# changelog

author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/1b2fadd)
  - Resolves: #2232127


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/8bb0204)
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/ea33dce)
  - Related: #2176063


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-3
changelog:
  - Run autorelabel in parallel by default
    https://fedoraproject.org/wiki/Changes/SELinux_Parallel_Autorelabel


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Marek Kasik <mkasik@redhat.com> - 21.01.0-11
changelog:
  - Backport fixes for issues found by Coverity Scan
  - and fix some of the new issues
  - Resolves: #1967967


author: Tomas Korbar <tkorbar@redhat.com> - 2:3.5.9-20
changelog:
  - Backport dns SRV record resolution feature (RFC6186)
    Resolves: rhbz#2134789
  - Fix building in ZUUL CI
    Resolves: rhbz#2193363


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.5.9-14
changelog:
  - Fixed cleanup crash when processing messages with whitespace only fullname
    Resolves: rhbz#1978901


author: Filip Januš <fjanus@redhat.com> - 15.0-1
changelog:
  - Initial import for postgresql 15
  - Specfile is based on version locate in centos stream
    It reflects changes with libpq. This version of databse server
    will use private libpq library.
  - Resolves: #2128241


author: Filip Januš <fjanus@redhat.com> - 15.2-1
changelog:
  - Update to upstream version 15.2
  - Update postgresql-setup to 8.8
  - PostgreSQL systemd unit waits for the network to be up
  - Resolves: #2128241


author: Filip Janus <fjanus@redhat.com> - 16.0-1
changelog:
  - New postgresql stream - 16
  - Remove pdf documentation
  - Update postgresql-setup to 8.9
  - postmaster binary no more shipped
  - Resolves: RHEL-3636


author: Bastien Nocera <bnocera@redhat.com> - 0.8.1-2
changelog:
  + power-profiles-daemon-0.8.1-2
  - Remove linter, as apparently unwanted in check section
  - Resolves: rhbz#1947950


author: Kate Hsuan <hpa@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Support multi-drivers mode and amdgpu
  - Support dynamically adjusts amd-pstate EPP values between battery and AC modes.
  - Resolves: RHEL-23395


author: Adrian Reber <adrian@lisas.de> - 3.14.0-6
changelog:
  - Reintroduce the emacs subpackage to avoid file conflicts between
    protobuf-compiler.x86_64 and protobuf-compiler.i686
  - Disable LTO to fix annobin errors


author: Adrian Reber <areber@redhat.com> - 3.14.0-14
changelog:
  - Applied patch for CVE-2022-1941 (#RHEL-40872)
  - Applied patch to make emacs dependency optional (#RHEL-40572)


author: Wim Taymans <wtaymans@redhat.com> - 15.0-1
changelog:
  - Update to 15.0
  - convert to meson build
  - esound, gconf, oss are no longer supported
  - Resolves: rhbz#1961581


author: Tomas Popela <tpopela@redhat.com> - 1.20.1-1
changelog:
  - Update to 1.20.1
  - Resolves: rhbz#2016905
  - Ship python3-cairo-devel in CRB
  - Resolves: rhbz#2053665


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.7-1
changelog:
  - Upgrade to pyparted-3.11.7 (BZ#1890443)
  - Set PY_SSIZE_T_CLEAN for the build (bcl)
  - add nvme support
  - Update RELEASE file to make last step be "make pypi" (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.12.0-1
changelog:
  - Patch pyparted to handle PED_DISK_TYPE_PARTITION_TYPE_ID for the
    msdos disk type and PED_DISK_TYPE_PARTITION_TYPE_UUID for the gpt
    label
    Resolves: rhbz#2103243


author: Christian Heimes <cheimes@redhat.com> - 3.4.7-1
changelog:
  - Update to 3.4.7
  - Remove dependency on python-cryptography-vectors package and use vectors
    directly from Github source tar ball. Related: rhbz#1952343


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-6
changelog:
  - Rebase to 36.0.1, related: rhbz#2059630, rhbz#2060787
  - OpenSSL 3.0 FIPS mode is now detected correctly, related: rhbz#2054785
  - Fix error check from EVP_PKEY_CTX_set_signature_md, related: rhbz#2060343
  - Block 3DES in FIPS mode, related: rhbz#2055209
  - Disable DSA tests in FIPS mode
  - Enable SHA1 signatures in test suite
  - Fix serialization of keyusage ext with no bits
  - Re-enable tests that are passing again


author: Miro Hrončok <mhroncok@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.2
  - Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
  - Fixes: rhbz#1855415
  - Fixes: rhbz#1901634


author: Miro Hrončok <mhroncok@redhat.com> - 0.10.6-9
changelog:
  - Subpackage python2-netifaces has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomas Orsava <torsava@redhat.com> - 5.8.0-5
changelog:
  - Remove unnecessary test dependency on python3-mock
  - Remove unnecessary macro __provides_exclude_from


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.8.6-6
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Add manual Obsoletes for python39-psycopg2-doc
  - Related: rhbz#1990421


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.3-3
changelog:
  - Replace pypi_name macro with srcname
  - Update BR’s
  - Run the doctests
  - Build documentation in a new -doc subpackage


author: Miro Hrončok <mhroncok@redhat.com> - 0.17.3-7
changelog:
  - Don't BuildRequire python3-hypothesis and exclude affected tests from %check
  - Resolves: rhbz#1928125


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Nils Philippsen <nils@tiptoe.de> - 1.4.32-1
changelog:
  - version 1.4.32
  - don't BR: python3-pytest-xdist on EL9
  - remove obsolete (no-op) tweak of setup.cfg


author: Sergio Correia <scorreia@redhat.com> - 1.4.37-3
changelog:
  - Remove obsolete cruft from the specfile, follow the packaging guidelines
  - Remove also extra packages we have no runtime dependencies for
    Related: rhbz#2084556


author: Sergio Correia <scorreia@redhat.com> - 3.1.2-2
changelog:
  - Remove 
   
  if [ $1 -eq 0 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then 
          /usr/lib/systemd/systemd-update-helper remove-system-units from %preun scriptlet, as it was causing troubles when removing audit || : 
  fi 

    Related: RHEL-14896


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-1
changelog:
  - New upstream maintenance release, 3.1.4
  - Prevent scriplets from failing
  - When upgrading, restart the daemon if it's running
  - If uninstalling, stop the daemon
  - auditctl: use pidfd_send_signal for signaling auditd
    Resolves: RHEL-45865
  - Minor doc update
    Resolves: RHEL-5186
  - augenrules: do not exit with failure if in immutable mode
    Resolves: RHEL-40110
  - auditd.service: Disable ProtectControlGroups
    Resolves: RHEL-5197
  - auditctl: correct output when displaying rules with exe/path/dir
    Resolves: RHEL-40243


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-2
changelog:
  - Disable ProtectKernelModules=true in service file
    Resolves: RHEL-59570
  - af_unix plugin: restore original behavior in binary mode
    Resolves: RHEL-59585
  - Support image mode
    Resolves: RHEL-69033
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-11252
  - Filter syscalls to ensure architecture-specific availability
    Resolves: RHEL-70455


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-5
changelog:
  - ausearch: correct search for DAEMON related events
  - allow hex digits when interpreting tty data
    Resolves: RHEL-82279
  - Fix TTY hostname in log messages
    Resolves: RHEL-78323


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Chris Leech <cleech@redhat.com> - 6.2.1.9-18.gita65a472
changelog:
  - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
  - new meson build system, sync with fedora packaging


author: Christian Glombek <cglombek@redhat.com> - 6.2.1.2-0.git802688d
changelog:
  - Update to upstream v2.1.2
  - Remove systemctl enable calls, as this is now handled by Fedora presets
  - per the guidelines
  - Remove initiator name generation, as this is now handled by an init service
  - Install ghost lockfile and dir to /run instead of /var
  - Rebased/fixed up patches
  - Fixed macros in comments and comments after macros
  - Merged service-file-tweaks.patch and
  - improve-systemd-service-files-for-boot-session-handl.patch
  - into unit-file-tweaks.patch 
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1493296
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1729740
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1834509


author: Chris Leech <cleech@redhat.com> - 6.2.1.2-1.git13e7f58
changelog:
  - iscsiadm overflow regression when discovering many targets at once
  - check for invalid session id during stop connection
  - add ability to attempt target logins asynchronously


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.4-1
changelog:
  - Use Decimal for Device.getSize() operations, return a
    float (#1801355)
  - Update the 'twine upload' line in the Makefile
  - Don't intentionally prohibit Python 2 usage (#67)
  - mips64 support


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.5-1
changelog:
  - Require at least libparted 3.3 and python 3.7 (dcantrell)
  - pedmodule.c: Fix partition enum flag handling (bcl)
  - Add support for chromeos_kernel and bls_boot partition flags (bcl)
  - Move exception declarations to _pedmodule.c (dcantrell)


author: Andreas Schneider <asn@redhat.com> - 4.14.4-1
changelog:
  - resolves: rhbz#1954531 - Update to Samba 4.14.4
  - resolves: rhbz#1949446 - Fix CVE-2021-20254
  - resolves: rhbz#1942378 - Disable nis support


author: Andreas Schneider <asn@redhat.com> - 4.14.4-7
changelog:
  - related: rhbz#1954531 - Fix build issues with gcc
  - resolves: rhbz#1959712 - Add iouring vfs module


author: Pavel Simovec <psimovec@redhat.com> - 1.9.3-2
changelog:
  - Apply upstream patch: MAINT:linalg:Adjust lwork/liwork changes OpenBLAS 0.3.26
  - Resolves: RHEL-70908


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Miro Hrončok <mhroncok@redhat.com> - 234-11
changelog:
  - Subpackage python2-systemd has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Jerry James <loganjerry@gmail.com> - 2020.3-4
changelog:
  - Fix cmake file installation (bz 1930389)
  - Allow use of RTM instructions when available
  - At upstream's suggestion, do not force ITT_NOTIFY support
  - Drop -fetchadd64 patch, only needed for forced ITT_NOTIFY support


author: Tomas Korbar <tkorbar@redhat.com> - 1.16.2-6
changelog:
  - Fix KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387
  - Fix Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868
  - Resolves: RHEL-25671
  - Resolves: RHEL-25643


author: Charalampos Stratakis <cstratak@redhat.com> - 1.15.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Joel Capitao <jcapitao@redhat.com>
        John Dulaney <jdulaney@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Parag Nemade <pnemade@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 37.0.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.9-1
changelog:
  - Rebase to 3.11.9
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix expat tests for the latest expat security release
  Resolves: RHEL-33677, RHEL-33689


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-1
changelog:
  - Update to 3.11.13
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.13-2
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-101551


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <fale@redhat.com>
        Igor Raits <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jcollie@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomas Orsava <torsava@redhat.com> - 4.9.2-4
changelog:
  - Bring back the isoschematron submodule,
    but without the validation of the schema file itself
  - Resolves: RHEL-5570


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.23.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <sharkcz@fedoraproject.org>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <limburgher@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim GÜNDÜZ <devrim@fedoraproject.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 6.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <ausil@fedoraproject.org>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.8.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 41.0.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64886, RHEL-70320


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-88897


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98057, RHEL-98019, RHEL-97811, RHEL-98183, RHEL-98210


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <me@fale.io>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jeff@ocjtech.us>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.24.4-2
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowitz@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.6-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim Gündüz <devrim@gunduz.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 6.0.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Dan Horák <dhorak@redhat.com> - 2.3.1-1
changelog:
  - updated to 2.3.1 (#2044214)
  - Add Support for new IBM Z Hardware (#2044215)
  - Resolves: #2044214 #2044215


author: Dan Horák <dhorak@redhat.com> - 2.5.0-1
changelog:
  - updated to 2.5.0 (RHEL-23692)
  - add runtime dependency for EBCDIC to ASCII conversion (RHEL-24407)
  - Resolves: RHEL-23692 RHEL-24407


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-15
changelog:
  - kvm-net-Fix-announce_self.patch [RHEL-73891]
  - kvm-migration-Add-helper-to-get-target-runstate.patch [RHEL-54296 RHEL-78397]
  - kvm-qmp-cont-Only-activate-disks-if-migration-completed.patch [RHEL-54296 RHEL-78397]
  - kvm-migration-block-Make-late-block-active-the-default.patch [RHEL-54296 RHEL-78397]
  - kvm-migration-block-Apply-late-block-active-behavior-to-.patch [RHEL-54296 RHEL-78397]
  - kvm-migration-block-Fix-possible-race-with-block_inactiv.patch [RHEL-54296 RHEL-78397]
  - kvm-migration-block-Rewrite-disk-activation.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Add-active-field-to-BlockDeviceInfo.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Allow-inactivating-already-inactive-nodes.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Inactivate-external-snapshot-overlays-when-nec.patch [RHEL-54296 RHEL-78397]
  - kvm-migration-block-active-Remove-global-active-flag.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Don-t-attach-inactive-child-to-active-node.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Fix-crash-on-block_resize-on-inactive-node.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Add-option-to-create-inactive-nodes.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Add-blockdev-set-active-QMP-command.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Support-inactive-nodes-in-blk_insert_bs.patch [RHEL-54296 RHEL-78397]
  - kvm-block-export-Don-t-ignore-image-activation-error-in-.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Drain-nodes-before-inactivating-them.patch [RHEL-54296 RHEL-78397]
  - kvm-block-export-Add-option-to-allow-export-of-inactive-.patch [RHEL-54296 RHEL-78397]
  - kvm-nbd-server-Support-inactive-nodes.patch [RHEL-54296 RHEL-78397]
  - kvm-iotests-Add-filter_qtest.patch [RHEL-54296 RHEL-78397]
  - kvm-iotests-Add-qsd-migrate-case.patch [RHEL-54296 RHEL-78397]
  - kvm-iotests-Add-NBD-based-tests-for-inactive-nodes.patch [RHEL-54296 RHEL-78397]
  - Resolves: RHEL-73891
    (No RARP packets on the destination after migration [rhel-9.6])
  - Resolves: RHEL-54296
    (Provide QMP command for block device reactivation after migration [rhel-9.5])
  - Resolves: RHEL-78397
    (backport fix for double migration of a paused VM (disk activation rewrite))


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-16
changelog:
  - kvm-hw-virtio-virtio-iommu-Migrate-to-3-phase-reset.patch [RHEL-7188]
  - kvm-hw-i386-intel-iommu-Migrate-to-3-phase-reset.patch [RHEL-7188]
  - kvm-hw-arm-smmuv3-Move-reset-to-exit-phase.patch [RHEL-7188]
  - kvm-hw-vfio-common-Add-a-trace-point-in-vfio_reset_handl.patch [RHEL-7188]
  - kvm-docs-devel-reset-Document-reset-expectations-for-DMA.patch [RHEL-7188]
  - kvm-qga-implement-a-guest-get-load-command.patch [RHEL-69622]
  - kvm-migration-Fix-UAF-for-incoming-migration-on-Migratio.patch [RHEL-69775]
  - kvm-scripts-improve-error-from-qemu-trace-stap-on-missin.patch [RHEL-47340]
  - kvm-Recommend-systemtap-client-from-qemu-tools.patch [RHEL-47340]
  - Resolves: RHEL-7188
    ([intel iommu][PF] DMAR: DRHD: handling fault status reg)
  - Resolves: RHEL-69622
    ([qemu-guest-agent][RFE] Report CPU load average)
  - Resolves: RHEL-69775
    (Guest crashed on the target host when the migration was canceled)
  - Resolves: RHEL-47340
    ([Qemu RHEL-9] qemu-trace-stap should handle lack of stap more gracefully)


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-17
changelog:
  - kvm-hw-pci-Rename-has_power-to-enabled.patch [RHEL-7301]
  - kvm-hw-pci-Basic-support-for-PCI-power-management.patch [RHEL-7301]
  - kvm-pci-Use-PCI-PM-capability-initializer.patch [RHEL-7301]
  - kvm-vfio-pci-Delete-local-pm_cap.patch [RHEL-7301]
  - kvm-pcie-virtio-Remove-redundant-pm_cap.patch [RHEL-7301]
  - kvm-hw-vfio-pci-Re-order-pre-reset.patch [RHEL-7301]
  - kvm-Also-recommend-systemtap-devel-from-qemu-tools.patch [RHEL-47340]
  - Resolves: RHEL-7301
    ([intel iommu] VFIO_MAP_DMA failed: Bad address on system_powerdown)
  - Resolves: RHEL-47340
    ([Qemu RHEL-9] qemu-trace-stap should handle lack of stap more gracefully)


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-18
changelog:
  - kvm-virtio-kconfig-memory-devices-are-PCI-only.patch [RHEL-72977]
  - kvm-hw-s390-ccw-device-Convert-to-three-phase-reset.patch [RHEL-72977]
  - kvm-hw-s390-virtio-ccw-Convert-to-three-phase-reset.patch [RHEL-72977]
  - kvm-target-s390-Convert-CPU-to-Resettable-interface.patch [RHEL-72977]
  - kvm-reset-Use-ResetType-for-qemu_devices_reset-and-Machi.patch [RHEL-72977]
  - kvm-reset-Add-RESET_TYPE_WAKEUP.patch [RHEL-72977]
  - kvm-virtio-mem-Use-new-Resettable-framework-instead-of-L.patch [RHEL-72977]
  - kvm-virtio-mem-Add-support-for-suspend-wake-up-with-plug.patch [RHEL-72977]
  - kvm-virtio-mem-unplug-memory-only-during-system-resets-n.patch [RHEL-72977]
  - kvm-s390x-s390-virtio-ccw-don-t-crash-on-weird-RAM-sizes.patch [RHEL-72977]
  - kvm-s390x-s390-virtio-hcall-remove-hypercall-registratio.patch [RHEL-72977]
  - kvm-s390x-s390-virtio-hcall-prepare-for-more-diag500-hyp.patch [RHEL-72977]
  - kvm-s390x-rename-s390-virtio-hcall-to-s390-hypercall.patch [RHEL-72977]
  - kvm-s390x-s390-virtio-ccw-move-setting-the-maximum-guest.patch [RHEL-72977]
  - kvm-s390x-introduce-s390_get_memory_limit.patch [RHEL-72977]
  - kvm-s390x-s390-hypercall-introduce-DIAG500-STORAGE_LIMIT.patch [RHEL-72977]
  - kvm-s390x-s390-stattrib-kvm-prepare-for-memory-devices-a.patch [RHEL-72977]
  - kvm-s390x-s390-skeys-prepare-for-memory-devices.patch [RHEL-72977]
  - kvm-s390x-s390-virtio-ccw-prepare-for-memory-devices.patch [RHEL-72977]
  - kvm-s390x-pv-prepare-for-memory-devices.patch [RHEL-72977]
  - kvm-s390x-remember-the-maximum-page-size.patch [RHEL-72977]
  - kvm-s390x-virtio-ccw-add-support-for-virtio-based-memory.patch [RHEL-72977]
  - kvm-s390x-virtio-mem-support.patch [RHEL-72977]
  - kvm-hw-virtio-Also-include-md-stubs-in-case-CONFIG_VIRTI.patch [RHEL-72977]
  - kvm-virtio-mem-don-t-warn-about-THP-sizes-on-a-kernel-wi.patch [RHEL-72977]
  - kvm-redhat-Enable-virtio-mem-on-s390x.patch [RHEL-72977]
  - Resolves: RHEL-72977
    ([IBM 9.7 FEAT] KVM: Enable virtio-mem support - qemu part)


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-19
changelog:
  - kvm-target-i386-Fix-conditional-CONFIG_SYNDBG-enablement.patch [RHEL-7130]
  - kvm-target-i386-Exclude-hv-syndbg-from-hv-passthrough.patch [RHEL-7130]
  - Resolves: RHEL-7130
    ([Hyper-V][RHEL9.2] Nested Hyper-V on KVM: L1 Windows VM with BIOS mode fails to boot up when using '-cpu host,hv_passthrough’ flag)


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-20
changelog:
  - kvm-virtio-net-disable-USO-for-virt-rhel9.6.patch [RHEL-80313]
  - kvm-arm-Use-arm_virt_compat_set-to-apply-the-compat.patch [RHEL-80313]
  - kvm-file-posix-probe-discard-alignment-on-Linux-block-de.patch [RHEL-86032]
  - kvm-block-io-skip-head-tail-requests-on-EINVAL.patch [RHEL-86032]
  - kvm-file-posix-Fix-crash-on-discard_granularity-0.patch [RHEL-86032]
  - Resolves: RHEL-80313
    (Unable to migrate VM from RHEL10.0/qemu-kvm-9.6 to RHEL9.6/qemu-kvm-9.6)
  - Resolves: RHEL-86032
    (QEMU sends unaligned discards on 4K devices [RHEL-9.7])


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-21
changelog:
  - kvm-meson-configure-add-valgrind-option-en-dis-able-valg.patch [RHEL-88153]
  - kvm-distro-add-an-explicit-valgrind-devel-build-dep.patch [RHEL-88153]
  - kvm-hw-i386-Fix-machine-type-compatibility.patch [RHEL-91307]
  - kvm-vfio-helpers-Refactor-vfio_region_mmap-error-handlin.patch [RHEL-88533]
  - kvm-vfio-helpers-Align-mmaps.patch [RHEL-88533]
  - Resolves: RHEL-88153
    ([s390x] valgrind not working with qemu-kvm for non-x86 builds)
  - Resolves: RHEL-91307
    (Fix x86 M-type compats)
  - Resolves: RHEL-88533
    (Improve VFIO mmapping performance with  huge  pfnmaps)


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-22
changelog:
  - kvm-migration-postcopy-Spatial-locality-page-hint-for-pr.patch [RHEL-85159]
  - kvm-Allow-guest-network-get-route-guest-get-load-QGA-com.patch [RHEL-91605 RHEL-91606]
  - Resolves: RHEL-85159
    (Video stuck about 1 min after switchover phase when play one video during postcopy-preempt migration)
  - Resolves: RHEL-91605
    ([qemu-guest-agent] Add new api 'guest-network-get-route' to allow-rpc [RHEL-9])
  - Resolves: RHEL-91606
    ([qemu-guest-agent] Enable 'guest-get-load' by default [RHEL-9])


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-23
changelog:
  - kvm-net-vhost-user-add-QAPI-events-to-report-connection-.patch [RHEL-95120]
  - kvm-file-posix-Define-DM_MPATH_PROBE_PATHS.patch [RHEL-95408]
  - kvm-file-posix-Probe-paths-and-retry-SG_IO-on-potential-.patch [RHEL-95408]
  - Resolves: RHEL-95120
    (Allow libvirt to restart passt/vhost-user when the process is killed [rhel-9.7])
  - Resolves: RHEL-95408
    (Support multipath failover with scsi-block [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-24
changelog:
  - kvm-s390x-pci-add-support-for-guests-that-request-direct.patch [RHEL-11430]
  - kvm-s390x-pci-indicate-QEMU-supports-relaxed-translation.patch [RHEL-11430]
  - kvm-block-Expand-block-status-mode-from-bool-to-flags.patch [RHEL-82906 RHEL-83015]
  - kvm-file-posix-gluster-Handle-zero-block-status-hint-bet.patch [RHEL-82906 RHEL-83015]
  - kvm-block-Let-bdrv_co_is_zero_fast-consolidate-adjacent-.patch [RHEL-82906 RHEL-83015]
  - kvm-block-Add-new-bdrv_co_is_all_zeroes-function.patch [RHEL-82906 RHEL-83015]
  - kvm-iotests-Improve-iotest-194-to-mirror-data.patch [RHEL-82906 RHEL-83015]
  - kvm-mirror-Minor-refactoring.patch [RHEL-82906 RHEL-83015]
  - kvm-mirror-Pass-full-sync-mode-rather-than-bool-to-inter.patch [RHEL-82906 RHEL-83015]
  - kvm-mirror-Allow-QMP-override-to-declare-target-already-.patch [RHEL-82906 RHEL-83015]
  - kvm-mirror-Drop-redundant-zero_target-parameter.patch [RHEL-82906 RHEL-83015]
  - kvm-mirror-Skip-pre-zeroing-destination-if-it-is-already.patch [RHEL-82906 RHEL-83015]
  - kvm-mirror-Skip-writing-zeroes-when-target-is-already-ze.patch [RHEL-82906 RHEL-83015]
  - kvm-iotests-common.rc-add-disk_usage-function.patch [RHEL-82906 RHEL-83015]
  - kvm-tests-Add-iotest-mirror-sparse-for-recent-patches.patch [RHEL-82906 RHEL-83015]
  - kvm-mirror-Reduce-I-O-when-destination-is-detect-zeroes-.patch [RHEL-82906 RHEL-83015]
  - Resolves: RHEL-11430
    ([IBM 9.7 FEAT] KVM: Performance Enhanced Refresh PCI Translation - qemu part)
  - Resolves: RHEL-82906
    (--migrate-disks-detect-zeroes doesn't take effect for disk migration [rhel-9.7])
  - Resolves: RHEL-83015
    (Disk size of target raw image is full allocated when doing mirror with default discard value [rhel-9.7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-25
changelog:
  - kvm-s390x-Fix-leak-in-machine_set_loadparm.patch [RHEL-98554]
  - kvm-hw-s390x-ccw-device-Fix-memory-leak-in-loadparm-sett.patch [RHEL-98554]
  - kvm-amd_iommu-Rename-variable-mmio-to-mr_mmio.patch [RHEL-66202]
  - kvm-amd_iommu-Add-support-for-pass-though-mode.patch [RHEL-66202]
  - kvm-amd_iommu-Use-shared-memory-region-for-Interrupt-Rem.patch [RHEL-66202]
  - kvm-amd_iommu-Send-notification-when-invalidate-interrup.patch [RHEL-66202]
  - kvm-amd_iommu-Check-APIC-ID-255-for-XTSup.patch [RHEL-66202]
  - kvm-io-Fix-partial-struct-copy-in-qio_dns_resolver_looku.patch [RHEL-67104]
  - kvm-util-qemu-sockets-Refactor-setting-client-sockopts-i.patch [RHEL-67104]
  - kvm-util-qemu-sockets-Refactor-success-and-failure-paths.patch [RHEL-67104]
  - kvm-util-qemu-sockets-Add-support-for-keep-alive-flag-to.patch [RHEL-67104]
  - kvm-util-qemu-sockets-Refactor-inet_parse-to-use-QemuOpt.patch [RHEL-67104]
  - kvm-util-qemu-sockets-Introduce-inet-socket-options-cont.patch [RHEL-67104]
  - kvm-tests-unit-test-util-sockets-fix-mem-leak-on-error-o.patch [RHEL-67104]
  - kvm-target-i386-Expose-bits-related-to-SRSO-vulnerabilit.patch [RHEL-52649]
  - kvm-target-i386-Add-PerfMonV2-feature-bit.patch [RHEL-52649]
  - kvm-target-i386-Update-EPYC-CPU-model-for-Cache-property.patch [RHEL-52649]
  - kvm-target-i386-Update-EPYC-Rome-CPU-model-for-Cache-pro.patch [RHEL-52649]
  - kvm-target-i386-Update-EPYC-Milan-CPU-model-for-Cache-pr.patch [RHEL-52649]
  - kvm-target-i386-Add-couple-of-feature-bits-in-CPUID_Fn80.patch [RHEL-52649]
  - kvm-target-i386-Update-EPYC-Genoa-for-Cache-property-per.patch [RHEL-52649]
  - kvm-target-i386-Add-support-for-EPYC-Turin-model.patch [RHEL-52649]
  - kvm-hw-i386-amd_iommu-Assign-pci-id-0x1419-for-the-AMD-I.patch [RHEL-70926]
  - kvm-hw-i386-amd_iommu-Isolate-AMDVI-PCI-from-amd-iommu-d.patch [RHEL-70925]
  - kvm-hw-i386-amd_iommu-Allow-migration-when-explicitly-cr.patch [RHEL-70925]
  - kvm-Enable-amd-iommu-device.patch [RHEL-70925]
  - kvm-include-qemu-compiler-add-QEMU_UNINITIALIZED-attribu.patch [RHEL-99888]
  - kvm-hw-virtio-virtio-avoid-cost-of-ftrivial-auto-var-ini.patch [RHEL-99888]
  - kvm-block-skip-automatic-zero-init-of-large-array-in-ioq.patch [RHEL-99888]
  - kvm-chardev-char-fd-skip-automatic-zero-init-of-large-ar.patch [RHEL-99888]
  - kvm-chardev-char-pty-skip-automatic-zero-init-of-large-a.patch [RHEL-99888]
  - kvm-chardev-char-socket-skip-automatic-zero-init-of-larg.patch [RHEL-99888]
  - kvm-hw-audio-ac97-skip-automatic-zero-init-of-large-arra.patch [RHEL-99888]
  - kvm-hw-audio-cs4231a-skip-automatic-zero-init-of-large-a.patch [RHEL-99888]
  - kvm-hw-audio-es1370-skip-automatic-zero-init-of-large-ar.patch [RHEL-99888]
  - kvm-hw-audio-gus-skip-automatic-zero-init-of-large-array.patch [RHEL-99888]
  - kvm-hw-audio-marvell_88w8618-skip-automatic-zero-init-of.patch [RHEL-99888]
  - kvm-hw-audio-sb16-skip-automatic-zero-init-of-large-arra.patch [RHEL-99888]
  - kvm-hw-audio-via-ac97-skip-automatic-zero-init-of-large-.patch [RHEL-99888]
  - kvm-hw-char-sclpconsole-lm-skip-automatic-zero-init-of-l.patch [RHEL-99888]
  - kvm-hw-dma-xlnx_csu_dma-skip-automatic-zero-init-of-larg.patch [RHEL-99888]
  - kvm-hw-display-vmware_vga-skip-automatic-zero-init-of-la.patch [RHEL-99888]
  - kvm-hw-hyperv-syndbg-skip-automatic-zero-init-of-large-a.patch [RHEL-99888]
  - kvm-hw-misc-aspeed_hace-skip-automatic-zero-init-of-larg.patch [RHEL-99888]
  - kvm-hw-net-rtl8139-skip-automatic-zero-init-of-large-arr.patch [RHEL-99888]
  - kvm-hw-net-tulip-skip-automatic-zero-init-of-large-array.patch [RHEL-99888]
  - kvm-hw-net-virtio-net-skip-automatic-zero-init-of-large-.patch [RHEL-99888]
  - kvm-hw-net-xgamc-skip-automatic-zero-init-of-large-array.patch [RHEL-99888]
  - kvm-hw-nvme-ctrl-skip-automatic-zero-init-of-large-array.patch [RHEL-99888]
  - kvm-hw-ppc-spapr_tpm_proxy-skip-automatic-zero-init-of-l.patch [RHEL-99888]
  - kvm-hw-usb-hcd-ohci-skip-automatic-zero-init-of-large-ar.patch [RHEL-99888]
  - kvm-hw-scsi-lsi53c895a-skip-automatic-zero-init-of-large.patch [RHEL-99888]
  - kvm-hw-scsi-megasas-skip-automatic-zero-init-of-large-ar.patch [RHEL-99888]
  - kvm-hw-ufs-lu-skip-automatic-zero-init-of-large-array.patch [RHEL-99888]
  - kvm-net-socket-skip-automatic-zero-init-of-large-array.patch [RHEL-99888]
  - kvm-net-stream-skip-automatic-zero-init-of-large-array.patch [RHEL-99888]
  - kvm-ui-vnc-Update-display-update-interval-when-VM-state-.patch [RHEL-100741]
  - Resolves: RHEL-98554
    ([s390x][RHEL9.7.0][virtio_block] there would be memory leak with virtio_blk disks)
  - Resolves: RHEL-66202
    ([AMDSERVER 9.6 Feature] qemu: Interrupt Remap support for emulated amd viommu)
  - Resolves: RHEL-67104
    (postcopy on the destination host can't switch into pause status under the network issue if boot VM with '-S')
  - Resolves: RHEL-52649
    ([AMDSERVER 9.6 Feature] Turin: Qemu EPYC-Turin Model)
  - Resolves: RHEL-70926
    (Qemu/amd-iommu: Advertise a suitable device id)
  - Resolves: RHEL-70925
    (Qemu/amd-iommu: Add ability to manually specify the AMDVI-PCI device)
  - Resolves: RHEL-99888
    (-ftrivial-auto-var-init=zero reduced performance [rhel-9])
  - Resolves: RHEL-100741
    (Video stuck after switchover phase when play one video during migration [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-26
changelog:
  - kvm-rbd-Fix-.bdrv_get_specific_info-implementation.patch [RHEL-108726]
  - Resolves: RHEL-108726
    (Openstack guest becomes inaccessible via network when storage network on the hypervisor is disabled/lost [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-27
changelog:
  - kvm-target-i386-Make-invtsc-migratable-when-user-sets-ts.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-target-i386-Enable-fdp-excptn-only-and-zero-fcs-fds.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-kvm-i386-make-kvm_filter_msr-and-related-definitions.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-kvm-remove-unnecessary-ifdef.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-crypto-Define-macros-for-hash-algorithm-digest-lengt.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Drop-the-check-of-phys_bits-in-host_cpu_rea.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Extract-a-common-fucntion-to-setup-value-of.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Drop-the-variable-smp_cores-and-smp_threads.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Drop-cores_per_pkg-in-cpu_x86_cpuid.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-topology-Update-the-comment-of-x86_apicid_from_.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-topology-Introduce-helpers-for-various-topology.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Track-a-X86CPUTopoInfo-directly-in-CPUX86St.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Hoist-check-of-CPUID_EXT3_TOPOEXT-against-t.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-cpu-Remove-nr_cores-from-struct-CPUState.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Set-up-CPUID_HT-in-x86_cpu_expand_features-.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Set-and-track-CPUID_EXT3_CMP_LEG-in-env-fea.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-Remove-unused-parameter-uint32_t-bit-in-feature.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-target-i386-Print-CPUID-subleaf-info-for-unsupported.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-target-i386-sev-Reduce-system-specific-declarations.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-physmem-replace-assertion-with-error.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-redhat-target-i386-add-CPUID-and-MSR-bits-from-Clear.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-qom-reverse-order-of-instance_post_init-calls.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-target-i386-Remove-AccelCPUClass-cpu_class_init-need.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Consolidate-the-helper-to-get-Host-s-vendor.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-rocker-do-not-pollute-the-namespace.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-linux-headers-Update-to-Linux-v6.14-rc3.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-linux-headers-Update-to-Linux-v6.15-rc3.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-linux-headers-update-from-6.15-kvm-next.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-update-Linux-headers-to-v6.16-rc3.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-update-Linux-headers-to-KVM-tree-master.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-Introduce-tdx-guest-object.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Implement-tdx_kvm_type-for-TDX.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Implement-tdx_kvm_init-to-initialize-TDX-VM.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Get-tdx_capabilities-via-KVM_TDX_CAPABILITI.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Introduce-is_tdx_vm-helper-and-cache-tdx_gu.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-kvm-Introduce-kvm_arch_pre_create_vcpu.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Initialize-TDX-before-creating-TD-vcpus.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Add-property-sept-ve-disable-for-tdx-guest-.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Make-sept_ve_disable-set-by-default.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Wire-CPU-features-up-with-attributes-of-TD-.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Validate-TD-attributes.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Support-user-configurable-mrconfigid-mrowne.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Set-APIC-bus-rate-to-match-with-what-TDX-mo.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Implement-user-specified-tsc-frequency.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-load-TDVF-for-TD-guest.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdvf-Introduce-function-to-parse-TDVF-metadata.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Parse-TDVF-metadata-for-TDX-VM.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Don-t-initialize-pc.rom-for-TDX-VMs.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Track-mem_ptr-for-each-firmware-entry-of-TD.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Track-RAM-entries-for-TDX-VM.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-headers-Add-definitions-from-UEFI-spec-for-volumes-r.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Setup-the-TD-HOB-list.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Add-TDVF-memory-via-KVM_TDX_INIT_MEM_REGION.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Call-KVM_TDX_INIT_VCPU-to-initialize-TDX-vc.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Finalize-TDX-VM.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Enable-user-exit-on-KVM_HC_MAP_GPA_RANGE.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Handle-KVM_SYSTEM_EVENT_TDX_FATAL.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Wire-TDX_REPORT_FATAL_ERROR-with-GuestPanic.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-kvm-Check-KVM_CAP_MAX_VCPUS-at-vm-level.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-introduce-x86_confidential_guest_cpu_instan.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-implement-tdx_cpu_instance_init.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Introduce-enable_cpuid_0x1f-to-force-exposi.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Force-exposing-CPUID-0x1f.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Set-kvm_readonly_mem_enabled-to-false-for-T.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Disable-SMM-for-TDX-VMs.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Disable-PIC-for-TDX-VMs.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Set-and-check-kernel_irqchip-mode-for-TDX.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Don-t-synchronize-guest-tsc-for-TDs.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Only-configure-MSR_IA32_UCODE_REV-in-kvm_in.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-apic-Skip-kvm_apic_put-for-TDX.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-cpu-Don-t-set-vcpu_dirty-when-guest_state_protected.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cgs-Rename-mask_cpuid_features-to-adjust_cpuid_.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Implement-adjust_cpuid_features-for-TDX.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Add-TDX-fixed1-bits-to-supported-CPUIDs.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Add-supported-CPUID-bits-related-to-TD-Attr.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Add-supported-CPUID-bits-relates-to-XFAM.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Add-XFD-to-supported-bit-of-TDX.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Define-supported-KVM-features-for-TDX.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cgs-Introduce-x86_confidential_guest_check_feat.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Fetch-and-validate-CPUID-of-TD-guest.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Don-t-treat-SYSCALL-as-unavailable.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Make-invtsc-default-on.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Validate-phys_bits-against-host-value.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-docs-Add-TDX-documentation.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Fix-build-on-32-bit-host.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdvf-Fix-build-on-32-bit-host.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Move-adjustment-of-CPUID_EXT_PDCM-before-fe.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Error-and-exit-when-named-cpu-model-is-requ.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Rename-enable_cpuid_0x1f-to-force_cpuid_0x1.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Fix-the-typo-of-the-comment-of-struct-TdxGu.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Clarify-the-error-message-of-mrconfigid-mro.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-handle-TDG.VP.VMCALL-GetTdVmCallInfo.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-handle-TDG.VP.VMCALL-GetQuote.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-target-i386-move-max_features-to-class.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-target-i386-nvmm-whpx-add-accel-CPU-class-that-sets-.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-target-i386-allow-reordering-max_x86_cpu_initfn-vs-a.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-target-i386-move-accel_cpu_instance_init-to-.instanc.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-target-i386-merge-host_cpu_instance_init-and-host_cp.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Remove-enumeration-of-GetQuote-in-tdx_handl.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Set-value-of-GetTdVmCallInfo-based-on-capab.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-handle-TDVMCALL_SETUP_EVENT_NOTIFY_INTERRUP.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Fix-the-report-of-gpa-in-QAPI.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Remove-task-watch-only-when-it-s-valid.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Don-t-mask-off-CPUID_EXT_PDCM.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Move-x86_ext_save_areas-initialization-to-..patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-target-i386-tdx-fix-locking-for-interrupt-injection.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Cleanup-host_cpu_max_instance_init.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Remove-the-redundant-qemu_mutex_init-tdx-lo.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-redhat-enable-CONFIG_TDX.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-memory-Export-a-helper-to-get-intersection-of-a-Memo.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-memory-Change-memory_region_set_ram_discard_manager-.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-memory-Unify-the-definiton-of-ReplayRamPopulate-and-.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-ram-block-attributes-Introduce-RamBlockAttributes-to.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-physmem-Support-coordinated-discarding-of-RAM-with-g.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - Resolves: RHEL-15710
    ([Intel 9.7 FEAT] TDX: QEMU Support)
  - Resolves: RHEL-20798
    ([Intel 9.6 FEAT] TDX: host: Virt-QEMU: Add safe device pass-through for TD)
  - Resolves: RHEL-49728
    ([Intel 9.7 FEAT] Virt-QEMU: TDX: Allow to configure apic bus clock)


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-28
changelog:
  - kvm-target-i386-Expose-IBPB-BRTYPE-and-SBPB-CPUID-bits-t.patch [RHEL-17614]
  - Resolves: RHEL-17614
    (VM reports Vulnerable to spec_rstack_overflow when reading status in '/sys/devices/system/cpu/vulnerabilities/')


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-8
changelog:
  - kvm-Disable-TPM-passthrough.patch [bz#1978911]
  - kvm-redhat-Replace-the-kvm-setup.service-with-a-etc-modu.patch [bz#1978837]
  - Resolves: bz#1978911
    (Remove TPM Passthrough option from RHEL 9)
  - Resolves: bz#1978837
    (Remove/replace kvm-setup.service)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-9
changelog:
  - kvm-s390x-cpumodel-add-3931-and-3932.patch [bz#1932191]
  - kvm-spapr-Fix-EEH-capability-issue-on-KVM-guest-for-PCI-.patch [bz#1957194]
  - kvm-ppc-pef.c-initialize-cgs-ready-in-kvmppc_svm_init.patch [bz#1957194]
  - kvm-redhat-Move-qemu-kvm-docs-dependency-to-qemu-kvm.patch [bz#1957194]
  - kvm-redhat-introducting-qemu-kvm-hw-usbredir.patch [bz#1957194]
  - kvm-redhat-use-the-standard-vhost-user-JSON-path.patch [bz#1957194]
  - Resolves: bz#1932191
    ([IBM 9.0 FEAT] CPU Model for new IBM Z Hardware - qemu part (kvm))
  - Resolves: bz#1957194
    (Synchronize RHEL-AV 8.5.0 changes to RHEL 9.0.0 Beta)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-10
changelog:
  - kvm-s390x-css-Introduce-an-ESW-struct.patch [bz#1957194]
  - kvm-s390x-css-Split-out-the-IRB-sense-data.patch [bz#1957194]
  - kvm-s390x-css-Refactor-IRB-construction.patch [bz#1957194]
  - kvm-s390x-css-Add-passthrough-IRB.patch [bz#1957194]
  - kvm-vhost-user-blk-Fail-gracefully-on-too-large-queue-si.patch [bz#1957194]
  - kvm-vhost-user-blk-Make-sure-to-set-Error-on-realize-fai.patch [bz#1957194]
  - kvm-vhost-user-blk-Don-t-reconnect-during-initialisation.patch [bz#1957194]
  - kvm-vhost-user-blk-Improve-error-reporting-in-realize.patch [bz#1957194]
  - kvm-vhost-user-blk-Get-more-feature-flags-from-vhost-dev.patch [bz#1957194]
  - kvm-virtio-Fail-if-iommu_platform-is-requested-but-unsup.patch [bz#1957194]
  - kvm-vhost-user-blk-Check-that-num-queues-is-supported-by.patch [bz#1957194]
  - kvm-vhost-user-Fix-backends-without-multiqueue-support.patch [bz#1957194]
  - kvm-file-posix-fix-max_iov-for-dev-sg-devices.patch [bz#1957194]
  - kvm-scsi-generic-pass-max_segments-via-max_iov-field-in-.patch [bz#1957194]
  - kvm-osdep-provide-ROUND_DOWN-macro.patch [bz#1957194]
  - kvm-block-backend-align-max_transfer-to-request-alignmen.patch [bz#1957194]
  - kvm-block-add-max_hw_transfer-to-BlockLimits.patch [bz#1957194]
  - kvm-file-posix-try-BLKSECTGET-on-block-devices-too-do-no.patch [bz#1957194]
  - kvm-block-Add-option-to-use-driver-whitelist-even-in-too.patch [bz#1957782]
  - kvm-spec-Restrict-block-drivers-in-tools.patch [bz#1957782]
  - kvm-Move-tools-to-separate-package.patch [bz#1972285]
  - kvm-Split-qemu-pr-helper-to-separate-package.patch [bz#1972300]
  - kvm-spec-RPM_BUILD_ROOT-buildroot.patch [bz#1973029]
  - kvm-spec-More-use-of-name-instead-of-qemu-kvm.patch [bz#1973029]
  - kvm-spec-Use-qemu-pr-helper.service-from-qemu.git.patch [bz#1973029]
  - kvm-spec-Use-_sourcedir-for-referencing-sources.patch [bz#1973029]
  - kvm-spec-Add-tools_only.patch [bz#1973029]
  - kvm-spec-build-Add-run_configure-helper.patch [bz#1973029]
  - kvm-spec-build-Disable-more-bits-with-disable_everything.patch [bz#1973029]
  - kvm-spec-build-Add-macros-for-some-configure-parameters.patch [bz#1973029]
  - kvm-spec-files-Move-qemu-guest-agent-and-qemu-img-earlie.patch [bz#1973029]
  - kvm-spec-install-Remove-redundant-bits.patch [bz#1973029]
  - kvm-spec-install-Add-modprobe_kvm_conf-macro.patch [bz#1973029]
  - kvm-spec-install-Remove-qemu-guest-agent-etc-qemu-kvm-us.patch [bz#1973029]
  - kvm-spec-install-clean-up-qemu-ga-section.patch [bz#1973029]
  - kvm-spec-install-Use-a-single-tools_only-section.patch [bz#1973029]
  - kvm-spec-Make-tools_only-not-cross-spec-sections.patch [bz#1973029]
  - kvm-spec-install-Limit-time-spent-in-qemu_kvm_build.patch [bz#1973029]
  - kvm-spec-misc-syntactic-merges-with-Fedora.patch [bz#1973029]
  - kvm-spec-Use-Fedora-s-pattern-for-specifying-rc-version.patch [bz#1973029]
  - kvm-spec-files-don-t-use-fine-grained-docs-file-list.patch [bz#1973029]
  - kvm-spec-files-Add-licenses-to-qemu-common-too.patch [bz#1973029]
  - kvm-spec-install-Drop-python3-shebang-fixup.patch [bz#1973029]
  - Resolves: bz#1957194
    (Synchronize RHEL-AV 8.5.0 changes to RHEL 9.0.0 Beta)
  - Resolves: bz#1957782
    (VMDK support should be read-only)
  - Resolves: bz#1972285
    (Split out a qemu-kvm-tools subpackage)
  - Resolves: bz#1972300
    (Split out a qemu-pr-helper subpackage)
  - Resolves: bz#1973029
    (Spec file cleanups)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-11
changelog:
  - kvm-arm-virt-Register-iommu-as-a-class-property.patch [bz#1838608]
  - kvm-arm-virt-Register-its-as-a-class-property.patch [bz#1838608]
  - kvm-arm-virt-Enable-ARM-RAS-support.patch [bz#1838608]
  - kvm-block-Fix-in_flight-leak-in-request-padding-error-pa.patch [bz#1972079]
  - kvm-spec-Remove-buildldflags.patch [bz#1973029]
  - kvm-spec-Use-make_build-macro.patch [bz#1973029]
  - kvm-spec-Drop-make-install-sharedir-and-datadir-usage.patch [bz#1973029]
  - kvm-spec-use-make_install-macro.patch [bz#1973029]
  - kvm-spec-parallelize-make-check.patch [bz#1973029]
  - kvm-spec-Drop-explicit-build-id.patch [bz#1973029]
  - kvm-spec-use-build_ldflags.patch [bz#1973029]
  - kvm-Move-virtiofsd-to-separate-package.patch [bz#1979728]
  - kvm-Utilize-firmware-configure-option.patch [bz#1980139]
  - Resolves: bz#1838608
    (aarch64: Enable ARMv8 RAS virtualization support)
  - Resolves: bz#1972079
    (Windows Installation blocked on 4k disk when using blk+raw+iothread)
  - Resolves: bz#1973029
    (Spec file cleanups)
  - Resolves: bz#1979728
    (Split out virtiofsd subpackage)
  - Resolves: bz#1980139
    (Use configure --firmwarepath more)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-12.el9
changelog:
  - kvm-migration-Move-yank-outside-qemu_start_incoming_migr.patch [bz#1974683]
  - kvm-migration-Allow-reset-of-postcopy_recover_triggered-.patch [bz#1974683]
  - kvm-Remove-RHEL-7.0.0-machine-type.patch [bz#1968519]
  - kvm-Remove-RHEL-7.1.0-machine-type.patch [bz#1968519]
  - kvm-Remove-RHEL-7.2.0-machine-type.patch [bz#1968519]
  - kvm-Remove-RHEL-7.3.0-machine-types.patch [bz#1968519]
  - kvm-Remove-RHEL-7.4.0-machine-types.patch [bz#1968519]
  - kvm-Remove-RHEL-7.5.0-machine-types.patch [bz#1968519]
  - kvm-acpi-pc-revert-back-to-v5.2-PCI-slot-enumeration.patch [bz#1957194]
  - kvm-migration-failover-reset-partially_hotplugged.patch [bz#1957194]
  - kvm-hmp-Fix-loadvm-to-resume-the-VM-on-success-instead-o.patch [bz#1957194]
  - kvm-migration-Move-bitmap_mutex-out-of-migration_bitmap_.patch [bz#1957194]
  - kvm-i386-cpu-Expose-AVX_VNNI-instruction-to-guest.patch [bz#1957194]
  - kvm-ratelimit-protect-with-a-mutex.patch [bz#1957194]
  - kvm-Update-Linux-headers-to-5.13-rc4.patch [bz#1957194]
  - kvm-i386-Add-ratelimit-for-bus-locks-acquired-in-guest.patch [bz#1957194]
  - kvm-iothread-generalize-iothread_set_param-iothread_get_.patch [bz#1957194]
  - kvm-iothread-add-aio-max-batch-parameter.patch [bz#1957194]
  - kvm-linux-aio-limit-the-batch-size-using-aio-max-batch-p.patch [bz#1957194]
  - kvm-block-nvme-Fix-VFIO_MAP_DMA-failed-No-space-left-on-.patch [bz#1957194]
  - kvm-migration-move-wait-unplug-loop-to-its-own-function.patch [bz#1957194]
  - kvm-migration-failover-continue-to-wait-card-unplug-on-e.patch [bz#1957194]
  - kvm-aarch64-Add-USB-storage-devices.patch [bz#1957194]
  - kvm-iotests-Improve-and-rename-test-291-to-qemu-img-bitm.patch [bz#1957194]
  - kvm-qemu-img-Fail-fast-on-convert-bitmaps-with-inconsist.patch [bz#1957194]
  - kvm-qemu-img-Add-skip-broken-bitmaps-for-convert-bitmaps.patch [bz#1957194]
  - kvm-audio-Never-send-migration-section.patch [bz#1957194]
  - kvm-pc-bios-s390-ccw-bootmap-Silence-compiler-warning-fr.patch [bz#1939509 bz#1940132]
  - kvm-pc-bios-s390-ccw-Use-reset_psw-pointer-instead-of-ha.patch [bz#1939509 bz#1940132]
  - kvm-pc-bios-s390-ccw-netboot-Use-Wl-prefix-to-pass-param.patch [bz#1939509 bz#1940132]
  - kvm-pc-bios-s390-ccw-Silence-warning-from-Clang-by-marki.patch [bz#1939509 bz#1940132]
  - kvm-pc-bios-s390-ccw-Fix-the-cc-option-macro-in-the-Make.patch [bz#1939509 bz#1940132]
  - kvm-pc-bios-s390-ccw-Silence-GCC-11-stringop-overflow-wa.patch [bz#1939509 bz#1940132]
  - kvm-pc-bios-s390-ccw-Allow-building-with-Clang-too.patch [bz#1939509 bz#1940132]
  - kvm-pc-bios-s390-ccw-Fix-inline-assembly-for-older-versi.patch [bz#1939509 bz#1940132]
  - kvm-configure-Fix-endianess-test-with-LTO.patch [bz#1939509 bz#1940132]
  - kvm-spec-Switch-toolchain-to-Clang-LLVM.patch [bz#1939509 bz#1940132]
  - kvm-spec-Use-safe-stack-for-x86_64.patch [bz#1939509 bz#1940132]
  - kvm-spec-Reenable-write-support-for-VMDK-etc.-in-tools.patch [bz#1989841]
  - Resolves: bz#1974683
    (Fail to set migrate incoming for 2nd time after the first time failed)
  - Resolves: bz#1968519
    (Remove all the old 7.0-7.5 machine types)
  - Resolves: bz#1957194
    (Synchronize RHEL-AV 8.5.0 changes to RHEL 9.0.0 Beta)
  - Resolves: bz#1939509
    (QEMU: enable SafeStack)
  - Resolves: bz#1940132
    (QEMU: switch build toolchain to Clang/LLVM)
  - Resolves: bz#1989841
    (RFE: qemu-img cannot convert images into vmdk and vpc formats)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-13
changelog:
  - kvm-qcow2-Deprecation-warning-when-opening-v2-images-rw.patch [bz#1951814]
  - kvm-disable-ac97-audio.patch [bz#1995819]
  - kvm-redhat-Disable-LTO-on-non-x86-architectures.patch [bz#1950192]
  - kvm-redhat-Enable-the-test-block-iothread-test-again.patch [bz#1950192]
  - Resolves: bz#1951814
    (RFE: Warning when using qcow2-v2 (compat=0.10))
  - Resolves: bz#1995819
    (RFE: Remove ac97 audio support from QEMU)
  - Resolves: bz#1950192
    (RHEL9: when ioeventfd=off and 8.4guest, (qemu) qemu-kvm: ../util/qemu-coroutine-lock.c:57: qemu_co_queue_wait_impl: Assertion `qemu_in_coroutine()' failed.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.1.0-2
changelog:
  - kvm-hw-arm-virt-Remove-9.0-machine-type.patch [bz#2002937]
  - kvm-remove-sgabios-dependency.patch [bz#2000845]
  - kvm-enable-pulseaudio.patch [bz#1997725]
  - kvm-spec-disable-use-of-gcrypt-for-crypto-backends-in-fa.patch [bz#1990068]
  - Resolves: bz#2002937
    ([qemu][aarch64] Remove 9.0 machine types in arm virt for 9-Beta)
  - Resolves: bz#2000845
    (RFE: Remove SGA, deprecate cirrus, and set defaults for QEMU machine-types in RHEL9)
  - Resolves: bz#1997725
    (RFE: enable pulseaudio backend on QEMU)
  - Resolves: bz#1990068
    (Disable use of gcrypt for crypto backends in favour of gnutls)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.1.0-3
changelog:
  - kvm-disable-sga-device.patch [bz#2000845]
  - kvm-tools-virtiofsd-Add-fstatfs64-syscall-to-the-seccomp.patch [bz#2005026]
  - Resolves: bz#2000845
    (RFE: Remove SGA, deprecate cirrus, and set defaults for QEMU machine-types in RHEL9)
  - Resolves: bz#2005026
    ([s390][virtio-fs] Umount virtiofs shared folder failure from guest side [rhel-9.0.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-4
changelog:
  - kvm-qapi-machine.json-Add-cluster-id.patch [bz#2041823]
  - kvm-qtest-numa-test-Specify-CPU-topology-in-aarch64_numa.patch [bz#2041823]
  - kvm-hw-arm-virt-Consider-SMP-configuration-in-CPU-topolo.patch [bz#2041823]
  - kvm-qtest-numa-test-Correct-CPU-and-NUMA-association-in-.patch [bz#2041823]
  - kvm-hw-arm-virt-Fix-CPU-s-default-NUMA-node-ID.patch [bz#2041823]
  - kvm-hw-acpi-aml-build-Use-existing-CPU-topology-to-build.patch [bz#2041823]
  - kvm-coroutine-Rename-qemu_coroutine_inc-dec_pool_size.patch [bz#2079938]
  - kvm-coroutine-Revert-to-constant-batch-size.patch [bz#2079938]
  - kvm-virtio-scsi-fix-ctrl-and-event-handler-functions-in-.patch [bz#2079347]
  - kvm-virtio-scsi-don-t-waste-CPU-polling-the-event-virtqu.patch [bz#2079347]
  - kvm-virtio-scsi-clean-up-virtio_scsi_handle_event_vq.patch [bz#2079347]
  - kvm-virtio-scsi-clean-up-virtio_scsi_handle_ctrl_vq.patch [bz#2079347]
  - kvm-virtio-scsi-clean-up-virtio_scsi_handle_cmd_vq.patch [bz#2079347]
  - kvm-virtio-scsi-move-request-related-items-from-.h-to-.c.patch [bz#2079347]
  - kvm-Revert-virtio-scsi-Reject-scsi-cd-if-data-plane-enab.patch [bz#1995710]
  - kvm-migration-Fix-operator-type.patch [bz#2064530]
  - Resolves: bz#2041823
    ([aarch64][numa] When there are at least 6 Numa nodes serial log shows 'arch topology borken')
  - Resolves: bz#2079938
    (qemu coredump when boot with multi disks (qemu) failed to set up stack guard page: Cannot allocate memory)
  - Resolves: bz#2079347
    (Guest boot blocked when scsi disks using same iothread and 100% CPU consumption)
  - Resolves: bz#1995710
    (RFE: Allow virtio-scsi CD-ROM media change with IOThreads)
  - Resolves: bz#2064530
    (Rebuild qemu-kvm with clang-14)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-5
changelog:
  - kvm-qemu-nbd-Pass-max-connections-to-blockdev-layer.patch [bz#1708300]
  - kvm-nbd-server-Allow-MULTI_CONN-for-shared-writable-expo.patch [bz#1708300]
  - Resolves: bz#1708300
    (RFE: qemu-nbd vs NBD_FLAG_CAN_MULTI_CONN)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-6
changelog:
  - kvm-Introduce-event-loop-base-abstract-class.patch [bz#2031024]
  - kvm-util-main-loop-Introduce-the-main-loop-into-QOM.patch [bz#2031024]
  - kvm-util-event-loop-base-Introduce-options-to-set-the-th.patch [bz#2031024]
  - kvm-qcow2-Improve-refcount-structure-rebuilding.patch [bz#2072379]
  - kvm-iotests-108-Test-new-refcount-rebuild-algorithm.patch [bz#2072379]
  - kvm-qcow2-Add-errp-to-rebuild_refcount_structure.patch [bz#2072379]
  - kvm-iotests-108-Fix-when-missing-user_allow_other.patch [bz#2072379]
  - kvm-virtio-net-setup-vhost_dev-and-notifiers-for-cvq-onl.patch [bz#2070804]
  - kvm-virtio-net-align-ctrl_vq-index-for-non-mq-guest-for-.patch [bz#2070804]
  - kvm-vhost-vdpa-fix-improper-cleanup-in-net_init_vhost_vd.patch [bz#2070804]
  - kvm-vhost-net-fix-improper-cleanup-in-vhost_net_start.patch [bz#2070804]
  - kvm-vhost-vdpa-backend-feature-should-set-only-once.patch [bz#2070804]
  - kvm-vhost-vdpa-change-name-and-polarity-for-vhost_vdpa_o.patch [bz#2070804]
  - kvm-virtio-net-don-t-handle-mq-request-in-userspace-hand.patch [bz#2070804]
  - kvm-Revert-globally-limit-the-maximum-number-of-CPUs.patch [bz#2094270]
  - kvm-vfio-common-remove-spurious-warning-on-vfio_listener.patch [bz#2086262]
  - Resolves: bz#2031024
    (Add support for fixing thread pool size [QEMU])
  - Resolves: bz#2072379
    (Fail to rebuild the reference count tables of qcow2 image on host block devices (e.g. LVs))
  - Resolves: bz#2070804
    (PXE boot crash qemu when using multiqueue vDPA)
  - Resolves: bz#2094270
    (Do not set the hard vCPU limit to the soft vCPU limit in downstream qemu-kvm anymore)
  - Resolves: bz#2086262
    ([Win11][tpm]vfio_listener_region_del received unaligned region)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-7
changelog:
  - kvm-coroutine-ucontext-use-QEMU_DEFINE_STATIC_CO_TLS.patch [bz#1952483]
  - kvm-coroutine-use-QEMU_DEFINE_STATIC_CO_TLS.patch [bz#1952483]
  - kvm-coroutine-win32-use-QEMU_DEFINE_STATIC_CO_TLS.patch [bz#1952483]
  - kvm-Enable-virtio-iommu-pci-on-x86_64.patch [bz#2094252]
  - kvm-linux-aio-fix-unbalanced-plugged-counter-in-laio_io_.patch [bz#2092788]
  - kvm-linux-aio-explain-why-max-batch-is-checked-in-laio_i.patch [bz#2092788]
  - Resolves: bz#1952483
    (RFE: QEMU's coroutines fail with CFLAGS=-flto on non-x86_64 architectures)
  - Resolves: bz#2094252
    (Compile the virtio-iommu device on x86_64)
  - Resolves: bz#2092788
    (Stalled IO Operations in VM)


author: Camilla Conte <cconte@redhat.com> - 7.0.0-8
changelog:
  - kvm-tests-avocado-update-aarch64_virt-test-to-exercise-c.patch [bz#2060839]
  - kvm-RHEL-only-tests-avocado-Switch-aarch64-tests-from-a5.patch [bz#2060839]
  - kvm-RHEL-only-AArch64-Drop-unsupported-CPU-types.patch [bz#2060839]
  - kvm-target-i386-deprecate-CPUs-older-than-x86_64-v2-ABI.patch [bz#2060839]
  - kvm-target-s390x-deprecate-CPUs-older-than-z14.patch [bz#2060839]
  - kvm-target-arm-deprecate-named-CPU-models.patch [bz#2060839]
  - kvm-meson.build-Fix-docker-test-build-alpine-when-includ.patch [bz#1968509]
  - kvm-QIOChannel-Add-flags-on-io_writev-and-introduce-io_f.patch [bz#1968509]
  - kvm-QIOChannelSocket-Implement-io_writev-zero-copy-flag-.patch [bz#1968509]
  - kvm-migration-Add-zero-copy-send-parameter-for-QMP-HMP-f.patch [bz#1968509]
  - kvm-migration-Add-migrate_use_tls-helper.patch [bz#1968509]
  - kvm-multifd-multifd_send_sync_main-now-returns-negative-.patch [bz#1968509]
  - kvm-multifd-Send-header-packet-without-flags-if-zero-cop.patch [bz#1968509]
  - kvm-multifd-Implement-zero-copy-write-in-multifd-migrati.patch [bz#1968509]
  - kvm-QIOChannelSocket-Introduce-assert-and-reduce-ifdefs-.patch [bz#1968509]
  - kvm-QIOChannelSocket-Fix-zero-copy-send-so-socket-flush-.patch [bz#1968509]
  - kvm-migration-Change-zero_copy_send-from-migration-param.patch [bz#1968509]
  - kvm-migration-Allow-migrate-recover-to-run-multiple-time.patch [bz#2096143]
  - Resolves: bz#2060839
    (Consider deprecating CPU models like "kvm64" / "qemu64" on RHEL 9)
  - Resolves: bz#1968509
    (Use MSG_ZEROCOPY on QEMU Live Migration)
  - Resolves: bz#2096143
    (The migration port is not released if use it again for recovering postcopy migration)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-9
changelog:
  - kvm-virtio-iommu-Add-bypass-mode-support-to-assigned-dev.patch [bz#2100106]
  - kvm-virtio-iommu-Use-recursive-lock-to-avoid-deadlock.patch [bz#2100106]
  - kvm-virtio-iommu-Add-an-assert-check-in-translate-routin.patch [bz#2100106]
  - kvm-virtio-iommu-Fix-the-partial-copy-of-probe-request.patch [bz#2100106]
  - kvm-virtio-iommu-Fix-migration-regression.patch [bz#2100106]
  - kvm-pc-bios-s390-ccw-virtio-Introduce-a-macro-for-the-DA.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-bootmap-Improve-the-guessing-logic-.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Simplify-fix-virtio_i.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Remove-virtio_assume_.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-Set-missing-status-bits-whil.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-Read-device-config-after-fea.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-Beautify-the-code-for-readin.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-Split-virtio-scsi-code-from-virtio_.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Request-the-right-fea.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-netboot.mak-Ignore-Clang-s-warnings.patch [bz#2098077]
  - kvm-hw-block-fdc-Prevent-end-of-track-overrun-CVE-2021-3.patch [bz#1951522]
  - kvm-tests-qtest-fdc-test-Add-a-regression-test-for-CVE-2.patch [bz#1951522]
  - Resolves: bz#2100106
    (Fix virtio-iommu/vfio bypass)
  - Resolves: bz#2098077
    (virtio-blk: Can't boot fresh installation from used virtio-blk dasd disk under certain conditions)
  - Resolves: bz#1951522
    (CVE-2021-3507 qemu-kvm: QEMU: fdc: heap buffer overflow in DMA read data transfers [rhel-9.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-10
changelog:
  - kvm-vhost-Track-descriptor-chain-in-private-at-SVQ.patch [bz#1939363]
  - kvm-vhost-Fix-device-s-used-descriptor-dequeue.patch [bz#1939363]
  - kvm-hw-virtio-Replace-g_memdup-by-g_memdup2.patch [bz#1939363]
  - kvm-vhost-Fix-element-in-vhost_svq_add-failure.patch [bz#1939363]
  - kvm-meson-create-have_vhost_-variables.patch [bz#1939363]
  - kvm-meson-use-have_vhost_-variables-to-pick-sources.patch [bz#1939363]
  - kvm-vhost-move-descriptor-translation-to-vhost_svq_vring.patch [bz#1939363]
  - kvm-virtio-net-Expose-MAC_TABLE_ENTRIES.patch [bz#1939363]
  - kvm-virtio-net-Expose-ctrl-virtqueue-logic.patch [bz#1939363]
  - kvm-vdpa-Avoid-compiler-to-squash-reads-to-used-idx.patch [bz#1939363]
  - kvm-vhost-Reorder-vhost_svq_kick.patch [bz#1939363]
  - kvm-vhost-Move-vhost_svq_kick-call-to-vhost_svq_add.patch [bz#1939363]
  - kvm-vhost-Check-for-queue-full-at-vhost_svq_add.patch [bz#1939363]
  - kvm-vhost-Decouple-vhost_svq_add-from-VirtQueueElement.patch [bz#1939363]
  - kvm-vhost-Add-SVQDescState.patch [bz#1939363]
  - kvm-vhost-Track-number-of-descs-in-SVQDescState.patch [bz#1939363]
  - kvm-vhost-add-vhost_svq_push_elem.patch [bz#1939363]
  - kvm-vhost-Expose-vhost_svq_add.patch [bz#1939363]
  - kvm-vhost-add-vhost_svq_poll.patch [bz#1939363]
  - kvm-vhost-Add-svq-avail_handler-callback.patch [bz#1939363]
  - kvm-vdpa-Export-vhost_vdpa_dma_map-and-unmap-calls.patch [bz#1939363]
  - kvm-vhost-net-vdpa-add-stubs-for-when-no-virtio-net-devi.patch [bz#1939363]
  - kvm-vdpa-manual-forward-CVQ-buffers.patch [bz#1939363]
  - kvm-vdpa-Buffer-CVQ-support-on-shadow-virtqueue.patch [bz#1939363]
  - kvm-vdpa-Extract-get-features-part-from-vhost_vdpa_get_m.patch [bz#1939363]
  - kvm-vdpa-Add-device-migration-blocker.patch [bz#1939363]
  - kvm-vdpa-Add-x-svq-to-NetdevVhostVDPAOptions.patch [bz#1939363]
  - kvm-redhat-Update-linux-headers-linux-kvm.h-to-v5.18-rc6.patch [bz#2111994]
  - kvm-target-s390x-kvm-Honor-storage-keys-during-emulation.patch [bz#2111994]
  - kvm-kvm-don-t-use-perror-without-useful-errno.patch [bz#2095608]
  - kvm-multifd-Copy-pages-before-compressing-them-with-zlib.patch [bz#2099934]
  - kvm-Revert-migration-Simplify-unqueue_page.patch [bz#2099934]
  - Resolves: bz#1939363
    (vDPA control virtqueue support in Qemu)
  - Resolves: bz#2111994
    (RHEL9: skey test in kvm_unit_test got failed)
  - Resolves: bz#2095608
    (Please correct the error message when try to start qemu with "-M kernel-irqchip=split")
  - Resolves: bz#2099934
    (Guest reboot on destination host after postcopy migration completed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-11
changelog:
  - kvm-QIOChannelSocket-Fix-zero-copy-flush-returning-code-.patch [bz#2107466]
  - kvm-Add-dirty-sync-missed-zero-copy-migration-stat.patch [bz#2107466]
  - kvm-migration-multifd-Report-to-user-when-zerocopy-not-w.patch [bz#2107466]
  - kvm-migration-Avoid-false-positive-on-non-supported-scen.patch [bz#2107466]
  - kvm-migration-add-remaining-params-has_-true-in-migratio.patch [bz#2107466]
  - kvm-QIOChannelSocket-Add-support-for-MSG_ZEROCOPY-IPV6.patch [bz#2107466]
  - kvm-pc-bios-s390-ccw-Fix-booting-with-logical-block-size.patch [bz#2112303]
  - kvm-vdpa-Fix-bad-index-calculus-at-vhost_vdpa_get_vring_.patch [bz#2116876]
  - kvm-vdpa-Fix-index-calculus-at-vhost_vdpa_svqs_start.patch [bz#2116876]
  - kvm-vdpa-Fix-memory-listener-deletions-of-iova-tree.patch [bz#2116876]
  - kvm-vdpa-Fix-file-descriptor-leak-on-get-features-error.patch [bz#2116876]
  - Resolves: bz#2107466
    (zerocopy capability can be enabled when set migrate capabilities with multifd and compress/xbzrle together)
  - Resolves: bz#2112303
    (virtio-blk: Can't boot fresh installation from used 512 cluster_size image under certain conditions)
  - Resolves: bz#2116876
    (Fixes for vDPA control virtqueue support in Qemu)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.1.0-2
changelog:
  - kvm-vdpa-Skip-the-maps-not-in-the-iova-tree.patch [RHELX-57]
  - kvm-vdpa-do-not-save-failed-dma-maps-in-SVQ-iova-tree.patch [RHELX-57]
  - kvm-util-accept-iova_tree_remove_parameter-by-value.patch [RHELX-57]
  - kvm-vdpa-Remove-SVQ-vring-from-iova_tree-at-shutdown.patch [RHELX-57]
  - kvm-vdpa-Make-SVQ-vring-unmapping-return-void.patch [RHELX-57]
  - kvm-vhost-Always-store-new-kick-fd-on-vhost_svq_set_svq_.patch [RHELX-57]
  - kvm-vdpa-Use-ring-hwaddr-at-vhost_vdpa_svq_unmap_ring.patch [RHELX-57]
  - kvm-vhost-stop-transfer-elem-ownership-in-vhost_handle_g.patch [RHELX-57]
  - kvm-vhost-use-SVQ-element-ndescs-instead-of-opaque-data-.patch [RHELX-57]
  - kvm-vhost-Delete-useless-read-memory-barrier.patch [RHELX-57]
  - kvm-vhost-Do-not-depend-on-NULL-VirtQueueElement-on-vhos.patch [RHELX-57]
  - kvm-vhost_net-Add-NetClientInfo-start-callback.patch [RHELX-57]
  - kvm-vhost_net-Add-NetClientInfo-stop-callback.patch [RHELX-57]
  - kvm-vdpa-add-net_vhost_vdpa_cvq_info-NetClientInfo.patch [RHELX-57]
  - kvm-vdpa-Move-command-buffers-map-to-start-of-net-device.patch [RHELX-57]
  - kvm-vdpa-extract-vhost_vdpa_net_cvq_add-from-vhost_vdpa_.patch [RHELX-57]
  - kvm-vhost_net-add-NetClientState-load-callback.patch [RHELX-57]
  - kvm-vdpa-Add-virtio-net-mac-address-via-CVQ-at-start.patch [RHELX-57]
  - kvm-vdpa-Delete-CVQ-migration-blocker.patch [RHELX-57]
  - kvm-vdpa-Make-VhostVDPAState-cvq_cmd_in_buffer-control-a.patch [RHELX-57]
  - kvm-vdpa-extract-vhost_vdpa_net_load_mac-from-vhost_vdpa.patch [RHELX-57]
  - kvm-vdpa-Add-vhost_vdpa_net_load_mq.patch [RHELX-57]
  - kvm-vdpa-validate-MQ-CVQ-commands.patch [RHELX-57]
  - kvm-virtio-net-Update-virtio-net-curr_queue_pairs-in-vdp.patch [RHELX-57]
  - kvm-vdpa-Allow-MQ-feature-in-SVQ.patch [RHELX-57]
  - kvm-i386-reset-KVM-nested-state-upon-CPU-reset.patch [bz#2125281]
  - kvm-i386-do-kvm_put_msr_feature_control-first-thing-when.patch [bz#2125281]
  - kvm-Revert-Re-enable-capstone-internal-build.patch [bz#2127825]
  - kvm-spec-Use-capstone-package.patch [bz#2127825]
  - Resolves: RHELX-57
    (vDPA SVQ Multiqueue support )
  - Resolves: bz#2125281
    ([RHEL9.1] Guests in VMX root operation fail to reboot with QEMU's 'system_reset' command [rhel-9.2.0])
  - Resolves: bz#2127825
    (Use capstone for qemu-kvm build)


author: Jon Maloy <jmaloy@redhat.com> - 7.1.0-3
changelog:
  - kvm-target-i386-kvm-fix-kvmclock_current_nsec-Assertion-.patch [bz#2108531]
  - Resolves: bz#2108531
    (Windows guest reboot after migration with wsl2 installed inside)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.1.0-4
changelog:
  - kvm-Revert-intel_iommu-Fix-irqchip-X2APIC-configuration-.patch [bz#2126095]
  - Resolves: bz#2126095
    ([rhel9.2][intel_iommu]Booting guest with "-device intel-iommu,intremap=on,device-iotlb=on,caching-mode=on" causes kernel call trace)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.1.0-5
changelog:
  - kvm-rtl8139-Remove-unused-variable.patch [bz#2141218]
  - kvm-qemu-img-remove-unused-variable.patch [bz#2141218]
  - kvm-host-libusb-Remove-unused-variable.patch [bz#2141218]
  - Resolves: bz#2141218
    (qemu-kvm build fails with clang 15.0.1 due to false unused variable error)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.1.0-6
changelog:
  - kvm-block-move-bdrv_qiov_is_aligned-to-file-posix.patch [bz#2143170]
  - kvm-block-use-the-request-length-for-iov-alignment.patch [bz#2143170]
  - Resolves: bz#2143170
    (The installation can not start when install files (iso) locate on a 4k disk)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-2
changelog:
  - kvm-redhat-Add-rhel8.6.0-and-rhel9.0.0-machine-types-for.patch [bz#2008060]
  - kvm-redhat-Enable-virtio-mem-as-tech-preview-on-x86-64.patch [bz#2014484]
  - Resolves: bz#2008060
    (Fix CPU Model for new IBM Z Hardware - qemu part)
  - Resolves: bz#2014484
    ([RHEL9] Enable virtio-mem as tech-preview on x86-64 - QEMU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-3
changelog:
  - kvm-hw-arm-virt-Register-iommu-as-a-class-property.patch [bz#2031044]
  - kvm-hw-arm-virt-Register-its-as-a-class-property.patch [bz#2031044]
  - kvm-hw-arm-virt-Rename-default_bus_bypass_iommu.patch [bz#2031044]
  - kvm-hw-arm-virt-Expose-the-RAS-option.patch [bz#2031044]
  - kvm-hw-arm-virt-Add-9.0-machine-type-and-remove-8.5-one.patch [bz#2031044]
  - kvm-hw-arm-virt-Check-no_tcg_its-and-minor-style-changes.patch [bz#2031044]
  - Resolves: bz#2031044
    (Add rhel-9.0.0 machine types for RHEL 9.0 [aarch64])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-4
changelog:
  - kvm-block-nvme-fix-infinite-loop-in-nvme_free_req_queue_.patch [bz#2024544]
  - kvm-rhel-machine-types-x86-set-prefer_sockets.patch [bz#2028623]
  - Resolves: bz#2024544
    (Fio workers hangs when running fio with 32 jobs iodepth 32 and QEMU's userspace NVMe driver)
  - Resolves: bz#2028623
    ([9.0] machine types: 6.2: Fix prefer_sockets)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-5
changelog:
  - kvm-x86-Add-q35-RHEL-8.6.0-machine-type.patch [bz#1945666]
  - kvm-x86-Add-q35-RHEL-9.0.0-machine-type.patch [bz#1945666]
  - kvm-softmmu-fix-device-deletion-events-with-device-JSON-.patch [bz#2036669]
  - Resolves: bz#1945666
    (9.0: x86 machine types)
  - Resolves: bz#2036669
    (DEVICE_DELETED event is not delivered for device frontend if -device is configured via JSON)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-6
changelog:
  - Moving feature support out of qemu-kvm-core to separate packages (can
    cause loss of functionality when using only qemu-kvm-core - qemu-kvm keeps
    same feature set).
  - kvm-spec-Rename-qemu-kvm-hw-usbredir-to-qemu-kvm-device-.patch [bz#2022847]
  - kvm-spec-Split-qemu-kvm-ui-opengl.patch [bz#2022847]
  - kvm-spec-Introduce-packages-for-virtio-gpu-modules.patch [bz#2022847]
  - kvm-spec-Introduce-device-display-virtio-vga-packages.patch [bz#2022847]
  - kvm-spec-Move-usb-host-module-to-separate-package.patch [bz#2022847]
  - kvm-spec-Move-qtest-accel-module-to-tests-package.patch [bz#2022847]
  - kvm-spec-Extend-qemu-kvm-core-description.patch [bz#2022847]
  - Resolves: bz#2022847
    (qemu-kvm: Align package split with Fedora)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-7
changelog:
  - kvm-qemu-storage-daemon-Add-vhost-user-blk-help.patch [bz#1962088]
  - kvm-qemu-storage-daemon-Fix-typo-in-vhost-user-blk-help.patch [bz#1962088]
  - kvm-virtiofsd-Drop-membership-of-all-supplementary-group.patch [bz#2046201]
  - kvm-block-rbd-fix-handling-of-holes-in-.bdrv_co_block_st.patch [bz#2034791]
  - kvm-block-rbd-workaround-for-ceph-issue-53784.patch [bz#2034791]
  - Resolves: bz#1962088
    ([QSD] wrong help message for the fuse)
  - Resolves: bz#2046201
    (CVE-2022-0358 qemu-kvm: QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405 [rhel-9.0])
  - Resolves: bz#2034791
    (Booting from Local Snapshot Core Dumped Whose Backing File Is Based on RBD)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-8
changelog:
  - kvm-numa-Enable-numa-for-SGX-EPC-sections.patch [bz#2033708]
  - kvm-numa-Support-SGX-numa-in-the-monitor-and-Libvirt-int.patch [bz#2033708]
  - kvm-doc-Add-the-SGX-numa-description.patch [bz#2033708]
  - kvm-Enable-SGX-RH-Only.patch [bz#2033708]
  - kvm-qapi-Cleanup-SGX-related-comments-and-restore-sectio.patch [bz#2033708]
  - kvm-block-io-Update-BSC-only-if-want_zero-is-true.patch [bz#2041461]
  - kvm-iotests-block-status-cache-New-test.patch [bz#2041461]
  - kvm-iotests-Test-qemu-img-convert-of-zeroed-data-cluster.patch [bz#1882917]
  - kvm-qemu-img-make-is_allocated_sectors-more-efficient.patch [bz#1882917]
  - kvm-block-backend-prevent-dangling-BDS-pointers-across-a.patch [bz#2040123]
  - kvm-iotests-stream-error-on-reset-New-test.patch [bz#2040123]
  - kvm-hw-arm-smmuv3-Fix-device-reset.patch [bz#2042481]
  - Resolves: bz#2033708
    ([Intel 9.0 Feat] qemu-kvm: SGX 1.5 (SGX1 + Flexible Launch Control) support)
  - Resolves: bz#2041461
    (Inconsistent block status reply in qemu-nbd)
  - Resolves: bz#1882917
    (the target image size is incorrect when converting a badly fragmented file)
  - Resolves: bz#2040123
    (Qemu core dumped when do block-stream to a snapshot node on non-enough space storage)
  - Resolves: bz#2042481
    ([aarch64] Launch guest with "default-bus-bypass-iommu=off,iommu=smmuv3" and "iommu_platform=on", guest hangs after system_reset)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-9
changelog:
  - kvm-block-Lock-AioContext-for-drain_end-in-blockdev-reop.patch [bz#2046659]
  - kvm-iotests-Test-blockdev-reopen-with-iothreads-and-thro.patch [bz#2046659]
  - kvm-block-nbd-Delete-reconnect-delay-timer-when-done.patch [bz#2033626]
  - kvm-block-nbd-Assert-there-are-no-timers-when-closed.patch [bz#2033626]
  - kvm-iotests.py-Add-QemuStorageDaemon-class.patch [bz#2033626]
  - kvm-iotests-281-Test-lingering-timers.patch [bz#2033626]
  - kvm-block-nbd-Move-s-ioc-on-AioContext-change.patch [bz#2033626]
  - kvm-iotests-281-Let-NBD-connection-yield-in-iothread.patch [bz#2033626]
  - Resolves: bz#2046659
    (qemu crash after execute blockdev-reopen with  iothread)
  - Resolves: bz#2033626
    (Qemu core dump when start guest with nbd node or do block jobs to nbd node)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-10
changelog:
  - kvm-Revert-ui-clipboard-Don-t-use-g_autoptr-just-to-free.patch [bz#2042820]
  - kvm-ui-avoid-compiler-warnings-from-unused-clipboard-inf.patch [bz#2042820]
  - kvm-ui-clipboard-fix-use-after-free-regression.patch [bz#2042820]
  - kvm-ui-vnc.c-Fixed-a-deadlock-bug.patch [bz#2042820]
  - kvm-memory-Fix-incorrect-calls-of-log_global_start-stop.patch [bz#2044818]
  - kvm-memory-Fix-qemu-crash-on-starting-dirty-log-twice-wi.patch [bz#2044818]
  - Resolves: bz#2042820
    (qemu crash when try to copy and paste contents from client to VM)
  - Resolves: bz#2044818
    (Qemu Core Dumped when migrate -> migrate_cancel -> migrate again during guest is paused)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.1.0-4
changelog:
  - kvm-redhat-Define-hw_compat_rhel_8_5.patch [bz#1998943]
  - kvm-redhat-Add-s390x-machine-type-compatibility-update-f.patch [bz#1998943]
  - Resolves: bz#1998943
    (Add machine type compatibility update for 6.1 rebase [s390x])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.1.0-5
changelog:
  - kvm-virtio-balloon-Fix-page-poison-subsection-name.patch [bz#1984401]
  - kvm-spec-Remove-block-curl-and-block-ssh-dependency.patch [bz#2010985]
  - Resolves: bz#1984401
    (fails to revert snapshot of a VM [balloon/page-poison])
  - Resolves: bz#2010985
    (Remove dependency on qemu-kvm-block-curl and qemu-kvm-block-ssh [rhel-9.0.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.1.0-6
changelog:
  - kvm-hw-arm-virt-Add-hw_compat_rhel_8_5-to-8.5-machine-ty.patch [bz#1998942]
  - Resolves: bz#1998942
    (Add machine type compatibility update for 6.1 rebase [aarch64])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.1.0-7
changelog:
  - kvm-migration-Make-migration-blocker-work-for-snapshots-.patch [bz#1996609]
  - kvm-migration-Add-migrate_add_blocker_internal.patch [bz#1996609]
  - kvm-dump-guest-memory-Block-live-migration.patch [bz#1996609]
  - kvm-spec-Build-the-VDI-block-driver.patch [bz#2013331]
  - kvm-spec-Explicitly-include-compress-filter.patch [bz#1980035]
  - Resolves: bz#1996609
    (Qemu hit core dump when dump guest memory during live migration)
  - Resolves: bz#2013331
    (RFE: qemu-img cannot convert from vdi format)
  - Resolves: bz#1980035
    (RFE: Enable compress filter so we can create new, compressed qcow2 files via qemu-nbd)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.1.0-8
changelog:
  - kvm-Move-ksmtuned-files-to-separate-package.patch [bz#1971678]
  - Resolves: bz#1971678
    (Split out ksmtuned package from qemu-kvm)


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-4
changelog:
  - Rebuild (LLVM-15)
    Resolves: bz#2119003

  - Add versioned dependencies between subpackages
    Resolves: bz#2088352


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-2
changelog:
  - Assimp: Fix heap-based overflow in Assimp::LWO::AnimResolver::UpdateAnimRangeSetup
    Resolves: RHEL-104999
  - Assimp: Fix heap-based overflow in Assimp::ASE::Parser::ParseLV4MeshBonesVertices
    Resolves: RHEL-105004


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-4
changelog:
  - Fix specific overflow in qtextlayout
  - Fix incorrect parsing of the strict-transport-security (HSTS) header
  - Fix buffer over-read via a crafted reply from a DNS server
    Resolves: bz#2209492


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-5
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-6
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410) (version #2)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-9
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch fixes
    - pull in candidate fix QTBUG-83890
    Resolves: bz#1988934


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Remi Collet <remi@remirepo.net> - 7.0.10-2
changelog:
  - fix modules directory ownership and permissions #2176173
  - drop redis-shutdown helper and rely on systemd #2181181


author: Alba Hita Catala <ahitacat@redhat.com> - 0.2.4-1
changelog:
  - Configure proxy for http connections (RHBZ#2227018)
  - Failling to get system profile is not an error but a warning (RHBZ#2227012)
  - Prevent message content being logged at any level (RHBZ#2227010)
  - Added bash completion (RHBZ#2145198)


author: Link Dupont <link@redhat.com> - 0.2.4-5
changelog:
  - Update embedded yggdrasil-worker-package-manager to 0.1.3 (RHEL-17179)
  - Update embedded yggdrasil to 0.2.4 (RHEL-17179)


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-25
changelog:
  - Followup on #2166383
  - Add compat scripts calling external find-debug, sepdebugcrcfix and debugedit
  - Add %__find_debuginfo macro


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-26
changelog:
  - Backport file handling code from rpm-4.19 to fix CVE-2021-35937,
    CVE-2021-35938 and CVE-2021-35939


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-27
changelog:
  - Fix short circuiting of version strings in expressions (RHEL-15688)
  - Fix description of whatconflicts in the man page (RHEL-6303)
  - Expose and document rpmdb --verifydb operation (RHEL-14591)
  - Fixes to the file handling backport


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-29
changelog:
  - Actually add --verifydb to the man page (RHEL-14591)
  - Don't warn about missing user/group on skipped files (RHEL-18037)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-30
changelog:
  - Don't segfault on missing priority tag (RHEL-35249)
  - Use unsigned integers for buildtime too for Y2K38 safety (RHEL-22602)
  - Rebuild against libimaevm.so.4 (RHEL-32505)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-31
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-22604)
  - Fix potential use of uninitialized pgp struct (RHEL-22605)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)
  - Add SourceLicense tag to spec syntax (RHEL-28798)
  - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-33
changelog:
  - Fix root relocation regression (RHEL-28967)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-35
changelog:
  - Fix %patch N applying Patch0 implicitly (RHEL-6294)
  - Issue deprecation warning for number-less %patch (RHEL-6294)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-37
changelog:
  - Allow parametric macros to opt out of option processing (RHEL-67161)
  - Report unsafe symlinks during installation as a specific case (RHEL-33393)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-38
changelog:
  - Add support for spec local file attributes and generators (RHEL-52772)
  - Store configurable digest(s) on packages in rpmdb (RHEL-35619)
  - Fix a hard link race condition in brp-strip (RHEL-74011)


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2025.6-4
changelog:
  - Backport: https://github.com/coreos/rpm-ostree/pull/5322
    Backport: https://github.com/coreos/rpm-ostree/pull/5339
    Resolves: #RHEL-84466


author: Liming Sun <lsun@mellanox.com> - 2.0.2-1
changelog:
  - Remove unnecessary dependency in .spec and use make_build
  - Add package build for debian/ubuntu
  - Fix some format in the man page
  - Add check for syslog headers


author: Liming Sun <lsun@mellanox.com> - 2.0.3-1
changelog:
  - Enable pci device during probing
  - Map the pci resource0 file instead of /dev/mem
  - Add copyright header in bootstrap.sh
  - Add 'Requires' tag check in the rpm .spec for kernel-modules-extra
  - Fix the 'rshim --version' output


author: Liming Sun <lsun@mellanox.com> - 2.0.4-1
changelog:
  - Update .spec file according to review comments
  - Fix the 'KillMode' in rshim.service
  - Support process termination by SIGTERM
  - Fix some compiling warnings and configure issue for FreeBSD
  - Fix a read()/write() issue in rshim_pcie.c caused by optimization


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-1
changelog:
  - Update user-space rshim driver source to version 2.0.5
  - Modify rshim.spec accordingly
  - Switch to %autosetup to handle Patch0 and any future patches
  - Resolves: rhbz#1858577


author: Dean Nelson <dnelson@redhat.com> - 2.0.8-1
changelog:
  - Update user-space rshim driver source to version 2.0.8
  - Modify rshim.spec accordingly
  - Resolves: rhbz#2196626


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-114
changelog:
  - Fix wrong type conversion in cstrLen()
    resolves: rhbz#2157805
  - imjournal: by default retrieves _PID from journal as PID number
    resolves: rhbz#2176397
  - Systemd service file hardening
    resolves: rhbz#2176403
  - rsyslog.conf: load imuxsock and imjournal before loading rsyslog.d
    resolves: rhbz#2165899
  - rsyslog is now started after the network service during boot
    resolves: rhbz#2074318
  - imjournal: add second fallback to the message identifier
    resolves: rhbv#2129015


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-115
changelog:
  - omelasticsearch: make compatible with elasticsearch>=8
  - add new action specific parameter esversion.major
    resolves: rhbz#2209017


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-116
changelog:
  - libcapng: do not try to drop capabilities that are not present
  - add global libcapng.default to not abort when libcapng fails
    resolves: rhbz#2216919


author: Attila Lakatos <alakatos@redhat.com> - 8.2310.0-3
changelog:
  - Rebase to 8.2310.0
    Resolves: RHEL-5196
  - Allow setting certificates for separate connections
    Resolves: RHEL-937
  - Capability dropping feature can be turned off
    Resolves: RHEL-943
  - imjournal: new module parameter filecreatemode
    Resolves: RHEL-949


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
    Resolves: RHEL-65177
  - Fix segfault when $ControlCharacterEscapePrefix is set
    Resolves: RHEL-38222
    Resolves: RHEL-70099
  - Fix segfault due to processing malform queue message
    Resolves: RHEL-70100
  - Fix $ActionQueueDiscardMark default value to 80% queue size
    Resolves: RHEL-70109
  - Fix crash on startup when an invalid function is specified
    Resolves: RHEL-70111


author: Attila Lakatos <alakatos@redhat.com> - 8.2506.0-1
changelog:
  - Rebase to 8.2506.0
  - imuxsock: track dropped messages by ratelimiting
    Resolves: RHEL-66274
  - man page version update
    Resolves: RHEL-78220
  - omfwd: do not hang forever in case of broken TLS handshake
    Resolves: RHEL-67639


author: Jun Aruga <jaruga@redhat.com> - 3.1.2-142
changelog:
  - Bypass git submodule test failure on Git >= 2.38.1.
  - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b.
  - Fix for tzdata-2022g.
  - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS.
    Resolves: RHEL-5590
  - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters
    Related: RHEL-5590
  - Disable fiddle tests that use FFI closures.
    Related: RHEL-5590


author: Jarek Prokop <jprokop@redhat.com> - 3.1.4-143
changelog:
  - Upgrade to Ruby 3.1.4.
    Resolves: RHEL-5586
  - Fix HTTP response splitting in CGI.
    Resolves: RHEL-5591
  - Fix ReDos vulnerability in URI.
    Resolves: RHEL-28919
    Resolves: RHEL-5612
  - Fix ReDos vulnerability in Time.
    Resolves: RHEL-28920
  - Make RDoc soft dependency in IRB.
    Resolves: RHEL-5613


author: Jun Aruga <jaruga@redhat.com> - 3.1.5-144
changelog:
  - Upgrade to Ruby 3.1.5.
    Resolves: RHEL-33978
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-34129
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-34121
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-33871


author: Jarek Prokop <jprokop@redhat.com> - 3.1.7-146
changelog:
  - Upgrade to Ruby 3.1.7.
    Resolves: RHEL-55410
  - Fix DoS vulnerability in REXML. (CVE-2024-39908)
    Resolves: RHEL-86077


author: Jarek Prokop <jprokop@redhat.com> - 3.1.2-141
changelog:
  - Upgrade to Ruby 3.1.2 by merging Fedora Rawhide branch (commit: b7b5473).
    Resolves: rhbz#2063773


author: Jarek Prokop <jprokop@redhat.com> - 3.3.1-2
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33976
  - Fix buffer overread vulnerability in StringIO.
    (CVE-2024-27280)
    Resolves: RHEL-34130
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    (CVE-2024-27281)
    Resolves: RHEL-34122
  - Fix Arbitrary memory address read vulnerability with Regex search.
    (CVE-2024-27282)
    Resolves: RHEL-33872


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-3
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-55411
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57575
    Resolves: RHEL-57572
    Resolves: RHEL-57068
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-57569
  - Fix incorrect symlink for rubygem-irb's library.
    Resolves: RHEL-42646


author: Jarek Prokop <jprokop@redhat.com> - 3.3.8-4
changelog:
  - Upgrade to Ruby 3.3.8.
    Resolves: RHEL-68631
  - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
    Resolves: RHEL-86109
  - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)


author: Jun Aruga <jaruga@redhat.com> - 0.5.3-1
changelog:
  - New upstream release 0.5.3 by merging Fedora master branch (commit: 674d475)
    Resolves: rhbz#1817135


author: Jarek Prokop <jprokop@redhat.com> - 0.5.4-1
changelog:
  - New upstream release 0.5.4 by merging Fedora rawhide branch (commit: e21b5b9)
    Resolves: rhbz#2063773


author: <msekleta@redhat.com> - 0.3.2-5
changelog:
  - Adjust packaging to account for differences between Fedora and CentOS/RHEL rust packaging (#1930369)


author: Dan Horák <dhorak@redhat.com> - 2:2.27.0-1
changelog:
  - rebased to 2.27.0 (#2160062)
  - lszcrypt fails when querying a specific domain (#2177612)
  - DASD autoquiesce support (#2196517)
  - zcrypt DD: AP command filtering (#2170360)
  - vmconvert and zgetdump consolidation (#2173924)
  - Support for List-Directed dump from ECKD DASD (#2160052)
  - Support for List-Directed IPL and re-IPL from ECKD DASD (#2160040)
  - Resolves: #2160062 #2177612 #2196517 #2170360 #2173924 #2160052 #2160040


author: Dan Horák <dhorak@redhat.com> - 2:2.27.0-2
changelog:
  - zdev: cleanup patches to fix warnings (#2223304)
  - zdev: add missing label in the udev-rules (#2222900)
  - Resolves: #2223304 #2222900


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-1
changelog:
  - rebased to 2.29.0 (RHEL-11408)
  - KVM: Support AP Bindings in SE Header (RHEL-10572)
  - KVM: Userspace Tool for IBK Request Generation and Insertion (RHEL-10578)
  - zkey: support for key type PKEY_TYPE_EP11_AES (RHEL-11440)
  - vmur: fix handling of option -t (RHEL-11480)
  - dbginfo.sh: global original Input Field Separator (IFS) (RHEL-16527)
  - enable multi-arch build (RHEL-10567)
  - Resolves: RHEL-11408 RHEL-10572 RHEL-10578 RHEL-11440 RHEL-11480 RHEL-16527 RHEL-10567


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-3
changelog:
  - add s390utils-se-data as a noarch subpackage with Secure Execution data files
  - Resolves: RHEL-10567


author: Dan Horák <dhorak@redhat.com> - 2:2.33.1-1
changelog:
  - rebased to 2.33.1 (RHEL-23704)
  - dbginfo.sh: missing data of new ROCE cards (RHEL-24109)
  - SE-tooling: New IBM host-key subject locality (RHEL-30273)
  - Fix disk type detection when running under QEMU (RHEL-40358)
  - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-50026)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030)
  - Resolves: RHEL-50026 RHEL-50030


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-50026)
  - cpacfinfo: new tool to provide CPACF information (RHEL-50020)
  - chpstat: Additional Channel Measurements (RHEL-50023)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024)
  - KVM: Support extended attestation for Secure Execution (RHEL-50009)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64705)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853)
  - KVM: Rewrite genprotimg in Rust (RHEL-72023)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019)
  - zkey key support for dm-crypt with XTS keys (RHEL-50010)
  - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010


author: Dan Horák <dhorak@redhat.com> - 2:2.38.0-1
changelog:
  - rebased to 2.38.0 (RHEL-73342)
  - LPAR level power consumption reporting (RHEL-72675)
  - Provide Topology-Map information to userspace (RHEL-72682)
  - Add CCK secret type for updating the Customer Communication Key (RHEL-73021)
  - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85390)
  - Resolves: RHEL-73342 RHEL-72675 RHEL-72682 RHEL-73021 RHEL-85390


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-5
changelog:
  - resolves: RHEL-101761 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-4.el9)


author: Michal Fabik <mfabik@redhat.com> 0.35-1
changelog:
  - New upstream version
   - Fix leaks in koops stacktrace- and report-handling code
   - Replace utility code with GLib functions
   - Fix unit test portability issue
   - Add build dependency on make


author: Michal Fabik <mfabik@redhat.com> 0.38-1
changelog:
  - New upstream version
   - lib: Use GLib for computing SHA-1 digests
   - sr_distances_cluster_objects: Check arg safety


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.0-2
changelog:
  - properly conflict with pacemaker not providing sync-default we need
    Resolves: rhbz#1979961
    Resolves: rhbz#1979573


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.1-2
changelog:
  - obviously autoconf is defining runstatedir - but with a
    wrong default - directly hand it over to configure
    and skip --with-runstatedir implemented in configure.ac
    for older versions of autoconf

    Resolves: rhbz#2011707


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management

    Resolves: rhbz#2168579


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-14
changelog:
  - Fix getting of InstallDate property, improve it to work on non en_US locales
    and update support for recent Fedora distributions


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.3-16
changelog:
  - Fix exit status (i. e. apply https://sourceforge.net/p/sblim/bugs/2761/)
  - Fix issues found by static analysis


author: Jan Černý <jcerny@redhat.com> - 1.2.1-5
changelog:
  - Remove qt5-devel from "Requires" section
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/WO625MVYEAAJNHNRLEEJDVZTIWMQOBRR/
  - Update for new CMake out of source builds
    https://fedoraproject.org/wiki/Changes/CMake_to_do_out-of-source_builds
  - Fix Qt5 deprecated symbols
  - Fix FTBS in Rawhide/F33 (RHBZ#1865462)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.16.1-1
changelog:
  - New version
    Resolves: rhbz#1853885
  - Dropped smtp-session-reuse-fix, openssl-1.1.0-fix, openssl-1.1.0-ecdhe-fix,
    gethostbyname2, fix-covscan-issues, gcc-10-fix patches (not needed)
  - Dropped format-security patch (upstreamed)
  - Updated patches


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.27-1
changelog:
  - sedispatch: check read_size
  - SafeConfigParser is deprecated and will be dropped
  - Fix typos in --help, man pages and developer's guide
  - Improve Python 3.10 compatibility
    https://pagure.io/setroubleshoot/issue/58
  - Update translations


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.28-1
changelog:
  - Look for modules in /usr/share/selinux/packages
  - Always use rpm source package for reporting
  - Improve after_first email filter behavior


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.30-1
changelog:
  - Miscellaneous python and build system changes
   - Fix couple of typos
   - Drop Python2 support
   - Use inspect.signature() instead of instead.getargspec()
   - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.31-1
changelog:
  - Add a screen reader label to the icon
  - seapplet: avoid ValueError when parsing sealert.conf
  - doc: Document performance related changes
  - Decrease setroubleshootd priority and limit RAM utilization to 1GB
  - Use setup from setuptools
  - Use `pip install` instead of `setup.py install`


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.32-1
changelog:
  - Always reset pending alarms when alarm(0) (rhbz#2112573)
  - 'imp' module is deprecated in favor of 'importlib' (rhbz#2224393)
  - Fix build with pip 23.1.2+
  - Remove dbus-glib-devel BR as it's only needed when compiled with seappletlegacy
  - Rename session bus name to org.fedoraproject.sealert
  - seapplet: wrap SEApplet() to try except
  - util.py: Add doctext test for build_module_type_cache()
  - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-1
changelog:
  - Update tmpfiles.d config (bz#2346971)
  - Do not hardcode /var/lib/selinux as store_root
  - data: update app icon
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations
  - Ship with contemporary app icon
  - Check that SELinux is enabled before running (rhbz#2178950)


author: Jindrich Novy <jnovy@redhat.com> - 2:1.18.1-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18
    (https://github.com/containers/skopeo/commit/bfd0850)
  - fixes "CVE-2025-27144 skopeo: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-9.7]"
  - Resolves: RHEL-80616


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-1
changelog:
  - New upstream release
  - Resolves: rhbz#1751295: (2) When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
  - Resolves: rhbz#1768156: ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.7-2
changelog:
  - Resolves: rhbz#1979619
    IPA: High CPU utilization (over 1000% plus) by ns-slapd process
  - Resolves: rhbz#1979623
    With base object scope, ldapsearch against compat tree does not return any data on Rhel8 IPA servers.


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-1
changelog:
  - upstream release 0.60.0
  - Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
  - Fix ID views integration
  - Fix base scope lookups
  - Bump NIS max dgram size to 8KB by default instead of 1KB
  - Resolves: rhbz#2117299
    Allow to rebuild the compat tree


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-5
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog
  - Resolves: RHEL-11983


author: Jindrich Novy <jnovy@redhat.com> - 1.2.0-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.0
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 1.2.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.2
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.2.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.3.0-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1.3.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1.3.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.3
  - Resolves: RHEL-94765


author: Čestmír Kalina <ckalina@redhat.com> - 1.8.3-1
changelog:
  - Resolves: RHEL-11416 Upgrade smc-tools to latest version
  - smc_stats: Fix man page name
  - Bump version.


author: Lukáš Tyrychtr <lukastyrychtr@gmail.com> 2.5-9
changelog:
  - Add an obsoletes directive for the old speech-tools-libs as they're
    no longer part of the Festival package.


author: Tomas Korbar <tkorbar@redhat.com> - 1.2.0-11
changelog:
  - CVE-2020-23903 speex: divide by zero in read_samples() via crafted WAV file
  - Resolves: CVE-2020-23903


author: Benjamin Berg <bberg@redhat.com> - 0.19.0-3
changelog:
  - Add patch to lookup graphical session
    https://gitlab.freedesktop.org/spice/linux/vd_agent/merge_requests/2
  - Resolves: #1750120


author: Uri Lublin <uril@redhat.com> - 0.21.0-2
changelog:
  - Build without pciaccess
    Resolves: rhbz#1964922
  - Fix g_memdup deprecation warning with glib >= 2.68


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-7
changelog:
  - Resolves: RHEL-14820 - squid: squid: denial of Servicein FTP
  - Resolves: RHEL-14809 - squid: squid: Denial of Service in HTTP Digest
    Authentication
  - Resolves: RHEL-14781 - squid: squid: Request/Response smuggling in HTTP/1.1
    and ICAP


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-9
changelog:
  - Resolves: RHEL-18354 - squid: Buffer over-read in the HTTP Message processing
    feature (CVE-2023-49285)
  - Resolves: RHEL-18345 - squid: Incorrect Check of Function Return Value In
    Helper Process management (CVE-2023-49286)
  - Resolves: RHEL-18146 - squid crashes in assertion when a parent peer exists
  - Resolves: RHEL-18231 - squid: Denial of Service in SSL Certificate validation
    (CVE-2023-46724)
  - Resolves: RHEL-15912 - squid: NULL pointer dereference in the gopher protocol
    code (CVE-2023-46728)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-12
changelog:
  - Resolves: RHEL-28530 - squid: Denial of Service in HTTP Chunked
    Decoding (CVE-2024-25111)
  - Resolves: RHEL-26092 - squid: denial of service in HTTP header
    parser (CVE-2024-25617)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-13
changelog:
  - Resolves: RHEL-30352 - squid v5 crashes with SIGABRT when ipv6 is disabled
    at kernel level but it is asked to connect to an ipv6 address by a client


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-14
changelog:
  - Resolves: RHEL-45057 - squid: Out-of-bounds write error may lead to Denial of 
    Service (CVE-2024-37894)
  - Resolves: RHEL-22594 - squid: vulnerable to a Denial of Service attack against
    Cache Manager error responses (CVE-2024-23638)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-15
changelog:
  - Resolves: RHEL-62324 - (Regression) Transfer-encoding:chunked data is not sent
    to the client in its complementary


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-17
changelog:
  - Disable ESI support
  - Resolves: RHEL-65080 - CVE-2024-45802 squid: Denial of Service processing
    ESI response content


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-20
changelog:
  - Resolves: RHEL-77282 - ”TCP connection to XX.XX.XX.XX/XXXX failed” message is
    output frequently on RHEL9


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.0-1
changelog:
  - Release 3.0.0
  - Support for OpenSSL 3.0
  - Support for outputting named Diffie-Hellman parameter groups
  - Support for CentOS Stream 9
  - Resolves: rhbz#1984468


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4
changelog:
  - Resolves: RHEL-49711 - SYSDB: remove index on dataExpireTimestamp
  - Resolves: RHEL-49811 - 2FA is being enforced after upgrading 2.9.1->2.9.4


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4.1
changelog:
  - Resolves: RHEL-59876 - EL9/CentOS Stream 9 lost offline smart card authentication
  - Resolves: RHEL-50912 - possible regression of rhbz#2196521


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.6-1
changelog:
  - Resolves: RHEL-70189 - Rebase SSSD for RHEL 9.6
  - Resolves: RHEL-67670 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-9]
  - Resolves: RHEL-68369 - sssd backend process segfaults when krb5.conf is invalid
  - Resolves: RHEL-66266 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-1
changelog:
  - Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
  - Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
  - Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
  - Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
  - Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-3
changelog:
  - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  - Resolves: RHEL-103434 - cache_credentials = true not working


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-4
changelog:
  - Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Leah Leshchinsky <lleshchi@redhat.com> - 1.17.1-1
changelog:
  - stalld: Fix memory leak in print_boosted_info()
  - utils: Check if the system is in lockdown mode
  - stalld: print process comm and cpu when boosting
  Resolves: rhbz#2120799


author: Chris White <chwhite@redhat.com> - 1.19.5-1
changelog:
  - Updated compile options for annocheck hardening
  - Ensure we resolve library symbols at load time (-z now) and are a Position Independent Executable (-pie). Refactored compile options to better deal with arch differences.
  - Added an 'annocheck' makefile target for local checking.
  - Makefile: change build to use FORTIFY_SOURCE=3
  - src/utils.c: fix off-by-one error in buffer allocation
  Resolves: RHEL-33662


author: Chris White <chwhite@redhat.com> - 1.19.6-1
changelog:
  - Makefile: add uninstall target
  - systemd: add BE environment variable to select backend
  Resolves: RHEL-33662


author: Wander Lairson Costa <wander@redhat.com> - 1.20.3-1
changelog:
  - Rebase to stalld-1.20.3
  - Make systemd start stalld with the SCHED_FIFO:10 priority
  Resolves: RHEL-109088


author: Wander Lairson Costa <wander@redhat.com> - 1.20.4-1
changelog:
  - Rebase to stalld-1.20.4
  - Remove duplicated ExecStart entry from the stalld.service file
  Resolves: RHEL-108827


author: Bryan Gurney <bgurney@redhat.com> - 3.4.0-1
changelog:
  - Update to version 3.4.0
  - Resolves: rhbz#2124976
  - Allow a pool to make use of added capacity of a block device
  - Resolves: rhbz#2039955
  - Enforce per-pool consistency of block device sector sizes
  - Resolves: rhbz#2039957
  - Do not read data from device specified in udev remove event
  - Resolves: rhbz#2124681
  - Specify pool to start by its name
  - Resolves: rhbz#2125012


author: Bryan Gurney <bgurney@redhat.com> - 3.5.5-1
changelog:
  - Update to version 3.5.5
  - Resolves: rhbz#2167463
  - Take into account the sector size of crypt devices
  - Resolves: rhbz#2170318
  - Add stratisd-tools package with stratis-dumpmetadata program
  - Resolves: rhbz#2173726
  - Support key description key in kernel keyring
  - Resolves: rhbz#2038492


author: Bryan Gurney <bgurney@redhat.com> - 3.6.1-1
changelog:
  - Update to version 3.6.1
  - Resolves: RHEL-2278
  - Add filesystem growth limits
  - Resolves: RHEL-12898


author: John Kacur <jkacur@redhat.com> - 0.15.00-1
changelog:
  - Rebase to upstream V0.15.00
  - Add the following upstream patches
  - stress-shm: move /dev/shm check to earlier in the setup phase
  - stress-shm: skip stressor if /dev/shm is not mounted with tmpfs on linux
  - stress-sysfs: check for zero sysfs entries after pruning the directory
  Resolves: rhbz#2144070


author: John Kacur <jkacur@redhat.com> - 0.17.08-1
changelog:
  - Rebase to upstream V0.17.08
  - ARM: Don't declare inlined yield helper if yield is not available
  Resolves: RHEL-33304


author: John Kacur <jkacur@redhat.com> - 0.18.06-1
changelog:
  - Update the stress-ng-0.18.06 upstream
  - Include some upstream patches after 0.18.06
  Resolves: RHEL-65474


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-8
changelog:
  RHEL 9.2.0 ERRATUM
  - sudo digest check fails incorrectly for certain file sizes (SHA512/SHA384)
  Resolves: rhbz#2115789


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-9
changelog:
  RHEL 9.2.0 ERRATUM
  - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user
  Resolves: rhbz#2161225


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-10
changelog:
  RHEL 9.3.0.Z ERRATUM
  - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output
  Resolves: RHEL-21834
  - CVE-2023-28486 sudo: Sudo does not escape control characters in log messages
  Resolves: RHEL-21828
  - CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables
  Resolves: RHEL-21821


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-12
changelog:
  RHEL: 9.7.0 ERRATUM
  - sudo missing spacing and separator in log when using "--preserve-env=list"
  Resolves: RHEL-71916


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-13
changelog:
  RHEL: 9.7.0 ERRATUM
  - sudo missing spacing and separator in log when using "--preserve-env=list"
  Resolves: RHEL-71916
  - CVE-2025-32462 sudo: LPE via host option
  Resolves: RHEL-100020


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p1-1
changelog:
  - rebase to 1.9.5p1
  Resolves: rhbz#1902758
  - fixed double free in sss_to_sudoers
  Resolves: rhbz#1885874
  - fixed CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhbz#1915055
  - fixed CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1915054


author: Matthew Miller <mattdm@fedoraproject.org> - 1.9.5p2-1
changelog:
  - rebase to 1.9.5p2
  Resolves: rhbz#1920611
  - fixed CVE-2021-3156 sudo: Heap buffer overflow in argument parsing
  Resolves: rhbz#1920618


author: Zoltan Fridrich <zfridric@redhat.com> - 1.9.5p2-2
changelog:
  - change ldap.conf to sudo-ldap.conf
  Resolves: rhbz#1908882
  - remove /usr/local/* from secure_path
  Resolves: rhbz#1908923
  - fixed CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhbz#1916655
  - fixed CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1917039
  - fixed CVE-2021-3156 sudo: Heap buffer overflow in argument parsing
  Resolves: rhbz#1917735


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-5
changelog:
  RHEL 9 BETA
  - sync with rhel8 spec
  Resolves: rhbz#1908882
  Resolves: rhbz#1942383
  Resolves: rhbz#1946707
  Resolves: rhbz#1946709
  Resolves: rhbz#1981278


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-7
changelog:
  - utmp resource leak in sudo
  Resolves: rhbz#1986579
  - sudo does not list /etc/dnf/protected.d/sudo.conf in the rpm config files listing
  Resolves: rhbz#1997030
  - sudo uses Recommends for sudo-python-plugin(x86-64) = 1.9.5p2-2.el9 and vim-minimal
  Resolves: rhbz#1947908
  - review of important potential issues detected by static analyzers in sudo-1.9.5p2-2.el9
  Resolves: rhbz#1938879


author: Orion Poplawski <orion@nwra.com> - 5.4.0-1
changelog:
  - Update to 5.4.0
  - Use upstream shared library builds
  - Build with metis
  - Explicitly list libraries and soname versions


author: Kalev Lember <klember@redhat.com> - 3.39.92-2
changelog:
  - Split sysprof-capture library and header files out to sysprof-capture-devel
  - Update minimum required glib2 version


author: Michal Sekletar <msekleta@redhat.com> 12.5.4-3
changelog:
  - sysstat's buildsystem doesn't really use LDFLAGS, we have to merge CFLAGS and LDFLAGS to get binaries with full RELRO (#2044893)


author: Pavel Šimovec <psimovec@redhat.com> - 12.5.4-6
changelog:
  - fix the arithmetic overflow in allocate_structures() that is still possible on some 32 bit systems (CVE-2023-33204)


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.5.4-8
changelog:
  - fix allocation errors with malformed sa files (RHEL-35684)
  - reorder patches to prevent errors during their application


author: systemd maintenance team <systemd-maint@redhat.com> - 249-9
changelog:
  - test: don't install test-network-generator-conversion.sh w/o networkd (#2017035)
  - meson.build: change operator combining bools from + to and (#2017035)
  - openssl-util: use EVP API to get RSA bits (#2016042)
  - procfs-util: fix confusion wrt. quantity limit and maximum value (#2017035)
  - test-process-util: also add EROFS to the list of "good" errors (#2017035)
  - ci: use C9S chroots in Packit (#2017035)
  - test-mountpointutil-util: do not assert in test_mnt_id() (#2017035)
  - core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2019468)
  - Drop Patch9001 - https://github.com/systemd/systemd/pull/17050 - Replaced by Patch0046


author: systemd maintenance team <systemd-maint@redhat.com> - 250-3
changelog:
  - Treat EPERM as "not available" too (#2017035)
  - test: copy portable profiles into the image if they don't exist there (#2017035)
  - test: introduce `get_cgroup_hierarchy() helper (#2047768)
  - test: require unified cgroup hierarchy for TEST-56 (#2047768)
  - tests: rework test macros to not take code as parameters (#2017035)
  - test: allow to set NULL to intro or outro (#2017035)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-4
changelog:
  - udev/net-setup-link: change the default MACAddressPolicy to "none" (#2009237)
  - man: mention System Administrator's Guide in systemctl manpage (#1982596)
  - Net naming scheme for RHEL-9.0 (#2052106)
  - core: decrease log level of messages about use of KillMode=none (#2013213)
  - ci: replace apt-key with signed-by (#2013213)
  - ci: fix clang-13 installation (#2013213)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-7
changelog:
  - test: check systemd RPM macros (#2017035)
  - test: do not assume x86-64 arch in TEST-58-REPART (#2017035)
  - tests: add repart tests for block devices with 1024, 2048, 4096 byte sector sizes (#2017035)
  - test: accept both unpadded and padded partition sizes (#2017035)
  - test: lvm 2.03.15 dropped the static autoactivation (#2017035)
  - test: accept GC'ed units in newer LVM (#2017035)
  - shared: Add more dlopen() tests (#2017035)
  - systemctl: Show how long a service ran for after it exited in status output (#2017035)
  - time-util: introduce TIMESTAMP_UNIX (#2017035)
  - systemctl,man: update docs for `--timestamp=` (#2017035)
  - systemctl: make `--timestamp=` affect the `show` verb as well (#2017035)
  - tests: allow running all the services with SYSTEMD_LOG_LEVEL (#2017035)
  - coredump: raise the coredump save size on 64bit systems to 32G (and lower it to 1G on 32bit systems) (#2017035)
  - repart: fix sector size handling (#2017035)
  - mkdir: allow to create directory whose path contains symlink (#2017035)
  - mkdir: CHASE_NONEXISTENT cannot used in chase_symlinks_and_stat() (#2017035)
  - meson: move efi file lists closer to where they are used (#2017035)
  - meson: move efi summary() section to src/boot/efi (#2017035)
  - meson: report SBAT settings (#2017035)
  - boot: Build BCD parser only on arches supported by Windows (#2017035)
  - meson: Remove efi-cc option (#2017035)
  - meson: Get objcopy location from compiler (#2017035)
  - meson: Use files() for source lists for boot and fundamental (#2017035)
  - meson: Use files() for tests (#2017035)
  - tests: add fuzz-bcd (#2017035)
  - meson: Use files() for fuzzers (#2017035)
  - meson: Add check argument to remaining run_command() calls (#2017035)
  - meson: Use echo to list files (#2017035)
  - test: add a test for mkdir_p() (#2017035)
  - util: another set of CVE-2021-4034 assert()s (#2017035)
  - basic: update CIFS magic (#2017035)
  - shared: be extra paranoid and check if argc > 0 (#2017035)
  - core: check if argc > 0 and argv[0] is set (#2017035)
  - core: check argc/argv uncoditionally (#2017035)
  - test: temporary workaround for #21819 (#2017035)
  - test: don't leak local variable to outer scopes (#2017035)
  - tree-wide: don't use strjoina() on getenv() values (#2017035)
  - man: clarify Environmentfile format (#2017035)
  - test-load-fragment: add a basic test for config_parse_unit_env_file() (#2017035)
  - core/execute: use _cleanup_ in exec_context_load_environment() (#2017035)
  - test-env-file: add tests for quoting in env files (#2017035)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-8
changelog:
  - core: shorten long unit names that are based on paths and append path hash at the end (#2083493)
  - tests: add test case for long unit names (#2083493)
  - tests: reflect that we can now handle devices with very long sysfs paths (#2083493)
  - test: extend the "hashed" unit names coverage a bit (#2083493)
  - Revert "kernel-install: also remove modules.builtin.alias.bin" (#2065061)
  - Revert "kernel-install: prefer /boot over /boot/efi for $BOOT_ROOT" (#2065061)
  - kernel-install: 50-depmod: port to /bin/sh (#2065061)
  - kernel-install: 90-loaderentry: port to /bin/sh (#2065061)
  - kernel-install: fix shellcheck (#2065061)
  - kernel-install: port to /bin/sh (#2065061)
  - kernel-install: 90-loaderentry: error out on nonexistent initrds instead of swallowing them quietly (#2065061)
  - kernel-install: don't pull out KERNEL_IMAGE (#2065061)
  - kernel-install: prefer /boot over /boot/efi for $BOOT_ROOT (#2065061)
  - kernel-install: also remove modules.builtin.alias.bin (#2065061)
  - kernel-install: add new variable $KERNEL_INSTALL_INITRD_GENERATOR (#2065061)
  - kernel-install: k-i already creates $ENTRY_DIR_ABS, no need to do it again (#2065061)
  - kernel-install: prefix errors with "Error:", exit immediately (#2065061)
  - kernel-install: add "$KERNEL_INSTALL_STAGING_AREA" directory (#2065061)
  - kernel-install: add missing log line (#2065061)
  - kernel-install: don't try to persist used machine ID locally (#2065061)
  - kernel-install: add a new $ENTRY_TOKEN variable for naming boot entries (#2065061)
  - kernel-install: only generate systemd.boot_id= in kernel command line if used for naming the boot loader spec files/dirs (#2065061)
  - kernel-install: search harder for kernel image/initrd drop-in dir (#2065061)
  - kernel-install: add new "inspect" verb, showing paths and parameters we discovered (#2065061)
  - ci(Mergify): configuration update (#2087652)
  - ci(Mergify): fix copy&paste bug (#2087652)
  - shared: Fix memory leak in bus_append_execute_property() (#2087652)
  - fuzz: no longer skip empty files (#2087652)
  - networkctl: open the bus just once (#2087652)
  - json: align table (#2087652)
  - fuzz-json: optionally allow logging and output (#2087652)
  - shared/json: reduce scope of variables (#2087652)
  - fuzz-json: also do sorting and normalizing and other easy calls (#2087652)
  - shared/json: wrap long comments (#2087652)
  - shared/json: fix memory leak on failed normalization (#2087652)
  - shared/json: add helper to ref first, unref second (#2087652)
  - basic/alloc-util: remove unnecessary parens (#2087652)
  - fuzz-json: also try self-merge operations (#2087652)
  - shared/json: fix another memleak in normalization (#2087652)
  - shared/json: fix memleak in sort (#2087652)
  - execute: fix resource leak (#2087652)
  - tests: ignore dbus-broker-launcher (#2087652)
  - core/timer: fix memleak (#2087652)
  - timedatectl: fix a memory leak (#2087652)
  - test: fix file descriptor leak in test-psi-util (#2087652)
  - test: fix file descriptor leak in test-tmpfiles.c (#2087652)
  - test: fix file descriptor leak in test-fs-util (#2087652)
  - test: fix file descriptor leak in test-oomd-util (#2087652)
  - test: fix file descriptor leak in test-catalog (#2087652)
  - test: make masking of supplementary services configurable (#2087652)
  - test: fuzz our dbus interfaces with dfuzzer (#2087652)
  - test: skip TEST-21-DFUZZER without ASan (#2087652)
  - core: annotate Reexecute() as NoReply (#2087652)
  - test: always force a new image for dfuzzer (#2087652)
  - test: make dfuzzer less verbose (#2087652)
  - test: drop the at_exit() coredump check (#2087652)
  - test: make the shutdown routine a bit more "robust" (#2087652)
  - tree-wide: drop manually-crafted message for missing variables (#2087652)
  - test: allow overriding $QEMU_MEM when running w/ ASan (#2087652)
  - test: don't test buses we don't ship (#2087652)
  - shutdown: get only active md arrays. (#2047682)
  - bus: Use OrderedSet for introspection (#2068131)
  - logind-session-dbus: allow to set display name via dbus (#2100340)
  - ci: limit which env variables we pass through `sudo` (#2087652)
  - ci(Mergify): Add `ci-waived` logic (#2087652)
  - json: use unsigned for refernce counter (#2087652)
  - macro: check over flow in reference counter (#2087652)
  - sd-bus: fix reference counter to be incremented (#2087652)
  - sd-bus: introduce ref/unref function for track_item (#2087652)
  - sd-bus: do not read unused value (#2087652)
  - sd-bus: do not return negative errno when unknown name is specified (#2087652)
  - sd-bus: use hashmap_contains() and drop unnecessary cast (#2087652)
  - test: shorten code a bit (#2087652)
  - test: add several tests for track item (#2087652)
  - core/slice: make slice_freezer_action() return 0 if freezing state is unchanged (#2087652)
  - core/unit: fix use-after-free (#2087652)
  - core/timer: fix potential use-after-free (#2087652)
  - core: command argument can be longer than PATH_MAX (#2073994)
  - shared/install: consistently use 'lp' as the name for the LookupPaths instance (#2082131)
  - shared/specifier: treat NULL the same as "" (#2082131)
  - shared/install: do not print aliases longer than UNIT_NAME_MAX (#2082131)
  - shared/install-printf: drop now-unused install_path_printf() (#2082131)
  - strv: declare iterator of FOREACH_STRING() in the loop (#2082131)
  - basic/unit-file: split out the subroutine for symlink verification (#2082131)
  - basic/stat-util: add null_or_empty_path_with_root() (#2082131)
  - shared/install: reuse the standard symlink verification subroutine (#2082131)
  - shared/install: add a bit more quoting (#2082131)
  - test: add test for systemctl link & enable (#2082131)
  - tests: add helper for creating tempfiles with content (#2082131)
  - man: clarify the descriptions of aliases and linked unit files (#2082131)
  - basic: add new variable $SYSTEMD_OS_RELEASE to override location of os-release (#2082131)
  - test-os-util: add basic tests for os-release parsing (#2082131)
  - basic/env-file: make load-env-file deduplicate entries with the same key (#2082131)
  - man/os-release: add a note about repeating entries (#2082131)
  - shared/specifier: clarify and add test for missing data (#2082131)
  - shared/specifier: provide proper error messages when specifiers fail to read files (#2082131)
  - shared/install: provide proper error messages when invalid specifiers are used (#2082131)
  - shared/install: move scope into InstallContext (#2082131)
  - shared/specifier: fix %u/%U/%g/%G when called as unprivileged user (#2082131)
  - shared/install: simplify unit_file_dump_changes() (#2082131)
  - shared/install: propagate errors about invalid aliases and such too (#2082131)
  - shared/install: return failure when enablement fails, but process as much as possible (#2082131)
  - systemctl: fix silent failure when --root is not found (#2082131)
  - shared/install: also check for self-aliases during installation and ignore them (#2082131)
  - docs: Correct WantedBy= regarding template units (#2082131)
  - man: fix invalid description of template handling in WantedBy= (#2082131)
  - shared/install: drop unnecessary casts (#2082131)
  - strv: make iterator in STRV_FOREACH() declaread in the loop (#2082131)
  - core: ExecContext::restrict_filesystems is set of string (#2082131)
  - install: when linking a file, create the link first or abort (#2082131)
  - shared/install: split unit_file_{disable,enable}() so _reenable doesn't do setup twice (#2082131)
  - shared/install: fix reenable on linked unit files (#2082131)
  - test-systemctl-enable: extend the test for repeated WantedBy/RequiredBy (#2082131)
  - shared/install: when we fail to chase a symlink, show some logs (#2082131)
  - shared/install: do not try to resolve symlinks outside of root directory (#2082131)
  - test-systemctl-enable: enhance the test for unit file linking (#2082131)
  - shared/install: skip unnecessary chasing of symlinks in disable (#2082131)
  - shared/install: also remove symlinks like .wants/foo@one.service → ../foo@one.service (#2082131)
  - shared/install: create relative symlinks for enablement and aliasing (#2082131)
  - shared/install: when looking for symlinks in .wants/.requires, ignore symlink target (#2082131)
  - shared/install: stop passing duplicate root argument to install_name_printf() (#2082131)
  - basic/unit-file: reverse negative conditional (#2082131)
  - shared/install: split UNIT_FILE_SYMLINK into two states (#2082131)
  - shared/install: fix handling of a linked unit file (#2082131)
  - test-systemctl-enable: make shellcheck happy (#2082131)
  - shared/install: when creating symlinks, accept different but equivalent symlinks (#2082131)
  - test-systemctl-enable: use magic syntax to allow inverted tests (#2082131)
  - test-systemctl-enable: also use freshly-built systemd-id128 (#2082131)
  - test-systemctl-enable: disable the test for %a for now (#2082131)
  - Rename UnitFileScope to LookupScope (#2082131)
  - core: handle lookup paths being symlinks (#2082131)
  - shared/install: use correct cleanup function (#2082131)
  - udev/net_id: avoid slot based names only for single function devices (#2073003)
  - test: import logind test from debian/ubuntu test suite (#2087652)
  - test: drop redundant IMAGE_NAME= (#2087652)
  - test: import timedated test from debian/ubuntu test suite (#2087652)
  - test: introduce assert_not_in() helper function (#2087652)
  - test: drop unnecessary --no-pager option (#2087652)
  - test: support debian/ubuntu specific timezone config file (#2087652)
  - test: import hostnamed tests from debian/ubuntu test suite (#2087652)
  - locale-util: fix memleak on failure (#2087652)
  - locale-util: check if enumerated locales are valid (#2087652)
  - locale-util: align locale entries (#2087652)
  - core: inline an iterator variable (#2087652)
  - locale-setup: merge locale handling in PID1 and localed (#2087652)
  - locale: rename keymap-util.[ch] -> localed-util.[ch] (#2087652)
  - test: add one more path to search keymaps (#2087652)
  - test: introduce inst_recursive() helper function (#2087652)
  - hmac/sha256: move size define to sha256.h (#2087652)
  - tpm2: support policies with PIN (#2087652)
  - cryptenroll: add support for TPM2 pin (#2087652)
  - cryptsetup: add support for TPM2 pin (#2087652)
  - cryptsetup: add libcryptsetup TPM2 PIN support (#2087652)
  - cryptenroll: add TPM2 PIN documentation (#2087652)
  - cryptsetup: add manual TPM2 PIN configuration (#2087652)
  - cryptenroll: add tests for TPM2 unlocking (#2087652)
  - env-util: replace unsetenv_erase() by new getenv_steal_erase() helper (#2087652)
  - test: install libxkbcommon and x11 keymaps (#2087652)
  - test: install C.UTF-8 and English locales (#2087652)
  - test: import localed tests from debian/ubuntu test suite (#2087652)
  - unit: check for mount rate limiting before checking active state (#2087652)
  - tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2087652)
  - test: insert space in for loop (#2087652)
  - test: move "do" at the end of line (#2087652)
  - test: use trap RETURN (#2087652)
  - test: ignore the error about our own libraries missing during image creation (#2087652)
  - test: wrap binaries using systemd DSOs when running w/ ASan (#2087652)
  - test: set $ASAN_RT_PATH along with $LD_PRELOAD to the ASan runtime DSO (#2087652)
  - test: drop all LD_PRELOAD-related ASan workarounds (#2087652)
  - test: don't wrap binaries built with ASan (#2087652)
  - test: send stdout/stderr of testsuite units to journal & console (#2087652)
  - test: make the busy loop in TEST-02 less verbose (#2087652)
  - test: always wrap useradd/userdel when running w/ ASan (#2087652)
  - test: don't flush debug logs to the console (#2087652)
  - test: fix a couple of issues found by shellcheck (#2087652)
  - test: pass the initdir to check_result_{qemu,nspawn} hooks (#2087652)
  - test: run the custom check hooks before common checks (#2087652)
  - test: check journal directly instead of capturing console output (#2087652)
  - test: use saved process PID instead of % (#2087652)
  - test: account for ADDR_NO_RANDOMIZE if it's set (#2087652)
  - fuzz-bcd: silence warning about always-true comparison (#2087652)
  - test: disable test_ntp on RHEL (#2087652)
  - core: do not filter out systemd.unit= and run-level specifier from kernel command line (#2087652)
  - test: add a simple test for daemon-reexec (#2087652)
  - test: install /usr/libexec/vi as well (#2087652)
  - test: resize the terminal automagically with INTERACTIVE_DEBUG=yes (#2087652)
  - test: create an ASan wrapper for `getent` and `su` (#2087652)
  - test: mark partition bootable (#2087652)
  - test: bump the data partition size if we don't strip binaries (#2087652)
  - test: use PBKDF2 with capped iterations instead of Argon2 (#2087652)
  - locale: drop unnecessary allocation (#2087652)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-9
changelog:
  - Revert "shared/install: create relative symlinks for enablement and aliasing" (#2118668)
  - glyph-util: add new glyphs for up/down arrows (#2118297)
  - tree-wide: allow ASCII fallback for → in logs (#2118297)
  - tree-wide: allow ASCII fallback for … in logs (#2118297)
  - core: allow to set default timeout for devices (#2116681)
  - man: document DefaultDeviceTimeoutSec= (#2116681)
  - man: update dbus docs (#2116681)
  - hwdb: 60-keyboard: Fix volume-button mapping on Asus TF103C (#2087778)
  - hwdb: CH Pro Pedals not classified correctly due to no buttons (#2087778)
  - hwdb: Add accel orientation quirk for the GPD Pocket 3 (#2087778)
  - hostname: Allow overriding the chassis type from hwdb (#2087778)
  - hwdb: Add Microsoft Surface Pro 1 chassis quirk (#2087778)
  - hwdb: treat logitech craft keyboard as a keyboard (#2087778)
  - test: frequency in mouse DPI is optional (#2087778)
  - hwdb: add two Elecom trackballs (#2087778)
  - hwdb: add new database file for PDA devices (#2087778)
  - hwdb: add support for Surface Laptop 2 & 3 (#22303) (#2087778)
  - hwdb: add HP calculators (#2087778)
  - hwbd: 60-sensor.hwdb: Add Pipo W2Pro (#2087778)
  - hwdb: 60-keyboard: Support the buttons on CZC P10T tablet (#2087778)
  - hwdb: add CST Laser Trackball (#22583) (#2087778)
  - hwdb: Force release calculator key on all HP OMEN laptops (#2087778)
  - Add support for NEC VersaPro VG-S (#2087778)
  - Fix mic mute on Acer TravelMate B311-31 (#22677) (#2087778)
  - Add AV production controllers to hwdb and add uaccess (#2087778)
  - hwdb: Add AV production access to Elgado Stream Deck devices (#2087778)
  - Add HP Elitebook 2760p support (#22766) (#2087778)
  - hwdb: Add mic mute key mapping for HP Elite x360 (#2087778)
  - hwdb: fix parser to work with newer pyparsing (#2087778)
  - hwdb: update for v251 (#2087778)
  - hwdb: update autosuspend entries (#2087778)
  - hwdb: drop boilerplate about match patterns being unstable (#2087778)
  - hwdb: Update 60-keyboard.hwdb (#23074) (#2087778)
  - hwdb: 60-keyboard: Add Acer Aspire One AO532h keymappings (#2087778)
  - hwdb 60-keyboard Add HP/Compaq KBR0133 (#2087778)
  - hwdb: add resolutions for the Vaio FE14 touchpad (#23136) (#2087778)
  - hwdb: Remap micmute to f20 for ASUS WMI hotkeys (#2087778)
  - hwdb: Fix rotation for HP Pro Tablet 408 G1 (#2087778)
  - hwdb: add keyboard mapping for HP ProBook 11G2 (#2087778)
  - hwdb: make sure "ninja update-hwdb" works on f35 (#2087778)
  - hwbd: run "update-hwdb" for v251-rc2 (#2087778)
  - hwdb: run "ninja update-hwdb-autosuspend" for v251-rc2 (#2087778)
  - Fix orientation detection for Asus Transformer T100TAF, copied T100TA rule (#2087778)
  - Fix orientation detection for HP Pavilion X2 10-k010nr (#2087778)
  - fix typo (#2087778)
  - Adding a description of the keyboard shortcut Fn+F12 for the HP EliteBook 845 G7 device. (#23253) (#2087778)
  - hwdb: run "update-hwdb" (#2087778)
  - hwdb: add rammus accelerometer support (#2087778)
  - Add support to set autosuspend delay via hwdb (#2087778)
  - Set autosuspend delay for Fibocom LG850-GL (#2087778)
  - Add HUION Inspiroy H420X to hwdb (#2087778)
  - hwdb: run 'update-hwdb' for v251-rc3 (#2087778)
  - hwdb: add touchpad parameters for Lenovo T15g Gen1 (#23373) (#2087778)
  -  hwdb: Add accel orientation for the I15-TG (#2087778)
  - hwdb: fix accelerometer mount matrix for Aquarius NS483 (#2087778)
  - hwdb: Add Google Hangouts Meet speakermic (#2087778)
  - hwdb: update via ninja -C build update-hwdb (#2087778)
  - hwdb: Add Google Meet speakermic (#2087778)
  - hwdb: Add accel orientation quirk for the Aya Neo Next (#2087778)
  - hwdb: Add HP Dev One (#2087778)
  - hwdb: analyzers: remove generic "STM Device in DFU Mode" (#2087778)
  - hwdb: Add Lenovo ThinkPad C13 Yoga (#2087778)
  - Fix automatic screen rotation for Asus Transformer T100TAM (#2087778)
  - hwdb: Add Acer Aspire A317-33 (#24050) (#2087778)
  - Add ACCEL_MOUNT_MATRIX for OXP Mini (#2087778)
  - Added DERE DBook D10 (#24173) (#2087778)
  - hwdb: analyzers: Clarify the type of devices we want listed (#2087778)
  - hwdb: Add Greaseweazle "drives" to the list of analyzers (#2087778)
  - hwdb: Apply existing accel orientation quirk to all Chromebooks (#2087778)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-11
changelog:
  - scope: allow unprivileged delegation on scopes (#2120604)
  - udev/net_id: add "rhel-9.1" naming scheme (#2121144)


author: systemd maintenance team <systemd-maint@redhat.com> - 249-2
changelog:
  - basic/unit-name: do not use strdupa() on a path (#1984299)
  - basic/unit-name: adjust comments (#1984299)
  - tmpfiles: don't create resolv.conf -> stub-resolv.conf symlink (#1989472)
  - Copy 40-redhat.rules from RHEL-8 (#1978639)
  - Avoid /tmp being mounted as tmpfs without the user's will (#1959826)
  - unit: don't add Requires for tmp.mount (#1619292)
  - units: add [Install] section to tmp.mount (#1959826)
  - rc-local: order after network-online.target (#1954429)
  - ci: drop CIs irrelevant for downstream (#1960703)
  - ci: reconfigure Packit for RHEL 9 (#1960703)
  - ci: run unit tests on z-stream branches as well (#1960703)
  - Check return value of pam_get_item/pam_get_data functions (#1973210)
  - random-util: increase random seed size to 1024 (#1982603)
  - journal: don't enable systemd-journald-audit.socket by default (#1973856)
  - journald.conf: don't touch current audit settings (#1973856)


author: systemd maintenance team <systemd-maint@redhat.com> - 249-8
changelog:
  - Really don't enable systemd-journald-audit.socket (#1973856)
  - rules: add elevator= kernel command line parameter (#2003002)
  - boot: don't build bootctl when -Dgnu-efi=false is set (#2003130)
  - unit: install the systemd-bless-boot.service only if we have gnu-efi (#2003130)
  - units: don't enable tmp.mount statically in local-fs.target (#2000927)
  - pid1: bump DefaultTasksMax to 80% of the kernel pid.max value (#2003031)
  - sd-device: introduce device_has_devlink() (#2005024)
  - udev-node: split out permission handling from udev_node_add() (#2005024)
  - udev-node: stack directory must exist when adding device node symlink (#2005024)
  - udev-node: save information about device node and priority in symlink (#2005024)
  - udev-node: always update timestamp of stack directory (#2005024)
  - udev-node: assume no new claim to a symlink if /run/udev/links is not updated (#2005024)
  - udev-node: always atomically create symlink to device node (#2005024)
  - udev-node: check stack directory change even if devlink is removed (#2005024)
  - udev-node: shorten code a bit and update log message (#2005024)
  - udev-node: add random delay on conflict in updating device node symlink (#2005024)
  - udev-node: drop redundant trial of devlink creation (#2005024)
  - udev-node: simplify the example of race (#2005024)
  - udev-node: do not ignore unexpected errors on removing symlink in stack directory (#2005024)
  - basic/time-util: introduce FORMAT_TIMESPAN (#2005024)
  - udev/net-setup-link: change the default MACAddressPolicy to "none" (#2009237)
  - set core ulimit to 0 like on RHEL-7 (#1998509)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-41
changelog:
  - timedatectl: setting set_local_rtc to 1 will throw Warning as well, use log_warning() (#33489) (RHEL-45020)
  - cryptsetup-tokens: fix pin asserts (RHEL-36276)
  - cryptenroll: Use CTAP2.1 credProtect extension (RHEL-36276)
  - kernel-install: check machine ID (RHEL-50672)
  - kernel-install: ignore errors when reading /etc/machine-id (RHEL-50672)
  - hwdb: Add Lenovo G580 (RHEL-5950)
  - Fix key toggle and programmable button for Positivo N14ZP (RHEL-5950)
  - hwdb: Add accel orientation quirk for the Acer Switch V 10 SW5-017 2-in-1 (RHEL-5950)
  - hwdb: fix Compaq N14KP6 key toggle touchpad (#25404) (RHEL-5950)
  - hwdb: remove fuzz and deadzone for Simucube wheel bases. (RHEL-5950)
  - hwdb: Add support for Elgato Stream Pedal (#25550) (RHEL-5950)
  - hwdb: add Clevo touchpad toggle key quirks (RHEL-5950)
  - hwdb: add Dell Inspiron N4010 touchpad corrections (RHEL-5950)
  - hwdb: add Positivo-vaio Pro PW key toggle touchpad (#25669) (RHEL-5950)
  - Add mount matrix for VisionBook 12Wr Tab (RHEL-5950)
  - Update 60-evdev.hwdb (#25704) (RHEL-5950)
  - hwdb: Add additional Dell models that require ACCEL_LOCATION=base (#25724) (RHEL-5950)
  - hwdb: drop trailing space (RHEL-5950)
  - hwdb: add comments about matching entries (RHEL-5950)
  - hwdb: also add a generic entry for DualPoint Stick (RHEL-5950)
  - hwdb: Add mount matrix for CSL Panther Tab HD (RHEL-5950)
  - hwdb: Fix mount matrix for CSL Panther Tab HD (#25752) (RHEL-5950)
  - hwdb: Fn+F5 fix for MSI Bravo 15-B5DX (#25788) (RHEL-5950)
  - hwdb: change definition of PROXIMITY_NEAR_LEVEL for sensors (RHEL-5950)
  - hwdb: Add mic-mute, control-center and screen-rotation mappings for MSI laptops (RHEL-5950)
  - Prevents airplane mode toggle for HP Spectre 16 (RHEL-5950)
  - Update 60-sensor.hwdb (RHEL-5950)
  - Added Tablet Teclast X98 Air 3G (C5J6) (RHEL-5950)
  - hwdb: remove spurious whitespace (RHEL-5950)
  - hwdb: Add Dell models that require ACCEL_LOCATION=base (RHEL-5950)
  - Fix Positivo MASTER-N1110 key toggle touchpad (RHEL-5950)
  - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950)
  - hwdb: Add mount matrix for Linx 1020 (RHEL-5950)
  - hwdb: Add mic mute key mappings for Dell G16 Series (RHEL-5950)
  - hwdb: Add Chuwi Hi10X (N4120 version) iio matrix (RHEL-5950)
  - hwdb: Add touchpad toggle mapping for System76 Pangolin 12 (RHEL-5950)
  - hwdb: Prevent activation of airplane mode on HP ENVY x360 (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: update autosuspend db (RHEL-5950)
  - hwdb: ieee1394-unit-function: add MOTU 896 mk3 Hybrid (RHEL-5950)
  - Add hwdb sensor entry for Lenovo IdeaPad Duet 3 10IGL5 (82AT). (RHEL-5950)
  - Fix Positivo-vaio VJPW12F11X key toggle touchpad (RHEL-5950)
  - hwdb: Add HP Envy x360 Convertible 15-cn0xxx to existing entry (RHEL-5950)
  - hwdb: add override for IdeaPad5 insert key (RHEL-5950)
  - hwdb: update database (RHEL-5950)
  - hwdb: Add HP ENVY x360 2-in-1 (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: fix swapped buttons for Logitech Lift left (RHEL-5950)
  - Revert "hwdb: fix swapped buttons for Logitech Lift left" (RHEL-5950)
  - hwdb: update 70-mouse.hwdb (#26782) (RHEL-5950)
  - hwdb: 60-keyboard.hwdb: Fix modalias for Thinkpad X200 Tablet (#26795) (RHEL-5950)
  - Add rebrands of Medion Akoya notebooks/tablets (RHEL-5950)
  - hwdb: fix Wifi toggling for Haier 7G-Series/JWU (#25293) (#26878) (RHEL-5950)
  - hwdb: drop boilerplate about match patterns in two more cases (RHEL-5950)
  - hwdb: Fix incorrect touchpad dimensions on Thinkpad L14 Gen1 (#26937) (RHEL-5950)
  - hwdb: drop redundant entry (RHEL-5950)
  - hwdb: Fixed thumb buttons reversed on CHERRY MW 2310 (#26992) (RHEL-5950)
  - hwdb: Move MSI touchpad-toggle mapping to generic MSI section (RHEL-5950)
  - update 60-sensor.hwdb with toshiba tablet (#27103) (RHEL-5950)
  - hwdb: Add support for "Passion Model P612F" (RHEL-5950)
  - hwdb: fix ambiguous glob pattern for Lenovo machines (RHEL-5950)
  - hwdb: add matrix for Asus BR1100F (#27197) (RHEL-5950)
  - hwdb: add accelerometer mount matrix for Lenovo Yoga Tablet 2 851F/L (RHEL-5950)
  - hwdb: Fix rotation for BMAX Y13 (RHEL-5950)
  - hwdb: disable entry for Logitech USB receiver used by G502 X (RHEL-5950)
  - hwdb: add hardware rfkill key for Dell Latitude E6* models (#27462) (RHEL-5950)
  - hwdb: do not include '#' in modalias (RHEL-5950)
  - hwdb: add landscape IdeaPad Miix 310 sensor orientation (#27555) (RHEL-5950)
  - Fix Positivo CF40CM-V2 key toggle touchpad (RHEL-5950)
  - hwdb: fix keyboard entry for IdeapadFlex5 (#27643) (RHEL-5950)
  - hwdb: fix Positivo CG15D key toggle touchpad and programmable keys (#27689) (RHEL-5950)
  - hwdb: add support for Elgato Stream Deck mini (gen 2) (RHEL-5950)
  - hwdb: fix arrow keys on HP Elite Dragonfly G3 (RHEL-5950)
  - hwdb: add support for Jun Tab2/Dere T11 to 60-sensor.hwdb (#28092) (RHEL-5950)
  - hwdb: fix volume control keys on Lenovo IdeaPad Flex 5 (14ARE05) (RHEL-5950)
  - hwdb: Add override for headset form-factors (RHEL-5950)
  - hwdb : add support for Archos 101 Cesium Educ to 60-sensor.hwdb (RHEL-5950)
  - hwdb: drop trailing white space (RHEL-5950)
  - hwdb: merge multiple keyboard entries with same setting (RHEL-5950)
  - hwdb: make matching modalias for Archos 101 Cesium Educ more strict (RHEL-5950)
  - hwdb update for v246-rc1 (RHEL-5950)
  - update hwdb autosuspend data for v254 (RHEL-5950)
  - hwdb: add support for Archos 101 Cesium to 60-sensor.hwdb (#28270) (RHEL-5950)
  - Hwdb: Add Sanwa Direct 400-MA128 external trackpad (#28272) (RHEL-5950)
  - hwdb: drop POINTINGSTICK_CONST_ACCEL (RHEL-5950)
  - Add alternate name for MX Ergo as found on some devices (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: run update-hwdb (RHEL-5950)
  - hwdb: run update-hwdb (RHEL-5950)
  - hwdb: Mute SW rfkill keys on MSI Wind U100 (RHEL-5950)
  - Update 60-sensor.hwdb (#28804) (RHEL-5950)
  - hwdb: Added config for RCA W101SA23T1 (#29041) (RHEL-5950)
  - Update 60-input-id.hwdb: add TEX Shinobi (#29068) (RHEL-5950)
  - hwdb: keyboard: D330 FnLk toggle (RHEL-5950)
  - hwdb: Add Logitech G502 X (RHEL-5950)
  - hwdb: ieee1394-unit-function: remove superfluous Weiss Engineering DAC1 entry (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Weiss Engineering DAC202 (Maya edition) (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Weiss Engineering INT203 entry with older firmware (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Weiss Engieering MAN301 (RHEL-5950)
  - hwdb: Add quirk for teclast x3 plus (G4K3) rotation (#29202) (RHEL-5950)
  - hwdb: add mic mute key mappings for Acer Predator Triton 300 SE (RHEL-5950)
  - hwdb: Bush tablet rotation support (#29268) (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Miglia Technology Harmony Audio (HA02) (RHEL-5950)
  - add support for hp pavilion gaming 15 lid switch (#29304) (RHEL-5950)
  - Fix Positivo N14EP6 key toggle touchpad and programmable keys (#29448) (RHEL-5950)
  - add udev rule for micmute (f20) (RHEL-5950)
  - hwdb,rules: mark host-to-host network devices as only requiring link local addressing (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - Update hwdb autosuspend rules (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: Add accelerometer data for Librem11 (#29974) (RHEL-5950)
  - hwdb: PNP/ACPI lists on uefi.org are now in CSV format (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: rename .html=>.csv (RHEL-5950)
  - hwdb/acpi-update.py: streamline python code (RHEL-5950)
  - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950)
  - hwdb: add Predator PHN16-71 (RHEL-5950)
  - Update 60-autosuspend.hwdb (#30131) (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Sony DVMC-DA1 (RHEL-5950)
  - hwdb: ieee1394-unit-function: arrangement for Sony DVMC-DA1 (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - Adding Trekstor Primebook C13 rotation to 60-sensor.hwdb (#30415) (RHEL-5950)
  - Add three Dell platforms to sensor accel location base (RHEL-5950)
  - Add Bosto BT-12HD series to hwdb (RHEL-5950)
  - hwdb: Add override for headset form-factor for the Corsair Void Elite (RHEL-5950)
  - hwdb: add Teclast X98 Pro sensor info (#30859) (RHEL-5950)
  - hwdb: Correct display rotation on Chuwi Ubook X N4100 (#24248) (RHEL-5950)
  - hwdb: ieee1394-unit-function: adjustment of entries with device attributes available in Linux v6.8 (RHEL-5950)
  - 60-evdev.hwdb: Add support for Huion Inspiroy 2 L (#31241) (RHEL-5950)
  - hwdb: add resolution setting for GAOMON S620 (RHEL-5950)
  - hwdb: Remove version check in CH Pro Pedals rule (RHEL-5950)
  - hwdb: Add support for MetawillBook01 to 60-sensor.hwdb Add accel orientation quirk for the METAPHYUNI MetawillBook01 2-in-1 laptop (RHEL-5950)
  - hwdb: Add headset form-factor override for Xbox Wireless Dongle (RHEL-5950)
  - hwdb: Add support for Elgato Stream Deck Plus (RHEL-5950)
  - Fix: Chuwi UBook X (CWI535) screen rotation matrix (RHEL-5950)
  - hwdb: Add touchpad toggle mapping for Kvadra LE14U/LE15U (RHEL-5950)
  - hwdb: Add touchpad configuration for ThinkPad E495 (RHEL-5950)
  - Fix Positivo N14NPE-N and N15NPE-N key toggle touchpad and search key (RHEL-5950)
  - Update USB ids of hwdb (RHEL-5950)
  - Added resolution for Huion Kamvas Pro 19 (RHEL-5950)
  - hwdb: Add mapping for ACPI quickstart keys on Toshiba Z830 (RHEL-5950)
  - hwdb: fix Asus T300FA rotation matrix (#31973) (RHEL-5950)
  - Fixed resolution for pen and touchpad (RHEL-5950)
  - hwdb: fix missing colon (#32108) (RHEL-5950)
  - hwdb: update for v256 (RHEL-5950)
  - autosuspend: update for v256 (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - Update autosuspend hwdb (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: Add a common Logitech M185/M225 mouse variant (RHEL-5950)
  - hwdb: Add mapping for Samsung GalaxyBook - 550X (#32616) (RHEL-5950)
  - hwdb: Add mapping for Xiaomi Mipad 2 bottom bezel capacitive buttons (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Tascam IF-FW/DM mkII (RHEL-5950)
  - hwdb: Add a Logitech MX Master 3S (connected via Bolt Receiver) (RHEL-5950)
  - Fix Positivo N14EPE and N15EPE key toggle touchpad and search key (RHEL-5950)
  - hwdb: update Dere N12 / Juno Tablet 3 accelerometer (#32765) (RHEL-5950)
  - hwdb: updated Librem 11 accelerometer (#32772) (RHEL-5950)
  - hwdb: ID_INPUT_XYZ allows an empty string (RHEL-5950)
  - hwdb: ASRock LED Controller classified incorrectly as joystick due to buttons and axis (#32775) (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb.d/60-keyboard.hwdb: enable Clevo quirk for model V5x0TU (RHEL-5950)
  - hwdb: Enable JP-IK LEAP W502's touchpad toggle key (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - Update autosuspend hwdb (RHEL-5950)
  - hwdb: Lenovo IdeaPad Z500 Touchpad Toggle (#33039) (RHEL-5950)
  - hwdb: add a vmbus id for HyperV Video device (RHEL-5950)
  - hwdb: Add Logitech MX Master 3S Bluetooth ID (RHEL-5950)
  - hwdb: Lenovo 16G6IRL volume keys and friends (#33107) (RHEL-5950)
  - hwdb: added hwdb rules for micmute and power button on Acer Nitro AN 515-58 (#32867) (RHEL-5950)
  - Fix key toggle touchpad and programmable buttom for Positivo N14AP7 (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: add keyboard mappings for the Ayaneo Kun face buttons (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: add support for AIPTEK Media Tablet Ultimate (#33371) (RHEL-5950)
  - hwdb: add scancodes for AYANEO devices (#33378) (RHEL-5950)
  - Add OrangePi NEO Scancodes (RHEL-5950)
  - hwdb: Fix Logitech G915 TKL (Bluetooth) appearing as a mouse (RHEL-5950)
  - hwdb: fix keyboard of RedmiBook Pro 15 2022 (#33465) (RHEL-5950)
  - Added mised EVDEV_ABS_35 & EVDEV_ABS_36 for GAOMON s620 (RHEL-5950)
  - hwdb: Add some HP IR cameras (RHEL-5950)
  - hwdb: add more AV controllers (RHEL-5950)
  - Fix key toggle touchpad button for multilaser ul154 (#33630) (RHEL-5950)
  - hwdb: Added StarLabs StarLite position sensor mapping (RHEL-5950)
  - 70-mouse.hwdb: Added Glorious Model O DPI (RHEL-5950)
  - Update 60-sensor.hwdb (RHEL-5950)
  - Add MSI Claw AT Keyboard Scancodes. (RHEL-5950)
  - Add or fix mount matrix for multiple handhelds. (#33586) (RHEL-5950)
  - Revert "hwdb: Added StarLabs StarLite position sensor mapping" (RHEL-5950)
  - hwdb: fix accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950)
  - hwdb: add backslash and touchpad toggle mapping for Aquarius Cmp NS483 (RHEL-5950)
  - hwdb: Add mic mute key mapping for Dell Pro Rugged series (RHEL-5950)
  - hwdb: fix MXC6655 accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950)
  - add udev rules for trezor hw wallet devices (RHEL-5950)
  - hwdb: add axis range corrections for the Lenovo Thinkpad E16 (RHEL-5950)
  - hwdb: fix auto rotate on Asus Q551LB (#33921) (RHEL-5950)
  - udev: add hwdb execution for hidraw subsystem devices (RHEL-5950)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-43
changelog:
  - udev-builtin-net_id: skip non-directory entry earlier (RHEL-50103)
  - udev-builtin-net_id: return earlier when hotplug slot is not found (RHEL-50103)
  - udev-builtin-net_id: split-out pci_get_hotplug_slot() and pci_get_hotplug_slot_from_address() (RHEL-50103)
  - udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT (RHEL-50103)
  - Include <threads.h> if possible to get thread_local definition (RHEL-50651)
  - add APIs for detecting confidential virtualization (RHEL-50651)
  - detect-virt: add --cvm option (RHEL-50651)
  - detect-virt: add --list-cvm option (RHEL-50651)
  - unit: add "cvm" option for ConditionSecurity (RHEL-50651)
  - dbus: add 'ConfidentialVirtualization' property to manager object (RHEL-50651)
  - core: log detected confidential virtualization type (RHEL-50651)
  - core: set SYSTEMD_CONFIDENTIAL_VIRTUALIZATION env for generators (RHEL-50651)
  - udev: add 'conf-virt' constant for confidential virtualization tech (RHEL-50651)
  - confidential-virt: split caching of CVM detection into separate method (RHEL-50651)
  - confidential-virt: add detection for s390x target (RHEL-50651)
  - man/systemd-detect-virt: list known CVM technologies (RHEL-50651)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-44
changelog:
  - Revert "udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT" (RHEL-50103)
  - fundamental: share constants for confidential virt detection (RHEL-50651)
  - efi: add helper API for detecting confidential virtualization (RHEL-50651)
  - efi: don't pull kernel cmdline from SMBIOS in a confidential VM (RHEL-50651)
  - Fix detection of TDX confidential VM on Azure platform (RHEL-50651)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-49
changelog:
  - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-24340)
  - Fix configuration for Packit 1.0.0 (RHEL-70884)
  - udev/net_id: introduce naming scheme for RHEL-9.6 (RHEL-25515)
  - hwdb: Fix accelerometer mount matrix for ASUS T100TAS (RHEL-49810)
  - hwdb.d/60-keyboard.hwdb: add Clevo mic mute quirk for V5x dGPU (RHEL-49810)
  - hwdb: add entry for Dell AlpsPS/2 ALPS DualPoint TouchPad (RHEL-49810)
  - hwdb: Mark Apple Wireless keyboards as not having NumLock LED (RHEL-49810)
  - update keyboard hwdb to add acer Predator PHN16-72 (RHEL-49810)
  - hwdb: death to tabs! (RHEL-49810)
  -  hwdb.d/60-keyboard.hwdb: add Clevo mic mute quirk for V5x iGPU, NV41PZ (RHEL-49810)
  - Add ACCEL_MOUNT_MATRIX for Chuwi Hi10 Max. (RHEL-49810)
  - Add HUAWEI MateBook D 15 AMD ACCEL properties (RHEL-49810)
  - hwdb: add Kensington SlimBlade Pro trackball (Bluetooth mode) (RHEL-49810)
  - hwdb: Add accel orientation quirk for the IdeaPad Duet 3 10IGL5-LTE (RHEL-49810)
  - hwdb: add keymaps for Acer Nitro 5 AN515-47 (#34493) (RHEL-49810)
  - hwdb: make key map match comment for one laptop (RHEL-49810)
  - hwdb: there's KEY_BRIGHTNESS_AUTO these days, hence hook it up where a FIXME suggests that (RHEL-49810)
  - hwdb: use KEY_ROTATE_DISPLAY for various cases of display rotation keys (RHEL-49810)
  - hwbd: use newer KEY_PICKUP_PHONE, KEY_HANGUP_PHONE, KEY_SELECTIVE_SCREENSHOT, KEY_NOTIFICATION_CENTER keycodes where appropriate (RHEL-49810)
  - hwdb: add SCAI SKU prefix for Samsung keyboard mapping (#34648) (RHEL-49810)
  - tree-wide: drop doubled empty lines (RHEL-49810)
  - hwdb: move key 66/65 handling from specific to generic HP laptop coverage (RHEL-49810)
  - hwdb: fix key toggle touchpad and programmable buttom for Positivo V142N (#34725) (RHEL-49810)
  - hwdb: add Stream Deck Neo (#34903) (RHEL-49810)
  - hwdb: update autosuspend rules (RHEL-49810)
  - hwdb: import newest autosuspend rules from chromeos (RHEL-49810)
  - update hwdb (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: fix broken numpad paren keys on Lenovo Thinkbook 16 G6+ 2024 (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: add new Cube Mix Plus (i18D) rotation info (RHEL-49810)
  - hwdb: Add quirk for Logitech MX Keys for Mac (RHEL-49810)
  - hwdb: add support for PineTab2 to 60-sensor.hwdb (#35304) (RHEL-49810)
  - hwdb: add entry for Chuwi Hi10 X1 (#35331) (RHEL-49810)
  - hwdb: update (RHEL-49810)
  - hwdb: Make 3D mice work out-of-the-box (RHEL-49810)
  - hwdb: Add Chuwi MiniBook X trackpad fuzz (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: disable inclusion of the PCI domain in MANA network interface naming (RHEL-49810)
  - hwdb: move down touchpad toggle section from generic to product specific (RHEL-49810)
  - hwdb: add scancodes for HP Elitebook 2170p runnning coreboot (RHEL-49810)
  - hwdb: Make remote controllable lights work out-of-the-box (RHEL-49810)
  - hwdb: fix key toggle touchpad for VAIO VJFH52 (#35645) (RHEL-49810)
  - hwdb: comment out the entry for Logitech MX Keys for Mac (RHEL-49810)
  - 60-sensor.hwdb: Loosen model mask to include entire series (RHEL-49810)
  - Correct ACCEL_MOUNT_MATRIX for Chuwi Hi10 Max (RHEL-49810)
  - hwdb: Add macro keys for HP 430 Programmable Wireless Keypad (RHEL-49810)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-50
changelog:
  - journal: again create user journals for users with high uids (RHEL-70103)
  - install: don't translate unit instances to paths when reenabling them (RHEL-5956)
  - test-systemctl-enable: fix typo (RHEL-5956)
  - udev: Handle PTP device symlink properly on udev action 'change' (RHEL-59088)
  - systemctl: print warning about missing /proc only as debug message (RHEL-3906)
  - repart: avoid use of uninitialized TPM2B_PUBLIC data (RHEL-56793)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-51
changelog:
  - ci: use ubuntu 22:04 for deploy of man pages (RHEL-70884)
  - man/tmpfiles: fix off-by-one in example (RHEL-74015)
  - test: drop removed SCSI passthrough feature (RHEL-70884)
  - nspawn: call json_dispatch() with a correct pointer (RHEL-55266)
  - varlink,json: introduce new varlink_dispatch() helper (RHEL-55266)
  - json: add json_dispatch_const_user_group_name() (RHEL-55266)
  - sd-varlink: add new sd_varlink_error_is_invalid_parameter() helper (RHEL-55266)
  - userdb: return ESRCH if userdb service refuses a user/group name as invalid (RHEL-55266)
  - test: rename assert.sh to util.sh (RHEL-55301)
  - core: Don't GC unit if it is in cgroup_empty_queue (RHEL-55301)
  - core: Handle cgroup pruning in on_cgroup_empty_event (RHEL-55301)
  - Fix failing test (RHEL-55301)
  - unit: don't gc unit in oom queue (RHEL-55301)
  - core: do not GC units/jobs that are in the D-Bus queue (RHEL-55301)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-52
changelog:
  - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-15051)
  - unit: always return 1 in log_kill (RHEL-78170)
  - ci: enable mkosi workflow for z-stream branches (RHEL-79977)
  - ci(mkosi): bump fedora version from 39 to 41 (RHEL-79977)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-53
changelog:
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-86891)
  - backlight: Drop support for actual_brightness (RHEL-86714)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-54
changelog:
  - unit: add conditions and deps to make oomd.socket and .service consistent (RHEL-90417)
  - udev/net_id: introduce naming scheme for RHEL-9.7 (RHEL-25516)
  - Add a set of assertion macros to tests.h (ASSERT_OK(), ASSERT_EQ(), ASSERT_GE(), ASSERT_LE()) that log the failed condition before crashing and convert test-gpt.c test file to use them (RHEL-103753)
  - Follow up with the PR #31819 (RHEL-103753)
  - Added more ASSERT macro and also make some test file to use them (RHEL-103753)
  - sd-event: drop inotify event from buffer when no event source is triggered (RHEL-103753)
  - test: add test case for issue #38265 (RHEL-103753)
  - test: answer 2nd mdadm --create question for compat with new version (RHEL-79977)
  - sysusers: cross-check user and group names too (RHEL-72572)
  - test-sysusers: check group creation with matching user entry (RHEL-72572)
  - user-sessions: do not remove /etc/nologin (RHEL-85467)
  - hwdb: f20 → micmute (RHEL-72697)
  - hwdb: f21 → touchpad_toggle (RHEL-72697)
  - hwdb: f22 → touchpad_on (RHEL-72697)
  - hwdb: f23 → touchpad_off (RHEL-72697)
  - hwdb: drop some now redundant mappings (RHEL-72697)
  - hwdb: Add micmute for System76 (RHEL-72697)
  - hwdb: Add newer System76 Pangolins (RHEL-72697)
  - hwdb: WALTOP International Corp. Slim Tablet Stylus (RHEL-72697)
  - hwdb: add MSI Claw 8 AT Keyboard Scancodes (#36180) (RHEL-72697)
  - Adds asus T103HAF rotation matrix to 60-sensor.hwdb (#36177) (RHEL-72697)
  - hwdb: fix screen rotation for EXO Wings 2in1 w1125 (#36283) (RHEL-72697)
  - hwdb: XBox Series Elite controller modalias entry has been added. (#36305) (RHEL-72697)
  - hwdb: add front button support for MSI Claw 7 AI+ A2VM (RHEL-72697)
  - hwdb: add accel orientation and location for the BMAX Y14 (RHEL-72697)
  - hwdb.d: add support for Akoya P15645 (RHEL-72697)
  - hwdb.d: add ANP09 Intel n100 tablet sensor configuration (#36390) (RHEL-72697)
  - hwdb: add axis range corrections for the Lenovo Yoga Slim 7 14ARE05 (RHEL-72697)
  - hwdb: add GOLD WARRIOR SIM PhoenixRC 10411R (RHEL-72697)
  - hwdb: add Code Mercenaries Hard- und Software GmbH Virtual RC USB (RHEL-72697)
  - hwdb: Add accel orientation quirk for the GPD Pocket 4 (RHEL-72697)
  - hwdb: add rotation profile matrix for Rog Ally X (2024) (#36591) (RHEL-72697)
  - hwdb: fix backspace not working on HP Pavilion laptop (#36777) (RHEL-72697)
  - hwdb/keyboard: Map FN key on TUXEDO NB02 devices (RHEL-72697)
  - hwdb: add G-Mode key support (#37175) (RHEL-72697)
  - hwdb/keyboard: Map FN key on TUXEDO InfinityFlex 14 Gen1 (RHEL-72697)
  - hwdb: add HP 150 Wired Mouse (#37341) (RHEL-72697)
  - Add emulated release to G-Mode key (RHEL-72697)
  - hwdb: keyboard: Add Alienware special keys (RHEL-72697)
  - hwdb: add bladeRF SDR devices (RHEL-72697)
  - hwdb: append ID_SOFTWARE_RADIO to hwdb parser (RHEL-72697)
  - hwdb.d: reword and simplify boilerplate texts (RHEL-72697)
  - hwdb.d: update/expand boilerplate on various hwdb files (RHEL-72697)
  - hwdb: say that settings can be also set to 0 (RHEL-72697)
  - hwdb: add Analog Devices PLUTO SDR (RHEL-72697)
  -  hwdb: append ID_MM_DEVICE_IGNORE to hwdb parser (RHEL-72697)
  - hwdb: run "update-hwdb" (RHEL-72697)
  - hwdb: run "update-hwdb-autosuspend" (RHEL-72697)
  - hwdb: add missing PLUTO SDR vendor name (RHEL-72697)
  - hwdb: add Ettus Research SDR devices (RHEL-72697)
  - hwdb: add RTL-SDR devices (RHEL-72697)
  - hwdb: merge entries for Ettus Research B200 (RHEL-72697)
  - hwdb: make Saitek PLC Pro Flight Rudder Pedals a joystick (#37601) (RHEL-72697)
  - hwdb: fix touchpad for ASUS X1504ZA (#37696) (RHEL-72697)
  - hwdb: add support for Loupedeck devices (RHEL-72697)
  - hwdb: Acer Nitro ANV15-51 Mic Toggle (RHEL-72697)
  - hwdb: Added Beacn and TC-Helicon Audio controllers (#37798) (RHEL-72697)
  - hwdb: Add support for Lenovo IdeaPad Slim 5 series (RHEL-72697)
  - hwdb: Add hwbd definitions for maker tools (RHEL-72697)
  - hwdb: Add accel orientation quirk for the Microtech e-tab Pro (RHEL-72697)
  - hwdb: add 70-maker-tools.hwdb to meson.build (RHEL-72697)
  - hwdb: fix typo in 70-maker-tools.hwdb (RHEL-72697)
  - hwdb: update (RHEL-72697)
  - Fix Positivo K116J search key and www shortcut (RHEL-72697)
  - hwdb: Acer Nitro ANV15-51 Nitro Sense Toggle (RHEL-72697)
  - hwdb: several cleanups (RHEL-72697)
  - hwdb: disable Asus ROG keyboards sending poweroff (RHEL-72697)
  - hwdb: update (RHEL-72697)
  - hwdb: update autosuspend rules (RHEL-72697)
  - hwdb: set touchpad resolution for ThinkPad T14 Gen2a (RHEL-72697)
  - Revert "hwdb: disable Asus ROG keyboards sending poweroff" (RHEL-72697)
  - hwdb: Add launch emoji keyboard mapping for Asus M1607KA (RHEL-72697)
  - Enable KEY_PERFORMANCE key present on Linux 6.17 (RHEL-72697)
  - flush_ports: flush POSIX message queues properly (RHEL-90860)
  - kernel-install: add --entry-type=type1|type2 option to kernel-install (RHEL-83932)
  - kernel-install: add --entry-type=type1|type2 option to kernel-install.in (RHEL-83932)
  - kernel-install: do not mix || and && (RHEL-83932)
  - man/kernel-install: mention --entry-type= option in the man page (RHEL-83932)
  - cgroup: add support for memory.peak (RHEL-95797)
  - core: include peak memory in unit_log_resources() (RHEL-95797)
  - run: include peak memory in output (RHEL-95797)
  - core: ensure init.scope is realized after drop-ins have been loaded (RHEL-103488)
  - core: add possibility to not track certain unit types (RHEL-89796)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-55
changelog:
  - tree-wide: check more log message format in log_struct() and friends (RHEL-100353)
  - build: add some coloring to --version output (RHEL-100353)
  - core: output log cycle path in one log message, not many (RHEL-100353)
  - core: make log cycle messages recognizable via message IDs (RHEL-100353)
  - core: change ordering cycle log message log levels (RHEL-100353)
  - core: cast log_oom() got void (RHEL-100353)
  - core: when removing a job from a transaction, include in structured log message which (RHEL-100353)
  - catalog: add entries for the order cycle log messages (RHEL-100353)
  - tree-wide: check more log message format in log_struct() and friends (RHEL-100353)
  - core/transaction: do not attempt to log "n/a" as a journal field (RHEL-100353)


author: Frank Ch. Eigler <fche@redhat.com> - 5.0-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Martin Cermak <mcermak@redhat.com> - 5.1-4
changelog:
  - RHEL-50107.patch:  Make systemtap compatible with kernel
    commit 68cbd415dd4b .  Related: RHEL-56962 .


author: Frank Ch. Eigler <fche@redhat.com> - 5.2-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
  - https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Sergio Correia <scorreia@redhat.com> - 7.8
changelog:
  - Move build system to meson
    Upstream commits (fed9020, 590de27)
  - Move key handling to tang itself
    Upstream commits (6090505, c71df1d, 7119454)


author: Jan Macku <jamacku@redhat.com> - 6.22.03-1
changelog:
  - Update to tcsh-6.22.03
  - Drop tcsh-6.22.02-avoid-gcc-to-fail.patch                              - applied by upstream
  - Drop tcsh-6.22.02-call-seterror-consistently-and-abort-quickly.patch   - applied by upstream
  - Drop tcsh-6.22.02-avoid-crashing-when-loading-corrupted-history.patch  - applied by upstream


author: Petr Pisar <ppisar@redhat.com> - 2.5.9-2
changelog:
  - Modernize spec file
  - License corrected to
    ((LGPLv2+ or CPL) and (LGPLv2+ or GPLv2+ or MPLv2.0 or MPLv1.1))


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-82
changelog:
  - Changing LD_FLAGS to RPM_LD_FLAGS
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Than Ngo <than@redhat.com> - 9:20200327-19
changelog:
  - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.2-36
changelog:
  - Fix inconsistent --map-file option spelling in manual (rhbz#2066855)
  - Fix memory corruption in tftpd when filename remapping with macro \x
    is used (rhbz#2066858)


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.2-37
changelog:
  - Review and fix issues reported by static analysers (rhbz#2069613)
  - Use systemd-rpm-macros and modernise the specfile a bit
    - Based on changes made by Dominik 'Rathann' Mierzejewski in Fedora.
      Thanks a lot!


author: Jan Grulich <jgrulich@redhat.com> - 1.14.0-2
changelog:
  - 1.14.0
    Resolves: RHEL-45316
  - Move old log to log.old if present
    Resolves: RHEL-54294
  - Fix shared memory leak
    Resolves: RHEL-55768


author: Jan Grulich <jgrulich@redhat.com> - 1.14.0-4
changelog:
  - Add option "ApproveLoggedUserOnly" allowing to connect only the user
    owning the running session
    Resolves: RHEL-34880


author: Jan Grulich <jgrulich@redhat.com> - 1.14.1-2
changelog:
  - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability
    Resolves: RHEL-62001


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-1
changelog:
  - 1.15.0
    Resolves: RHEL-78617
  - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open
    Resolves: RHEL-77973
  - Add SELinux policy rules allowing to create directories under /root
    Resolves: RHEL-77975
  - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor
    Resolves: RHEL-80208
  - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText()
    Resolves: RHEL-80189
  - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms()
    Resolves: RHEL-80194
  - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey()
    Resolves: RHEL-80196
  - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient()
    Resolves: RHEL-80197
  - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow()
    Resolves: RHEL-80206
  - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents()
    Resolves: RHEL-80205
  - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger()
    Resolves: RHEL-80209


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-5
changelog:
  - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors
    Resolves: RHEL-97284

  - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension
    Resolves: RHEL-97303

  - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore
    Resolves: RHEL-97379

  - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension
    Resolves: RHEL-97414

  - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension
    Resolves: RHEL-97429


author: Justin Stephenson <jstephen@redhat.com> - 8-1
changelog:
  - Release v8
  - Spec file fixes for EL6
  - Spec file improvements for Debian/Ubuntu pkg-config
  - Tlog-play improve authentication options
  - Handle piped in I/O from stdin and improve the main recording
    transfer exit condition.
  - Use empty string on hostname resolution failure


author: Justin Stephenson <jstephen@redhat.com> - 9-1
changelog:
  - Release v9
  - Add libutempter support
  - Require journal match filter
  - Add file reader match functionality
  - Restore cursor visibility and color attributes on tlog-play exit
  - Add "time" real clock timestamp message field
  - Various upstream CI improvements


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Release v12
  - Prevent infinite transfer loop on GDM login.
  - tlog-play: add journal namespace support.
  - tlitest: extend delay for limit-action delay test.


author: Justin Stephenson <jstephen@redhat.com> - 12.1
changelog:
  - Exit transfer loop when output fd is closed
  - Revert "Prevent infinite transfer loop on GDM login"


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-65
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-81721
  - Remove deprecated path from systemd service file
    Resolves: RHEL-81716


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.4-3
changelog:
  - Rebuild for CVE-2022-41723, CVE-2023-24534, CVE-2023-24536 and
    CVE-2023-24538
  Resolves: #2187337, #2187385, #2203706


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.4-7
changelog:
  - Rebuild for CVE-2023-39318, CVE-2023-39319, CVE-2023-39325 and
    CVE-2023-44487
  Resolves: RHEL-4435, RHEL-4439, RHEL-12694


author: Debarshi Ray <rishi@fedoraproject.org> - 0.2-2
changelog:
  - Update to 0.2
  - Fix CVE-2025-23266, CVE-2025-23267, and GHSA-fv92-fjc5-jj9h or GO-2025-3787
  Resolves: RHEL-104455


author: Štěpán Horáček <shoracek@redhat.com> - 5.2-4
changelog:
  - Backport upstream fixes.
  - tpm2_checkquote: Fix check of magic number. (CVE-2024-29038)
  - tpm2_checkquote: Add comparison of pcr selection. (CVE-2024-29039)
  - Fix check of magic number.
    Resolves: RHEL-23198
    Resolves: RHEL-41031
    Resolves: RHEL-41035


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-2
changelog:
  - Update to 3.1.0.rc, based on earlier tracker3-miners packaging
  - Obsolete separate tracker3-miners package


author: Tom Stellard <tstellar@redhat.com> - 3.0.9-59
changelog:
  - Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: Christian Kellner <ckellner@redhat.com> - 0.99.11-2
changelog:
  - Add systemd service snippets
  - Use macros for _unitdir and _udevrulesdir
  - Mark _datadir/gtk-doc as directory


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-1
changelog:
  - rebase usbguard to 1.0.0
  - added support for rules covering combination of classes
  - fix usbguard being killed
  Resolves: rhbz#1916039
  Resolves: rhbz#1861330
  Resolves: rhbz#1905257


author: Radovan Sroka <rsroka@redhat.com> - 1.0.0-7
changelog:
  RHEL 9 BETA
  - starting usbguard service complains about PIDFile= references a path below legacy directory /var/run/
  Resolves: rhbz#1985627
  - file conflict when installing usbguard on rhel
  Resolves: rhbz#1986785


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-10
changelog:
  - fix DSP module definition in spec file
  Resolves: rhbz#2014442
  - fix IPC access control files override
  Resolves: rhbz#2009227
  - validate ACL permission existence
  Resolves: rhbz#2009229
  - decrease usbguard-notifier spam when denied connection
  Resolves: rhbz#2009226


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-11
changelog:
  - Fix unauthorized access via D-bus
  - Fix memory leak when connection to dbus is broken
  Resolves: rhbz#2059068


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-12
changelog:
  - Set OOMScoreAdjust to -1000 in service file
  Resolves: rhbz#2097419
  - Fix race condition in usbguard-daemon when forking
  Resolves: rhbz#2042345
  - Add missing files to documentation
  Resolves: rhbz#2122107
  - Neither RuleFolder nor RuleFile exists bugfix
  Resolves: rhbz#2122109
  - Remove build for i686 arch
  Resolves: rhbz#2126622


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-15
changelog:
  - Disable logging to console, logging to syslog is still enabled
  Resolves: rhbz#2122109
  - Store permanent rules even if RuleFile is not set but RuleFolder is
  Resolves: rhbz#2155910


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Rebase to latest upstream: 0.13.0
  - Keeps usbredirserver binary (removed upstream)
    Related: rhbz#2135760


author: Victor Toso <victortoso@redhat.com> - 0.13.0-2
changelog:
  - Fixes 100% CPU usage when usbredirect used as TCP server
    Related: rhbz#2157520
  - Fixes USB redirection of identical devices
    Resolves: rhbz#2157520


author: Jiri Kucera <jkucera@redhat.com> - 1.114-3
changelog:
  - Do not use fexecve
    Script executed via fexecve has a file descriptor number in
    argv[0]. This results in unexpected output: when displaying
    the script help, a user see "Usage: <number> [options]"
    instead of "Usage: <scriptname> [options]".
    Resolves: #1984417


author: Mark Wielaard <mjw@redhat.com> - 3.21.0-7
changelog:
  - Add valgrind-3.21.0-callgrind_control-no-strict.patch
  - Add valgrind-3.21.0-realloc-again.patch
  - Update valgrind-3.21.0-no-memcpy-replace-check.patch (memcpy_chk)
  - Add valgrind-3.21.0-vgm.patch and valgrind-3.21.0-vgm-tests.patch
  - Add valgrind-3.21.0-pgste.patch


author: Mark Wielaard <mjw@redhat.com> - 3.22.0-1
changelog:
  - Upstream 3.22.0 final
  - BuildRequires elfutils-debuginfod for testing
  - Remove all upstreamed patches
  - Adjust valgrind-3.16.0-some-stack-protector.patch
  - Adjust valgrind-3.16.0-some-Wl-z-now.patch
  - Add cachegrind.h to valgrind-devel package
  - Use %patch -Pn instead of deprecated %patchn


author: Mark Wielaard <mjw@redhat.com> - 3.23.0-4
changelog:
  Add upstream VALGRIND_3_23_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.23-fixes.patch
    0002-486180-MIPS-VexGuestArchState-has-no-member-named-gu.patch
    0003-Bug-486293-memccpy-false-positives.patch
    0004-Bug-486569-linux-inotify_init-syscall-wrapper-missin.patch
    0005-aarch64-frinta-and-frinta-vector-instructions.patch
    0006-mips-skip-using-shared-syscall-numbers-for-mips32.patch
    0007-Fix-uninitialized-err-in-handle_extension.patch
    0008-Avoid-use-of-guest_IP_AT_SYSCALL-in-handle_extension.patch
    0009-s390x-Minor-fixes-in-extension-s390x.c.patch
    0010-Bug-453044-gbserver_tests-failures-in-aarch64.patch
    0011-Linux-regtest-reallocarray-needs-malloc.h.patch
    0012-Bug-487439-SIGILL-in-JDK11-JDK17.patch
    0013-Don-t-leave-fds-created-with-log-file-xml-file-or-lo.patch
    0014-Close-both-internal-pipe-fds-after-VG_-fork-in-paren.patch
    0015-Don-t-allow-programs-calling-fnctl-on-valgrind-s-own.patch
    0016-mips-skip-using-shared-syscall-numbers-for-mips64.patch
    0017-gdbserver_tests-filters-remove-python-rpm-module-loa.patch
    0018-Implement-VMOVQ-xmm1-xmm2-m64.patch
    0019-arm64-Fix-fcvtas-instruction.patch
    0020-gdbserver_tests-filters-remove-more-verbose-python-r.patch
    0021-Avoid-dev-inode-check-on-btrfs-with-sanity-level-3.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-2
changelog:
  - Add VALGRIND_3_24_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.24-fixes.patch
    0002-vgdb.c-fork_and_exec_valgrind-Fix-off-by-one-error-w.patch
    0003-vgdb.c-fork_and_exec_valgrind-Fix-another-off-by-one.patch
    0004-regtest-add-a-fdleak-filter-for-write-on-write-on-li.patch
    0005-Add-exp-and-supp-patterns-for-missing-main-frame-for.patch
    0006-Add-additional-exp-ppc64le-files-to-EXTRA_DIST.patch
    0007-Add-support-for-landlock_create_ruleset-444-landlock.patch
    0008-helgrind-tests-tc17_sembar.c-Remove-bool-typedef.patch
    0009-drd-tests-swapcontext.c-Rename-typedef-struct-thread.patch
    0010-none-tests-bug234814.c-sa_handler-take-an-int-as-arg.patch
    0011-Add-open_tree-move_mount-fsopen-fsconfig-fsmount-fsp.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-3
changelog:
  - Add more VALGRIND_3_24_BRANCH patches
    0012-Recognize-new-DWARF5-DW_LANG-constants.patch
    0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch
    0014-linux-support-EVIOCGRAB-ioctl.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-4
changelog:
  - Split main valgrind package into several subpackages:
    - valgrind now contains just the core tools.
    - valgrind-scripts contains the post-processing scripts for callgrind,
      cachegrind, massif and dhat which depend on perl and python.
    - valgrind-gdb contains the debuginfo client/server and (v)gdb support.
    - valgrind-docs contains the man pages, html and pdf manual.
  - Adjust Requires/Recommends to subpackages can be installed independently.
    - valgrind-devel now Recommends, instead of Requires, valgrind.
    - valgrind-gdb Requires valgrind
    - valgrind-scripts Recommends valgrind-gdb
    - valgrind-gdb Recommends gdb


author: Mark Wielaard <mjw@redhat.com> - 3.25.1-2
changelog:
  - Add VALGRIND_3_25_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch
    - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch


author: Remi Collet <rcollet@redhat.com> - 7.2.6.1
changelog:
  - rebase to 7.2.6
  - merge limit.conf in main service files
  - drop /etc/sysconfig/valkey
  - rename compat package
  - fix working dir
  - partially enable upstream test suite


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 0.17.0-0.1.klarlack.20200916git
changelog:
  - Switched upstream to Nils Goroll's fork which is the defacto current upstream
  - Synced description to reality
  - This is a snapshot build that needs autotools for building
  - Rebuilt for varnish-6.5.0


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 0.17.1-1
changelog:
  - New upstream release
  - Switched back to original varnish github upstream, as it has catched up
  - Includes fix for CVE-2021-28543, VSV00006, bz#1939669


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-9
changelog:
  - 2028342 - CVE-2021-3984 vim: illegal memory access when C-indenting could lead to Heap Buffer Overflow [rhel-9.0]


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-9
changelog:
  - 2028431 - CVE-2021-4019 vim: heap-based buffer overflow in find_help_tags() in src/help.c [rhel-9.0]


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-10
changelog:
  - CVE-2021-4193 vim: vulnerable to Out-of-bounds Read
  - CVE-2021-4192 vim: vulnerable to Use After Free


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-11
changelog:
  - CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c
  - CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c
  - CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-12
changelog:
  - CVE-2022-0319 vim: heap-based out-of-bounds read
  - CVE-2022-0361 vim: Heap-based Buffer Overflow in GitHub repository


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-12
changelog:
  - CVE-2022-0368 vim: Out-of-bounds Read in vim
  - CVE-2022-0417 vim: heap-based-buffer-overflow in ex_retab() of src/indent.c
  - CVE-2022-0408 vim: Stack-based Buffer Overflow in spellsuggest.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-12
changelog:
  - CVE-2022-0413 vim: use after free in src/ex_cmds.c
  - CVE-2022-0443 vim: heap-use-after-free in enter_buffer() of src/buffer.c
  - CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-16
changelog:
  - CVE-2022-0554 vim: Use of Out-of-range Pointer Offset in vim prior
  - CVE-2022-0943 vim: Heap-based Buffer Overflow occurs in vim


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-17
changelog:
  - CVE-2022-1154 vim: use after free in utf_ptr2char
  - CVE-2022-1420 vim: Out-of-range Pointer Offset


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-19
changelog:
  - CVE-2022-1785 vim: Out-of-bounds Write
  - CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c
  - CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c


author: Uri Lublin <uril@redhat.com> - 10.0-3
changelog:
  - Show OS-ID when running 'remote-viewer -V'
    Resolves: rhbz#1953282
  - Clear auth entry fields
    Resolves: rhbz#1953933


author: Daniel P. Berrangé <berrange@redhat.com> - 11.0-1
changelog:
  - Rebase to 11.0 release
  - Add missing dep on libvirt-client for bash completion
  - Resolves: rhbz#2028604, rhbz#2000528


author: Sergio Lopez <slp@redhat.com> - 1.1.0-2
changelog:
  - Explicitly declare the conflict with qemu-virtiofsd
  - Remove explicit library dependencies
  - Remove useless "Provides: virtiosfd"
  - Remove Windows binaries from vendor tarball


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.10.1-1
changelog:
  - Update to upstream version 1.10.1 [RHEL-22739]
  - Resolves: RHEL-22739
    (Rebase virtiofsd to latest version for RHEL 9.4)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.11.1-1
changelog:
  - Update to upstream version 1.11.1 [RHEL-47989]
  - Resolves: RHEL-47989
    (Rebase virtiofsd to latest version for RHEL 9.5)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.0-1
changelog:
  - Update to upstream version 1.13.0 [RHEL-69134]
  - Resolves: RHEL-69134
    (Rebase virtiofsd to latest version for RHEL 9.6)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.2-1
changelog:
  - Rebase to 1.13.2 [RHEL-96976]
  - Resolves: RHEL-96976
    (Rebase virtiofsd to latest version for RHEL 9.6.z)


author: Artem Egorenkov <aegorenk@redhat.com> - 3.0.3-44
changelog:
  - Enable support for wide-character strings in logs
  - Replace unprintables with HEX code, not question marks
  - Resolves: rhbz#1948570


author: Artem Egorenkov <aegorenk@redhat.com> - 3.0.3-45
changelog:
  - Temporary pass -Wno-deprecated-declarations to gcc to ignore
    deprecated warnings to be able to build against OpenSSL-3.0
  - Resolves: rhbz#1958028


author: Debarshi Ray <rishi@fedoraproject.org> - 0.64.2-1
changelog:
  - Update to 0.64.2
  - Add missing _VTE_CXX_NOEXCEPT to downstream patches (#1973174)
  - Fix the License fields and ship the correct license texts (#1973299)


author: Brian C. Lane <bcl@redhat.com> - 35.9-1
changelog:
  - Copy rhel-92.json test repository from osbuild-composer
  - Update osbuild-composer test repositories from osbuild-composer
  - New release: 35.9 (bcl)
    Resolves: rhbz#2164560
  - tests: Replace os.MkdirTemp with t.TempDir (bcl)
  - blueprint save: Allow overriding bad blueprint names (bcl)
  - tests: Clean up checking err in tests (bcl)
  - composer-cli: Implement blueprints diff (bcl)
  - saveBlueprint: Return the filename to the caller (bcl)
  - composer-cli: Add tests for using --commit with old servers (bcl)
  - weldr: Return error about the blueprints change route (bcl)
  - weldr: Save the http status code as part of APIResponse (bcl)
  - Add --commit support to blueprints save (bcl)
  - Add --commit to blueprints show (bcl)
  - gitleaks: Exclude the test password used in tests (bcl)
  - ci: add tags to AWS instances (tlavocat)
  - Update github.com/BurntSushi/toml to 1.2.1
  - Update github.com/stretchr/testify to 1.8.1
  - Update bump github.com/spf13/cobra to 1.6.1
  - New release: 35.8 (bcl)
  - completion: Remove providers from bash completion script (bcl)
  - completion: Filter out new headers from compose list (bcl)
  - docs: Remove unneeded Long descriptions (bcl)
  - docs: Use a custom help template (bcl)
  - docs: Add more command documentation (bcl)
  - cmdline: Add package glob support to modules list command (bcl)
  - workflow: Add govulncheck on go v1.18 (bcl)
  - tests: Update to use golangci-lint 1.49.0 (bcl)
  - New release: 35.7 (bcl)
  - spec: Move %gometa macro above %gourl (bcl)
  - weldr: When starting a compose pass size as bytes, not MiB (bcl)
  - tests: Use correct size value in bytes for test (bcl)
  - workflow: Add Go 1.18 to text matrix (bcl)
  - Replace deprecated ioutil functions (bcl)
  - New release: 35.6 (bcl)
  - tests: Update tests for osbuild-composer changes (bcl)
  - CMD: Compose status format (eloy.coto)
  - CMD: Compose list format (eloy.coto)
  - tests: Update tests to check for JSON list output (bcl)
  - composer-cli: Change JSON output to be a list of objects (bcl)
  - weldr: Simplify the old ComposeLog, etc. functions (bcl)
  - composer-cli: Add --filename to blueprints freeze save command (bcl)
  - composer-cli: Add --filename to blueprints save command (bcl)
  - composer-cli: Add --filename to compose logs command (bcl)
  - composer-cli: Add --filename to compose image command (bcl)
  - composer-cli: Add --filename to compose metadata command (bcl)
  - composer-cli: Add --filename to compose results command (bcl)
  - weldr: Add saving to a new filename to GetFilePath function (bcl)
  - github: Fix issue with codecov and forced pushes in PRs (bcl)
  - Use golangci-lint 1.45.2 in workflow (bcl)
  - Run workflow tests for go 1.16.x and 1.17.x (bcl)
  - Move go.mod to go 1.16 (bcl)
  - workflows/trigger-gitlab: run Gitlab CI in new image-builder project (jrusz)
  - Update GitHub actions/setup-go to 3
  - Update GitHub actions/checkout to 3


author: Brian C. Lane <bcl@redhat.com> - 35.12-1
changelog:
  - Copy rhel-9.4.json test repository from osbuild-composer
  - New release: 35.12 (bcl)
    Resolves: RHEL-1035
  - Add support for compose start warning messages (bcl)
  - Update documentation urls for new locations (bcl)
  - weldr: go fmt changes to a couple comments (bcl)
  - weldr: Update ostree test for parentid with no url (bcl)
  - Makefile: Turn off seccomp for build-in-podman (bcl)
  - composer-cli: Update doc links (simon.steinbeiss)
  - docs: fix typo/formatting in HACKING.md (idiez)
  - Add release creation documentation (bcl)
  - spec: Require createrepo_c for weldr-client-tests package (bcl)
  - spec: migrate the license field to SPDX (ondrej)
  - Go: Switch to go 1.19 (bcl)
  - CI: Update terraform hash (bcl)
  - Actions: add workflow for marking and closing stale issues and PRs (thozza)
  - workflows: Stop using golint (bcl)
  - workflows: Add Go 1.21 and 1.22 to test matrix (bcl)
  - workflows: Update to golangci-lint 1.56.2 (bcl)
  - workflow: Ignore govulncheck failures (bcl)
  - workflow: Switch to testing on go 1.18, 1.19, 1.20 (bcl)
  - build(deps): bump actions/setup-go from 3 to 5 (49699333+dependabot[bot])
  - build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.8.0 (49699333+dependabot[bot])
  - build(deps): bump actions/checkout from 3 to 4 (49699333+dependabot[bot])
  - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.2 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4 (49699333+dependabot[bot])


author: Brian C. Lane <bcl@redhat.com> - 35.12-3
changelog:
  - tests: OSTree does not support the qcow2 image type
  - Add test repositories for RHEL 9.6 and 9.7
  - Rebuild for CVE-2025-22871
    Resolves: RHEL-89344


author: Brian C. Lane <bcl@redhat.com> - 35.12-4
changelog:
  - Bump release for y-stream AND z-stream building using
    centpkg build --rhel-target=zstream
    Related: RHEL-89344


author: Brian C. Lane <bcl@redhat.com> - 35.5-1
changelog:
  - New release: 35.5 (bcl)
    Resolves: rhbz#2052601
  - docs: Explain how to undo blueprints delete (bcl)
  - test: server status no longer returns devel (bcl)
  - Use GetFrozenBlueprintsTOML for blueprints freeze save (bcl)
  - Add a test for float uid/gid in frozen blueprint (bcl)
  - Use GetBlueprintsTOML for blueprints save (bcl)
  - test: Add a test for float uid/gid in saved blueprint (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 0.4.1 to 1.0.0 (49699333+dependabot[bot])
  - tests: trigger on push to main (jrusz)
  - build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - ci: add keystore for sonarqube (jrusz)
  - spec: Switch to using %gobuild macro on Fedora (bcl)
  - ci: change workflow name (jrusz)
  - ci: add gitlab-ci and sonarqube (jrusz)
  - doc: fix example links from the README (tdecacqu)
  - build(deps): bump actions/checkout from 2.3.4 to 2.4.0 (49699333+dependabot[bot])
  - ci: Enable Coverity Scan tool (atodorov)


author: Michal Ruprich <mruprich@redhat.com> - 1.21.1-7
changelog:
  - Resolves: #2017842 - Two different segfaults when downloading multiple files
  - Removing metalink from manpage


author: Joe Doss <joe@solidadmin.com> - 1.0.20200820-1
changelog:
  - Update to 1.0.20200820
  - ipc: split into separate files per-platform
  - wincompat: fold random into genkey
  - systemd: add reload target to systemd unit
  - man: wg-quick: use syncconf instead of addconf for strip example
  - pubkey: isblank is a subset of isspace
  - ctype: use non-locale-specific ctype.h
  - wg-quick: wait on process substitutions


author: Joe Doss <joe@solidadmin.com> - 1.0.20200827-1
changelog:
  - Update to 1.0.20200827
  - wg-quick: android: use iproute2 to bring up interface instead of ndc
  - wg-quick: Revert wait on process substitutions


author: Joe Doss <joe@solidadmin.com> - 1.0.20210223-1
changelog:
  - wg-quick: android: do not free iterated pointer
  - wg-quick: openbsd: no use for userspace support
  - embeddable-wg-library: sync latest from netlink.h
  - wincompat: recent mingw has inet_ntop/inet_pton
  - wincompat: add resource and manifest and enable lto
  - wincompat: do not elevate by default
  - completion: add help and syncconf completions
  - sticky-sockets: do not use SO_REUSEADDR
  - man: LOG_LEVEL variables changed name
  - ipc: do not use fscanf with trailing \n
  - ipc: read trailing responses after set operation


author: Joe Doss <joe@solidadmin.com> - 1.0.20210315-1
changelog:
  - Makefile: fix version indicator
  - wireguard-tools: const correctness
  - wireguard-tools: drag in headers for prototypes
  - ipc: uniformly ignore preshared keys that are zero
  - wg-quick: freebsd: add kernel support
  - ipc: freebsd: add initial FreeBSD support
  - wg-quick: freebsd: avoid writing private keys to /tmp


author: Michal Ruprich <mruprich@redhat.com> - 1:3.4.10-4
changelog:
  - Resolves: #2152064 - CVE-2022-3190 wireshark: f5ethtrailer Infinite loop in legacy style dissector


author: Michal Ruprich <mruprich@redhat.com> - 1:3.4.10-5
changelog:
  - Resolves: #2210864 - Candump log file parser crash
    Resolves: #2210865 - VMS TCPIPtrace file parser crash
    Resolves: #2210868 - NetScaler file parser crash
    Resolves: #2210870 - RTPS dissector crash
    Resolves: #2210871 - IEEE C37.118 Synchrophasor dissector crash


author: Tomas Popela <tpopela@redhat.com> - 1.0.2-8
changelog:
  - Package woff2_decompress, woff2_compress and woff2_info in a tools subpackage.
    Thanks to Tomasz Gąsior <kontakt@tomaszgasior.pl>


author: Tomas Popela <tpopela@redhat.com> - 1.8.1-3
changelog:
  - Drop PipeWire 0.2 requirement as Chrom[e|ium] 90 now depends on PipeWire 0.3
  - Resolves: rhbz#1929237


author: Debarshi Ray <rishi@fedoraproject.org> - 41.1-2
changelog:
  - Make the Supplements specific to Fedora to retain consistency with
    xdg-desktop-portal-gtk
  Resolves: #2051473


author: Pavel Reichl <preichl@redhat.com> - 5.19.0-1
changelog:
  - New upstream release
  - Tolerate tiny (<300MB) filesystems
  - Rename xfsprogs-5.12.0-default-bigtime-inobtcnt-on.patch to
      xfsprogs-5.19.0-disable-old-kernel-bigtime-inobtcnt-on.patch
      and amend it to reflect upstream changes
  - Backport all "Fixing" patches relevant to 5.19
    Related: rhbz#2142910


author: Pavel Reichl <preichl@redhat.com> - 6.3.0-1
changelog:
  - Rebase to upstream version 6.3.0
  -
  - Following is a list of dropped backported patches which
  - are contained in the current rebase:
  - xfsprogs-5.19.0-xfs-hoist-refcount-record-merge-predicates.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs_db-fix-dir3-block-magic-check.patch (v6.1.0)
  - xfsprogs-5.19.0-xfs-estimate-post-merge-refcounts-correctly.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-get-rid-of-assert-from-xfs_btree_islastblock.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-fix-off-by-one-error-in-xfs_btree_space_to_heigh.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-fix-sb-write-verify-for-lazysbcount.patch (v6.1.0)
  - xfsprogs-5.19.0-xfs-removed-useless-condition-in-function-xfs_attr_n.patch (v6.0.0)
  - xfsprogs-5.19.0-xfs_repair-retain-superblock-buffer-to-avoid-write-h.patch (v6.1.0)
  -
  - Rename the remaining patches so the name contains upstream version in which
  - they are implemented, or "rhelonly".
  -
  - Drop Eric Sandeen's public key used to check tarball signature and replace it by
  - Carlos Maiolino's (current upstream xfsprogs maintainer).
  -
  - Following is a list of newly backported patches from versions released after 6.3
  - which are fixing patches present in version 6.3:
  - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
  -
  - Backport:
  - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
  - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
  - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
  - to implement RHEL-RHEL-8284
  -
  - Backport xfsprogs-rhelonly-xfs_quota-fix-missing-mount-point-warning.patch
  - to implement RHEL-7900
  -
  - Related: RHEL-15399
  - Related: RHEL-8284
  - Related: RHEL-7900


author: Pavel Reichl <preichl@redhat.com> - 6.4.0-1
changelog:
  - Rebase to a more recent upstream release
  - Related: RHEL-28339
  - Following is a list of dropped backported patches which
  - are contained in the current rebase:
  - xfsprogs-6.4.0-set-bnobt-cntbt-numrecs-correctly-when-formattin.patch
  - xfsprogs-6.4.0-mkfs-fix-man-s-default-value-for-sparse-option.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
  - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
  - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
  - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
  -
  - Rename xfs_quota-fix-missing-mount-point-warning.patch to reflect upstream
  -	version it was merged in.


author: Bill O'Donnell <bodonnel@redhat.com> - 6.4.0-2
changelog:
  - Fix various CVE issues.
  - Related: RHEL-32996
  - Following is the patch list:
  - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-fix-leak-in-flist_find_ftyp.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-make-duration-take-time_t.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_scrub-don-t-call-phase_end-if-phase_rusage-was-n.patch
  - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-convert-fsrallfs-to-use-time_t-instead-of-in.patch
  - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-replace-atoi-with-strtol.patch
  - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-add-helper-for-flist_find_type-for-clearer-fi.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-catch-strtol-errors.patch
  - xfsprogs-rhelonly-xfs_db-fix-unitialized-variable-in-check_parents-function.patch


author: Bill O'Donnell <bodonnel@redhat.com> - 6.4.0-3
changelog:
  - Fix coverity issue
  - Related: RHEL-39449
  - Following is the patch list:
  - xfsprogs-6.5.0-xfs.8-xfs-fix-bounds-check-in-xfs_defer_agfl_block.patch


author: Pavel Reichl <preichl@redhat.com> - 6.4.0-7
changelog:
  - xfs unrepairable filesystem if directory block not junked in phase 3 - more
  - fixes
  - Related: RHEL-54342


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.29-7
changelog:
  - compile without sha1 and md5
  - Resolves: rhbz#1936682 - xmlsec1 implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.1-2
changelog:
  - xf86-input-libinput 1.0.1 (#1951879)
  - Fix the upstream source URL
  - Use autosetup instead of manual patch handling


author: José Expósito <jexposit@redhat.com> - 1.20.11-22
changelog:
  - CVE fix for: CVE-2023-6377, CVE-2023-6478
    Resolves: https://issues.redhat.com/browse/RHEL-18322
    Resolves: https://issues.redhat.com/browse/RHEL-18329


author: José Expósito <jexposit@redhat.com> - 1.20.11-23
changelog:
  - CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408 and CVE-2024-0409
    Resolves: https://issues.redhat.com/browse/RHEL-21203
    Resolves: https://issues.redhat.com/browse/RHEL-20531
    Resolves: https://issues.redhat.com/browse/RHEL-20380
    Resolves: https://issues.redhat.com/browse/RHEL-20386
    Resolves: https://issues.redhat.com/browse/RHEL-21193
    Resolves: https://issues.redhat.com/browse/RHEL-21200


author: José Expósito <jexposit@redhat.com> - 1.20.11-25
changelog:
  - CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and
    CVE-2024-31083
  - Add util-linux as a dependency of Xvfb
  - Fix compilation error on i686


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-28
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186),
                 CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191),
                 CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199),
                 CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200)


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.11-30
changelog:
  - xfree86: Fix potentially NULL reference to platform device's PCI device
    Resolves: https://issues.redhat.com/browse/RHEL-84253


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-31
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308),
                 CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409),
                 CVE-2025-49180 (RHEL-97253)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.9-5
changelog:
  Fix for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408, CVE-2024-0409


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.7-3
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80204), CVE-2025-26595 (RHEL-80187),
                 CVE-2025-26596 (RHEL-80190), CVE-2025-26597 (RHEL-80193),
                 CVE-2025-26598 (RHEL-80195), CVE-2025-26599 (RHEL-80202),
                 CVE-2025-26600 (RHEL-80203), CVE-2025-26601 (RHEL-80207)


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.7-4
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97288), CVE-2025-49176 (RHEL-97334),
                 CVE-2025-49177 (RHEL-97357), CVE-2025-49178 (RHEL-97393),
                 CVE-2025-49179 (RHEL-97404), CVE-2025-49180 (RHEL-97244)


author: Vladis Dronov <vdronov@redhat.com> - 0.8.2-1
changelog:
  - Update to version 0.8.2
  - Drop patch 1-fix-man-page-installation.patch
  - Use SPDX license identifiers


author: Petr Kubat <pkubat@redhat.com> - 5.2.4-7
changelog:
  - Use relative path for COPYING files so that rpm moves them to correct place
    Related: rhbz#1741074


author: Kalev Lember <klember@redhat.com> - 2:40~beta-2
changelog:
  - Drop libtool as-needed hack as as-needed is in default LDFLAGS now
  - Remove unneeded ldconfig_scriptlets macro call
  - Tighten soname globs


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-1
changelog:
  - Rebase to 0.13.71
  - Drop the CVE patches, they are now part of the upstream package
  - Build no longer requires python2
  - Resolves: 1807565


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-7
changelog:
  - Remove the doc/zzipdoc/{options,match}.py scritps from the original tar
  - Replace them with a current github version
  - The original version of the files contains autogenerated header with incompatible license
  - This build thus uses modified tar archive
  Resolves: rhbz#1982241


