() (Tomas Glozar) [RHEL-117873] {CVE-2025-39974}
  - tracing/osnoise: Use for_each_online_cpu() instead of for_each_cpu() (Tomas Glozar) [RHEL-117873]
  - tracing/osnoise: Fix null-ptr-deref in bitmap_parselist() (Tomas Glozar) [RHEL-117873] {CVE-2025-39887}
  - tracing/osnoise: Fix crash in timerlat_dump_stack() (Tomas Glozar) [RHEL-117873] {CVE-2025-38493}
  - tracing/osnoise: Fix possible recursive locking for cpus_read_lock() (Tomas Glozar) [RHEL-117873]
  - osnoise: provide quiescent states (Tomas Glozar) [RHEL-117873]
  - tracing/osnoise: Switch to use hrtimer_setup() (Tomas Glozar) [RHEL-117873]
  - tracing/osnoise: Fix resetting of tracepoints (Tomas Glozar) [RHEL-117873] {CVE-2025-21733}
  - tracing: Switch trace_osnoise.c code over to use guard() and __free() (Tomas Glozar) [RHEL-117873]
  - rtla: Check pkg-config install (Tomas Glozar) [RHEL-117873]
  - rtla: Define __NR_sched_setattr for LoongArch (Tomas Glozar) [RHEL-117873]
  - rtla: Add the ability to create ctags and etags (Tomas Glozar) [RHEL-117873]
  - Documentation/rtla: Add include common_appendix.rst (Tomas Glozar) [RHEL-117873]
  - Documentation/rtla: Include BPF sample collection (Tomas Glozar) [RHEL-117873]
  - Documentation/rtla: Fix typo in common_timerlat_description.rst (Tomas Glozar) [RHEL-117873]
  - Documentation/rtla: Fix typo in rtla-timerlat.rst (Tomas Glozar) [RHEL-117873]
  - Documentation/rtla: Fix duplicate text about timerlat tracer (Tomas Glozar) [RHEL-117873]
  - rtla: Documentation: Fix -t, --trace (Tomas Glozar) [RHEL-117873]
  - rtla: fix a example in rtla-timerlat-hist.rst (Tomas Glozar) [RHEL-117873]
  - net/smc: Remove validation of reserved bits in CLC Decline message (Mete Durlu) [RHEL-124197]
  - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123809]
  - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123809] {CVE-2025-39968}
  - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123809] {CVE-2025-39969}
  - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123809] {CVE-2025-39970}
  - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123809] {CVE-2025-39971}
  - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123809] {CVE-2025-39972}
  - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123809] {CVE-2025-39973}
  - io_uring: enable per-io write streams (Ming Lei) [RHEL-122870]
  - nvmet-fcloop: call done callback even when remote port is gone (Maurizio Lombardi) [RHEL-114502]
  - nvmet-tcp: fix callback lock for TLS handshake (Maurizio Lombardi) [RHEL-114502]
  - nvme: fix misaccounting of nvme-mpath inflight I/O (Maurizio Lombardi) [RHEL-114502]
  - nvme: revert the cross-controller atomic write size validation (Maurizio Lombardi) [RHEL-114502]
  - nvme: fix atomic write size validation (Maurizio Lombardi) [RHEL-114502]
  - nvme: refactor the atomic write unit detection (Maurizio Lombardi) [RHEL-114502]
  - nvme: fix endianness of command word prints in nvme_log_err_passthru() (Maurizio Lombardi) [RHEL-114502]
  - nvme: Fix incorrect cdw15 value in passthru error logging (Maurizio Lombardi) [RHEL-114502]
  - nvme: fix inconsistent RCU list manipulation in nvme_ns_add_to_ctrl_list() (Maurizio Lombardi) [RHEL-114502]
  - nvme-pci: refresh visible attrs after being checked (Maurizio Lombardi) [RHEL-114502]
  - nvmet: fix memory leak of bio integrity (Maurizio Lombardi) [RHEL-114502]
  - nvme: spelling fixes (Maurizio Lombardi) [RHEL-114502]
  - nvme-tcp: fix I/O stalls on congested sockets (Maurizio Lombardi) [RHEL-114502]
  - nvme-tcp: sanitize request list handling (Maurizio Lombardi) [RHEL-114502]
  - nvme-tcp: remove tag set when second admin queue config fails (Maurizio Lombardi) [RHEL-114502]
  - nvme: fix command limits status code (Maurizio Lombardi) [RHEL-114502]
  - nvme-pci: store aborted state in flags variable (Maurizio Lombardi) [RHEL-114502]
  - nvme-fc: do not reference lsrsp after failure (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: don't wait for lport cleanup (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: add missing fcloop_callback_host_done (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fc: take tgtport refs for portentry (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fc: free pending reqs on tgtport unregister (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: drop response if targetport is gone (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: allocate/free fcloop_lsreq directly (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: prevent double port deletion (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: access fcpreq only when holding reqlock (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: update refs on tfcp_req (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: refactor fcloop_delete_local_port (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: refactor fcloop_nport_alloc and track lport (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: remove nport from list on last user (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: track ref counts for nports (Maurizio Lombardi) [RHEL-114502]
  - nvmet-auth: use SHASH_DESC_ON_STACK (Maurizio Lombardi) [RHEL-114502]
  - nvme-auth: use SHASH_DESC_ON_STACK (Maurizio Lombardi) [RHEL-114502]
  - nvmet: simplify the nvmet_req_init() interface (Maurizio Lombardi) [RHEL-114502]
  - nvmet: support completion queue sharing (Maurizio Lombardi) [RHEL-114502]
  - nvmet: fabrics: add CQ init and destroy (Maurizio Lombardi) [RHEL-114502]
  - nvmet: cq: prepare for completion queue sharing (Maurizio Lombardi) [RHEL-114502]
  - nvmet: add a helper function for cqid checking (Maurizio Lombardi) [RHEL-114502]
  - nvmet-auth: authenticate on admin queue only (Maurizio Lombardi) [RHEL-114502]
  - nvme-auth: do not re-authenticate queues with no prior authentication (Maurizio Lombardi) [RHEL-114502]
  - nvmet-tcp: switch to using the crc32c library (Maurizio Lombardi) [RHEL-114502]
  - nvmet: replace strncpy with strscpy (Maurizio Lombardi) [RHEL-114502]
  - nvme-tcp: open-code nvme_tcp_queue_request() for R2T (Maurizio Lombardi) [RHEL-114502]
  - nvme-tcp: remove redundant check to ctrl->opts (Maurizio Lombardi) [RHEL-114502]
  - nvme: fix incorrect sizeof (Maurizio Lombardi) [RHEL-114502]
  - nvme: fix write_stream_granularity initialization (Maurizio Lombardi) [RHEL-114502]
  - nvme: use fdp streams if write stream is provided (Maurizio Lombardi) [RHEL-114502]
  - nvme: register fdp parameters with the block layer (Maurizio Lombardi) [RHEL-114502]
  - nvme: add FDP definitions (Maurizio Lombardi) [RHEL-114502]
  - nvme: pass a void pointer to nvme_get/set_features for the result (Maurizio Lombardi) [RHEL-114502]
  - nvme: add a nvme_get_log_lsi helper (Maurizio Lombardi) [RHEL-114502]
  - nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro (Maurizio Lombardi) [RHEL-114502]
  - nvme: all namespaces in a subsystem must adhere to a common atomic write size (Maurizio Lombardi) [RHEL-114502]
  - nvme: multipath: enable BLK_FEAT_ATOMIC_WRITES for multipathing (Maurizio Lombardi) [RHEL-114502]
  - nvmet: pci-epf: remove NVMET_PCI_EPF_Q_IS_SQ (Maurizio Lombardi) [RHEL-114502]
  - nvmet: pci-epf: improve debug message (Maurizio Lombardi) [RHEL-114502]
  - nvmet: pci-epf: cleanup nvmet_pci_epf_raise_irq() (Maurizio Lombardi) [RHEL-114502]
  - nvmet: pci-epf: do not fall back to using INTX if not supported (Maurizio Lombardi) [RHEL-114502]
  - nvmet: pci-epf: clear completion queue IRQ flag on delete (Maurizio Lombardi) [RHEL-114502]
  - nvme-pci: add quirks for device 126f:1001 (Maurizio Lombardi) [RHEL-114502]
  - crypto: octeontx2 - Call strscpy() with correct size argument (Vladis Dronov) [RHEL-122025]
  - crypto: octeontx2 - get engine group number for asymmetric engine (Vladis Dronov) [RHEL-122025]
  - crypto: octeontx2 - Rework how engine group number is obtained (Vladis Dronov) [RHEL-122025]
  - crypto: octeontx2 - Fix address alignment on CN10KB and CN10KA-B0 (Vladis Dronov) [RHEL-122025]
  - crypto: octeontx2 - Fix address alignment on CN10K A0/A1 and OcteonTX2 (Vladis Dronov) [RHEL-122025]
  - crypto: octeontx2 - Fix address alignment issue on ucode loading (Vladis Dronov) [RHEL-122025]
  - crypto: octeontx2 - add timeout for load_fvc completion poll (Vladis Dronov) [RHEL-122025]
  - crypto: octeontx2 - Use dynamic allocated memory region for lmtst (Vladis Dronov) [RHEL-122025]
  - crypto: octeontx2 - Initialize cptlfs device info once (Vladis Dronov) [RHEL-122025]
  - crypto: octeontx2 - Simplify multiple return statements (Vladis Dronov) [RHEL-122025]
  - crypto: lib/Kconfig - hide library options [partial] (Vladis Dronov) [RHEL-122025]
  - RDMA/core: Free pfn_list with appropriate kvfree call (Kamal Heib) [RHEL-110100]
  - IB/core: Annotate umem_mutex acquisition under fs_reclaim for lockdep (Kamal Heib) [RHEL-110100]
  - scsi: RDMA/srp: Don't set a max_segment_size when virt_boundary_mask is set (Kamal Heib) [RHEL-110100]
  - RDMA/core: Rate limit GID cache warning messages (Kamal Heib) [RHEL-110100]
  - RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work (Kamal Heib) [RHEL-110100]
  - IB/cm: Remove dead code and adjust naming (Kamal Heib) [RHEL-110100]
  - RDMA/core: Avoid hmm_dma_map_alloc() for virtual DMA devices (Kamal Heib) [RHEL-110100]
  - RDMA/umem: Separate implicit ODP initialization from explicit ODP (Kamal Heib) [RHEL-110100]
  - RDMA/core: Convert UMEM ODP DMA mapping to caching IOVA and page linkage (Kamal Heib) [RHEL-110100]
  - RDMA/umem: Store ODP access mask information in PFN (Kamal Heib) [RHEL-110100]
  - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-110100]
  - IB/cm: Drop lockdep assert and WARN when freeing old msg (Kamal Heib) [RHEL-110100]
  - RDMA/core: Move ODP capability definitions to uapi (Kamal Heib) [RHEL-110100]
  - RDMA/rxe: Enable ODP in ATOMIC WRITE operation (Kamal Heib) [RHEL-110100]
  - RDMA/rxe: Enable ODP in RDMA FLUSH operation (Kamal Heib) [RHEL-110100]
  - RDMA/cma: Remove unused rdma_res_to_id (Kamal Heib) [RHEL-110100]
  - IB/cm: use rwlock for MAD agent lock (Kamal Heib) [RHEL-110100]
  - RDMA/core: Convert to use ERR_CAST() (Kamal Heib) [RHEL-110100]
  - RDMA/uverbs: Convert to use ERR_CAST() (Kamal Heib) [RHEL-110100]
  - RDMA/core: Convert to use ERR_CAST() (Kamal Heib) [RHEL-110100]
  - mm/hmm: provide generic DMA managing logic (Kamal Heib) [RHEL-110100]
  - mm/hmm: let users to tag specific PFN with DMA mapped bit (Kamal Heib) [RHEL-110100]
  - i2c: tiny-usb: disable zero-length read messages (Desnes Nunes) [RHEL-116016]
  - i2c: Use str_read_write() helper (Desnes Nunes) [RHEL-116016]
  - memstick: core: Zero initialize id_reg in h_memstick_read_dev_id() (Desnes Nunes) [RHEL-116016]
  - usb: hub: Don't try to recover devices lost during warm reset. (Desnes Nunes) [RHEL-116016]
  - USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition (Desnes Nunes) [RHEL-116016]
  - USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI (Desnes Nunes) [RHEL-116016]
  - usb: gadget: configfs: Fix OOB read on empty string write (Desnes Nunes) [RHEL-116016] {CVE-2025-38497}
  - xhci: dbc: Flush queued requests before stopping dbc (Desnes Nunes) [RHEL-116016]
  - xhci: dbctty: disable ECHO flag by default (Desnes Nunes) [RHEL-116016]
  - xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS (Desnes Nunes) [RHEL-116016]
  - usb: xhci: quirk for data loss in ISOC transfers (Desnes Nunes) [RHEL-116016]
  - usb: typec: displayport: Fix potential deadlock (Desnes Nunes) [RHEL-116016] {CVE-2025-38404}
  - usb: typec: altmodes/displayport: do not index invalid pin_assignments (Desnes Nunes) [RHEL-116016] {CVE-2025-38391}
  - usb: typec: tcpm: apply vbus before data bringup in tcpm_src_attach (Desnes Nunes) [RHEL-116016]
  - USB: serial: option: add Foxconn T99W640 (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Fix bit masking in tb_dp_port_set_hops() (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-116016]
  - Revert "usb: xhci: Implement xhci_handshake_check_state() helper" (Desnes Nunes) [RHEL-116016]
  - usb: xhci: Skip xhci_reset in xhci_resume if xhci is being removed (Desnes Nunes) [RHEL-116016]
  - usb: gadget: u_serial: Fix race condition in TTY wakeup (Desnes Nunes) [RHEL-116016] {CVE-2025-38448}
  - usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (Desnes Nunes) [RHEL-116016] {CVE-2024-56670}
  - Revert "usb: gadget: u_serial: Add null pointer check in gs_start_io" (Desnes Nunes) [RHEL-116016]
  - usb: gadget: u_serial: Add null pointer check in gs_start_io (Desnes Nunes) [RHEL-116016]
  - usb: acpi: fix device link removal (Desnes Nunes) [RHEL-116016]
  - Logitech C-270 even more broken (Desnes Nunes) [RHEL-116016]
  - phy: use per-PHY lockdep keys (Desnes Nunes) [RHEL-116016]
  - phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode (Desnes Nunes) [RHEL-116016] {CVE-2025-38535}
  - phy: tegra: xusb: Disable periodic tracking on Tegra234 (Desnes Nunes) [RHEL-116016]
  - phy: tegra: xusb: Decouple CYA_TRK_CODE_UPDATE_ON_IDLE from trk_hw_mode (Desnes Nunes) [RHEL-116016]
  - usb: misc: onboard_usb_dev: fix build warning for CONFIG_USB_ONBOARD_DEV_USB5744=n (Desnes Nunes) [RHEL-116016]
  - usb: typec: tipd: fix typo in TPS_STATUS_HIGH_VOLAGE_WARNING macro (Desnes Nunes) [RHEL-116016]
  - USB: typec: fix const issue in typec_match() (Desnes Nunes) [RHEL-116016]
  - USB: gadget: udc: fix const issue in gadget_match_driver() (Desnes Nunes) [RHEL-116016]
  - USB: gadget: fix up const issue with struct usb_function_instance (Desnes Nunes) [RHEL-116016]
  - USB: serial: pl2303: add new chip PL2303GC-Q20 and PL2303GT-2AB (Desnes Nunes) [RHEL-116016]
  - USB: serial: bus: fix const issue in usb_serial_device_match() (Desnes Nunes) [RHEL-116016]
  - usb: misc: onboard_usb_dev: Fix usb5744 initialization sequence (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: ti,usb8041: Add binding for TI USB8044 hub controller (Desnes Nunes) [RHEL-116016]
  - usb: misc: onboard_usb_dev: Add support for TI TUSB8044 hub (Desnes Nunes) [RHEL-116016]
  - usb: Flush altsetting 0 endpoints before reinitializating them after reset. (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: Add Parade PS8833 Type-C retimer variant (Desnes Nunes) [RHEL-116016]
  - usb: gadget: u_serial: Avoid double unlock of serial_port_lock (Desnes Nunes) [RHEL-116016]
  - usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device (Desnes Nunes) [RHEL-116016]
  - usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE (Desnes Nunes) [RHEL-116016]
  - usb: typec: tcpm: Use configured PD revision for negotiation (Desnes Nunes) [RHEL-116016]
  - usb: typec: tcpm: move tcpm_queue_vdm_unlocked to asynchronous work (Desnes Nunes) [RHEL-116016] {CVE-2025-38268}
  - xhci: Add missing parameter description to xhci_get_endpoint_index() (Desnes Nunes) [RHEL-116016]
  - usb: xhci: fix host not responding after suspend and resume (Desnes Nunes) [RHEL-116016]
  - usb: xhci: rename 'irq_control' to 'imod' (Desnes Nunes) [RHEL-116016]
  - usb: xhci: rename 'irq_pending' to 'iman' (Desnes Nunes) [RHEL-116016]
  - usb: xhci: cleanup IMOD register comments (Desnes Nunes) [RHEL-116016]
  - usb: xhci: rework Event Ring Segment Table Address mask (Desnes Nunes) [RHEL-116016]
  - usb: xhci: rework Event Ring Segment Table Size mask (Desnes Nunes) [RHEL-116016]
  - usb: xhci: remove '0' write to write-1-to-clear register (Desnes Nunes) [RHEL-116016]
  - usb: xhci: guarantee that IMAN register is flushed (Desnes Nunes) [RHEL-116016]
  - usb: xhci: improve Interrupt Management register macros (Desnes Nunes) [RHEL-116016]
  - usb: xhci: set requested IMODI to the closest supported value (Desnes Nunes) [RHEL-116016]
  - usb: xhci: cleanup xhci_mem_init() (Desnes Nunes) [RHEL-116016]
  - usb: xhci: add individual allocation checks in xhci_mem_init() (Desnes Nunes) [RHEL-116016]
  - usb: xhci: move initialization of the primary interrupter (Desnes Nunes) [RHEL-116016]
  - usb: xhci: remove error handling from xhci_add_interrupter() (Desnes Nunes) [RHEL-116016]
  - usb: xhci: move enabling of USB 3 device notifications (Desnes Nunes) [RHEL-116016]
  - usb: xhci: move doorbell array pointer assignment (Desnes Nunes) [RHEL-116016]
  - usb: xhci: move DCBAA pointer write (Desnes Nunes) [RHEL-116016]
  - usb: xhci: refactor xhci_set_cmd_ring_deq() (Desnes Nunes) [RHEL-116016]
  - usb: xhci: move command ring pointer write (Desnes Nunes) [RHEL-116016]
  - usb: xhci: move device slot enabling register write (Desnes Nunes) [RHEL-116016]
  - usb: xhci: relocate pre-allocation initialization (Desnes Nunes) [RHEL-116016]
  - usb: xhci: Add debugfs support for xHCI port bandwidth (Desnes Nunes) [RHEL-116016]
  - usb: xhci: Don't log transfer ring segment list on errors (Desnes Nunes) [RHEL-116016]
  - phy: tegra: p2u: Broaden architecture dependency (Desnes Nunes) [RHEL-116016]
  - phy: fsl-imx8mq-usb: add i.MX95 tuning support (Desnes Nunes) [RHEL-116016]
  - phy: fsl-imx8mq-usb: fix phy_tx_vboost_level_from_property() (Desnes Nunes) [RHEL-116016]
  - dt-bindings: phy: imx8mq-usb: add imx95 tuning support (Desnes Nunes) [RHEL-116016]
  - dt-bindings: phy: imx8mq-usb: fix fsl,phy-tx-vboost-level-microvolt property (Desnes Nunes) [RHEL-116016]
  - phy: freescale: imx8m-pcie: Simplify with dev_err_probe() (Desnes Nunes) [RHEL-116016]
  - dt-bindings: phy: rockchip: Convert RK3399 Type-C PHY to schema (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: add rk3588 compatible to rockchip,dwc3 (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: rockchip,dwc3: Move RK3399 to its own schema (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Do not double dequeue a configuration request (Desnes Nunes) [RHEL-116016] {CVE-2025-38174}
  - usb-storage: reject probe of device one non-DMA HCDs when using highmem (Desnes Nunes) [RHEL-116016]
  - USB: serial: ti_usb_3410_5052: drop bogus read urb check (Desnes Nunes) [RHEL-116016]
  - usb: misc: onboard_usb_dev: Add Parade PS5511 hub support (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: realtek,rts5411: Adapt usb-hub.yaml (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: Add binding for PS5511 hub controller (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: Introduce usb-hub.yaml (Desnes Nunes) [RHEL-116016]
  - misc: rtsx: Remove deadcode (Desnes Nunes) [RHEL-116016]
  - usb: gadget: u_serial: Implement remote wakeup capability (Desnes Nunes) [RHEL-116016]
  - usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push (Desnes Nunes) [RHEL-116016]
  - usb: gadget: u_serial: Add null pointer check in gserial_suspend (Desnes Nunes) [RHEL-116016] {CVE-2023-53356}
  - usb: gadget: u_serial: Add null pointer check in gserial_resume (Desnes Nunes) [RHEL-116016] {CVE-2023-53551}
  - dt-bindings: usb: usb-switch: Allow data-lanes property in port (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: generic-ehci: Add VIA/WonderMedia compatible (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: Convert Nuvoton EHCI to DT schema (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: npcm7xx: Add npcm845 compatible (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: usb-device: relax compatible pattern to a contains (Desnes Nunes) [RHEL-116016]
  - usb: typec: ucsi: fix Clang -Wsign-conversion warning (Desnes Nunes) [RHEL-116016]
  - USB: host: omap: Do not enable by default during compile testing (Desnes Nunes) [RHEL-116016]
  - usb: typec: mux: fsa4480: add regulator support (Desnes Nunes) [RHEL-116016]
  - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (Desnes Nunes) [RHEL-116016] {CVE-2025-38103}
  - Documentation/admin-guide: Document Thunderbolt/USB4 tunneling events (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Notify userspace about firmware CM tunneling events (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Notify userspace about software CM tunneling events (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Introduce domain event message handler (Desnes Nunes) [RHEL-116016]
  - usb: typec: Connect Type-C port with associated USB4 port (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Add Thunderbolt/USB4 <-> USB3 match function (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Expose usb4_port_index() to other modules (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-116016]
  - misc: rtsx: Enhance the signal handling processes in SVID/SSID 1028:0CE1 platform (Desnes Nunes) [RHEL-116016]
  - usb: misc: onboard_dev: Add Realtek RTL8188ETV WiFi (0bda:0179) (Desnes Nunes) [RHEL-116016]
  - Added usb_string function to a namespace (Desnes Nunes) [RHEL-116016]
  - USB: core: Correct API usb_(enable|disable)_autosuspend() prototypes (Desnes Nunes) [RHEL-116016]
  - USB: phy: Use str_enable_disable-like helpers (Desnes Nunes) [RHEL-116016]
  - usb: common: usb-conn-gpio: use a unique name for usb connector device (Desnes Nunes) [RHEL-116016]
  - usb: hub: Fail fast in USB3 link power management enable path (Desnes Nunes) [RHEL-116016]
  - usb: hub: reorder USB3 link power management enable requests (Desnes Nunes) [RHEL-116016]
  - usb: hub: Don't disable LPM completely if device initiated LPM fails (Desnes Nunes) [RHEL-116016]
  - usb: hub: verify device is configured in usb_device_may_initiate_lpm() (Desnes Nunes) [RHEL-116016]
  - usb: hub: Block less in USB3 link power management LPM disable path (Desnes Nunes) [RHEL-116016]
  - usb: Add checks for snprintf() calls in usb_alloc_dev() (Desnes Nunes) [RHEL-116016]
  - usb: chipidea: imx: add HSIO Block Control wakeup setting (Desnes Nunes) [RHEL-116016]
  - usb: chipidea: imx: add wakeup interrupt handling (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: usbmisc-imx: add support for i.MX95 platform (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: chipidea: Add i.MX95 compatible string 'fsl,imx95-usb' (Desnes Nunes) [RHEL-116016]
  - usb: cdc-wdm: avoid setting WDM_READ for ZLP-s (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: smsc,usb3503: Correct indentation and style in DTS example (Desnes Nunes) [RHEL-116016]
  - usb: cdns3: Remove the invalid comment (Desnes Nunes) [RHEL-116016]
  - usb: typec: tcpm: Use fwnode_get_child_node_count() (Desnes Nunes) [RHEL-116016]
  - device property: Split fwnode_get_child_node_count() (Desnes Nunes) [RHEL-116016]
  - device property: Fix a typo in the description of device_get_child_node_count() (Desnes Nunes) [RHEL-116016]
  - usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode (Desnes Nunes) [RHEL-116016]
  - usb: typec: tipd: Fix wakeup source leaks on device unbind (Desnes Nunes) [RHEL-116016]
  - usb: typec: tcpci: add regulator support (Desnes Nunes) [RHEL-116016]
  - usb: typec: tcpm: allow switching to mode accessory to mux properly (Desnes Nunes) [RHEL-116016]
  - usb: typec: tcpm: allow sink (ufp) to toggle into accessory mode debug (Desnes Nunes) [RHEL-116016]
  - usb: typec: tcpm: allow to use sink in accessory mode (Desnes Nunes) [RHEL-116016]
  - usb: typec: mux: do not return on EOPNOTSUPP in {mux, switch}_set (Desnes Nunes) [RHEL-116016]
  - usb: typec: ucsi: Add the UCSI commands in debugfs (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-116016]
  - usb: host: xhci: Notify xHCI sideband on transfer ring free (Desnes Nunes) [RHEL-116016]
  - usb: host: xhci-plat: Set XHCI max interrupters if property is present (Desnes Nunes) [RHEL-116016]
  - usb: host: xhci-mem: Allow for interrupter clients to choose specific index (Desnes Nunes) [RHEL-116016]
  - usb: host: xhci-mem: Cleanup pending secondary event ring events (Desnes Nunes) [RHEL-116016]
  - redhat/configs: Adding CONFIG_USB_XHCI_SIDEBAND (Desnes Nunes) [RHEL-116016]
  - xhci: sideband: add initial api to register a secondary interrupter entity (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: gadget: Fix enter to hibernation for UTMI+ PHY (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: New bitfield definition and programming in GRSTCTL (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: Add hibernation updates for ULPI PHY (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: New bit definition in GPWRDN register (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: Add eUSB2 PHY disconnect flow support (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: Add new parameter eusb2_disc (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: New bit definition in GOTGCTL register (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: Add core new versions definition (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: qcom: Don't leave BCR asserted (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: gadget: Fix TRB reclaim logic for short transfers and ZLPs (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: Abort suspend on soft disconnect failure (Desnes Nunes) [RHEL-116016]
  - usb: gadget: epautoconf: Use USB API functions rather than constants (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: gadget: Use USB API functions rather than constants (Desnes Nunes) [RHEL-116016]
  - usb: core: config: Use USB API functions rather than constants (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: qcom: Use bulk clock API and devres (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: qcom: Fix error handling in probe (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: qcom: use modern PM macros (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: also exit clock_gating when stopping udc while suspended (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: qcom: Transition to flattened model (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: qcom: Don't rely on drvdata during probe (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: core: Don't touch resets and clocks (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: core: Expose core driver as library (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: qcom,snps-dwc3: Fix bindings for X1E80100 (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: Introduce qcom,snps-dwc3 (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: qcom: Snapshot driver for backwards compatibilty (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: dwc3: Allow connector in USB controller node (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: qcom,dwc3: Add SM8750 compatible (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: core: Avoid redundant system suspend/resume callbacks (Desnes Nunes) [RHEL-116016]
  - i2c: Set i2c pinctrl recovery info from it's device pinctrl (Desnes Nunes) [RHEL-116016]
  - pinctrl: Add an API to get the pinctrl pins if initialized (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: Specify maximum number of XHCI interrupters (Desnes Nunes) [RHEL-116016]
  - can: gs_usb: add VID/PID for the CANnectivity firmware (Desnes Nunes) [RHEL-116016]
  - can: gs_usb: add usb endpoint address detection at driver probe step (Desnes Nunes) [RHEL-116016]
  - can: gs_usb: add VID/PID for Xylanta SAINT3 product family (Desnes Nunes) [RHEL-116016]
  - ext4: fix reserved gdt blocks handling in fsmap (Brian Foster) [RHEL-109218]
  - ext4: fix fsmap end of range reporting with bigalloc (Brian Foster) [RHEL-109218]
  - ext4: fix FS_IOC_GETFSMAP handling (Brian Foster) [RHEL-109218]
  - ext4: replace the traditional ternary conditional operator with with max()/min() (Brian Foster) [RHEL-109218]
  - scsi: scsi_debug: Make read-only arrays static const (Ewan D. Milne) [RHEL-116075]
  - scsi: core: sysfs: Correct sysfs attributes access rights (Ewan D. Milne) [RHEL-116075]
  - scsi: sd: Make sd shutdown issue START STOP UNIT appropriately (Ewan D. Milne) [RHEL-116075]
  - scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_transport_fc: Add comments to describe added 'rport' parameter (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_transport_fc: Change to use per-rport devloss_work_q (Ewan D. Milne) [RHEL-116075]
  - scsi: core: Fix kernel doc for scsi_track_queue_full() (Ewan D. Milne) [RHEL-116075]
  - scsi: core: Use scsi_cmd_priv() instead of open-coding it (Ewan D. Milne) [RHEL-116075]
  - scsi: core: Enforce unlimited max_segment_size when virt_boundary_mask is set (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_devinfo: Remove redundant 'found' (Ewan D. Milne) [RHEL-116075]
  - scsi: sd: Fix VPD page 0xb7 length check (Ewan D. Milne) [RHEL-116075]
  - scsi: core: Remember if a device is an ATA device (Ewan D. Milne) [RHEL-116075]
  - scsi: error: alua: I/O errors for ALUA state transitions (Ewan D. Milne) [RHEL-116075]
  - scsi: core: devinfo: Fix typo in comment (Ewan D. Milne) [RHEL-116075]
  - scsi: sd: Remove the stream_status member from scsi_stream_status_header (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_debug: Reduce DEF_ATOMIC_WR_MAX_LENGTH (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_transport_fc: Rename del_timer() in comment (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_debug: Add ERASE for tapes (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_debug: Use scsi_device->type instead os sdebug_ptype where possible (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_debug: Move some tape-specific commands to separate definitions (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_debug: Enable different command definitions for different device types (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_debug: Fix two typos in command definitions (Ewan D. Milne) [RHEL-116075]
  - KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (Jon Maloy) [RHEL-104731] {CVE-2025-38351}
  - cgroup/rstat: avoid disabling irqs for O(num_cpu) (Radostin Stoyanov) [RHEL-94298]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-637.el9]
changelog:
  - net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync() (Mete Durlu) [RHEL-99989]
  - net/smc: fix UAF on smcsk after smc_listen_out() (Mete Durlu) [RHEL-99989]
  - smc: Fix various oops due to inet_sock type confusion. (Mete Durlu) [RHEL-99989]
  - net/smc: convert timeouts to secs_to_jiffies() (Mete Durlu) [RHEL-99989]
  - net/smc: replace strncpy with strscpy (Mete Durlu) [RHEL-99989]
  - net/smc: remove unused function smc_lo_supports_v2 (Mete Durlu) [RHEL-99989]
  - net/smc: remove unused input parameters in smc_buf_get_slot (Mete Durlu) [RHEL-99989]
  - s390: ism: Pass string literal as format argument of dev_set_name() (Mete Durlu) [RHEL-99989]
  - smc: Fix lockdep false-positive for IPPROTO_SMC. (Mete Durlu) [RHEL-99989]
  - net/smc: use the correct ndev to find pnetid by pnetid table (Mete Durlu) [RHEL-99989]
  - net/smc: fix data error when recvmsg with MSG_PEEK flag (Mete Durlu) [RHEL-99989]
  - net/smc: delete pointless divide by one (Mete Durlu) [RHEL-99989]
  - net/smc: support SMC-R V2 for rdma devices with max_recv_sge equals to 1 (Mete Durlu) [RHEL-99989]
  - net/smc: fix LGR and link use-after-free issue (Mete Durlu) [RHEL-99989]
  - net/smc: initialize close_work early to avoid warning (Mete Durlu) [RHEL-99989]
  - net/smc: do not leave a dangling sk pointer in __smc_create() (Mete Durlu) [RHEL-99989]
  - net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid (Mete Durlu) [RHEL-99989]
  - net/smc: Fix memory leak when using percpu refs (Mete Durlu) [RHEL-99989]
  - net/smc: Address spelling errors (Mete Durlu) [RHEL-99989]
  - net/smc: fix lacks of icsk_syn_mss with IPPROTO_SMC (Mete Durlu) [RHEL-99989]
  - net/smc: add sysctl for smc_limit_hs (Mete Durlu) [RHEL-99989]
  - net/smc: prevent NULL pointer dereference in txopt_get (Mete Durlu) [RHEL-99989]
  - net/smc: introduce statistics for ringbufs usage of net namespace (Mete Durlu) [RHEL-99989]
  - net/smc: introduce statistics for allocated ringbufs of link group (Mete Durlu) [RHEL-99989]
  - net/smc: Use static_assert() to check struct sizes (Mete Durlu) [RHEL-99989]
  - net/smc: add the max value of fallback reason count (Mete Durlu) [RHEL-99989]
  - net/smc: remove unused input parameters in smcr_new_buf_create (Mete Durlu) [RHEL-99989]
  - net/smc: remove redundant code in smc_connect_check_aclc (Mete Durlu) [RHEL-99989]
  - Subject: net/smc: remove the fallback in __smc_connect (Mete Durlu) [RHEL-99989]
  - Subject: net/smc: remove unreferenced header in smc_loopback.h file (Mete Durlu) [RHEL-99989]
  - Subject: net/smc: prevent UAF in inet_create() (Mete Durlu) [RHEL-99989]
  - net/smc: {at|de}tach sndbuf to peer DMB if supported (Mete Durlu) [RHEL-99989]
  - gitlab-ci: disable automotive pipelines (Scott Weaver)
  - redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
  - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
  - redhat: remove EARLY ystream bits (Jan Stancek)
  - bpf: Do not audit capability check in do_jit() (Ondrej Mosnacek) [RHEL-105376]
  - io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124973] {CVE-2025-40047}
  - mfd: intel-lpss: Add Intel Wildcat Lake LPSS PCI IDs (CKI Backport Bot) [RHEL-95651]
  - dma/mapping.c: dev_dbg support for dma_addressing_limited (Prarit Bhargava) [RHEL-117031]
  - x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Prarit Bhargava) [RHEL-117031]
  - x86/kaslr: Reduce KASLR entropy on most x86 systems (Prarit Bhargava) [RHEL-117031]
  - KVM: x86: Advertise support for AMD's PREFETCHI (Paolo Bonzini) [RHEL-98696]
  - KVM: s390: Fix access to unavailable adapter indicator pages during postcopy (Thomas Huth) [RHEL-43214]
  - iommu/s390: Make attach succeed when the device was surprise removed (Thomas Huth) [RHEL-113452]
  - iommu/s390: Fix memory corruption when using identity domain (Thomas Huth) [RHEL-113452]
  - KVM: s390: Fix incorrect usage of mmu_notifier_register() (Thomas Huth) [RHEL-113452]
  - KVM: s390: rename PROT_NONE to PROT_TYPE_DUMMY (Thomas Huth) [RHEL-113452]
  - KVM: s390: Remove unneeded srcu lock (Thomas Huth) [RHEL-113452]
  - s390/vfio-ap: Fix no AP queue sharing allowed message written to kernel log (Thomas Huth) [RHEL-113452]
  - s390/kvm: Split kvm_host header file (Thomas Huth) [RHEL-113452]
  - s390/entry: Move early program check handler to entry.S (Thomas Huth) [RHEL-113452]
  - s390: Remove 2k vs 4k page table leftovers (Thomas Huth) [RHEL-113452]
  - s390/tlb: Use mm_has_pgste() instead of mm_alloc_pgste() (Thomas Huth) [RHEL-113452]
  - s390/mm: Convert pgste_val() into function (Thomas Huth) [RHEL-113452]
  - s390/mm: Convert pgprot_val() into function (Thomas Huth) [RHEL-113452]
  - s390: Add missing _TIF defines (Thomas Huth) [RHEL-113452]
  - s390/syscall: Merge __do_syscall() and do_syscall() (Thomas Huth) [RHEL-113452]
  - KVM: s390: Don't use %pK through debug printing (Thomas Huth) [RHEL-113452]
  - KVM: s390: Don't use %pK through tracepoints (Thomas Huth) [RHEL-113452]
  - s390/asm-offsets: Rename __LC_PGM_INT_CODE (Thomas Huth) [RHEL-113452]
  - s390/vfio-ap: Notify userspace that guest's AP config changed when mdev removed (Thomas Huth) [RHEL-72996]
  - s390/vfio-ap: Signal eventfd when guest AP configuration is changed (Thomas Huth) [RHEL-72996]
  - s390/vfio-ccw: Make mdev_types not look like a fake flex array (Thomas Huth) [RHEL-113452]
  - s390/vfio-ap: Make mdev_types not look like a fake flex array (Thomas Huth) [RHEL-113452]
  - KVM: s390: Switch to use hrtimer_setup() (Thomas Huth) [RHEL-113452]
  - s390/vfio-ap: Fix indentation in vfio_ap_mdev_ioctl() (Thomas Huth) [RHEL-113452]
  - KVM: s390: vsie: stop using "struct page" for vsie page (Thomas Huth) [RHEL-113452]
  - KVM: s390: vsie: stop messing with page refcount (Thomas Huth) [RHEL-113452]
  - KVM: s390: vsie: stop using page->index (Thomas Huth) [RHEL-113452]
  - s390/vfio-ap: Remove gmap_convert_to_secure() from vfio_ap_ops (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Streamline uc_skey test to issue iske after sske (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Add has device attr check to uc_attr_mem_limit selftest (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Add ucontrol gis routing test (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Add ucontrol flic attr selftests (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Add regression tests for PFCR subfunctions (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: correct IP.b length in uc_handle_sieic debug output (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Fix whitespace confusion in ucontrol test (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Verify reject memory region operations for ucontrol VMs (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Add uc_skey VM test case (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Add uc_map_unmap VM test case (Thomas Huth) [RHEL-113452]
  - s390/vfio-ap: Switch over to sysfs_emit() (Thomas Huth) [RHEL-113452]
  - s390: Fix various typos (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Add regression tests for PLO subfunctions (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Add regression tests for KMAC, KMC, KM, KIMD and KLMD crypto subfunctions (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Add regression tests for KMCTR, KMF, KMO and PCC crypto subfunctions (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Add regression tests for PRNO, KDSA and KMA crypto subfunctions (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Add regression tests for SORTL and DFLTCC CPU subfunctions (Thomas Huth) [RHEL-113452]
  - selftests: kvm: s390: Add VM run test case (Thomas Huth) [RHEL-113452]
  - selftests: kvm: s390: Add test fixture and simple VM setup tests (Thomas Huth) [RHEL-113452]
  - selftests: kvm: s390: Add s390x ucontrol test suite with hpage test (Thomas Huth) [RHEL-113452]
  - selftests: kvm: s390: Add kvm_s390_sie_block definition for userspace tests (Thomas Huth) [RHEL-113452]
  - selftests: kvm: s390: Define page sizes in shared header (Thomas Huth) [RHEL-113452]
  - selftests/kvm: remove dead file (Thomas Huth) [RHEL-113452]
  - Revert "kvm: selftests: move base kvm_util.h declarations to kvm_util_base.h" (Thomas Huth) [RHEL-113452]
  - KVM: selftests: Define _GNU_SOURCE for all selftests code (Thomas Huth) [RHEL-113452]
  - s390/cio: Add missing MODULE_DESCRIPTION() macros (Thomas Huth) [RHEL-113452]
  - s390: Replace S390_lowcore by get_lowcore() (Thomas Huth) [RHEL-113452]
  - s390/uv: gmap_make_secure() cleanups for further changes (Thomas Huth) [RHEL-113452]
  - s390/uv: Don't call folio_wait_writeback() without a folio reference (Thomas Huth) [RHEL-113452]
  - KVM: s390x: selftests: Add shared zeropage test (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Add selftest for single-stepping (Thomas Huth) [RHEL-113452]
  - xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-71501]
  - sched: restore the behavior of put_task_struct() for non-rt (Luis Claudio R. Goncalves) [RHEL-40885]
  - sched: Do not call __put_task_struct() on rt if pi_blocked_on is set (Luis Claudio R. Goncalves) [RHEL-40885]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-638.el9]
changelog:
  - cpufreq: powernv: Stop setting common freq attributes (Yunming Yang) [RHEL-121364]
  - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123617]
  - selftests/bpf: Test invalid narrower ctx load (Viktor Malik) [RHEL-110274]
  - bpf: Reject narrower access to pointer ctx fields (Viktor Malik) [RHEL-110274]
  - libbpf: Fix handling of BPF arena relocations (Viktor Malik) [RHEL-110274]
  - s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again (Viktor Malik) [RHEL-110274]
  - selftests/bpf: Add negative test cases for snprintf (Viktor Malik) [RHEL-110274]
  - bpf: Reject %p% format string in bprintf-like helpers (Viktor Malik) [RHEL-110274]
  - selftests/bpf: adapt one more case in test_lru_map to the new target_free (Viktor Malik) [RHEL-110274]
  - libbpf: Fix possible use-after-free for externs (Viktor Malik) [RHEL-110274]
  - libbpf: Fix null pointer dereference in btf_dump__free on allocation failure (Viktor Malik) [RHEL-110274]
  - bpf: Adjust free target to avoid global starvation of LRU map (Viktor Malik) [RHEL-110274]
  - selftests/bpf: Add tests with stack ptr register in conditional jmp (Viktor Malik) [RHEL-110274]
  - bpf: Do not include stack ptr register in precision backtracking bookkeeping (Viktor Malik) [RHEL-110274]
  - selftests/bpf: Add unit tests with __bpf_trap() kfunc (Viktor Malik) [RHEL-110274]
  - bpf: Warn with __bpf_trap() kfunc maybe due to uninitialized variable (Viktor Malik) [RHEL-110274]
  - libbpf/btf: Fix string handling to support multi-split BTF (Viktor Malik) [RHEL-110274]
  - bpf: Pass the same orig_call value to trampoline functions (Viktor Malik) [RHEL-110274]
  - s390/bpf: Store backchain even for leaf progs (Viktor Malik) [RHEL-110274]
  - libbpf: Check bpf_map_skeleton link for NULL (Viktor Malik) [RHEL-110274]
  - bpf: Fix WARN() in get_bpf_raw_tp_regs (Viktor Malik) [RHEL-110274]
  - libbpf: Use proper errno value in nlattr (Viktor Malik) [RHEL-110274]
  - selftests/bpf: Fix caps for __xlated/jited_unpriv (Viktor Malik) [RHEL-110274]
  - bpftool: Fix cgroup command to only show cgroup bpf programs (Viktor Malik) [RHEL-110274]
  - bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels (Viktor Malik) [RHEL-110274]
  - libbpf: Use proper errno value in linker (Viktor Malik) [RHEL-110274]
  - Use thread-safe function pointer in libbpf_print (Viktor Malik) [RHEL-110274]
  - bpf: Use proper type to calculate bpf_raw_tp_null_args.mask index (Viktor Malik) [RHEL-110274]
  - selftests/bpf: Add test for attaching kprobe with long event names (Viktor Malik) [RHEL-110274]
  - selftests/bpf: Add test for attaching uprobe with long event names (Viktor Malik) [RHEL-110274]
  - libbpf: Fix event name too long error (Viktor Malik) [RHEL-110274]
  - libbpf: Verify section type in btf_find_elf_sections (Viktor Malik) [RHEL-110274]
  - libbpf: Fix buffer overflow in bpf_object__init_prog (Viktor Malik) [RHEL-110274]
  - selftests/bpf: Add test case for atomic update of fd htab (Viktor Malik) [RHEL-110274]
  - bpf: Don't allocate per-cpu extra_elems for fd htab (Viktor Malik) [RHEL-110274]
  - bpf: Add is_fd_htab() helper (Viktor Malik) [RHEL-110274]
  - bpf: Support atomic update for htab of maps (Viktor Malik) [RHEL-110274]
  - bpf: Rename __htab_percpu_map_update_elem to htab_map_update_elem_in_place (Viktor Malik) [RHEL-110274]
  - bpf: Factor out htab_elem_value helper() (Viktor Malik) [RHEL-110274]
  - bpf: Bail out early in __htab_map_lookup_and_delete_elem() (Viktor Malik) [RHEL-110274]
  - selftests/bpf: Fix bpf_nf selftest failure (Viktor Malik) [RHEL-110274]
  - bpf: Check link_create.flags parameter for multi_uprobe (Viktor Malik) [RHEL-110274]
  - bpf: Check link_create.flags parameter for multi_kprobe (Viktor Malik) [RHEL-110274]
  - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119153] {CVE-2025-39883}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-639.el9]
changelog:
  - smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-114699]
  - smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-114699]
  - smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-114699]
  - smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-114699]
  - cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-114699]
  - smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-114699]
  - smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-114699]
  - smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-114699]
  - smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-114699]
  - smb: client: remove pointless cfid->has_lease check (Paulo Alcantara) [RHEL-114699]
  - smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-114699]
  - smb: client: update cfid->last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-114699]
  - smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-114699]
  - smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-114699]
  - smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-114699]
  - smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-114699]
  - smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-114699]
  - smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-114699]
  - smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-114699]
  - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-119582]
  - smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-123665]
  - nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-111104]
  - arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-119900]
  - arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-119900]
  - arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-119900]
  - arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-119900]
  - arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-119900]
  - arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-119900]
  - arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-119900]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-640.el9]
changelog:
  - kernfs: Fix UAF in polling when open file is released (Pavel Reichl) [RHEL-122088] {CVE-2025-39881}
  - crypto: iaa - mark as supported (Vladis Dronov) [RHEL-95629]
  - dmaengine: idxd: Add a new IAA device ID for Wildcat Lake family platforms (Vladis Dronov) [RHEL-95629]
  - crypto: iaa - Optimize rebalance_wq_table() (Vladis Dronov) [RHEL-95629]
  - crypto: iaa - Adjust workqueue allocation type (Vladis Dronov) [RHEL-95629]
  - fs: Add 'initramfs_options' to set initramfs mount options (Ian Kent) [RHEL-121113]
  - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123108] {CVE-2025-39898}
  - Configs: Enable CONFIG_SCHED_MC for powerpc (Phil Auld) [RHEL-118964]
  - sched: Unify the SCHED_{SMT,CLUSTER,MC} Kconfig (Phil Auld) [RHEL-118964]
  - sched: Move STDL_INIT() functions out-of-line (Phil Auld) [RHEL-118964]
  - sched/fair: Get rid of sched_domains_curr_level hack for tl->cpumask() (Phil Auld) [RHEL-118964]
  - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled (Phil Auld) [RHEL-118964]
  - x86/smpboot: moves x86_topology to static initialize and truncate (Phil Auld) [RHEL-118964]
  - x86/smpboot: remove redundant CONFIG_SCHED_SMT (Phil Auld) [RHEL-118964]
  - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup (Phil Auld) [RHEL-118964]
  - powerpc/smp: Dynamically build Powerpc topology (Phil Auld) [RHEL-118964]
  - powerpc/smp: Avoid asym packing within thread_group of a core (Phil Auld) [RHEL-118964]
  - powerpc/smp: Add __ro_after_init attribute (Phil Auld) [RHEL-118964]
  - powerpc/smp: Disable MC domain for shared processor (Phil Auld) [RHEL-118964]
  - powerpc/smp: Enable Asym packing for cores on shared processor (Phil Auld) [RHEL-118964]
  - perf/x86/intel/uncore: Add iMC freerunning for Panther Lake (Michael Petlan) [RHEL-47456]
  - perf/x86/intel/uncore: Add Panther Lake support (Michael Petlan) [RHEL-47456]
  - perf/x86/intel/uncore: Support customized MMIO map size (Michael Petlan) [RHEL-47442 RHEL-47456]
  - perf/x86/intel/uncore: Support MSR portal for discovery tables (Michael Petlan) [RHEL-47442 RHEL-47456]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-641.el9]
changelog:
  - tools/power/x86/intel-speed-select: v1.23 release (David Arcari) [RHEL-125240]
  - tools/power/x86/intel-speed-select: Skip uncore frequency update (David Arcari) [RHEL-125240]
  - tools/power/x86/intel-speed-select: Support SST PP revision 2 fields (David Arcari) [RHEL-125240]
  - tools/power/x86/intel-speed-select: v1.22 release (David Arcari) [RHEL-125240]
  - tools/power/x86/intel-speed-select: Prefix header search path with sysroot (David Arcari) [RHEL-125240]
  - tools/power/x86/intel-speed-select: Die ID for IO dies (David Arcari) [RHEL-125240]
  - tools/power/x86/intel-speed-select: Fix the condition to check multi die system (David Arcari) [RHEL-125240]
  - tools/power/x86/intel-speed-select: Prevent increasing MAX_DIE_PER_PACKAGE (David Arcari) [RHEL-125240]
  - selftests: livepatch: test if ftrace can trace a livepatched function (Joe Lawrence) [RHEL-114920]
  - selftests: livepatch: add new ftrace helpers functions (Joe Lawrence) [RHEL-114920]
  - samples/livepatch: add module descriptions (Joe Lawrence) [RHEL-114920]
  - selftest/livepatch: Only run test-kprobe with CONFIG_KPROBES_ON_FTRACE (Joe Lawrence) [RHEL-114920]
  - docs: livepatch: move text out of code block (Joe Lawrence) [RHEL-114920]
  - livepatch: Add comment to clarify klp_add_nops() (Joe Lawrence) [RHEL-114920]
  - xfs: rework datasync tracking and execution (Pavel Reichl) [RHEL-113841]
  - xfs: rearrange code in xfs_inode_item_precommit (Pavel Reichl) [RHEL-113841]
  - dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-115369]
  - dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-115369]
  - dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-115369]
  - dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-115369]
  - dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-115369]
  - dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-115369]
  - dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-115369]
  - dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-115369]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-642.el9]
changelog:
  - kernel: extend rh_waived to cope better with the CVE mitigations case (Ricardo Robaina) [RHEL-122981]
  - Add support to rh_waived cmdline boot parameter (Ricardo Robaina) [RHEL-122981]
  - rh_flags: Rename rh_features to rh_flags (Ricardo Robaina) [RHEL-122981]
  - kernel: rh_features: fix reading empty feature list from /proc (Ricardo Robaina) [RHEL-122981]
  - rh_features: move rh_features entry to sys/kernel (Ricardo Robaina) [RHEL-122981]
  - rh_features: convert to atomic allocation (Ricardo Robaina) [RHEL-122981]
  - add rh_features to /proc (Ricardo Robaina) [RHEL-122981]
  - add support for rh_features (Ricardo Robaina) [RHEL-122981]
  - dlm: fix lkb timeout scanning lookup (Alexander Aring) [RHEL-82137]
  - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110034]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-643.el9]
changelog:
  - s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-129168]
  - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129201]
  - x86/topology: Implement topology_is_core_online() to address SMT regression (David Arcari) [RHEL-125289]
  - tools/power turbostat: Fix incorrect sorting of PMT telemetry (David Arcari) [RHEL-127415]
  - dma-mapping: fix missing clear bdr in check_ram_in_range_map() (Prarit Bhargava) [RHEL-128293]
  - net/mlx5: fs, fix UAF in flow counter release (CKI Backport Bot) [RHEL-124427] {CVE-2025-39979}
  - uprobes: Fix race in uprobe_free_utask (Viktor Malik) [RHEL-120479]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-644.el9]
changelog:
  - s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-129896]
  - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-128358]
  - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-128358]
  - mm/uffd: add missing pte_mkdirty() to mfill_atomic_install_pte() (Lucas Oakley) [RHEL-46006]
  - Bluetooth: revert TX timestamping (David Marlin) [RHEL-119045]
  - Bluetooth: HCI: Fix tracking of advertisement set/instance 0x00 (David Marlin) [RHEL-119045]
  - Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (David Marlin) [RHEL-119045]
  - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-119045] {CVE-2025-39981}
  - Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (David Marlin) [RHEL-119045] {CVE-2025-39982}
  - Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (David Marlin) [RHEL-119045] {CVE-2025-39983}
  - Bluetooth: hci_sync: Fix hci_resume_advertising_sync (David Marlin) [RHEL-119045]
  - Bluetooth: Fix build after header cleanup (David Marlin) [RHEL-119045]
  - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() (David Marlin) [RHEL-119045] {CVE-2025-39860}
  - Bluetooth: vhci: Prevent use-after-free by removing debugfs files early (David Marlin) [RHEL-119045] {CVE-2025-39861}
  - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-119045]
  - Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced (David Marlin) [RHEL-119045]
  - Bluetooth: hci_event: Mark connection as closed during suspend disconnect (David Marlin) [RHEL-119045]
  - Bluetooth: hci_event: Treat UNKNOWN_CONN_ID on disconnect as success (David Marlin) [RHEL-119045]
  - Bluetooth: hci_conn: Make unacked packet handling more robust (David Marlin) [RHEL-119045]
  - Bluetooth: btnxpuart: Uses threaded IRQ for host wakeup handling (David Marlin) [RHEL-119045]
  - Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync() (David Marlin) [RHEL-119045]
  - Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established (David Marlin) [RHEL-119045]
  - Bluetooth: hci_core: Fix using ll_privacy_capable for current settings (David Marlin) [RHEL-119045]
  - Bluetooth: hci_core: Fix using {cis,bis}_capable for current settings (David Marlin) [RHEL-119045]
  - Bluetooth: btmtk: Fix wait_on_bit_timeout interruption during shutdown (David Marlin) [RHEL-119045]
  - Bluetooth: hci_sync: Avoid adding default advertising on startup (David Marlin) [RHEL-119045]
  - Bluetooth: hci_event: Mask data status from LE ext adv reports (David Marlin) [RHEL-119045]
  - Bluetooth: btintel_pcie: Fix Alive Context State Handling (David Marlin) [RHEL-119045]
  - Bluetooth: btintel_pcie: Make driver wait for alive interrupt (David Marlin) [RHEL-119045]
  - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' (David Marlin) [RHEL-119045] {CVE-2025-38593}
  - Bluetooth: btusb: Add one more ID 0x28de:0x1401 for Qualcomm WCN6855 (David Marlin) [RHEL-119045]
  - Bluetooth: btusb: Sort WCN6855 device IDs by VID and PID (David Marlin) [RHEL-119045]
  - Bluetooth: btusb: QCA: Support downloading custom-made firmwares (David Marlin) [RHEL-119045]
  - Bluetooth: btnxpuart: Add uevents for FW dump and FW download complete (David Marlin) [RHEL-119045]
  - Bluetooth: btnxpuart: Correct the Independent Reset handling after FW dump (David Marlin) [RHEL-119045]
  - Bluetooth: ISO: Support SCM_TIMESTAMPING for ISO TS (David Marlin) [RHEL-119045]
  - Bluetooth: ISO: add socket option to report packet seqnum via CMSG (David Marlin) [RHEL-119045]
  - Bluetooth: btintel: Define a macro for Intel Reset vendor command (David Marlin) [RHEL-119045]
  - Bluetooth: Fix typos in comments (David Marlin) [RHEL-119045]
  - Bluetooth: RFCOMM: Fix typos in comments (David Marlin) [RHEL-119045]
  - Bluetooth: aosp: Fix typo in comment (David Marlin) [RHEL-119045]
  - Bluetooth: hci_bcm4377: Fix typo in comment (David Marlin) [RHEL-119045]
  - Bluetooth: btrtl: Fix typo in comment (David Marlin) [RHEL-119045]
  - Bluetooth: btmtk: Fix typo in log string (David Marlin) [RHEL-119045]
  - Bluetooth: btintel: Fix typo in comment (David Marlin) [RHEL-119045]
  - Bluetooth: btusb: Add new VID/PID 0489/e14e for MT7925 (David Marlin) [RHEL-119045]
  - Bluetooth: btusb: Add RTL8852BE device 0x13d3:0x3618 (David Marlin) [RHEL-119045]
  - Bluetooth: btnxpuart: implement powerup sequence (David Marlin) [RHEL-119045]
  - Bluetooth: Fix spelling mistakes (David Marlin) [RHEL-119045]
  - Bluetooth: btnxpuart: Add support for 4M baudrate (David Marlin) [RHEL-119045]
  - Bluetooth: hci_event: Correct comment about HCI_EV_EXTENDED_INQUIRY_RESULT (David Marlin) [RHEL-119045]
  - Bluetooth: hci_core: Eliminate an unnecessary goto label in hci_find_irk_by_addr() (David Marlin) [RHEL-119045]
  - Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (David Marlin) [RHEL-119045]
  - Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie() (David Marlin) [RHEL-119045]
  - Bluetooth: hci_qca: Enable ISO data packet RX (David Marlin) [RHEL-119045]
  - Bluetooth: btintel_pcie: Add support for device 0x4d76 (David Marlin) [RHEL-119045]
  - Bluetooth: Remove hci_conn_hash_lookup_state() (David Marlin) [RHEL-119045]
  - Bluetooth: btusb: Add a new VID/PID 2c7c/7009 for MT7925 (David Marlin) [RHEL-119045]
  - Bluetooth: btintel_pcie: Reword restart to recovery (David Marlin) [RHEL-119045]
  - Bluetooth: btintel_pcie: Support Function level reset (David Marlin) [RHEL-119045]
  - Bluetooth: btusb: Add support for variant of RTL8851BE (USB ID 13d3:3601) (David Marlin) [RHEL-119045]
  - Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano (David Marlin) [RHEL-119045]
  - Bluetooth: btusb: Clean up some Bluetooth device IDs (David Marlin) [RHEL-119045]
  - netlink: avoid infinite retry looping in netlink_unicast() (Davide Caratti) [RHEL-115649] {CVE-2025-38727}
  - genetlink: fix genl_bind() invoking bind() after -EPERM (Davide Caratti) [RHEL-115649] {CVE-2025-39926}
  - netlink: make sure we allow at least one dump skb (Davide Caratti) [RHEL-115649]
  - netlink: Fix rmem check in netlink_broadcast_deliver(). (Davide Caratti) [RHEL-115649]
  - netlink: Fix wraparounds of sk->sk_rmem_alloc. (Davide Caratti) [RHEL-115649] {CVE-2025-38465}
  - bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-121298]
  - octeon_ep_vf: Add support to retrieve hardware channel information (Kamal Heib) [RHEL-111113]
  - octeon_ep: Add support to retrieve hardware channel information (Kamal Heib) [RHEL-111113]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-645.el9]
changelog:
  - tty: n_tty: Fix buffer offsets when lookahead is used (Radostin Stoyanov) [RHEL-127716]
  - ext4: don't over-report free space or inodes in statvfs (Ravi Singh) [RHEL-125357]
  - dpll: add phase-adjust-gran pin attribute (Petr Oros) [RHEL-126530]
  - dpll: fix device-id-get and pin-id-get to return errors properly (Petr Oros) [RHEL-126530]
  - dpll: spec: add missing module-name and clock-id to pin-get reply (Petr Oros) [RHEL-126530]
  - dpll: add phase_offset_avg_factor_get/set callback ops (Petr Oros) [RHEL-126530]
  - dpll: add phase-offset-avg-factor device attribute to netlink spec (Petr Oros) [RHEL-126530]
  - dpll: fix clock quality level reporting (Petr Oros) [RHEL-126530]
  - dpll: add reference sync get/set (Petr Oros) [RHEL-126530]
  - dpll: add reference-sync netlink attribute (Petr Oros) [RHEL-126530]
  - dpll: remove documentation of rclk_dev_name (Petr Oros) [RHEL-126530]
  - tpm: Prevent local DOS via tpm/tpm0/ppi/*operations (Denis Aleksandrov) [RHEL-62964]
  - KVM: arm64: vgic-v3: Release reserved slot outside of lpi_xa's lock (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: vgic-v3: Reinstate IRQ lock ordering for LPI xarray (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Update stale comment for sanitise_mte_tags() (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Add build-time check for duplicate DECLARE_REG use (Cornelia Huck) [RHEL-115975]
  - kvm: arm64: use BUG() instead of BUG_ON(1) (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Fix page leak in user_mem_abort() (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: vgic: fix incorrect spinlock API usage (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: vgic-v3: Indicate vgic_put_irq() may take LPI xarray lock (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: vgic-v3: Don't require IRQs be disabled for LPI xarray lock (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: vgic-v3: Erase LPIs from xarray outside of raw spinlocks (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Spin off release helper from vgic_put_irq() (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: vgic-v3: Use bare refcount for VGIC LPIs (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: vgic: Drop stale comment on IRQ active state (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Initialize PMSCR_EL1 when in VHE (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Mark freed S2 MMUs as invalid (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Check for SYSREGS_ON_CPU before accessing the 32bit state (Cornelia Huck) [RHEL-115975]
  - arm64: vgic-v2: Fix guest endianness check in hVHE mode (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Disambiguate support for vSGIs v. vLPIs (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Enforce the sorting of the GICv3 system register table (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Clarify the check for reset callback in check_sysreg_table() (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: vgic-its: Return -ENXIO to invalid KVM_DEV_ARM_VGIC_GRP_CTRL attrs (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Make RAS registers UNDEF when RAS isn't advertised (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Filter out HCR_EL2 bits when running in hypervisor context (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Fix vcpu_{read,write}_sys_reg() accessors (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Simplify sysreg access on exception delivery (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Check for SYSREGS_ON_CPU before accessing the CPU state (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: nv: Handle CNTHCTL_EL2 specially (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: nv: Add missing EL2->EL1 mappings in get_el2_to_el1_mapping() (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Make RVBAR_EL2 accesses UNDEF (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Unify UNDEF injection helpers (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Make most GICv3 accesses UNDEF if they trap (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Fix enforcement of upper bound on MDCR_EL2.HPMN (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Don't retire MMIO instruction w/ pending (emulated) SError (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Treat vCPU with pending SError as runnable (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Block cacheable PFNMAP mapping (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Assume non-PFNMAP/MIXEDMAP VMAs can be mapped cacheable (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Rename the device variable to s2_force_noncacheable (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Remove kvm_arch_vcpu_run_map_fp() (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Don't free hyp pages with pKVM on GICv2 (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Fix error path in init_hyp_mode() (Cornelia Huck) [RHEL-115975]
  - arm64: kvm: Introduce nvhe stack size constants (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: Adjust range correctly during host stage-2 faults (Cornelia Huck) [RHEL-115975]
  - KVM: arm64: WARN if unmapping a vLPI fails in any path (Cornelia Huck) [RHEL-115975]
  - can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124106] {CVE-2025-39925}
  - can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124106] {CVE-2025-39925}
  - futex: Optimize per-cpu reference counting (Waiman Long) [RHEL-101190]
  - futex: Don't leak robust_list pointer on exec race (Waiman Long) [RHEL-101190]
  - selftest/futex: Compile also with libnuma < 2.0.16 (Waiman Long) [RHEL-101190]
  - selftest/futex: Reintroduce "Memory out of range" numa_mpol's subtest (Waiman Long) [RHEL-101190]
  - selftest/futex: Make the error check more precise for futex_numa_mpol (Waiman Long) [RHEL-101190]
  - selftests/futex: Fix futex_wait() for 32bit ARM (Waiman Long) [RHEL-101190]
  - selftests: futex: Fix incorrect kernel headers search path (Waiman Long) [RHEL-101190]
  - futex: Prevent use-after-free during requeue-PI (Waiman Long) [RHEL-101190]
  - selftests/futex: Fix typos and grammar in futex_priv_hash (Waiman Long) [RHEL-101190]
  - selftests/futex: Fix format-security warnings in futex_priv_hash (Waiman Long) [RHEL-101190]
  - selftests/futex: Fix some futex_numa_mpol subtests (Waiman Long) [RHEL-101190]
  - selftests/futex: Remove the -g parameter from futex_priv_hash (Waiman Long) [RHEL-101190]
  - futex: Move futex_hash_free() back to __mmput() (Waiman Long) [RHEL-101190]
  - futex: Move futex cleanup to __mmdrop() (Waiman Long) [RHEL-101190]
  - kernel/fork: group allocation/free of per-cpu counters for mm struct (Waiman Long) [RHEL-101190]
  - futex: Use user_write_access_begin/_end() in futex_put_value() (Waiman Long) [RHEL-101190]
  - selftests/futex: Fix spelling mistake "Succeffuly" -> "Successfully" (Waiman Long) [RHEL-101190]
  - selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t (Waiman Long) [RHEL-101190]
  - perf bench futex: Remove support for IMMUTABLE (Waiman Long) [RHEL-101190]
  - selftests/futex: Remove support for IMMUTABLE (Waiman Long) [RHEL-101190]
  - futex: Remove support for IMMUTABLE (Waiman Long) [RHEL-101190]
  - futex: Make futex_private_hash_get() static (Waiman Long) [RHEL-101190]
  - futex: Use RCU-based per-CPU reference counting instead of rcuref_t (Waiman Long) [RHEL-101190]
  - selftests/futex: Adapt the private hash test to RCU related changes (Waiman Long) [RHEL-101190]
  - perf bench futex: Fix prctl include in musl libc (Waiman Long) [RHEL-101190]
  - selftests/futex: Add futex_numa to .gitignore (Waiman Long) [RHEL-101190]
  - futex: Temporary disable FUTEX_PRIVATE_HASH (Waiman Long) [RHEL-101190]
  - futex: Initialize futex_phash_new during fork(). (Waiman Long) [RHEL-101190]
  - futex: Verify under the lock if hash can be replaced (Waiman Long) [RHEL-101190]
  - futex: Handle invalid node numbers supplied by user (Waiman Long) [RHEL-101190]
  - selftests/futex: Set the home_node in futex_numa_mpol (Waiman Long) [RHEL-101190]
  - selftests/futex: getopt() requires int as return value. (Waiman Long) [RHEL-101190]
  - tools headers UAPI: Sync linux/prctl.h with the kernel sources to pick FUTEX knob (Waiman Long) [RHEL-101190]
  - io_uring/futex: mark wait requests as inflight (Waiman Long) [RHEL-101190]
  - selftests/futex: Fix spelling mistake "unitiliazed" -> "uninitialized" (Waiman Long) [RHEL-101190]
  - futex: Correct the kernedoc return value for futex_wait_setup(). (Waiman Long) [RHEL-101190]
  - tools headers: Synchronize prctl.h ABI header (Waiman Long) [RHEL-101190]
  - futex: Use RCU_INIT_POINTER() in futex_mm_init(). (Waiman Long) [RHEL-101190]
  - selftests/futex: Use TAP output in futex_numa_mpol (Waiman Long) [RHEL-101190]
  - selftests/futex: Use TAP output in futex_priv_hash (Waiman Long) [RHEL-101190]
  - futex: Fix kernel-doc comments (Waiman Long) [RHEL-101190]
  - futex: Relax the rcu_assign_pointer() assignment of mm->futex_phash in futex_mm_init() (Waiman Long) [RHEL-101190]
  - futex: Fix outdated comment in struct restart_block (Waiman Long) [RHEL-101190]
  - futex,selftests: Add another FUTEX2_NUMA selftest (Waiman Long) [RHEL-101190]
  - selftests/futex: Add futex_numa_mpol (Waiman Long) [RHEL-101190]
  - selftests/futex: Add futex_priv_hash (Waiman Long) [RHEL-101190]
  - selftests/futex: Build without headers nonsense (Waiman Long) [RHEL-101190]
  - tools/perf: Allow to select the number of hash buckets (Waiman Long) [RHEL-101190]
  - tools headers: Synchronize prctl.h ABI header (Waiman Long) [RHEL-101190]
  - futex: Implement FUTEX2_MPOL (Waiman Long) [RHEL-101190]
  - futex: Implement FUTEX2_NUMA (Waiman Long) [RHEL-101190]
  - futex: Allow to make the private hash immutable (Waiman Long) [RHEL-101190]
  - futex: Allow to resize the private local hash (Waiman Long) [RHEL-101190]
  - futex: Allow automatic allocation of process wide futex hash (Waiman Long) [RHEL-101190]
  - futex: Add basic infrastructure for local task local hash (Waiman Long) [RHEL-101190]
  - futex: Create helper function to initialize a hash slot (Waiman Long) [RHEL-101190]
  - futex: Introduce futex_q_lockptr_lock() (Waiman Long) [RHEL-101190]
  - futex: Decrease the waiter count before the unlock operation (Waiman Long) [RHEL-101190]
  - futex: Acquire a hash reference in futex_wait_multiple_setup() (Waiman Long) [RHEL-101190]
  - futex: Create private_hash() get/put class (Waiman Long) [RHEL-101190]
  - futex: Create futex_hash() get/put class (Waiman Long) [RHEL-101190]
  - futex: Create hb scopes (Waiman Long) [RHEL-101190]
  - futex: Pull futex_hash() out of futex_q_lock() (Waiman Long) [RHEL-101190]
  - futex: Move futex_queue() into futex_wait_setup() (Waiman Long) [RHEL-101190]
  - mm: Add vmalloc_huge_node() (Waiman Long) [RHEL-101190]
  - rcuref: Provide rcuref_is_dead() (Waiman Long) [RHEL-101190]
  - futex: Use a hashmask instead of hashsize (Waiman Long) [RHEL-101190]
  - rcuref: Plug slowpath race in rcuref_put() (Waiman Long) [RHEL-101190]
  - seqlock: add missing parameter documentation for raw_seqcount_try_begin() (Waiman Long) [RHEL-101190]
  - mm: introduce mmap_lock_speculate_{try_begin|retry} (Waiman Long) [RHEL-101190]
  - mm: convert mm_lock_seq to a proper seqcount (Waiman Long) [RHEL-101190]
  - seqlock: add raw_seqcount_try_begin (Waiman Long) [RHEL-101190]
  - sched/wake_q: Add helper to call wake_up_q after unlock with preemption disabled (Waiman Long) [RHEL-101190]
  - locking/rtmutex: Make sure we wake anything on the wake_q when we release the lock->wait_lock (Waiman Long) [RHEL-101190]
  - locking: rtmutex: Fix wake_q logic in task_blocks_on_rt_mutex (Waiman Long) [RHEL-101190]
  - futex: fix user access on powerpc (Waiman Long) [RHEL-101190]
  - futex: improve user space accesses (Waiman Long) [RHEL-101190]
  - locking/mutex: Make mutex::wait_lock irq safe (Waiman Long) [RHEL-101190]
  - locking/mutex: Remove wakeups from under mutex::wait_lock (Waiman Long) [RHEL-101190]
  - locking/rt: Annotate unlock followed by lock for sparse. (Waiman Long) [RHEL-101190]
  - mm: fix (harmless) type confusion in lock_vma_under_rcu() (Waiman Long) [RHEL-101190]
  - selftests/mm: kvm, mdwe fixes to avoid requiring "make headers" (Waiman Long) [RHEL-101190]
  - mm: optimize CONFIG_PER_VMA_LOCK member placement in vm_area_struct (Waiman Long) [RHEL-101190]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-646.el9]
changelog:
  - docs: powerpc: Add htm.rst to table of contents (Mamatha Inamdar) [RHEL-52755]
  - Add CONFIG_HTMDUMP (Mamatha Inamdar) [RHEL-52755]
  - powerpc/pseries/htmdump: Add documentation for H_HTM debugfs interface (Mamatha Inamdar) [RHEL-52755]
  - powerpc/pseries/htmdump: Add htm capabilities support to htmdump module (Mamatha Inamdar) [RHEL-52755]
  - powerpc/pseries/htmdump: Add htm flags support to htmdump module (Mamatha Inamdar) [RHEL-52755]
  - powerpc/pseries/htmdump: Add htm setup support to htmdump module (Mamatha Inamdar) [RHEL-52755]
  - powerpc/pseries/htmdump: Add htm info support to htmdump module (Mamatha Inamdar) [RHEL-52755]
  - powerpc/pseries/htmdump: Add htm status support to htmdump module (Mamatha Inamdar) [RHEL-52755]
  - powerpc/pseries/htmdump: Add htm start support to htmdump module (Mamatha Inamdar) [RHEL-52755]
  - powerpc/pseries/htmdump: Add htm configure support to htmdump module (Mamatha Inamdar) [RHEL-52755]
  - powerpc/pseries/htmdump: Add htm_hcall_wrapper to integrate other htm operations (Mamatha Inamdar) [RHEL-52755]
  - powerpc: Document details on H_HTM hcall (Mamatha Inamdar) [RHEL-52755]
  - powerpc/pseries: Export hardware trace macro dump via debugfs (Mamatha Inamdar) [RHEL-52755]
  - powerpc/pseries: Macros and wrapper functions for H_HTM call (Mamatha Inamdar) [RHEL-52755]
  - powerpc: Export kvm_guest static key, for bcachefs six locks (Mamatha Inamdar) [RHEL-52755]
  - kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129693]
  - USB: core: remove the move buf action (Desnes Nunes) [RHEL-122021]
  - usb: typec: tcpm: properly deliver cable vdms to altmode drivers (Desnes Nunes) [RHEL-122021]
  - xhci: fix memory leak regression when freeing xhci vdev devices depth first (Desnes Nunes) [RHEL-122021]
  - xhci: dbc: Fix full DbC transfer ring after several reconnects (Desnes Nunes) [RHEL-122021]
  - xhci: dbc: decouple endpoint allocation from initialization (Desnes Nunes) [RHEL-122021]
  - USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions (Desnes Nunes) [RHEL-122021]
  - USB: serial: option: add Telit Cinterion FN990A w/audio compositions (Desnes Nunes) [RHEL-122021]
  - usb: xhci: Fix slot_id resource race conflict (Desnes Nunes) [RHEL-122021]
  - usb: typec: fusb302: Revert incorrect threaded irq fix (Desnes Nunes) [RHEL-122021]
  - USB: core: Update kerneldoc for usb_hcd_giveback_urb() (Desnes Nunes) [RHEL-122021]
  - memstick: Fix deadlock by moving removing flag earlier (Desnes Nunes) [RHEL-122021]
  - usb: dwc3: Remove WARN_ON for device endpoint command timeouts (Desnes Nunes) [RHEL-122021] {CVE-2025-39801}
  - USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles (Desnes Nunes) [RHEL-122021]
  - usb: storage: realtek_cr: Use correct byte order for bcs->Residue (Desnes Nunes) [RHEL-122021]
  - usb: chipidea: imx: improve usbmisc_imx7d_pullup() (Desnes Nunes) [RHEL-122021]
  - kcov, usb: Don't disable interrupts in kcov_remote_start_usb_softirq() (Desnes Nunes) [RHEL-122021]
  - usb: dwc3: Ignore late xferNotReady event to prevent halt timeout (Desnes Nunes) [RHEL-122021]
  - USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera (Desnes Nunes) [RHEL-122021]
  - usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test (Desnes Nunes) [RHEL-122021]
  - usb: renesas-xhci: Fix External ROM access timeouts (Desnes Nunes) [RHEL-122021]
  - usb: gadget: tegra-xudc: fix PM use count underflow (Desnes Nunes) [RHEL-122021]
  - usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive (Desnes Nunes) [RHEL-122021]
  - usb: dwc3: imx8mp: fix device leak at unbind (Desnes Nunes) [RHEL-122021]
  - usb: xhci: print xhci->xhc_state when queue_command failed (Desnes Nunes) [RHEL-122021]
  - usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init() (Desnes Nunes) [RHEL-122021]
  - USB: serial: option: add Foxconn T99W709 (Desnes Nunes) [RHEL-122021]
  - usb: core: add urb->sgt parameter description (Desnes Nunes) [RHEL-122021]
  - thunderbolt: Fix copy+paste error in match_service_id() (Desnes Nunes) [RHEL-122021]
  - usb: typec: ucsi: Update power_supply on power role change (Desnes Nunes) [RHEL-122021]
  - usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default (Desnes Nunes) [RHEL-122021]
  - usb: typec: fusb302: cache PD RX state (Desnes Nunes) [RHEL-122021]
  - usb: typec: ucsi: yoga-c630: add DRM dependency (Desnes Nunes) [RHEL-122021]
  - usb: chipidea: imx: Add a missing blank line (Desnes Nunes) [RHEL-122021]
  - usb: usblp: clean up assignment inside if conditions (Desnes Nunes) [RHEL-122021]
  - cdc-acm: fix race between initial clearing halt and open (Desnes Nunes) [RHEL-122021]
  - usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command (Desnes Nunes) [RHEL-122021]
  - usb: xhci: Avoid showing warnings for dying controller (Desnes Nunes) [RHEL-122021]
  - usb: xhci: Avoid showing errors during surprise removal (Desnes Nunes) [RHEL-122021]
  - misc: rtsx: usb: Ensure mmc child device is active when card is present (Desnes Nunes) [RHEL-122021]
  - media: uvcvideo: use usb_alloc_noncoherent/usb_free_noncoherent() (Desnes Nunes) [RHEL-122021]
  - usb: core: add dma-noncoherent buffer alloc and free API (Desnes Nunes) [RHEL-122021]
  - usb: chipidea: s32g: Add usb support for s32g3 (Desnes Nunes) [RHEL-122021]
  - usb: chipidea: s32g: Add usb support for s32g2 (Desnes Nunes) [RHEL-122021]
  - dt-bindings: usb: Add compatible strings for s32g2/s32g3 (Desnes Nunes) [RHEL-122021]
  - usb: dwc3: gadget: Simplify TRB reclaim logic by removing redundant 'chain' argument (Desnes Nunes) [RHEL-122021]
  - usb: early: xhci-dbc: Fix early_ioremap leak (Desnes Nunes) [RHEL-122021]
  - net: thunderbolt: Enable end-to-end flow control also in transmit (Desnes Nunes) [RHEL-122021]
  - net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths() (Desnes Nunes) [RHEL-122021]
  - usb: core: config: Prevent OOB read in SS endpoint companion parsing (Desnes Nunes) [RHEL-122021] {CVE-2025-39760}
  - usb: misc: onboard_usb_dev: Add Bison Electronics Inc. Integrated Camera (Desnes Nunes) [RHEL-122021]
  - dt-bindings: usb: genesys,gl850g: add downstream facing ports (Desnes Nunes) [RHEL-122021]
  - dt-bindings: usb: genesys,gl850g: use usb-hub.yaml (Desnes Nunes) [RHEL-122021]
  - dt-bindings: trivial-devices: add compatible string nxp,isp1301 from isp1301.txt (Desnes Nunes) [RHEL-122021]
  - dt-bindings: trivial-devices: add onnn,adt7462 (Desnes Nunes) [RHEL-122021]
  - media: dt-bindings: Add OV5642 (Desnes Nunes) [RHEL-122021]
  - misc: rtsx: Add support for RTS5264 Version B and optimize init flow (Desnes Nunes) [RHEL-122021]
  - usb: typec: ucsi: yoga-c630: register DRM HPD bridge (Desnes Nunes) [RHEL-122021]
  - usb: typec: ucsi: yoga-c630: handle USB / HPD messages to set port orientation (Desnes Nunes) [RHEL-122021]
  - usb: typec: ucsi: yoga-c630: correct response for GET_CURRENT_CAM (Desnes Nunes) [RHEL-122021]
  - usb: typec: ucsi: yoga-c630: fake AltModes for port 0 (Desnes Nunes) [RHEL-122021]
  - usb: typec: ucsi: yoga-c630: remove extra AltModes for port 1 (Desnes Nunes) [RHEL-122021]
  - usb: typec: ucsi: yoga-c630: remove duplicate AltModes (Desnes Nunes) [RHEL-122021]
  - usb: typec: ucsi: add recipient arg to update_altmodes() callback (Desnes Nunes) [RHEL-122021]
  - usb: typec: ucsi: yoga-c630: fix error and remove paths (Desnes Nunes) [RHEL-122021]
  - usb: dwc2: follow compatible string change for Sophgo CV18XX/SG200X series SoC (Desnes Nunes) [RHEL-122021]
  - dt-bindings: usb: dwc2: rename sophgo usb compatible string (Desnes Nunes) [RHEL-122021]
  - usb: dwc2: add support for Sophgo CV18XX/SG200X series SoC (Desnes Nunes) [RHEL-122021]
  - dt-bindings: usb: dwc2: Add support for Sophgo CV18XX/SG200X series SoC (Desnes Nunes) [RHEL-122021]
  - usb: dwc2: support dwc2 IP for Amlogic A1 SoC family (Desnes Nunes) [RHEL-122021]
  - dt-bindings: usb: dwc2: add support for Amlogic A1 SoC USB peripheral (Desnes Nunes) [RHEL-122021]
  - usb: dwc3: gadget: Remove duplicate check while setting xfer resource (Desnes Nunes) [RHEL-122021]
  - usb: ehci: replace scnprintf() with sysfs_emit() (Desnes Nunes) [RHEL-122021]
  - usb: core: Use sysfs_emit_at() when showing dynamic IDs (Desnes Nunes) [RHEL-122021]
  - usb: typec: altmodes/displayport: add irq_hpd to sysfs (Desnes Nunes) [RHEL-122021]
  - mmc: rtsx_usb_sdmmc: Fix clang -Wimplicit-fallthrough in sd_set_power_mode() (Desnes Nunes) [RHEL-122021]
  - mmc: rtsx_usb_sdmmc: Add 74 clocks in poweron flow (Desnes Nunes) [RHEL-122021]
  - mmc: rtsx_usb_sdmmc: Re-work the code in sd_set_power_mode() (Desnes Nunes) [RHEL-122021]
  - mmc: rtsx_usb_sdmmc: Convert sd_set_power_mode() into void (Desnes Nunes) [RHEL-122021]
  - mmc: rtsx_usb_sdmmc: Print debug-messages at power-on/off errors (Desnes Nunes) [RHEL-122021]
  - mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode() (Desnes Nunes) [RHEL-122021]
  - mmc: rtsx_usb_sdmmc: Use devm_mmc_alloc_host() helper (Desnes Nunes) [RHEL-122021]
  - mmc: rtsx_pci: Use devm_mmc_alloc_host() helper (Desnes Nunes) [RHEL-122021]
  - thunderbolt: Fix typos in documentation comments (Desnes Nunes) [RHEL-122021]
  - Documentation: treewide: Replace remaining spinics links with lore (Desnes Nunes) [RHEL-122021]
  - net: usb: enable the work after stop usbnet by ip down/up (Desnes Nunes) [RHEL-122021]
  - net: usbnet: Fix the wrong netif_carrier_on() call (Desnes Nunes) [RHEL-122021]
  - net: usb: Convert tasklet API to new bottom half workqueue mechanism (Desnes Nunes) [RHEL-122021]
  - net: usbnet: Avoid potential RCU stall on LINK_CHANGE event (Desnes Nunes) [RHEL-122021]
  - usbnet: optimize usbnet_bh() to reduce CPU load (Desnes Nunes) [RHEL-122021]
  - treewide: Switch/rename to timer_delete[_sync]() (Desnes Nunes) [RHEL-122021]
  - net: usb: usbnet: fix race in probe failure (Desnes Nunes) [RHEL-122021]
  - net: usbnet: Remove generic .ndo_get_stats64 (Desnes Nunes) [RHEL-122021]
  - net: usbnet: Leverage core stats allocator (Desnes Nunes) [RHEL-122021]
  - usbnet:fix NPE during rx_complete (Desnes Nunes) [RHEL-122021] {CVE-2025-22050}
  - usb: core: modify comments xhci_hc_driver has HCD_MEMORY just like ehci ohci (Desnes Nunes) [RHEL-122021]
  - usb: chipidea: imx: implement workaround for ERR051725 (Desnes Nunes) [RHEL-122021]
  - usb: chipidea: imx: add imx_usbmisc_pullup() hook (Desnes Nunes) [RHEL-122021]
  - usb: chipidea: udc: add CI_HDRC_CONTROLLER_PULLUP_EVENT event (Desnes Nunes) [RHEL-122021]
  - usb: core: usb_submit_urb: downgrade type check (Desnes Nunes) [RHEL-122021]
  - usb: storage: reltek_cr: convert to use secs_to_jiffies (Desnes Nunes) [RHEL-122021]
  - usb: typec: Remove unused ucsi_cci_str (Desnes Nunes) [RHEL-122021]
  - usb: core: Remove unused usb_unlink_anchored_urbs (Desnes Nunes) [RHEL-122021]
  - usb: gadget: Remove unused usb_remove_config (Desnes Nunes) [RHEL-122021]
  - usb: gadget: config: Remove unused usb_gadget_config_buf (Desnes Nunes) [RHEL-122021]
  - usb: Reorganize kerneldoc parameter names (Desnes Nunes) [RHEL-122021]
  - usb: gadget: remove max support speed info in bind operation (Desnes Nunes) [RHEL-122021]
  - usb: gadget: composite: cleanup function config_ep_by_speed_and_alt() (Desnes Nunes) [RHEL-122021]
  - usb: gadget: add a inline function gether_bitrate() (Desnes Nunes) [RHEL-122021]
  - usb: gadget: use working speed to calcaulate network bitrate and qlen (Desnes Nunes) [RHEL-122021]
  - usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (Desnes Nunes) [RHEL-122021] {CVE-2023-52894}
  - usb: gadget: config: remove max speed check in usb_assign_descriptors() (Desnes Nunes) [RHEL-122021]
  - usb: phy: tegra: Remove unused functions (Desnes Nunes) [RHEL-122021]
  - usb: typec: fusb302: fix scheduling while atomic when using virtio-gpio (Desnes Nunes) [RHEL-122021]
  - usb: core: Add 0x prefix to quirks debug output (Desnes Nunes) [RHEL-122021]
  - Documentation: usb: gadget: Wrap remaining usage snippets in literal code block (Desnes Nunes) [RHEL-122021]
  - usb: gadget: configfs: Ignore trailing LF for user strings to cdev (Desnes Nunes) [RHEL-122021]
  - usb: gadget: configfs: Attach arbitrary strings to cdev (Desnes Nunes) [RHEL-122021]
  - usb: gadget: configfs: Fix set but not used variable warning (Desnes Nunes) [RHEL-122021]
  - usb: gadget: configfs: Support arbitrary string descriptors (Desnes Nunes) [RHEL-122021]
  - usb: gadget: configfs: Rename struct gadget_strings (Desnes Nunes) [RHEL-122021]
  - docs: usb: gadget: Reindent numbered list (Desnes Nunes) [RHEL-122021]
  - usb: gadget: composite: Use USB API functions rather than constants (Desnes Nunes) [RHEL-122021]
  - usb: host: xhci-plat: fix incorrect type for of_match variable in xhci_plat_probe() (Desnes Nunes) [RHEL-122021]
  - dt-bindings: phy: Convert ti,keystone-usbphy to DT schema (Desnes Nunes) [RHEL-122021]
  - dt-bindings: phy: Convert hisilicon,hi6220-usb-phy to DT schema (Desnes Nunes) [RHEL-122021]
  - Documentation: ABI: Update WMI device paths in ABI docs (Desnes Nunes) [RHEL-122021]
  - ABI: sysfs-platform-intel-pmc: add blank lines to make it valid for ReST (Desnes Nunes) [RHEL-122021]
  - ABI: sysfs-platform-dell-privacy-wmi: correct ABI entries (Desnes Nunes) [RHEL-122021]
  - perf tools: Don't set attr.exclude_guest by default (Michael Petlan) [RHEL-118946]
  - mptcp: propagate shutdown to subflows when possible (Davide Caratti) [RHEL-115624]
  - mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN (Davide Caratti) [RHEL-115624]
  - mptcp: disable add_addr retransmission when timeout is 0 (Davide Caratti) [RHEL-115624]
  - mptcp: remove duplicate sk_reset_timer call (Davide Caratti) [RHEL-115624]
  - mptcp: pm: kernel: flush: do not reset ADD_ADDR limit (Davide Caratti) [RHEL-115624]
  - mptcp: drop skb if MPTCP skb extension allocation fails (Davide Caratti) [RHEL-115624]
  - mptcp: make fallback action and fallback decision atomic (Davide Caratti) [RHEL-115624]
  - mptcp: safety check before fallback (Davide Caratti) [RHEL-115624]
  - mptcp: reset when MPTCP opts are dropped after join (Davide Caratti) [RHEL-115624]
  - mptcp: export mptcp_subflow_early_fallback() (Davide Caratti) [RHEL-115624]
  - iommufd/selftest: Fix ioctl return value in _test_cmd_trigger_vevents() (Jerry Snitselaar) [RHEL-114131]
  - dma-debug: don't report false positives with DMA_BOUNCE_UNALIGNED_KMALLOC (Jerry Snitselaar) [RHEL-114131]
  - ntb: Force physically contiguous allocation of rx ring buffers (Jerry Snitselaar) [RHEL-114131]
  - KVM: PPC: Enable CAP_SPAPR_TCE_VFIO on pSeries KVM guests (Jerry Snitselaar) [RHEL-114131]
  - dma-mapping: fix direction in dma_alloc direction traces (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Register iommufd mock devices with fwspec (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Disallow dirty tracking if incoherent page walk (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: debugfs: Fix legacy mode page table dump logic (Jerry Snitselaar) [RHEL-114131]
  - ACPI/IORT: Fix memory leak in iort_rmr_alloc_sids() (Jerry Snitselaar) [RHEL-114131]
  - gpu: host1x: Do not assume that a NULL domain means no DMA IOMMU (Jerry Snitselaar) [RHEL-114131]
  - dma: kmsan: export kmsan_handle_dma() for modules (Jerry Snitselaar) [RHEL-114131]
  - software node: Prevent link creation failure from causing kobj reference count imbalance (Jerry Snitselaar) [RHEL-114131]
  - iommu/selftest: prevent use of uninitialized variable (Jerry Snitselaar) [RHEL-114131]
  - PCI: Fix driver_managed_dma check (Jerry Snitselaar) [RHEL-114131]
  - platform: Fix race condition during DMA configure at IOMMU probe time (Jerry Snitselaar) [RHEL-114131]
  - PCI: Run quirk_huawei_pcie_sva() before arm_smmu_probe_device() (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Update the fail_nth limit (Jerry Snitselaar) [RHEL-114131]
  - iommufd: WARN if an object is aborted with an elevated refcount (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Fix race during abort for file descriptors (Jerry Snitselaar) [RHEL-114131] {CVE-2025-39966}
  - iommufd: Fix refcounting race during mmap (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd/pgtbl: Fix possible race while increase page table level (Jerry Snitselaar) [RHEL-114131] {CVE-2025-39961}
  - iommu/amd: Fix alias device DTE setting (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page() (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Fix ivrs_base memleak in early_amd_iommu_init() (Jerry Snitselaar) [RHEL-114131]
  - dma-debug: don't enforce dma mapping check on noncoherent allocations (Jerry Snitselaar) [RHEL-114131]
  - dma/pool: Ensure DMA_DIRECT_REMAP allocations are decrypted (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Fix spelling errors in iommufd.rst (Jerry Snitselaar) [RHEL-114131]
  - iommufd: viommu: free memory allocated by kvcalloc() using kvfree() (Jerry Snitselaar) [RHEL-114131]
  - iommu/virtio: Make instance lookup robust (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-v3: Fix smmu_domain->nr_ats_masters decrement (Jerry Snitselaar) [RHEL-114131]
  - iommu/tegra241-cmdqv: Fix missing cpu_to_le64 at lvcmdq_err_map (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Avoid stack buffer overflow from kernel cmdline (Jerry Snitselaar) [RHEL-114131] {CVE-2025-38676}
  - iommu/vt-d: Use pci_is_display() (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-v3: Replace vsmmu_size/type with get_viommu_size (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-v3: Do not bother impl_ops if IOMMU_VIOMMU_TYPE_ARM_SMMUV3 (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Rename some shortterm-related identifiers (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Add coverage for vdevice tombstone (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Explicitly skip tests for inapplicable variant (Jerry Snitselaar) [RHEL-114131]
  - iommufd/vdevice: Remove struct device reference from struct vdevice (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Destroy vdevice on idevice destroy (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Add a pre_destroy() op for objects (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Add iommufd_object_tombstone_user() helper (Jerry Snitselaar) [RHEL-114131]
  - iommufd/viommu: Roll back to use iommufd_object_alloc() for vdevice (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Test reserved regions near ULONG_MAX (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Prevent ALIGN() overflow (Jerry Snitselaar) [RHEL-114131] {CVE-2025-38688}
  - iommu/tegra241-cmdqv: import IOMMUFD module namespace (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Do not allow _iommufd_object_alloc_ucmd if abort op is set (Jerry Snitselaar) [RHEL-114131]
  - iommu/tegra241-cmdqv: Add IOMMU_VEVENTQ_TYPE_TEGRA241_CMDQV support (Jerry Snitselaar) [RHEL-114131]
  - iommu/tegra241-cmdqv: Add user-space use support (Jerry Snitselaar) [RHEL-114131]
  - iommu/tegra241-cmdqv: Do not statically map LVCMDQs (Jerry Snitselaar) [RHEL-114131]
  - iommu/tegra241-cmdqv: Simplify deinit flow in tegra241_cmdqv_remove_vintf() (Jerry Snitselaar) [RHEL-114131]
  - iommu/tegra241-cmdqv: Use request_threaded_irq (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-v3-iommufd: Add hw_info to impl_ops (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-v3-iommufd: Add vsmmu_size/type and vsmmu_init impl ops (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Update hw_info coverage for an input data_type (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Allow an input data_type via iommu_hw_info (Jerry Snitselaar) [RHEL-114131]
  - iommu: Allow an input type in hw_info op (Jerry Snitselaar) [RHEL-114131]
  - Documentation: userspace-api: iommufd: Update HW QUEUE (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Add coverage for the new mmap interface (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Add mmap interface (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Add coverage for IOMMUFD_CMD_HW_QUEUE_ALLOC (Jerry Snitselaar) [RHEL-114131]
  - iommufd/driver: Add iommufd_hw_queue_depend/undepend() helpers (Jerry Snitselaar) [RHEL-114131]
  - iommufd/viommu: Add IOMMUFD_CMD_HW_QUEUE_ALLOC ioctl (Jerry Snitselaar) [RHEL-114131]
  - iommufd/viommu: Introduce IOMMUFD_OBJ_HW_QUEUE and its related struct (Jerry Snitselaar) [RHEL-114131]
  - iommufd/viommu: Add driver-defined vDEVICE support (Jerry Snitselaar) [RHEL-114131]
  - iommufd/access: Bypass access->ops->unmap for internal use (Jerry Snitselaar) [RHEL-114131]
  - iommufd/access: Add internal APIs for HW queue to use (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Add coverage for viommu data (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Support user_data in mock_viommu_alloc (Jerry Snitselaar) [RHEL-114131]
  - iommufd/viommu: Allow driver-specific user data for a vIOMMU object (Jerry Snitselaar) [RHEL-114131]
  - iommu: Pass in a driver-level user data structure to viommu_init op (Jerry Snitselaar) [RHEL-114131]
  - iommu: Add iommu_copy_struct_to_user helper (Jerry Snitselaar) [RHEL-114131]
  - iommu: Use enum iommu_hw_info_type for type in hw_info op (Jerry Snitselaar) [RHEL-114131]
  - iommufd/viommu: Explicitly define vdev->virt_id (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Correct virt_id kdoc at struct iommu_vdevice_alloc (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Apply the new iommufd_object_alloc_ucmd helper (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Introduce iommufd_object_alloc_ucmd helper (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Move _iommufd_object_alloc out of driver.c (Jerry Snitselaar) [RHEL-114131]
  - iommu: Deprecate viommu_alloc op (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-v3: Replace arm_vsmmu_alloc with arm_vsmmu_init (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Replace mock_viommu_alloc with mock_viommu_init (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Drop parent domain from mock_iommu_domain_nested (Jerry Snitselaar) [RHEL-114131]
  - iommufd/viommu: Support get_viommu_size and viommu_init ops (Jerry Snitselaar) [RHEL-114131]
  - iommu: Introduce get_viommu_size and viommu_init ops (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Return EOPNOTSUPP for failures due to driver bugs (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Use enum iommu_veventq_type for type in struct iommufd_veventq (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Use enum iommu_viommu_type for type in struct iommufd_viommu (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Drop unused ictx in struct iommufd_vdevice (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Apply obvious cosmetic fixes (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu: disable PRR on SM8250 (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-v3: Revert vmaster in the error path (Jerry Snitselaar) [RHEL-114131]
  - iommu/io-pgtable-arm: Remove unused macro iopte_prot (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-qcom: Add SM6115 MDSS compatible (Jerry Snitselaar) [RHEL-114131] {CVE-2025-39739}
  - iommu/amd: Fix geometry.aperture_end for V2 tables (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Wrap debugfs ABI testing symbols snippets in literal code blocks (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Add documentation for AMD IOMMU debugfs support (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Add debugfs support to dump IRT Table (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Add debugfs support to dump device table (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Add support for device id user input (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Add debugfs support to dump IOMMU command buffer (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Add debugfs support to dump IOMMU Capability registers (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Add debugfs support to dump IOMMU MMIO registers (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Refactor AMD IOMMU debugfs initial setup (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Enable PASID and ATS capabilities in the correct order (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Add efr[HATS] max v1 page table level (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Add HATDis feature support (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Fix UAF on sva unbind with pending IOPFs (Jerry Snitselaar) [RHEL-114131] {CVE-2025-38594}
  - iommu/vt-d: Make iotlb_sync_map a static property of dmar_domain (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Split paging_domain_compatible() (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Split intel_iommu_enforce_cache_coherency() (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Create unique domain ops for each stage (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Split intel_iommu_domain_alloc_paging_flags() (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Do not wipe out the page table NID when devices detach (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Fold domain_exit() into intel_iommu_domain_free() (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Lift the __pa to domain_setup_first_level/intel_svm_set_dev_pasid() (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Optimize iotlb_sync_map for non-caching/non-RWBF modes (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Remove the CONFIG_X86 wrapping from iommu init hook (Jerry Snitselaar) [RHEL-114131]
  - iommu: Remove ops->pgsize_bitmap (Jerry Snitselaar) [RHEL-114131]
  - iommu: Remove iommu_ops pgsize_bitmap from simple drivers (Jerry Snitselaar) [RHEL-114131]
  - iommu: Remove ops.pgsize_bitmap from drivers that don't use it (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu: Remove iommu_ops pgsize_bitmap (Jerry Snitselaar) [RHEL-114131]
  - qiommu/arm-smmu-v3: Remove iommu_ops pgsize_bitmap (Jerry Snitselaar) [RHEL-114131]
  - dma-contiguous: hornor the cma address limit setup by user (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Assign devtlb cache tag on ATS enablement (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Fix build warnings due to uninitialized mfd (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Fix iommufd_dirty_tracking with large hugepage sizes (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Add missing close(mfd) in memfd_mmap() (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Add asserts testing global mfd (Jerry Snitselaar) [RHEL-114131]
  - iommu/tegra: Fix incorrect size calculation (Jerry Snitselaar) [RHEL-114131]
  - scatterlist: fix extraneous '@'-sign kernel-doc notation (Jerry Snitselaar) [RHEL-114131]
  - Revert "iommu/amd: Prevent binding other PCI drivers to IOMMU PCI devices" (Jerry Snitselaar) [RHEL-114131]
  - scatterlist: inline sg_next() (Jerry Snitselaar) [RHEL-114131]
  - iommu: Clear the freelist after iommu_put_pages_list() (Jerry Snitselaar) [RHEL-114131]
  - iommu: make inclusion of amd directory conditional (Jerry Snitselaar) [RHEL-114131]
  - iommu: make inclusion of intel directory conditional (Jerry Snitselaar) [RHEL-114131]
  - iommu: remove duplicate selection of DMAR_TABLE (Jerry Snitselaar) [RHEL-114131]
  - iommu: Cleanup comments for dev_enable/disable_feat (Jerry Snitselaar) [RHEL-114131]
  - iommu: Protect against overflow in iommu_pgsize() (Jerry Snitselaar) [RHEL-114131]
  - iommu: Handle yet another race around registration (Jerry Snitselaar) [RHEL-114131]
  - iommu: Allow attaching static domains in iommu_attach_device_pasid() (Jerry Snitselaar) [RHEL-114131]
  - iommu: Hide ops.domain_alloc behind CONFIG_FSL_PAMU (Jerry Snitselaar) [RHEL-114131]
  - iommu: Do not call domain_alloc() in iommu_sva_domain_alloc() (Jerry Snitselaar) [RHEL-114131]
  - iommu/virtio: Move to domain_alloc_paging() (Jerry Snitselaar) [RHEL-114131]
  - iommu: Add domain_alloc_identity() (Jerry Snitselaar) [RHEL-114131]
  - iommu/virtio: Break out bypass identity support into a global static (Jerry Snitselaar) [RHEL-114131]
  - iommu: Remove iommu_dev_enable/disable_feature() (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Remove unnecessary IOMMU_DEV_FEAT_IOPF (Jerry Snitselaar) [RHEL-114131]
  - dmaengine: idxd: Remove unnecessary IOMMU_DEV_FEAT_IOPF (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Put iopf enablement in domain attach path (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Put iopf enablement in domain attach path (Jerry Snitselaar) [RHEL-114131]
  - iommu: Remove IOMMU_DEV_FEAT_SVA (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-v3: Put iopf enablement in the domain attach path (Jerry Snitselaar) [RHEL-114131]
  - iommu: Avoid introducing more races (Jerry Snitselaar) [RHEL-114131]
  - iommu/vtd: Remove iommu_alloc_pages_node() (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Use iommu_alloc_pages_node_sz() for the IRT (Jerry Snitselaar) [RHEL-114131]
  - iommu/pages: Remove iommu_alloc_page_node() (Jerry Snitselaar) [RHEL-114131]
  - iommu/pages: Remove iommu_alloc_page/pages() (Jerry Snitselaar) [RHEL-114131]
  - iommu: Update various drivers to pass in lg2sz instead of order to iommu pages (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Use roundup_pow_two() instead of get_order() (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Change rlookup, irq_lookup, and alias to use kvalloc() (Jerry Snitselaar) [RHEL-114131]
  - iommu/pages: Allow sub page sizes to be passed into the allocator (Jerry Snitselaar) [RHEL-114131]
  - iommu/pages: Move the __GFP_HIGHMEM checks into the common code (Jerry Snitselaar) [RHEL-114131]
  - iommu/pages: Move from struct page to struct ioptdesc and folio (Jerry Snitselaar) [RHEL-114131]
  - iommu/pages: Remove iommu_put_pages_list_old and the _Generic (Jerry Snitselaar) [RHEL-114131]
  - iommu: Change iommu_iotlb_gather to use iommu_page_list (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Convert to use struct iommu_pages_list (Jerry Snitselaar) [RHEL-114131]
  - iommu/pages: Formalize the freelist API (Jerry Snitselaar) [RHEL-114131]
  - iommu/pages: De-inline the substantial functions (Jerry Snitselaar) [RHEL-114131]
  - iommu/pages: Remove iommu_free_page() (Jerry Snitselaar) [RHEL-114131]
  - iommu/pages: Remove the order argument to iommu_free_pages() (Jerry Snitselaar) [RHEL-114131]
  - iommu/pages: Make iommu_put_pages_list() work with high order allocations (Jerry Snitselaar) [RHEL-114131]
  - iommu/pages: Remove __iommu_alloc_pages()/__iommu_free_pages() (Jerry Snitselaar) [RHEL-114131]
  - iommu/tegra: Do not use struct page as the handle for pts (Jerry Snitselaar) [RHEL-114131]
  - iommu/terga: Do not use struct page as the handle for as->pd memory (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Allow matching ACPI HID devices without matching UIDs (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Add support for HTRangeIgnore feature (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Ensure GA log notifier callbacks finish running before module unload (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Restore context entry setup order for aliased devices (Jerry Snitselaar) [RHEL-114131] {CVE-2025-38216}
  - iommu/vt-d: Change dmar_ats_supported() to return boolean (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Eliminate pci_physfn() in dmar_find_matched_satc_unit() (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Replace spin_lock with mutex to protect domain ida (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Use ida to manage domain id (Jerry Snitselaar) [RHEL-114131]
  - ida: Add ida_find_first_range() (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Restore WO permissions on second-level paging entries (Jerry Snitselaar) [RHEL-114131]
  - iommu: ipmmu-vmsa: avoid Wformat-security warning (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-qcom: Add SAR2130P MDSS compatible (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-qcom: Make set_stall work when the device is on (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu: Move handing of RESUME to the context fault handler (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-qcom: Enable threaded IRQ for Adreno SMMUv2/MMU500 (Jerry Snitselaar) [RHEL-114131]
  - iommu/io-pgtable-arm: Add quirk to quiet WARN_ON() (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-v3: Fix incorrect return in arm_smmu_attach_dev (Jerry Snitselaar) [RHEL-114131]
  - iommu: Skip PASID validation for devices without PASID capability (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57) (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Revert ATS timing change to fix boot failure (Jerry Snitselaar) [RHEL-114131]
  - iommu: Fix two issues in iommu_copy_struct_from_user() (Jerry Snitselaar) [RHEL-114131] {CVE-2025-37900}
  - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (Jerry Snitselaar) [RHEL-114131] {CVE-2025-37927}
  - iommu/arm-smmu-v3: Fail aliasing StreamIDs more gracefully (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-v3: Add missing S2FWB feature detection (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: WARN if KVM attempts to set vCPU affinity without posted intrrupts (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE (Jerry Snitselaar) [RHEL-114131]
  - dma-coherent: Warn if OF reserved memory is beyond current coherent DMA mask (Jerry Snitselaar) [RHEL-114131]
  - dma-mapping: Fix warning reported for missing prototype (Jerry Snitselaar) [RHEL-114131]
  - dma-mapping: avoid potential unused data compilation warning (Jerry Snitselaar) [RHEL-114131]
  - dma/contiguous: avoid warning about unused size_bytes (Jerry Snitselaar) [RHEL-114131]
  - iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() (Jerry Snitselaar) [RHEL-114131] {CVE-2025-37837}
  - iommu: remove unneeded semicolon (Jerry Snitselaar) [RHEL-114131]
  - iommu/ipmmu-vmsa: Register in a sensible order (Jerry Snitselaar) [RHEL-114131]
  - iommu: Clear iommu-dma ops on cleanup (Jerry Snitselaar) [RHEL-114131] {CVE-2025-37877}
  - iommu/vt-d: Remove an unnecessary call set_dma_ops() (Jerry Snitselaar) [RHEL-114131]
  - iommu: Fix crash in report_iommu_fault() (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Test attach before detaching pasid (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Fix iommu_vevent_header tables markup (Jerry Snitselaar) [RHEL-114131]
  - iommu: Convert unreachable() to BUG() (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Balance veventq->num_events inc/dec (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Initialize the flags of vevent in iommufd_viommu_report_event() (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Add coverage for reporting max_pasid_log2 via IOMMU_HW_INFO (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Extend IOMMU_GET_HW_INFO to report PASID capability (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Add coverage for iommufd pasid attach/detach (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Add test ops to test pasid attach/detach (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Add a helper to get test device (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Add set_dev_pasid in mock iommu (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Allow allocating PASID-compatible domain (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Add IOMMU_HWPT_ALLOC_PASID support (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Enforce PASID-compatible domain for RID (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Support pasid attach/replace (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Enforce PASID-compatible domain in PASID path (Jerry Snitselaar) [RHEL-114131]
  - iommufd/device: Add pasid_attach array to track per-PASID attach (Jerry Snitselaar) [RHEL-114131]
  - iommufd/device: Replace device_list with device_array (Jerry Snitselaar) [RHEL-114131]
  - iommufd/device: Wrap igroup->hwpt and igroup->device_list into attach struct (Jerry Snitselaar) [RHEL-114131]
  - iommufd/device: Add helper to detect the first attach of a group (Jerry Snitselaar) [RHEL-114131]
  - iommufd/device: Replace idev->igroup with local variable (Jerry Snitselaar) [RHEL-114131]
  - iommufd/device: Only add reserved_iova in non-pasid path (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Pass @pasid through the device attach/replace path (Jerry Snitselaar) [RHEL-114131]
  - iommu: Introduce a replace API for device pasid (Jerry Snitselaar) [RHEL-114131]
  - iommu: Require passing new handles to APIs supporting handle (Jerry Snitselaar) [RHEL-114131]
  - iommu: Drop sw_msi from iommu_domain (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Move iommufd_sw_msi and related functions to driver.c (Jerry Snitselaar) [RHEL-114131]
  - iommu: Sort out domain user data (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-v3: Set MEV bit in nested STE for DoS mitigations (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-v3: Report events that belong to devices attached to vIOMMU (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu-v3: Introduce struct arm_smmu_vmaster (Jerry Snitselaar) [RHEL-114131]
  - Documentation: userspace-api: iommufd: Update FAULT and VEVENTQ (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Add IOMMU_VEVENTQ_ALLOC test coverage (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Add IOMMU_TEST_OP_TRIGGER_VEVENT for vEVENTQ coverage (Jerry Snitselaar) [RHEL-114131]
  - iommufd/selftest: Require vdev_id when attaching to a nested domain (Jerry Snitselaar) [RHEL-114131]
  - iommufd/viommu: Add iommufd_viommu_report_event helper (Jerry Snitselaar) [RHEL-114131]
  - iommufd/viommu: Add iommufd_viommu_get_vdev_id helper (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Add IOMMUFD_OBJ_VEVENTQ and IOMMUFD_CMD_VEVENTQ_ALLOC (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Rename fault.c to eventq.c (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Abstract an iommufd_eventq from iommufd_fault (Jerry Snitselaar) [RHEL-114131]
  - iommufd/fault: Add an iommufd_fault_init() helper (Jerry Snitselaar) [RHEL-114131]
  - iommufd/fault: Move two fault functions out of the header (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Fail replace if device has not been attached (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Set domain->iommufd_hwpt in all hwpt->domain allocators (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Fix uninitialized rc in iommufd_access_rw() (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Disallow allocating nested parent domain with fault ID (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Consolidate protection domain free code (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Remove unused forward declaration (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Remove outdated comment (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd/pgtbl_v2: Improve error handling (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Remove unused variable (Jerry Snitselaar) [RHEL-114131]
  - iommu/amd: Log IOMMU control register in event log path (Jerry Snitselaar) [RHEL-114131]
  - lib/scatterlist: Add SG_MITER_LOCAL and use it (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Cleanup intel_context_flush_present() (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Move PRI enablement in probe path (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Move scalable mode ATS enablement to probe path (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Check if SVA is supported when attaching the SVA domain (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Use virt_to_phys() (Jerry Snitselaar) [RHEL-114131]
  - iommu/vt-d: Fix system hang on reboot -f (Jerry Snitselaar) [RHEL-114131]
  - iommu: Don't warn prematurely about dodgy probes (Jerry Snitselaar) [RHEL-114131]
  - iommu/arm-smmu: Set rpm auto_suspend once during probe (Jerry Snitselaar) [RHEL-114131]
  - iommu: Get DT/ACPI parsing into the proper probe path (Jerry Snitselaar) [RHEL-114131]
  - iommu: Keep dev->iommu state consistent (Jerry Snitselaar) [RHEL-114131]
  - iommu: Resolve ops in iommu_init_device() (Jerry Snitselaar) [RHEL-114131]
  - iommu: Handle race with default domain setup (Jerry Snitselaar) [RHEL-114131]
  - iommu: Unexport iommu_fwspec_free() (Jerry Snitselaar) [RHEL-114131]
  - iommu/dma: Remove redundant locking (Jerry Snitselaar) [RHEL-114131]
  - iommu: Swap the order of setting group->pasid_array and calling attach op of iommu drivers (Jerry Snitselaar) [RHEL-114131]
  - iommu: Store either domain or handle in group->pasid_array (Jerry Snitselaar) [RHEL-114131]
  - iommu: Drop iommu_group_replace_domain() (Jerry Snitselaar) [RHEL-114131]
  - iommu: Make @handle mandatory in iommu_{attach|replace}_group_handle() (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Implement sw_msi support natively (Jerry Snitselaar) [RHEL-114131]
  - iommu: Turn fault_data to iommufd private pointer (Jerry Snitselaar) [RHEL-114131]
  - irqchip: Have CONFIG_IRQ_MSI_IOMMU be selected by irqchips that need it (Jerry Snitselaar) [RHEL-114131]
  - iommu: Make iommu_dma_prepare_msi() into a generic operation (Jerry Snitselaar) [RHEL-114131]
  - genirq/msi: Refactor iommu_dma_compose_msi_msg() (Jerry Snitselaar) [RHEL-114131]
  - genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie (Jerry Snitselaar) [RHEL-114131] {CVE-2025-38062}
  - iommufd/fault: Remove iommufd_fault_domain_attach/detach/replace_dev() (Jerry Snitselaar) [RHEL-114131]
  - iommufd: Make attach_handle generic than fault specific (Jerry Snitselaar) [RHEL-114131]
  - dma: Introduce generic dma_addr_*crypted helpers (Jerry Snitselaar) [RHEL-114131]
  - dma: Fix encryption bit clearing for dma_to_phys (Jerry Snitselaar) [RHEL-114131]
  - treewide, timers: Rename from_timer() to timer_container_of() (Ivan Vecera) [RHEL-115039]
  - xfs: remove unused trace event xfs_dqreclaim_dirty (Carlos Maiolino) [RHEL-112145]
  - xfs: fix scrub trace with null pointer in quotacheck (Carlos Maiolino) [RHEL-112145]
  - xfs: fix unmount hang with unflushable inodes stuck in the AIL (Carlos Maiolino) [RHEL-112145]
  - xfs: factor out stale buffer item completion (Carlos Maiolino) [RHEL-112145]
  - xfs: rearrange code in xfs_buf_item.c (Carlos Maiolino) [RHEL-112145]
  - xfs: add tracepoints for stale pinned inode state debug (Carlos Maiolino) [RHEL-112145]
  - xfs: avoid dquot buffer pin deadlock (Carlos Maiolino) [RHEL-112145]
  - xfs: catch stale AGF/AGF metadata (Carlos Maiolino) [RHEL-112145]
  - xfs: xfs_ifree_cluster vs xfs_iflush_shutdown_abort deadlock (Carlos Maiolino) [RHEL-112145]
  - xfs: don't assume perags are initialised when trimming AGs (Carlos Maiolino) [RHEL-88450]
  - xfs: unmapped buffer item size straddling mismatch (Carlos Maiolino) [RHEL-112145]
  - xfs: don't increment m_generation for all errors in xfs_growfs_data (Carlos Maiolino) [RHEL-112145]
  - xfs: flush inodegc before swapon (Carlos Maiolino) [RHEL-112145]
  - xfs: Do not allow norecovery mount with quotacheck (Carlos Maiolino) [RHEL-112145]
  - xfs: remove xfs_buf_cache.bc_lock (Carlos Maiolino) [RHEL-112145]
  - xfs: Add error handling for xfs_reflink_cancel_cow_range (Carlos Maiolino) [RHEL-112145]
  - xfs: Propagate errors from xfs_reflink_cancel_cow_range in xfs_dax_write_iomap_end (Carlos Maiolino) [RHEL-112145]
  - xfs: remove an out of data comment in _xfs_buf_alloc (Carlos Maiolino) [RHEL-112145]
  - xfs: fix buffer lookup vs release race (Carlos Maiolino) [RHEL-112145]
  - xfs: check for dead buffers in xfs_buf_find_insert (Carlos Maiolino) [RHEL-112145]
  - xfs: don't shut down the filesystem for media failures beyond end of log (Carlos Maiolino) [RHEL-112145]
  - xfs: release the dquot buf outside of qli_lock (Carlos Maiolino) [RHEL-112145]
  - xfs: don't over-report free space or inodes in statvfs (Carlos Maiolino) [RHEL-112145]
  - xfs: lock dquot buffer before detaching dquot from b_li_list (Carlos Maiolino) [RHEL-112145]
  - xfs: don't return an error from xfs_update_last_rtgroup_size for !XFS_RT (Carlos Maiolino) [RHEL-112145]
  - xfs: return from xfs_symlink_verify early on V4 filesystems (Carlos Maiolino) [RHEL-112145]
  - xfs: fix zero byte checking in the superblock scrubber (Carlos Maiolino) [RHEL-112145]
  - xfs: check pre-metadir fields correctly (Carlos Maiolino) [RHEL-112145]
  - xfs: don't crash on corrupt /quotas dirent (Carlos Maiolino) [RHEL-112145]
  - xfs: don't move nondir/nonreg temporary repair files to the metadir namespace (Carlos Maiolino) [RHEL-112145]
  - xfs: fix sb_spino_align checks for large fsblock sizes (Carlos Maiolino) [RHEL-112145]
  - xfs: convert quotacheck to attach dquot buffers (Carlos Maiolino) [RHEL-112145]
  - xfs: attach dquot buffer to dquot log item buffer (Carlos Maiolino) [RHEL-112145]
  - xfs: clean up log item accesses in xfs_qm_dqflush{,_done} (Carlos Maiolino) [RHEL-112145]
  - xfs: separate dquot buffer reads from xfs_dqflush (Carlos Maiolino) [RHEL-112145]
  - xfs: don't lose solo dquot update transactions (Carlos Maiolino) [RHEL-112145]
  - xfs: don't lose solo superblock counter update transactions (Carlos Maiolino) [RHEL-112145]
  - xfs: avoid nested calls to __xfs_trans_commit (Carlos Maiolino) [RHEL-112145]
  - xfs: only run precommits once per transaction object (Carlos Maiolino) [RHEL-112145]
  - xfs: update btree keys correctly when _insrec splits an inode root block (Carlos Maiolino) [RHEL-112145]
  - xfs: fix error bailout in xfs_rtginode_create (Carlos Maiolino) [RHEL-112145]
  - xfs: mark metadir repair tempfiles with IRECOVERY (Carlos Maiolino) [RHEL-112145]
  - xfs: separate healthy clearing mask during repair (Carlos Maiolino) [RHEL-112145]
  - xfs: don't drop errno values when we fail to ficlone the entire range (Carlos Maiolino) [RHEL-112145]
  - xfs: return a 64-bit block count from xfs_btree_count_blocks (Carlos Maiolino) [RHEL-112145]
  - xfs: keep quota directory inode loaded (Carlos Maiolino) [RHEL-112145]
  - xfs: metapath scrubber should use the already loaded inodes (Carlos Maiolino) [RHEL-112145]
  - xfs: don't call xfs_bmap_same_rtgroup in xfs_bmap_add_extent_hole_delay (Carlos Maiolino) [RHEL-112145]
  - xfs: Use xchg() in xlog_cil_insert_pcp_aggregate() (Carlos Maiolino) [RHEL-112145]
  - xfs: prevent mount and log shutdown race (Carlos Maiolino) [RHEL-112145]
  - xfs: delalloc and quota softlimit timers are incoherent (Carlos Maiolino) [RHEL-112145]
  - xfs: remove unknown compat feature check in superblock write validation (Carlos Maiolino) [RHEL-112145]
  - xfs: port ondisk structure checks from xfs/122 to the kernel (Carlos Maiolino) [RHEL-112145]
  - xfs: separate space btree structures in xfs_ondisk.h (Carlos Maiolino) [RHEL-112145]
  - xfs: convert struct typedefs in xfs_ondisk.h (Carlos Maiolino) [RHEL-112145]
  - xfs: update sb field checks when metadir is turned on (Carlos Maiolino) [RHEL-112145]
  - xfs: enable realtime quota again (Carlos Maiolino) [RHEL-112145]
  - xfs: reserve quota for realtime files correctly (Carlos Maiolino) [RHEL-112145]
  - xfs: create quota preallocation watermarks for realtime quota (Carlos Maiolino) [RHEL-112145]
  - xfs: report realtime block quota limits on realtime directories (Carlos Maiolino) [RHEL-112145]
  - xfs: advertise realtime quota support in the xqm stat files (Carlos Maiolino) [RHEL-112145]
  - xfs: fix chown with rt quota (Carlos Maiolino) [RHEL-112145]
  - xfs: persist quota flags with metadir (Carlos Maiolino) [RHEL-112145]
  - xfs: scrub quota file metapaths (Carlos Maiolino) [RHEL-112145]
  - xfs: use metadir for quota inodes (Carlos Maiolino) [RHEL-112145]
  - xfs: refactor xfs_qm_destroy_quotainos (Carlos Maiolino) [RHEL-112145]
  - xfs: free xfs_busy_extents structure when no RT extents are queued (Carlos Maiolino) [RHEL-112145]
  - xfs: use rtgroup busy extent list for FITRIM (Carlos Maiolino) [RHEL-112145]
  - xfs: implement busy extent tracking for rtgroups (Carlos Maiolino) [RHEL-112145]
  - xfs: port the perag discard code to handle generic groups (Carlos Maiolino) [RHEL-112145]
  - xfs: move the min and max group block numbers to xfs_group (Carlos Maiolino) [RHEL-112145]
  - xfs: adjust min_block usage in xfs_verify_agbno (Carlos Maiolino) [RHEL-112145]
  - xfs: make xfs_rtblock_t a segmented address like xfs_fsblock_t (Carlos Maiolino) [RHEL-112145]
  - xfs: create helpers to deal with rounding xfs_filblks_t to rtx boundaries (Carlos Maiolino) [RHEL-112145]
  - xfs: create helpers to deal with rounding xfs_fileoff_t to rtx boundaries (Carlos Maiolino) [RHEL-112145]
  - xfs: mask off the rtbitmap and summary inodes when metadir in use (Carlos Maiolino) [RHEL-112145]
  - xfs: scrub metadir paths for rtgroup metadata (Carlos Maiolino) [RHEL-112145]
  - xfs: repair realtime group superblock (Carlos Maiolino) [RHEL-112145]
  - xfs: scrub the realtime group superblock (Carlos Maiolino) [RHEL-112145]
  - xfs: don't coalesce file mappings that cross rtgroup boundaries in scrub (Carlos Maiolino) [RHEL-112145]
  - xfs: make the RT allocator rtgroup aware (Carlos Maiolino) [RHEL-112145]
  - xfs: don't merge ioends across RTGs (Carlos Maiolino) [RHEL-112145]
  - xfs: use realtime EFI to free extents when rtgroups are enabled (Carlos Maiolino) [RHEL-112145]
  - xfs: support error injection when freeing rt extents (Carlos Maiolino) [RHEL-112145]
  - xfs: support logging EFIs for realtime extents (Carlos Maiolino) [RHEL-112145]
  - xfs: force swapext to a realtime file to use the file content exchange ioctl (Carlos Maiolino) [RHEL-112145]
  - xfs: store rtgroup information with a bmap intent (Carlos Maiolino) [RHEL-112145]
  - xfs: grow the realtime section when realtime groups are enabled (Carlos Maiolino) [RHEL-112145]
  - xfs: encode the rtsummary in big endian format (Carlos Maiolino) [RHEL-112145]
  - xfs: encode the rtbitmap in big endian format (Carlos Maiolino) [RHEL-112145]
  - xfs: add block headers to realtime bitmap and summary blocks (Carlos Maiolino) [RHEL-112145]
  - xfs: export the geometry of realtime groups to userspace (Carlos Maiolino) [RHEL-112145]
  - xfs: record rt group metadata errors in the health system (Carlos Maiolino) [RHEL-112145]
  - xfs: convert sick_map loops to use ARRAY_SIZE (Carlos Maiolino) [RHEL-112145]
  - xfs: add frextents to the lazysbcounters when rtgroups enabled (Carlos Maiolino) [RHEL-112145]
  - xfs: add a helper to prevent bmap merges across rtgroup boundaries (Carlos Maiolino) [RHEL-112145]
  - xfs: check that rtblock extents do not break rtsupers or rtgroups (Carlos Maiolino) [RHEL-112145]
  - xfs: export realtime group geometry via XFS_FSOP_GEOM (Carlos Maiolino) [RHEL-112145]
  - xfs: update realtime super every time we update the primary fs super (Carlos Maiolino) [RHEL-112145]
  - xfs: check the realtime superblock at mount time (Carlos Maiolino) [RHEL-112145]
  - xfs: define the format of rt groups (Carlos Maiolino) [RHEL-112145]
  - iomap: add a merge boundary flag (Carlos Maiolino) [RHEL-112145]
  - xfs: fix rt device offset calculations for FITRIM (Carlos Maiolino) [RHEL-112145]
  - xfs: make RT extent numbers relative to the rtgroup (Carlos Maiolino) [RHEL-112145]
  - xfs: refactor xfs_rtsummary_blockcount (Carlos Maiolino) [RHEL-112145]
  - xfs: refactor xfs_rtbitmap_blockcount (Carlos Maiolino) [RHEL-112145]
  - xfs: factor out a xfs_growfs_check_rtgeom helper (Carlos Maiolino) [RHEL-112145]
  - xfs: use xfs_growfs_rt_alloc_fake_mount in xfs_growfs_rt_alloc_blocks (Carlos Maiolino) [RHEL-112145]
  - xfs: factor out a xfs_growfs_rt_alloc_fake_mount helper (Carlos Maiolino) [RHEL-112145]
  - xfs: calculate RT bitmap and summary blocks based on sb_rextents (Carlos Maiolino) [RHEL-112145]
  - xfs: remove XFS_ILOCK_RT* (Carlos Maiolino) [RHEL-112145]
  - xfs: support creating per-RTG files in growfs (Carlos Maiolino) [RHEL-112145]
  - xfs: move RT bitmap and summary information to the rtgroup (Carlos Maiolino) [RHEL-112145]
  - xfs: split xfs_trim_rtdev_extents (Carlos Maiolino) [RHEL-112145]
  - xfs: cleanup xfs_getfsmap_rtdev_rtbitmap (Carlos Maiolino) [RHEL-112145]
  - xfs: factor out a xfs_growfs_rt_alloc_blocks helper (Carlos Maiolino) [RHEL-112145]
  - xfs: add a xfs_qm_unmount_rt helper (Carlos Maiolino) [RHEL-112145]
  - xfs: add a xfs_bmap_free_rtblocks helper (Carlos Maiolino) [RHEL-112145]
  - xfs: add rtgroup-based realtime scrubbing context management (Carlos Maiolino) [RHEL-112145]
  - xfs: support caching rtgroup metadata inodes (Carlos Maiolino) [RHEL-112145]
  - xfs: add a lockdep class key for rtgroup inodes (Carlos Maiolino) [RHEL-112145]
  - xfs: define locking primitives for realtime groups (Carlos Maiolino) [RHEL-112145]
  - xfs: create incore realtime group structures (Carlos Maiolino) [RHEL-112145]
  - xfs: clean up xfs_getfsmap_helper arguments (Carlos Maiolino) [RHEL-112145]
  - xfs: repair metadata directory file path connectivity (Carlos Maiolino) [RHEL-112145]
  - xfs: confirm dotdot target before replacing it during a repair (Carlos Maiolino) [RHEL-112145]
  - xfs: check metadata directory file path connectivity (Carlos Maiolino) [RHEL-112145]
  - xfs: move repair temporary files to the metadata directory tree (Carlos Maiolino) [RHEL-112145]
  - xfs: check the metadata directory inumber in superblocks (Carlos Maiolino) [RHEL-112145]
  - xfs: scrub metadata directories (Carlos Maiolino) [RHEL-112145]
  - xfs: fix di_metatype field of inodes that won't load (Carlos Maiolino) [RHEL-112145]
  - xfs: adjust parent pointer scrubber for sb-rooted metadata files (Carlos Maiolino) [RHEL-112145]
  - xfs: metadata files can have xattrs if metadir is enabled (Carlos Maiolino) [RHEL-112145]
  - xfs: do not count metadata directory files when doing online quotacheck (Carlos Maiolino) [RHEL-112145]
  - xfs: refactor directory tree root predicates (Carlos Maiolino) [RHEL-112145]
  - xfs: record health problems with the metadata directory (Carlos Maiolino) [RHEL-112145]
  - xfs: adjust xfs_bmap_add_attrfork for metadir (Carlos Maiolino) [RHEL-112145]
  - xfs: mark quota inodes as metadata files (Carlos Maiolino) [RHEL-112145]
  - xfs: don't count metadata directory files to quota (Carlos Maiolino) [RHEL-112145]
  - xfs: allow bulkstat to return metadata directories (Carlos Maiolino) [RHEL-112145]
  - xfs: advertise metadata directory feature (Carlos Maiolino) [RHEL-112145]
  - xfs: hide metadata inodes from everyone because they are special (Carlos Maiolino) [RHEL-112145]
  - xfs: disable the agi rotor for metadata inodes (Carlos Maiolino) [RHEL-112145]
  - xfs: read and write metadata inode directory tree (Carlos Maiolino) [RHEL-112145]
  - xfs: enforce metadata inode flag (Carlos Maiolino) [RHEL-112145]
  - xfs: load metadata directory root at mount time (Carlos Maiolino) [RHEL-112145]
  - xfs: iget for metadata inodes (Carlos Maiolino) [RHEL-112145]
  - xfs: define the on-disk format for the metadir feature (Carlos Maiolino) [RHEL-112145]
  - xfs: standardize EXPERIMENTAL warning generation (Carlos Maiolino) [RHEL-112145]
  - xfs: rename metadata inode predicates (Carlos Maiolino) [RHEL-112145]
  - xfs: constify the xfs_inode predicates (Carlos Maiolino) [RHEL-112145]
  - xfs: constify the xfs_sb predicates (Carlos Maiolino) [RHEL-112145]
  - xfs: store a generic group structure in the intents (Carlos Maiolino) [RHEL-112145]
  - xfs: remove xfs_group_intent_hold and xfs_group_intent_rele (Carlos Maiolino) [RHEL-112145]
  - xfs: add group based bno conversion helpers (Carlos Maiolino) [RHEL-112145]
  - xfs: store a generic xfs_group pointer in xfs_getfsmap_info (Carlos Maiolino) [RHEL-112145]
  - xfs: add a generic group pointer to the btree cursor (Carlos Maiolino) [RHEL-112145]
  - xfs: convert busy extent tracking to the generic group structure (Carlos Maiolino) [RHEL-112145]
  - xfs: convert extent busy tracepoints to the generic group structure (Carlos Maiolino) [RHEL-112145]
  - xfs: return the busy generation from xfs_extent_busy_list_empty (Carlos Maiolino) [RHEL-112145]
  - xfs: move the online repair rmap hooks to the generic group structure (Carlos Maiolino) [RHEL-112145]
  - xfs: move draining of deferred operations to the generic group structure (Carlos Maiolino) [RHEL-112145]
  - xfs: mark xfs_perag_intent_{hold,rele} static (Carlos Maiolino) [RHEL-112145]
  - xfs: move metadata health tracking to the generic group structure (Carlos Maiolino) [RHEL-112145]
  - xfs: switch perag iteration from the for_each macros to a while based iterator (Carlos Maiolino) [RHEL-112145]
  - xfs: add a xfs_group_next_range helper (Carlos Maiolino) [RHEL-112145]
  - xfs: factor out a generic xfs_group structure (Carlos Maiolino) [RHEL-112145]
  - xfs: factor out a xfs_iwalk_args helper (Carlos Maiolino) [RHEL-112145]
  - xfs: insert the pag structures into the xarray later (Carlos Maiolino) [RHEL-112145]
  - xfs: split xfs_initialize_perag (Carlos Maiolino) [RHEL-112145]
  - xfs: convert remaining trace points to pass pag structures (Carlos Maiolino) [RHEL-112145]
  - xfs: pass the pag to the xrep_newbt_extent_class tracepoints (Carlos Maiolino) [RHEL-112145]
  - xfs: pass the pag to the trace_xrep_calc_ag_resblks{,_btsize} trace points (Carlos Maiolino) [RHEL-112145]
  - xfs: pass objects to the xrep_ibt_walk_rmap tracepoint (Carlos Maiolino) [RHEL-112145]
  - xfs: pass the iunlink item to the xfs_iunlink_update_dinode trace point (Carlos Maiolino) [RHEL-112145]
  - xfs: pass objects to the xfs_irec_merge_{pre,post} trace points (Carlos Maiolino) [RHEL-112145]
  - xfs: pass a perag structure to the xfs_ag_resv_init_error trace point (Carlos Maiolino) [RHEL-112145]
  - xfs: constify pag arguments to trace points (Carlos Maiolino) [RHEL-112145]
  - xfs: remove the unused xrep_bmap_walk_rmap trace point (Carlos Maiolino) [RHEL-112145]
  - xfs: remove the unused trace_xfs_iwalk_ag trace point (Carlos Maiolino) [RHEL-112145]
  - xfs: remove the mount field from struct xfs_busy_extents (Carlos Maiolino) [RHEL-112145]
  - xfs: keep a reference to the pag for busy extents (Carlos Maiolino) [RHEL-112145]
  - xfs: pass a pag to xfs_extent_busy_{search,reuse} (Carlos Maiolino) [RHEL-112145]
  - xfs: add a xfs_agino_to_ino helper (Carlos Maiolino) [RHEL-112145]
  - xfs: add xfs_agbno_to_fsb and xfs_agbno_to_daddr helpers (Carlos Maiolino) [RHEL-112145]
  - xfs: remove the agno argument to xfs_free_ag_extent (Carlos Maiolino) [RHEL-112145]
  - xfs: pass a pag to xfs_difree_inode_chunk (Carlos Maiolino) [RHEL-112145]
  - xfs: remove the unused pag_active_wq field in struct xfs_perag (Carlos Maiolino) [RHEL-112145]
  - xfs: remove the unused pagb_count field in struct xfs_perag (Carlos Maiolino) [RHEL-112145]
  - xfs: fix superfluous clearing of info->low in __xfs_getfsmap_datadev (Carlos Maiolino) [RHEL-112145]
  - xfs: remove xfs_page_mkwrite_iomap_ops (Carlos Maiolino) [RHEL-112145]
  - xfs: remove __xfs_filemap_fault (Carlos Maiolino) [RHEL-112145]
  - xfs: split write fault handling out of __xfs_filemap_fault (Carlos Maiolino) [RHEL-112145]
  - xfs: split the page fault trace event (Carlos Maiolino) [RHEL-112145]
  - xfs: sb_spino_align is not verified (Carlos Maiolino) [RHEL-112145]
  - xfs: simplify sector number calculation in xfs_zero_extent (Carlos Maiolino) [RHEL-112145]
  - xfs: remove the redundant xfs_alloc_log_agf (Carlos Maiolino) [RHEL-112145]


