# changelog

author: Mark Reynolds <mreynolds@redhat.com> - 2.2.4-2
changelog:
  - Bump version to 2.2.4-2
  - Resolves: Bug 1859271 - RFE - Extend log of operations statistics in access log
  - Resolves: Bug 2093981 - RFE - Create Security Audit Log
  - Resolves: Bug 2109891 - Migrate 389 to pcre2
  - Resolves: Bug 2112361 - Supplier should do periodic update to avoid slow replication when a new direct update happen
  - Resolves: Bug 2112998 - performance search rate: checking if an entry is a referral is expensive
  - Resolves: Bug 2114039 - Current pbkdf2 hardcoded parameters are no longer secure
  - Resolves: Bug 2124660 - Retro changelog trimming uses maxage incorrectly
  - Resolves: Bug 2132697 - RFE - run as non-root
  - Resolves: Bug 2142636 - pam mutex lock causing high etimes, affecting red hat internal sso


author: Mark Reynolds <mreynolds@redhat.com> - 2.2.4-3
changelog:
  - Bump version to 2.2.4-3
  - Resolves: rhbz#2142636 - pam mutex lock causing high etimes, affecting red hat internal sso
  - Resolves: rhbz#2093981 - RFE - Create Security Audit Log
  - Resolves: rhbz#2132697 - [RFE] 389ds: run as non-root
  - Resolves: rhbz#2124660 - Retro changelog trimming uses maxage incorrectly
  - Resolves: rhbz#2114039 - Current pbkdf2 hardcoded parameters are no longer secure
  - Resolves: rhbz#2112998 - performance search rate: checking if an entry is a referral is expensive
  - Resolves: rhbz#2112361 - Supplier should do periodic update to avoid slow replication when a new direct update happen
  - Resolves: rhbz#2109891 - Migrate 389 to pcre2


author: Caolán McNamara <caolanm@redhat.com> - 2.4.1-5
changelog:
  - disable building BOX2D_BUILD_UNIT_TESTS due to "SIGSTKSZ ... no
    longer constant on Linux ... redefined to sysconf(_SC_SIGSTKSZ)"
    https://github.com/bminor/glibc/blob/master/NEWS causing build failure


author: Paul Howarth <paul@city-fan.org> - 1.0.5-23
changelog:
  - Don't pass gcc-only compiler flags to other compilers, e.g. clang
    (based on https://src.fedoraproject.org/rpms/Judy/pull-request/3 from
    Timm Baeder)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.41.8-1
changelog:
  - Update to 1.41.8 release (development)
  - core: add support for equal-cost multi-path (ECMP) routes (rh #2081302)
  - device: preserve the DHCP lease during reapply (rh #2117352)
  - ovs: add support for 'other_config' settings (rh #2151455)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.41.90-1
changelog:
  - Update to 1.41.90 release (release candidate)
  - l3cfg: schedule an update after every commit-type/config-data register/unregister (rh #2158394)
  - all: add support for ovs-dpdk n-rxq-desc and n-txq-desc (rh #2156385)
  - core: fix consistency for internal cache for IPv6 routes (rh #2060684)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.41.91-1
changelog:
  - Update to 1.41.91 release (release candidate)
  - core: retry if a rtnetlink socket runs out of buffer space (rh #2154350)
  - dns: allow changing resolv.conf options alone via global-dns (rh #2019306)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.42.2-1
changelog:
  - Update to 1.42.2 release
  - fix hostname lookup from IPv6 address (rh #2167816)
  - add new connection property to remove the autogenerated local route rule (rh #2167805)
  - fix race condition while setting the MAC of a OVS interface (rh #2168477)
  - expose the DHCP IAID in the lease information (rh #2169869)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.43.3-1
changelog:
  - Update to an early 1.44 snapshot
  - cloud-setup: add IDMSv2 support (rh #2151986)
  - core: add [link] setting (rh #2158328)
  - dhcp: expose client ID, DUID and IAID that have been used (rh #2169869)
  - ovs: ensure device has a proper MAC address once we start dhcp (rh #2168477)
  - team: fix assumption of team port management (rh #2092215)


author: Thomas Haller <thaller@redhat.com> - 1:1.43.4-1
changelog:
  - Update to 1.43.4 release (development)
  - core: fix handling of IPv4 prefsrc routes with ACD (rh #2046293)
  - core: don't configure static routes without addresses (rh #2102212)
  - core: fix race activating VLAN devices (rh #2155991)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.43.5-1
changelog:
  - Update to 1.43.5 release (development)
  - cloud-init/ec2: use right HTTP method for IMDSv2 (rh #2179718)
  - core: request a bus name only when dbus objects are present (rh #2175919)
  - core: fix autoconnect retry count tracking (rh #2174353)
  - core: fix retry on netlink socket buffer exhaustion (rh #2169512)
  - ovs: fix a race condition on port detachment (rh #2054933)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.43.6-1
changelog:
  - Update to 1.43.6 release (development)
  - fix assertion failure when renewing DHCP lease (rh #2179890)
  - emit the dhcp-change dispatcher script event on lease renewal (rh #2179537)
  - ensure the NetworkManager is restarted when dbus is restarted (rh #2161915)
  - add support for the "no-aaaa" resolv.conf option (rh #2176137)                                                                                                              -


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-2
changelog:
  - Resolve issues found by rpmdiff
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-3
changelog:
  - Add a patch to resolve one more issue found by rpmdiff/rpminspect:
    fix getaddrinfo detection to avoid using gethostbyname.


author: Richard Hughes <rhughes@redhat.com> - 1.2.2-1
changelog:
  - New upstream release
  - Notify systemd when beginning to shutdown
  - Fix possible information disclosure


author: Richard Hughes <rhughes@redhat.com> - 1.2.3-1
changelog:
  - New upstream release
  - Add support for coercing upgrade to distupgrade
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon disappears
  - Remove large transaction size sanity check


author: Milan Crha <mcrha@redhat.com> - 1.2.4-1
changelog:
  - New upstream release
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Honor install_weak_deps=False
  - Improve thread safety on an operation cancellation
  - Let the finish understand the 'cancelled' exit code
  - Only set polkit interactive flag if method call has too
  - Read update information also when getting list of updates
  - Use 'hy_query_get_advisory_pkgs', if available


author: Neal Gompa <ngompa@centosproject.org> - 2.0.18-1
changelog:
  - Update to 2.0.18
    Resolves: rhbz#2028076
  - Fix multilib conflict with SDL_revision.h (rhbz#2008838)
  - Backport fix for building against wayland-1.20+
  - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-1
changelog:
  - Rebase to 2.7.0.6-1 [bz#2083464]
  - Adding restart_if implementation for RHEL [bz#2081944]
  - Resolves: bz#2083464
    ([Azure][RHEL-9]Rebase WALinuxAgent to v2.7.0.6)
  - Resolves: bz#2081944
    ([Azure][WALA][9.0] WALA provisions VM failed because of no "ifdown")


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-2
changelog:
  - wla-redhat-Fix-command-sequence-for-restarting-net-inter.patch [bz#2098233]
  - Resolves: bz#2098233
    ([Azure][WALA][RHEL-9] [9.1] walinuxagent kills network during boot)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-3
changelog:
  - wla-redhat-Use-NetworkManager-to-set-DHCP-hostnames-on-r.patch [bz#2114830]
  - wla-Update-Log-Collector-default-in-Comments-and-Readme-.patch [bz#2093965]
  - Resolves: bz#2114830
    ([Azure][WALA][RHEL-9.1] Provisioning failed if no ifcfg-eth0)
  - Resolves: bz#2093965
    ([Azure][WALA][RHEL-9] The description of "Logs.Collect" is incorrect)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-4
changelog:
  - wla-redhat-Remove-all-waagent-unit-files-when-uninstalli.patch [bz#2114768]
  - Resolves: bz#2114768
    ([Azure][WALA][RHEL-9] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-5
changelog:
  - wla-redhat-Mark-directories-properly-in-the-files-list.patch [bz#2114768]
  - Resolves: bz#2114768
    ([Azure][WALA][RHEL-9] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-6
changelog:
  - wla-redhat-Remove-files-inside-WALA-services-directory.patch [bz#2114768]
  - Resolves: bz#2114768
    ([Azure][WALA][RHEL-9] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-7
changelog:
  - wla-redhat-Azure-CVM-specific-udev-rules.patch [bz#2162668]
  - Resolves: bz#2162668
    (Add support for importing remotely sealed TPM2 objects)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-8
changelog:
  - wla-redhat-Explicitly-list-udev-rule-requirements-in-the.patch [bz#2165042]
  - Resolves: bz#2165042
    ([9.0.z] /dev/disk/azure/ is created as symlink to sr0 or sda and not as a directory[Azure])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-9
changelog:
  - wla-redhat-Adjust-tpm2_createprimary-key-attributes-to-m.patch [bz#2167322]
  - Resolves: bz#2167322
    (Adjust TPM primary key creation parameters to match Azure)


author: Ray Strode <rstrode@redhat.com> - 0.6.55-10
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations.
    Resolves: #2057576


author: Kalev Lember <klember@redhat.com> - 3.28-12
changelog:
  - Split highcontrast-icon-theme out to a new subpackage
  - Explicitly require cursor and icon themes required for the gtk2 themes


author: Zoltan Fridrich <zfridric@redhat.com> - 0.16-19
changelog:
  - use gating and config file from rhel-8.5
  - remove check of periodically changing files
    Resolves: rhbz#1957656
  - config cleanup
    Resolves: rhbz#1957654


author: Zoltan Fridrich <zfridric@redhat.com> - 0.16-20
changelog:
  - fix configuration option with-dbhmactype
  - do not use sha1 and md5 by default
    Resolves: rhbz#1935457
  - fix important static analysis issues
    Resolves: rhbz#1938676


author: Martin Kolman <mkolman@redhat.com> - 34.25.2.1-1
changelog:
  - network: fix doc string of add_connection_sync (rvykydal)
    Related: rhbz#2125256
  - network: use separate main conext for NM client in threads (rvykydal)
    Resolves: rhbz#2125256


author: Martin Kolman <mkolman@redhat.com> - 34.25.2.2-1
changelog:
  - Initialize empty disks on the Manual Partitioning screen (vponcova)
    Resolves: rhbz#2127100
  - infra: Set test vars from templates (vslavik)
  - infra: Port check for matching templates from master (vslavik)
  - infra: Port templating mechanism from master (vslavik)
  - dracut: read filename dhcp option from dhcpopts file (rvykydal)
    Related: rhbz#1991843


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.2.3-1
changelog:
  - Disable the concurrency check in the error dialog in TUI (vponcova)
    Resolves: rhbz#2070920
  - Support bond device activated in initramfs from kickstart (rvykydal)
    Resolves: rhbz#2133053


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.2.4-1
changelog:
  - Delegate auto-attach handling to RHSM (mkolman)
    Resolves: rhbz#2083319
  - Use RHEL9_SshKeyData to fix sshkey quoting problem (bcl)
    Resolves: rhbz#2149362
  - Test the InstallerStorage.copy method (vponcova)
    Related: rhbz#2093793
  - Show multiple bootloader devices on the Manual Partitioning screen (vponcova)
    Resolves: rhbz#2093793
  - Implement the Root.copy method (vponcova)
    Related: rhbz#2093793
  - Redefine the Blivet.roots attribute (vponcova)
    Related: rhbz#2093793
  - Redefine the Blivet.copy method (vponcova)
    Related: rhbz#2093793
  - Use correct hint for VNC password boot option (jstodola)
    Resolves: rhbz#2124818


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.2.5-1
changelog:
  - payload: fix repo --includepkgs option (rvykydal)
    Resolves: rhbz#2158210
  - bootloader/zipl.py: update for zipl >= 2.25.0 (dan)
    Resolves: rhbz#2157916


author: Vladimír Slávik <vslavik@redhat.com> - 34.25.2.6-1
changelog:
  - Add a NVMe-FC tab to the Advanced Storage screen (vslavik)
    Resolves: rhbz#2107346
  - Update the .glade file for the Advanced Storage screen (vponcova)
    Related: rhbz#2107346
  - Filter out NVMe over Fibre Channel from local disks (vslavik)
    Resolves: rhbz#2107346
  - Install nvme-cli on boot.iso (vslavik)
    Resolves: rhbz#2107346


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.2.7-1
changelog:
  - Show an error message when subscription token transfer fails (mkolman)
    Resolves: rhbz#2057472
  - Bump blivet version for NVMe-oF support (vslavik)
    Resolves: rhbz#2164343
  - Make text in custom_storage_helper more accurate (ozobal)
    Resolves: rhbz#2133046
  - Fix infobar colors in GTK GUI (ozobal)
    Resolves: rhbz#2074827


author: Nick Clifton <nickc@redhat.com> - 11.04-1
changelog:
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.


author: Nick Clifton <nickc@redhat.com> - 11.12-1
changelog:
  - Annocheck: Add code to handle another glibc function built without LTO.
  - GCC Plugin: Do not run if other plugins are active.  (#2175768)
  - Annocheck: Add code to handle glibc functions built without LTO.
  - Libannocheck: Fix thinko in debugging code.
  - Annocheck: Fix LTO test.
  - Notes: Display notes held in separate dbeuginfo files.
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
  - LLVM & Clang Plugins: Build with branch protection on AArch64.  (#2164364)
  - Libannocheck: Fix bug causing infinite looping when running tests.
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)


author: Nick Clifton <nickc@redhat.com> - 12.07-1
changelog:
  - Annocheck: Fix lto testing.  (#2177140)
  - gcc-plugin: generate warnings about misspelt -D_FORTIFY_SOURCE and/or -D_GLIBCXX_ASSERTIONS options.
  - gcc-plugin: use a bigger buffer for constructing notes.
  - llvm-plugin: Fix detection of optimization level.  Improve test.
  - clang-plugin: Improve test.
  - configure: More improvements.
  - annocheck: Fix seg-fault when checking for glibc components in string format notes.
  - configure: Simplify.
  - gcc plugin: Add filenames to string notes.  Allow use of ANNOBIN environment variable.
  - llvm plugin: Add workaround for building with LLVM-16.
  - clang plugin: Fix for building with Clang-16.
  - gcc plugin: Keep ELF notes at protocol version 3.
  - Protocol Version 4: String format notes.
  - Annocheck: Update message for LTO tests.  (#2177140)


author: Nick Clifton <nickc@redhat.com> - 12.09-1
changelog:
  - Annocheck: Fix detection of missing plugin options.  (#2189492)
  - Fix generation of auto-generated files.
  - Fix covscan reported errors.


author: Sergei Petrosian <spetrosi@redhat.com> - 1.1.1-1
changelog:
  - Insert the "Ansible managed" comment to the /var/opt/mssql/mssql.conf file
    Resolves rhbz#2064690 (EL9)


author: Sergei Petrosian <spetrosi@redhat.com> - 1.1.1-3
changelog:
  - Fix inserting ansible_managed
    Resolves: rhbz#2057652
  - Users now can provide a custom URLs to pull packages and RPM key from
    Resolves: rhbz#2070452
  - Add "Requires: ansible-core or ansible"
    Resolves: rhbz#2067496


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.0-1
changelog:
  - Add MVP HA functionality to the server role
    Resolves: rhbz#2066337
  - Add mssql_tls_remote_src to the server role
    Resolves: rhbz#2098212
  - Add Requires: linux-system-roles or rhel-system-roles
  - Add downstream values to galaxy.yml


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.0-2
changelog:
  - Update mssql commit
    Resolves: rhbz#2066337
  - Add condition for upstream spec build for galaxy_transform
  - Replace extra-mapping with replacing in the legacy format with sed


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.3-1
changelog:
  - Use firewall role to configure firewall for SQL Server
    Resolves: rhbz#2120709
  - Add mssql_ha_virtual_ip
    Replace mssql_ha_db_name with mssql_ha_db_names to let users replicate multiple DBs
    Resolves: rhbz#2066337

  - Replace simple `mssql_input_sql_file` with `pre` and `post` variables
    Resolves: rhbz#2120712
  - Add Requires: linux-system-roles or rhel-system-roles
  - Replace fedora.linux_system_roles:redhat.rhel_system_roles on RHEL
  - Add downstream values to galaxy.yml
  - Change defcommit to defsource that takes both tags and commits
  - Update CHANGELOG.md with the current date and copy it to collection dir


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.4-1
changelog:
  - Replicate all provided databases
    - This change fixes the bug where only the first database provided with
  mssql_ha_db_names got replicated
    - Clarify that the role does not remove not listed databases
    Resolves: rhbz#2066337
  - Input multiple sql scripts
    - Allow _input_sql_file vars to accept list of files
    - Flush handlers prior to inputting post sql script
    Resolves: rhbz#2120712
  - Note that ha_cluster is not idempotent
  - SPEC: Do not update dates in CHANGELOG.md


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-1
changelog:
  - Keep spec consistent with linux-system-roles and simplify
    - Return conditionals related to EL to keep up- and downstream consistent
    - Add pretrans scriplet to remove symlinks if exist to fix issue with update
    - Instead of copying doc and license files create symlinks
    - Dynamically generate %files section
    - Add -t to md2html to generate TOC
    - Do not install roles to /usr/share/microsoft and then create symlinks
      to /usr/share/ansible/roles/, instead install directly to
      /usr/share/ansible/roles/
    - Remove unused removal of ambiguous python shebangs
    - Remove all loops because this RPM contains only one role
    - Remove defsource - simply define the source for mssql
    - 's|$RPM_BUILD_ROOT|%{buildroot}|' for consistency
    - Remove getarchivedir for simplicity
    - Wrap description by 80 symbols and clarify it
    - Remove tests/.fmf dir from the RPM
    Resolves: rhbz#2151281
  - On SQL Server Enterprise Edition, support configuring asynchronous replication
    Resolves: rhbz#2151282
  - Support configuring a read-scale SQL server availability group (without pacemaker
    Resolves: rhbz#2151283
  - Use the certificate role to create the cert and the key
    Resolves: rhbz#2151284
  - Support SQL Server version 2022
    Resolves: rhbz#2153428
  - Support integrating with AD Server for authentication
    Resolves: rhbz#2163709


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-2
changelog:
  - Replace fedora.linux_system_roles/redhat.rhel_system_roles and
    linux-system-roles.mssql with microsoft.sql.server in the role.
    Resolves: rhbz#2151281
  - Use latest 1.3.0 to fix ad_Integration issues
    Resolves: rhbz#2163709


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-3
changelog:
  - Spec: add functionality to build from a commit hash
  - Use latest 1.3.0 to add flexibility to AD integration functionality
    Resolves: rhbz#2163709


author: Dimitri Savineau <dsavinea@redhat.com> - 2.14.2-4
changelog:
  - rebuild with python 3.11 (rhbz#2169466)
  - remove bundled dependencies from requirements file (rhbz#2152615)
  - add bundled version of resolvelib
  - use PyPi sources
  - remove straightplugin
  - add missing obsoletes constraint


author: Thomas Woerner <twoerner@redhat.com> - 1.7.0-1
changelog:
  - Update to version 1.7.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.7.0
    Resolves: RHBZ#2080322
  - New idrange management module.
    Resolves: RHBZ#2069188
  - Not able to update empty descriptions in automount maps.a
    Resolves: RHBZ#2050179
  - New servicedelegationrule management module.
    Resolves: RHBZ#2069179
  - New servicedelegationtarget management module.
    Resolves: RHBZ#2069180
  - Add support for managing idoverrideusers in ipagroup.
    Resolves: RHBZ#2069183


author: Thomas Woerner <twoerner@redhat.com> - 1.8.0-1
changelog:
  - idrange: Fix usage of dom_name when idrange doesn't exist.
    Resolves: RHBZ#2086994
  - smartcard roles for ansible-freeipa
    Resolves: RHBZ#2076567


author: Thomas Woerner <twoerner@redhat.com> - 1.8.1-1
changelog:
  - Update to version 1.8.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.1
    Related: RHBZ#2080322
  - ipa server deploys failing with latest IPA compose
    Resolves: RHBZ#2103924
  - ipaserver_external_cert_files failes to copy with ansible 2.13
    Resolves: RHBZ#2104142


author: Thomas Woerner <twoerner@redhat.com> - 1.8.2-1
changelog:
  - Update to version 1.8.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.2
    Related: RHBZ#2080322
  - SIDs are always generated for server and replica deployments
    Resolves: RHBZ#2110478
  - Random Serial Numbers are not enabled by default any more
    Resolves: RHBZ#2110523
  - Fixes comparison of bool values in IPA 4.9.10+ for ipadnsconfig
    Resolves: RHBZ#2110538


author: Thomas Woerner <twoerner@redhat.com> - 1.8.3-1
changelog:
  - Update to version 1.8.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.3
    Related: RHBZ#2080322
  - Fixes replica deployment issue for domains without SID support.
    Related: RHBZ#2110478


author: Thomas Woerner <twoerner@redhat.com> - 1.8.4-1
changelog:
  - Update to version 1.8.4
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.4
    Resolves: RHBZ#2125592
  - 'ansible-doc' -l lists most idm modules as 'UNDOCUMENTED'
    Resolves: RHBZ#2125603
  - ansible-freeipa Replica Install Setup DNS fails
    Resolves: RHBZ#2125616
  - ipaconfig does not support SID and netbios attributes
    Resolves: RHBZ#2069184


author: Thomas Woerner <twoerner@redhat.com> - 1.9.0-1
changelog:
  - Update to version 1.9.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.0
    Related: RHBZ#2125592
  - pwpolicy: Add support for password check and grace limit
    Resolves: RHBZ#2127911
  - ipaconfig: Do not allow enable_sid set to False
    Resolves: RHBZ#2127446
  - ipaclient: No kinit on controller for deployment using OTP
    Resolves: RHBZ#2127887
  - ipaclient: Configure DNS resolver
    Resolves: RHBZ#2127895
  - New netgroup management module
    Resolves: RHBZ#2127910
  - sudorule: Add support for 'hostmask' parameter
    Resolves: RHBZ#2127913
  - ipaconfig: Fix fail_json calls
    Resolves: RHBZ#2134375
  - ipaconfig: Do not require enable_sid for add_sids or netbios_name
    Resolves: RHBZ#2134505
  - ipaserver: Add missing idstart check
    Resolves: RHBZ#2132731


author: Thomas Woerner <twoerner@redhat.com> - 1.9.1-1
changelog:
  - Update to version 1.9.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.1
    Resolves: RHBZ#2125592
  - pwpolicy: Allow clearing policy values
    Resolves: RHBZ#2150334
  - Use netgroup_find instead of netgroup_show to workaround IPA bug
    Resolves: RHBZ#2144725


author: Thomas Woerner <twoerner@redhat.com> - 1.9.2-1
changelog:
  - Update to version 1.9.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.2
    Resolves: RHBZ#2125592
  - ipabackup: Use ipabackup_item again in copy_backup_to_server
    Resolves: RHBZ#2165953


author: Thomas Woerner <twoerner@redhat.com> - 1.10.0-1
changelog:
  - Update to version 1.10.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.10.0
    Resolves: RHBZ#2170373
  - ipareplica/server: Enable removal from domain with undeployment
    Resolves: RHBZ#2127903
  - ipagroup: Allow multiple group management
    Resolves: RHBZ#2175763
  - ipaserver: Allow deployments with random serial numbers
    Resolves: RHBZ#2127905
  - ipagroup: Fix ensuring external group members (without trust-ad)
    Resolves: RHBZ#2183822
  - ipaclient: Add subid option to select the sssd profile with-subid
    Resolves: RHBZ#2175767
  - ipaclient: Fix allow_repair with removed krb5.conf and DNS lookup
    Resolves: RHBZ#2127883
  - ipaclient: Keep server affinity while deploying as long as possible
    Resolves: RHBZ#2175757


author: Neal Gompa <ngompa@centosproject.org> - 0.15.5-2
changelog:
  - Create symlinks manually to make it build
    (the symlinks were not created because of reverting the patch to
    upgrade to Meson 0.62)


author: Tom Stellard <tstellar@redhat.com> - 1.6.1-13
changelog:
  - Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Kalev Lember <klember@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1
  - Switch to meson build system
  - Update source URLs
  - Tighten -devel subpackage deps
  - Tighten soname globs


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3.13
changelog:
  - Sync with rhel 8.3 + cleanup
  - Add new subpackages - z{14,15}
  - Unlike in rhel8, the base subpackage still needs to be build for z12.
  - Covscan related bugfixes
  - Spec and git cleanup (remove unused patches/sources)


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-100
changelog:
  - New upstream release, 3.0.7
    Resolves: rhbz#2019929 - capability=unknown-capability(39) in audit messages


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-101
changelog:
  - Adjust sample-rules dir permissions
    Resolves: rhbz#2054432 - /usr/share/audit/sample-rules is no longer readable by non-root users


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-102
changelog:
  - Fix path normalization in auparse
    Resolves: rhbz#2062824 - auparse missing information when used with --format-text


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-103
changelog:
  - Drop ProtectHome from auditd.service as it interferes with rules
    Resolves: rhbz#2071725 - Default systemd service config blocks audit watch rules in some directories [rhel-9.1.0]


author: Richard W.M. Jones <rjones@redhat.com> - 1.13.0-2
changelog:
  - Parse auto_reset_crashkernel in kdump
    resolves: rhbz#2042772
  - Add new directives and options for chrony


author: Richard W.M. Jones <rjones@redhat.com> - 1.13.0-4
changelog:
  - Fix parsing of /usr/lib/tmpfiles.d/provision.conf
  - Fix parsing of /etc/kernel/cmdline
    resolves: rhbz#2155136, rhbz#2159282


author: Pavel Březina <pbrezina@redhat.com> - 1.2.5-1
changelog:
  - Rebase to 1.2.5 (RHBZ #2080239)
  - backup-restore now works correctly (RHBZ #2070541)
  - add with-subid to sssd profile (RHBZ #2075192)
  - add with-gssapi to sssd profile (RHBZ #2077893)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-1
changelog:
  - Rebase to 1.2.6 (RHBZ #2142805)
  - update translations (RHBZ #2139642)
  - Change password hashing algorithm from yescrypt back to sha512 (RHBZ #2151145)


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.8.1-8
changelog:
  - Resolves: rhbz#2134759 Untrusted Macros
  - Resolves: rhbz#2134757 Weak Master Keys
  - Resolves: rhbz#2134755 Static Initialization Vector
  - Resolves: rhbz#2134761 Macro URL arbitrary script execution


author: Pavel Cahyna <pcahyna@redhat.com> - 11.0.1-5
changelog:
  - Make nagios-plugin build conditional and disabled on RHEL to avoid
    generating this subpackage that has missing dependencies
  - Fix flags for annobin in Qt tools (bat & tray-monitor) build
  - Add a forgotten RHEL 8 patch to use openssl crypto (random numbers, hmac,
    hashing functions)
    Resolves: rhbz#1935458


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-3
changelog:
  - Tighten cache protection against record from forwarders (CVE-2021-25220)
  - Include test of forwarders


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-5
changelog:
  - Fix possible serve-stale related crash (CVE-2022-3080)
  - Fix memory leak in ECDSA verify processing (CVE-2022-38177)
  - Fix memory leak in EdDSA verify processing (CVE-2022-38178)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-6
changelog:
  - Bound the amount of work performed for delegations (CVE-2022-2795)
  - Add /usr/lib64/named to bind-chroot (#2129466)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-9
changelog:
  - Prevent flooding with UPDATE requests (CVE-2022-3094)
  - Handle RRSIG queries when server-stale is active (CVE-2022-3736)
  - Fix crash when soft-quota is reached and serve-stale is active (CVE-2022-3924)


author: Peng Wu <pwu@redhat.com> - 0.3-33
changelog:
  - Provide OpenType Bitmap fonts
  - Use bitmapfonts2otb.py to combine bitmap fonts
  - Add bitmap-*-opentype-fonts sub packages


author: Vojtech Trefny <vtrefny@redhat.com> - 3.4.0-12
changelog:
  - Fix log message for the LVM devices filter
    Resolves: rhbz#2034277
  - Exclude unusable disks from PartitionFactory
    Resolves: rhbz#2017432


author: Jan Pokorny <japokorn@redhat.com> - 3.4.0-13
changelog:
  - Fix getting PV info in LVMPhysicalVolume from the cache
    Resolves: rhbz#2079221
  - Do not crash when changing disklabel on disks with active devices
    Resolves: rhbz#2078803
  - ActionDestroyDevice should not obsolete ActionRemoveMember
    Resolves: rhbz#2076956
  - Correctly set vg_name after adding/removing a PV from a VG
    Resolves: rhbz#2081278
  - Add support for creating LVM cache pools
    Resolves: rhbz#2055200
  - Use LVM PV format current_size in LVMVolumeGroupDevice._remove
    Related: rhbz#2081278


author: Jan Pokorny <japokorn@redhat.com> - 3.4.0-15
changelog:
  - Add a very simple NVMe module
    Resolves: rhbz#2073008
  - Add support for NPIV-enabled zFCP devices
    Resolves: rhbz#1937030
  - Fix removing zFCP SCSI devices
    Related: rhbz#1937030
  - tests: Mark "fake" disks in test_get_related_disks as non-existing
    Resolves: rhbz#2062690


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-2
changelog:
  - Fix potential AttributeError when getting stratis blockdev info
    Related: rhbz#2123711
  - tests: Skip XFS resize test on CentOS/RHEL 9
    Related: rhbz#2123711


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-3
changelog:
  - Catch BlockDevNotImplementedError for btrfs plugin calls
    Resolves: rhbz#2139166
  - Revert "Adjust to new XFS min size"
    Resolves: rhbz#2139189


author: Hans de Goede <hdegoede@redhat.com> - 5.56-3
changelog:
  - Drop obsolete udev rule + systemd service to call btattach on BT-HCIs
    connected via UART from userspace, this is all handled in the kernel now
  - Add the btmgmt util to the packaged files


author: Adrian Reber <adrian@lisas.de> - 1.2.5-1
changelog:
  - Updated to 1.2.5
  - No longer necessary to re-package sources: All problematic files have
    been re-licensed
  - All 19 patches are part of the 1.2.5 release and have been removed


author: Jonathan Wakely <jwakely@redhat.com> - 1.75.0-7
changelog:
  - Build with zstd support (#2091041)
  - Fix rpminspect CI warnings about missing versioned dependencies


author: Viktor Malik <vmalik@redhat.com> - 0.16.0-1
changelog:
  - Rebase on bpftrace 0.16.0 (rhbz#2121920)
  - Rebuild for LLVM 15 (rhbz#2118995)
  - Download the cereal library (not packaged into RHEL9)
  - Fixed several tools (rhbz#1975148, rhbz#2088577, rhbz#2128208, rhbz#2073675,
    rhbz#2073770)
  - Resolve conflicts between bpftrace and bcc manpages (rhbz#2075076)


author: Viktor Malik <vmalik@redhat.com> - 0.16.0-2
changelog:
  - Fix missing kprobe attachpoints for bio* tools (s390x, ppc64le)
  - Rebuild for libbpf 1.0.0
  - Resolves: rhbz#2157829
  - Related: rhbz#2157592


author: Viktor Malik <vmalik@redhat.com> - 0.17.0-1
changelog:
  - Rebase on bpftrace 0.17.0 (RHEL-286)
  - Fix runqlat.bt, tcpdrop.bt, and undump.bt on aarch64 (rhbz#2170838)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Jindrich Novy <jnovy@redhat.com> - 1:1.28.2-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.28
    (https://github.com/containers/buildah/commit/7e4d9dd)
  - Resolves: #2151247


author: Jindrich Novy <jnovy@redhat.com> - 1:1.28.2-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.28
    (https://github.com/containers/buildah/commit/cfefbb6)
  - fixes segmentation fault on s390x
  - Resolves: #2150429


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-0.1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/8ca903b)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-0.2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/c541c35)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-0.3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/4b72f05)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-0.4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/078a7ff)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29.0
    (https://github.com/containers/buildah/commit/94b723c)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/94b723c)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/c822cc6)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.1-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/7fa17a8)
  - Related: #2124478


author: Jerry James <loganjerry@gmail.com> - 1.10.14-1
changelog:
  - Version 1.10.14
  - Remove no longer needed no-unixsocket.patch
  - Add workaround for compiling tests with JDK 11


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 4.0.11-1
changelog:
  - Upgrated to latest upstream version 4.0.11
  - Added a patch to fix rpm build issue caused due to misconfiguration in upstream
  - Added required additional plugins required for build


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-5
changelog:
  - Resolves: rhbz#2014523 - c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-9]


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-3
changelog:
  - Switch from autotools to meson; enable the tests, since the meson build system
    permits us to use a shared boost library
  - Install examples in the -doc subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-4
changelog:
  - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual
    Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name
    of a future package that continues to provide API/ABI version 1.0 after the
    upgrade.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-7
changelog:
  - Working (but weak, dependent on SHA1) source signature verification
  - Added API/ABI version to descriptions


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-5
changelog:
  - Certmonger SCEP renewal should not use old challenges (#1990926)
  - Certmonger certificates stuck in NEED_GUIDANCE (#2001082)
  - certmonger creates CSRs with invalid DER syntax for X509v3 extensions
    with critical=FALSE (#2012261)


author: Miroslav Rezanina <mrezanin@redhat.com> - 22.1-2
changelog:
  - ci-Add-native-NetworkManager-support-1224.patch [bz#2056964]
  - ci-Use-Network-Manager-and-Netplan-as-default-renderers.patch [bz#2056964]
  - ci-Revert-Setting-highest-autoconnect-priority-for-netw.patch [bz#2056964]
  - ci-Align-rhel-custom-files-with-upstream-1431.patch [bz#2088448]
  - ci-Remove-rhel-specific-files.patch [bz#2088448]
  - Resolves: bz#2056964
    ([RHEL-9]Rebase cloud-init from Fedora so it can configure networking using NM keyfiles)
  - Resolves: bz#2088448
    (Align cloud.cfg file and systemd with cloud-init upstream .tmpl files)


author: Miroslav Rezanina <mrezanin@redhat.com> - 22.1-3
changelog:
  - ci-Support-EC2-tags-in-instance-metadata-1309.patch [bz#2091640]
  - ci-cc_set_hostname-do-not-write-localhost-when-no-hostn.patch [bz#1980403]
  - Resolves: bz#2091640
    ([cloud][init] Add support for reading tags from instance metadata)
  - Resolves: bz#1980403
    ([RHV] RHEL 9 VM with cloud-init without hostname set doesn't result in the FQDN as hostname)


author: Jon Maloy <jmaloy@redhat.com> - 22.1-4
changelog:
  - ci-Honor-system-locale-for-RHEL-1355.patch [bz#2061604]
  - ci-cloud-init.spec-adjust-path-for-66-azure-ephemeral.r.patch [bz#2096270]
  - ci-setup.py-adjust-udev-rules-default-path-1513.patch [bz#2096270]
  - Resolves: bz#2061604
    (cloud-config will change /etc/locale.conf back to en_US.UTF-8 on rhel-guest-image-9.0)
  - Resolves: bz#2096270
    (Adjust udev/rules default path[rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 22.1-5
changelog:
  - ci-Revert-Add-native-NetworkManager-support-1224.patch [bz#2107463 bz#2104389 bz#2117532 bz#2098501]
  - ci-Revert-Use-Network-Manager-and-Netplan-as-default-re.patch [bz#2107463 bz#2104389 bz#2117532 bz#2098501]
  - ci-Revert-Revert-Setting-highest-autoconnect-priority-f.patch [bz#2107463 bz#2104389 bz#2117532 bz#2098501]
  - Resolves: bz#2107463
    ([RHEL-9.1] Cannot run sysconfig when changing the priority of network renderers)
  - Resolves: bz#2104389
    ([RHEL-9.1]Failed to config static IP and IPv6 according to VMware Customization Config File)
  - Resolves: bz#2117532
    ([RHEL9.1] Revert patch of configuring networking by NM keyfiles)
  - Resolves: bz#2098501
    ([RHEL-9.1] IPv6 not workable when cloud-init configure network using NM keyfiles)


author: Camilla Conte <cconte@redhat.com> - 22.1-6
changelog:
  - ci-cloud.cfg.tmpl-make-sure-centos-settings-are-identic.patch [bz#2115565]
  - Resolves: bz#2115565
    (cloud-init configures user "centos" or "rhel" instead of "cloud-user" with cloud-init-22.1)


author: Camilla Conte <cconte@redhat.com> - 22.1-7
changelog:
  - ci-Ensure-network-ready-before-cloud-init-service-runs-.patch [bz#2152100]
  - Resolves: bz#2152100
    ([RHEL-9] Ensure network ready before cloud-init service runs on RHEL)


author: Camilla Conte <cconte@redhat.com> - 22.1-8
changelog:
  - ci-cc_set_hostname-ignore-var-lib-cloud-data-set-hostna.patch [bz#2140893]
  - Resolves: bz#2140893
  (systemd[1]: Failed to start Initial cloud-init job after reboot system via sysrq 'b')


author: Camilla Conte <cconte@redhat.com> - 22.1-9
changelog:
  - ci-Allow-growpart-to-resize-encrypted-partitions-1316.patch [bz#2166245]
  - Resolves: bz#2166245
    (Add support for resizing encrypted root volume)


author: Camilla Conte <cconte@redhat.com> - 23.1.1-2
changelog:
  - 0007-rhel-make-sure-previous-hostname-file-ends-with-a-ne.patch [bz#2184608]
  - Resolves: bz#2184608


author: Packit <hello@packit.dev> - 288-1
changelog:
  - Accounts: Show shell and home directory on detail page
  - Accounts: Custom user ID during account creation
  - Overview: Support additional timeservers with chronyd
  - Metrics: Show longer time span by default
  - Storage: Mounting filesystems at boot time
  - Services: Units need to be re-pinned
  - API removal: Remove cockpit.dbus.publish() and .meta()
  - Development: Cockpit now supports the esbuild bundler


author: Packit <hello@packit.dev> - 289-1
changelog:
  - Metrics: Indicate high usage and use colorblind-friendly colors
  - Accounts: Improve password validation


author: Justin Stephenson <jstephen@redhat.com> - 11-1
changelog:
  - Avoid crash in unmount if journal is null
  - Sync Makefile closer to starter-kit
  - Use current babel/eslint integration
  - Use Flex layout for spacing the two config cards in the config page
  - Use Page/PageSection/Breadcrumb patternfly components
  - Move to xz dist tarballs
  - Remove unused slider.html file
  - package.json: explicitely depend on @patternfly/react-icons
  - webpack: Use relative resolve path for npm 7 compatibility
  - package.json: update patternfly packages
  - package.json: use sass instead of node-sass
  - Fetch pkg/lib automatically from cockpit instead of keeping a local copy
  - Update Docker image and TEST_OS run to Fedora 35
  - Tests: Test SSSD exclude_users and exclude_groups
  - Config: Add SSSD exclude_users and exclude_groups
  - TESTS: Fix testSessionRecordingConf cleanup issue
  - TESTS: Restart SSSD after restoring config


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Drop moment.js dependency
  - Tests: Assert pause state with a later command in rec1
  - CI: Update image to ubuntu 20.04


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-2
changelog:
  - Remove support for building FIPS mode binaries for the
    compat libraries
  - Ships openssl11.cnf as the configuration file.
  - Resolves: rhbz#1993795
  - Related: rhbz#1947584


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-4
changelog:
  - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    Resolves: rhbz#2063148
  - Disable FIPS mode; it does not work and will not be certified
    Resolves: rhbz#2013669


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20141121-15
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Jindrich Novy <jnovy@redhat.com> - 2:2.1.2-2
changelog:
  - update to latest content of https://github.com/containers/conmon/releases/tag/2.1.2
    (https://github.com/containers/conmon/commit/2bc95ee697e87d5f7b77063cf83fc32739addafe)
  - Related: #2061316


author: Phil Sutter <psutter@redhat.com> - 1.4.5-15
changelog:
  - conntrack: fix compiler warnings
  - src: fix strncpy -Wstringop-truncation warnings
  - connntrack: Fix for memleak when parsing -j arg
  - Drop pointless assignments
  - Don't call exit() from signal handler
  - read_config_yy: Drop extra argument from dlog() call
  - helpers: ftp: Avoid ugly casts
  - Fix potential buffer overrun in snprintf() calls
  - cache: Fix features array allocation
  - hash: Flush tables when destroying


author: Phil Sutter <psutter@redhat.com> - 1.4.7-1
changelog:
  - config: Fix -Wimplicit-function-declaration
  - network: Fix -Wstrict-prototypes
  - build: don't suppress various warnings
  - build: conntrack-tools requires libnetfilter_conntrack >= 1.0.9
  - New version 1.4.7


author: Kelvin Fan <kfan@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Require util-linux >= 2.36-1
  - Remove files related to the issuegen and motdgen executables


author: Jindrich Novy <jnovy@redhat.com> - 3:2.195.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.195.1
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 3:2.197.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.197.0
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 3:2.198.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.198.0
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 3:2.199.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.199.0
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 3:2.205.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.205.0
  - remove user_namespace class, thanks to Lokesh Mandvekar
  - Resolves: #2178990


author: Jindrich Novy <jnovy@redhat.com> - 3:2.206.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.206.0
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.206.0-2
changelog:
  - use conditionals from https://github.com/containers/container-selinux/blob/main/container-selinux.spec.rpkg
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.209.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.209.0
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.210.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.210.0
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.211.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.211.0
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.1-4
changelog:
  - revert back to https://github.com/containernetworking/plugins/releases/tag/v1.0.1
  - Related: #2000051


author: Sohan Kunkerkar <skunkerk@redhat.com> - 0.11.0-1
changelog:
  - New release
  - Fix inadvertent inclusion of coreos-installer-dracut in -bootinfra on RHEL
  - Have -dracut own 51coreos-installer directory on RHEL


author: Jan Friesse <jfriesse@redhat.com> - 3.1.4-1
changelog:
  - Related: rhbz#1948974
  - Resolves: rhbz#1967485

  - New upstream release (rhbz#1948974)
  - stats: fix crash when iterating over deleted keys (rhbz#1967485)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-3
changelog:
  - Resolves: rhbz#2024652
  - Resolves: rhbz#2024657

  - totem: Add cancel_hold_on_retransmit config option (rhbz#2024652)
  - merge upstream commit cdf72925db5a81e546ca8e8d7d8291ee1fc77be4 (rhbz#2024652)
  - totemsrp: Switch totempg buffers at the right time (rhbz#2024657)
  - merge upstream commit e7a82370a7b5d3ca342d5e42e25763fa2c938739 (rhbz#2024657)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-4
changelog:
  - Resolves: rhbz#2070623

  - logrotate: Use copytruncate method by default (rhbz#2070623)
  - merge upstream commit 04362046c4a9d7307feb5b68341d567b7d0b94d6 (rhbz#2070623)


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.3
changelog:
  - use _thread_db_sizeof_pthread to obtain struct pthread size (#2034494)
  - add --enable-host-pie, build the compilers as PIE (#2044917)


author: David Malcolm <dmalcolm@redhat.com> - 11.2.1-10
changelog:
  - update from releases/gcc-11-branch (#2063255)
    - PRs ada/98724, ada/104258, ada/104767, ada/104861, c++/58646, c++/59950,
  	c++/61611, c++/95036, c++/100468, c++/101030, c++/101095, c++/101371,
  	c++/101515, c++/101767, c++/102045, c++/102123, c++/102538,
  	c++/102740, c++/102990, c++/103057, c++/103186, c++/103291,
  	c++/103299, c++/103337, c++/103711, c++/103769, c++/103968,
  	c++/104107, c++/104108, c++/104284, c++/104410, c++/104472,
  	c++/104513, c++/104568, c++/104667, c++/104806, c++/104847,
  	c++/104944, c++/104994, c++/105035, c++/105061, c/82283, c/84685,
  	c/104510, c/104711, d/104659, d/105004, debug/104337, debug/104517,
  	debug/104557, fortran/66193, fortran/99585, fortran/100337,
  	fortran/103790, fortran/104211, fortran/104311, fortran/104331,
  	fortran/104430, fortran/104619, fortran/104811, go/100537,
  	libgomp/104385, libstdc++/101231, libstdc++/102358, libstdc++/103904,
  	libstdc++/104442, lto/104237, lto/104333, lto/104617,
  	middle-end/95115, middle-end/99578, middle-end/100464,
  	middle-end/100680, middle-end/100775, middle-end/100786,
  	middle-end/104307, middle-end/104402, middle-end/104446,
  	middle-end/104786, middle-end/104971, middle-end/105032,
  	preprocessor/104147, rtl-optimization/104544, rtl-optimization/104589,
  	rtl-optimization/104777, rtl-optimization/104814, sanitizer/102656,
  	sanitizer/104449, sanitizer/105093, target/79754, target/87496,
  	target/99708, target/99754, target/100784, target/101324,
  	target/102140, target/102952, target/102957, target/103307,
  	target/103627, target/103925, target/104090, target/104208,
  	target/104219, target/104253, target/104362, target/104448,
  	target/104451, target/104453, target/104458, target/104462,
  	target/104469, target/104502, target/104674, target/104681,
  	target/104688, target/104775, target/104890, target/104910,
  	target/104923, target/104963, target/104998, target/105000,
  	target/105052, target/105058, target/105068, testsuite/103556,
  	testsuite/103586, testsuite/104730, testsuite/104759,
  	testsuite/105055, tree-optimization/45178, tree-optimization/100834,
  	tree-optimization/101636, tree-optimization/102819,
  	tree-optimization/102893, tree-optimization/103169,
  	tree-optimization/103361, tree-optimization/103489,
  	tree-optimization/103544, tree-optimization/103596,
  	tree-optimization/103641, tree-optimization/103864,
  	tree-optimization/104263, tree-optimization/104288,
  	tree-optimization/104511, tree-optimization/104601,
  	tree-optimization/104675, tree-optimization/104782,
  	tree-optimization/104931, tree-optimization/105094
  - fix x86 vector initialization expansion fallback (PR target/105123)
  - drop patch 22 (gcc11-libsanitizer-pthread.patch;
    upstreamed as r11-9607-ga8dd74bfb921ed)


author: Jakub Jelinek <jakub@redhat.com> 11.3.1-2
changelog:
  - update from releases/gcc-11-branch (#2077536)
    - GCC 11.3 release
    - PRs c++/98249, c++/99893, c++/100608, c++/101051, c++/101532, c++/101677,
  	c++/101717, c++/101894, c++/102869, c++/103105, c++/103328,
  	c++/103341, c++/103455, c++/103706, c++/103885, c++/103943,
  	c++/104008, c++/104079, c++/104225, c++/104507, c++/104565,
  	c++/105003, c++/105064, c++/105143, c++/105186, c++/105256, c/101585,
  	debug/105203, fortran/102992, fortran/104210, fortran/104228,
  	fortran/104570, fortran/105138, gcov-profile/105282, ipa/103083,
  	ipa/103432, jit/100613, libstdc++/90943, libstdc++/100516,
  	libstdc++/103630, libstdc++/103638, libstdc++/103650,
  	libstdc++/103955, libstdc++/104098, libstdc++/104301,
  	libstdc++/104542, libstdc++/104859, libstdc++/105021,
  	libstdc++/105027, middle-end/104497, middle-end/105165,
  	rtl-optimization/104985, rtl-optimization/105028,
  	rtl-optimization/105211, target/80556, target/100106, target/104117,
  	target/104474, target/104853, target/104894, target/105214,
  	target/105257, tree-optimization/99121, tree-optimization/104880,
  	tree-optimization/105053, tree-optimization/105070,
  	tree-optimization/105189, tree-optimization/105198,
  	tree-optimization/105226, tree-optimization/105232,
  	tree-optimization/105235
  - fix bogus -Wuninitialized warning on va_arg with complex types on x86_64
    (PR target/105331)
  - remove bogus assertion in std::from_chars (PR libstdc++/105324)


author: Marek Polacek <polacek@redhat.com> 11.3.1-4
changelog:
  - update from releases/gcc-11-branch (#2117632)
    - PRs analyzer/105252, analyzer/105365, analyzer/105366, c++/65211,
  	c++/82980, c++/86193, c++/90107, c++/97296, c++/101442, c++/101698,
  	c++/102071, c++/102177, c++/102300, c++/102307, c++/102479,
  	c++/102629, c++/104066, c++/104142, c++/104646, c++/104669,
  	c++/105245, c++/105265, c++/105289, c++/105304, c++/105321,
  	c++/105386, c++/105398, c++/105725, c++/105761, c++/105774,
  	c++/105795, c++/105852, c++/105925, c++/106024, c++/106361,
  	c++/107358, c/41041, c/106016, c/106981, c/107001, d/106139,
  	d/106638, debug/106261, fortran/82868, fortran/100029, fortran/100040,
  	fortran/100097, fortran/100098, fortran/100132, fortran/100136,
  	fortran/100245, fortran/103413, fortran/103504, fortran/103693,
  	fortran/103694, fortran/104313, fortran/104849, fortran/105012,
  	fortran/105230, fortran/105243, fortran/105310, fortran/105633,
  	fortran/105691, fortran/105813, fortran/105954, fortran/106121,
  	fortran/106817, fortran/106857, fortran/106985, fortran/106986,
  	fortran/107054, ipa/100413, ipa/105600, ipa/105739, libgomp/106045,
  	libstdc++/65018, libstdc++/84110, libstdc++/93602, libstdc++/96592,
  	libstdc++/99290, libstdc++/100823, libstdc++/101709, libstdc++/102447,
  	libstdc++/103664, libstdc++/103848, libstdc++/103853,
  	libstdc++/103911, libstdc++/103992, libstdc++/104217,
  	libstdc++/104443, libstdc++/104602, libstdc++/104731,
  	libstdc++/105128, libstdc++/105284, libstdc++/105375,
  	libstdc++/105502, libstdc++/105671, libstdc++/105915,
  	libstdc++/106162, libstdc++/106248, libstdc++/106320,
  	libstdc++/106607, libstdc++/106695, lto/106334, lto/106540,
  	middle-end/103193, middle-end/104869, middle-end/104966,
  	middle-end/105140, middle-end/105998, middle-end/106027,
  	middle-end/106030, middle-end/106144, middle-end/106331,
  	middle-end/106492, preprocessor/97498, preprocessor/105732,
  	rtl-optimization/104637, rtl-optimization/105041,
  	rtl-optimization/105333, rtl-optimization/105559,
  	rtl-optimization/106032, rtl-optimization/106187, sanitizer/105396,
  	sanitizer/105729, target/96072, target/99184, target/99685,
  	target/101322, target/101891, target/102059, target/102146,
  	target/103197, target/103353, target/104257, target/104829,
  	target/105147, target/105162, target/105209, target/105292,
  	target/105339, target/105349, target/105463, target/105472,
  	target/105854, target/105879, target/105970, target/105981,
  	target/106017, target/106091, target/106355, target/106491,
  	target/106721, target/107061, target/107064, target/107183,
  	target/107248, target/107304, target/107364, target/107748,
  	testsuite/105095, testsuite/105266, testsuite/105433,
  	testsuite/106345, tree-optimization/103116, tree-optimization/105148,
  	tree-optimization/105163, tree-optimization/105173,
  	tree-optimization/105250, tree-optimization/105263,
  	tree-optimization/105312, tree-optimization/105368,
  	tree-optimization/105431, tree-optimization/105437,
  	tree-optimization/105528, tree-optimization/105618,
  	tree-optimization/105726, tree-optimization/105860,
  	tree-optimization/106112, tree-optimization/106131,
  	tree-optimization/106189, tree-optimization/106513,
  	tree-optimization/106892, tree-optimization/106934
  - fix the detection of Sapphire Rapids in host_detect_local_cpu
  - fix -Wmismatched-dealloc documentation (#2116635)


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.0-3
changelog:
  - Fix segmentation fault caused by crash extension modules
  - Support the overflow stack exception handling on aarch64


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.0-5
changelog:
  - Fix segfault on aarch64 for "bt -a|-c" command
  - Fix segfault for the "l" command of gdb
  - Fix HZ calculation on Linux 5.14 and later
  - Fix for other issues


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.2-2
changelog:
  - Fix an assertion failure in the gdb's copy_type()
  - Fix for "bt" command printing "bogus exception frame" warning


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.2-1
changelog:
  - Update to 0.17.2
  - Fix Python deprecation (PY_SSIZE_T_CLEAN) (RhBug:1891785)
  - Revert back to old c API for destination file of cr_compress_file_with_stat and cr_compress_file to prevent a memory leak
  - Never leave behind .repodata lock on exit (RhBug:1906831)
  - Disable drpm for RHEL >= 9 (RhBug:1914828)
  - Setting updated/issued_date to None doesn't produce garbage values (RhBug:1921715)
  - Allow taking __repr__ (__str__) of closed xmlfile and sqlite (RhBug:1913465)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-1
changelog:
  - Update to 0.17.7
  - Remove insecure hashes SHA-1 and MD5 from the default build (RhBug:1935486)
  - Fix error when updating repo with removed modules metadata
  - Exit with status code 1 when loading of repo's metadata fails
  - Fix memory leaks (RhBug:1998426)
  - Fix valgrind warnings caused by subprocess calls


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-2
changelog:
  - Switch default of --keep-all-metadata to TRUE and add --discard-additional-metadata (RhBug:2055032)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.20.1-1
changelog:
  - Update to 0.20.1
  - createrepo_c shouldn't silently produce duplicate-NEVRA repos
  - Fix bad performance with task queue management
  - Update errno usage to fix incorrect GError messages
  - Install header for createrepo_shared module
  - Remove C API for cr_xml_parse_main_metadata_together
  - Remove python bindings for xml_parse_main_metadata_together
  - Fix '&' encoding in attributes when parsing repodata
  - Add a streaming parsing API that is user-controllable.
  - Fix a memory leak of primary pkg when parsing interrupted
  - Fix a memory leak when removing the first link in a list
  - Remove `allow_out_of_order` option for `xml_parse_main_metadata_together`
  - Make parse warnings visible through cr.Repomd(), cr.UpdateInfo()
  - Use --error-exit-val option by default
  - If new and old repomd matches during --update don't update
  - Add `cr_repomd_compare` for comparing two repomds
  - Store parsed repomd in `cr_MetadataLocation`
  - Set database version only for the database records, not everything
  - Use copy+delete fallback when moving of a dir fails
  - Fix memory leaks
  - [spec] Option for legacy hashes, enable on RHEL <= 8 (RhBug:2022271)


author: Adrian Reber <areber@redhat.com> - 3.15-11
changelog:
  - Remove unnecessary Requires: criu-libs
  - Remove wrong BR nftables-devel
  - Bump release for rebuild


author: Radostin Stoyanov <radostin@redhat.com> - 3.15-12
changelog:
  - Increase release number from 11 to 12
  - Disable podman test when crun doesn't support checkpoint/restore


author: Vladis Dronov <vdronov@redhat.com> - 15.9-10
changelog:
  - Bring in important patches from the upstream (39fb38..eaea31 in a git repo)
  - Fix the upstream tarball URL
  - Remove outdated patch files


author: Vladis Dronov <vdronov@redhat.com> - 15.9-14
changelog:
  - Add distrubution patches which were not upstreamed (bz 2072635)
  - Add self-tests
  - Add OSCI harness


author: Martin Osvald <mosvald@redhat.com> - 3.4.1-7
changelog:
  - Resolves: #2096149 - Fatal error when running "squatter -r user"
  - Resolves: #2096885 - Enhanced TMT testing for centos-stream


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Bryan Gurney <bgurney@redhat.com> - 71.1-7
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
  - Fix enable-namespace all reporting errors incorrectly
  - Add support for inject-smart on papr scm
  - Related: rhbz#2040075
  - Related: rhbz#1873851
  - Related: rhbz#1880578
  - Related: rhbz#1922538
  - Related: rhbz#2087707


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Eugene Syromiatnikov <esyr@redhat.com> - 3.6-13
changelog:
  - Change "Requires: genisoimage" dependency to "Requires: /usr/bin/mkisofs"
    to enable xorriso-provided drop-in replacement implementation usage.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.1-3
changelog:
  - Fix some rpmlint issues, add comments, add license and doc,
    gpg verification, use pkgconfig BuildRequires, enable _hardened_build


author: Mark Wielaard <mjw@redhat.com> - 5.0-1
changelog:
  - Upgrade to upstream 5.0 release.
    - Removes find-debuginfo .sh suffix.
    - This release still has a find-debuginfo.sh -> find-debuginfo symlink.


author: Petr Menšík <pemensik@redhat.com> - 2.85-3
changelog:
  - Send queries only to best domain-specific server (#2047510)
  - Offer alternate DHCPv6 address if requested is already leased (#1998448)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.15-1
changelog:
  - dovecot updated to 2.3.15, pigeonhole updated to 0.5.15
  - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in
    JWT tokens. This may be used to supply attacker controlled keys to
    validate tokens, if attacker has local access (#1979833)
  - CVE-2021-33515: On-path attacker could have injected plaintext commands
    before STARTTLS negotiation that would be executed after STARTTLS
    finished with the client
  - Add TSLv1.3 support to min_protocols.


author: Timothy Redaelli <tredaelli@redhat.com> - 21.11.2-1
changelog:
  - Rebase to 21.11.2 (#2126159)
  - Includes fixes for CVE-2022-2132 (#2107173) and CVE-2022-28199 (#2123616)


author: Lukas Nykryn <lnykryn@redhat.com> - 055-6.git20210709
changelog:
  - fix(network-manager): don't pull in systemd-udev-settle
  - fix(dracut.sh): handle '-i' option to include files beginning with '.'
  - fix(dracut.sh): handle symlinks appropriately while using '-i' option
  - fix(squash): create relative symlinks
  - feat(squash): install umount util


author: Lukas Nykryn <lnykryn@redhat.com> - 055-9.git20210812
changelog:
  - fix(kernel-modules): add blk_mq_alloc_disk and
  - fix(network-manager): check for nm-initrd-generator in both
  - fix(cms): reload NetworkManager connections


author: Pavel Valena <pvalena@redhat.com> - 055-30.git20220216
changelog:
  - fix(shutdown): be robust against forced shutdown
  - 95resume: only exclude this module, when swap is netdev
  - fix(qeth_rules): check the existence of
  - fix(fips): handle s390x OSTree systems
  - fix(network): add errors and warnings when network interface
  - fix(url-lib): make pre-pivot hook separetely per
  - fix(dracut-shutdown): add cleanup handler on failure
  - fix(multipath): get config. dir from configuration
  - Do not use recommends for base packages
  - 95nfs: set correct ownership and permissions for statd


author: Pavel Valena <pvalena@redhat.com> - 057-10.git20220721
changelog:
  - fix(dracut.sh): do not fail on irregular files
  - fix(98dracut-systemd): partly revert "emergency mode: use


author: Pavel Valena <pvalena@redhat.com> - 057-13.git20220816
changelog:
  - fix(kernel-modules): always include nvmem driver on
  - fix(drm): add video drivers needed on hyper-v and similar
  - fix(skipcpio): ignore broken pipe


author: Pavel Valena <pvalena@redhat.com> - 057-20.git20221213
changelog:
  - refactor(url-lib): write curl output directly to file
  - fix(dracut-initramfs-restore.sh): initramfs detection not
  - fix(90kernel-modules): install blk modules using symbol
  - fix(squash): build ld cache for squash loader
  - test(16-DMSQUASH): make it pass on arch
  - feat(dmsquash-live): add new dmsquash-live-autooverlay module


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.19-1
changelog:
  - New release: 1.19
  - Split BTF
  - DWARF workarounds for DW_AT_declaration
  - Support cross-compiled ELF binaries with different endianness
  - Support showing typedefs for anonymous types
  - Speedups using libbpf algorithms
  - See changes-v1.19 for a complete and more detailed list of changes


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.20-1
changelog:
  - New release: v1.20
  - btf_encoder:
  - Improve ELF error reporting using elf_errmsg(elf_errno())
  - Improve objcopy error handling.
  - Fix handling of 'restrict' qualifier, that was being treated as a 'const'.
  - Support SHN_XINDEX in st_shndx symbol indexes
  - Cope with functions without a name
  - Fix BTF variable generation for kernel modules
  - Fix address size to match what is in the ELF file being processed.
  - Use kernel module ftrace addresses when finding which functions to encode.
  - libbpf:
  - Allow use of packaged version.
  - dwarf_loader:
  - Support DW_AT_data_bit_offset
  - DW_FORM_implicit_const in attr_numeric() and attr_offset()
  - Support DW_TAG_GNU_call_site, standardized rename of DW_TAG_GNU_call_site.
  - build:
  - Fix compilation on 32-bit architectures.


author: Jiri Olsa <jolsa@redhat.com> - 1.21-1
changelog:
  - remove ftrace filter
  - New release: v1.21
  - DWARF loader:
  - Handle DWARF5 DW_OP_addrx properly
  - Handle subprogram ret type with abstract_origin properly
  - Check .notes section for LTO build info
  - Check .debug_abbrev for cross-CU references
  - Permit merging all DWARF CU's for clang LTO built binary
  - Factor out common code to initialize a cu
  - Permit a flexible HASHTAGS__BITS
  - Use a better hashing function, from libbpf
  - btf_encoder:
  - Add --btf_gen_all flag
  - Match ftrace addresses within ELF functions
  - Funnel ELF error reporting through a macro
  - Sanitize non-regular int base type
  - Add support for the floating-point types
  - Pretty printer:
  - Honour conf_fprintf.hex when printing enumerations


author: Jiri Olsa <jolsa@redhat.com> - 1.22-1
changelog:
  - New release: v1.22
  - Resolves: rhbz#2010414
  - Introduce -j/--jobs option to specify the number of threads to use.
  - Multithreaded DWARF loading, requires elfutils >= 0.178.
  - Preparatory work for multithreaded BTF encoding, the focus for 1.23.
  - Allow encoding BTF to a separate file.
  - Show all different types with the same name, not just the first one found.
  - Stop assuming that reading from stdin means pretty, add --prettify.
  - Improve type resolution for the --header command line option.
  - Do not consider the ftrace filter when encoding BTF for kernel functions.
  - Lock calls to non-thread safe elfutils' dwarf_decl_file() and dwarf_decl_line().
  - Change hash table size to one that performs better with current typical vmlinux files.
  - Allow tweaking the hash table size from the command line.
  - Add --kabi_prefix to avoid deduplication woes when using _RH_KABI_REPLACE().
  - Add --with_flexible_array to show just types with flexible arrays.
  - Support btfdiff with a detached BTF file.
  - Introduce sorted type output (--sort).
  - Disable incomplete CTF encoder.


author: Viktor Malik <vmalik@redhat.com> - 1.24-1
changelog:
  - Resolves: rhbz#2140020
  - New release: v1.23
  - Process DW_TAG_LLVM_annotation tags.
  - Initial support for DW_TAG_skeleton_unit.
  - Encode BTF_KIND_TYPE_TAG and BTF_KIND_DECL_TAG
  - Fix handling of percpu symbols on s390.
  - Use cacheline size to infer struct member alignment from BTF.
  - Add --skip_missing to not stop when not finding one of -C arguments.
  - Fix __attribute__((__aligned__(N)) printing alignment for struct members.
  - Fix nested __attribute__(__aligned__(N)) struct printing order.
  - New release: v1.24
  - Add support to BTF_KIND_ENUM64.
  - Support multithreaded BTF encoding.
  - Encode char type as signed in BTF.
  - Introduce --lang and --lang_exclude to pahole.
  - Introduce --compile to pahole.
  - Don't segfault when processing bogus files.


author: Jakub Jelinek <jakub@redhat.com> 0.13-6
changelog:
  - DW_FORM_implicit_const handling fixes (sw#27212, sw#27213)
  - temporarily build odr tests with -gdwarf-4 as they are incompatible with
    DWARF 5


author: Hui Wang <huwang@redhat.com> - 1:4.20-4
changelog:
  - Drop unnecessary javax16.api.jar
  - Add dependency on javapackages-tools since the ecj binary requires it to run


author: Miroslav Rezanina <mrezanin@redhat.com> - 20221207gitfff6d81270b5-2
changelog:
  - edk2-use-rpm-build-flags-rh-only.patch [RHEL-177]
  - Resolves: RHEL-177
    (Enable GNU_RELRO security protection)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20221207gitfff6d81270b5-3
changelog:
  - edk2-OvmfPkg-VirtNorFlashDxe-map-flash-memory-as-uncachea.patch [bz#2158173]
  - edk2-MdePkg-Remove-Itanium-leftover-data-structure-RH-onl.patch [bz#1983086]
  - Resolves: bz#2158173
    ([aarch64][numa] Failed to create 2 numa nodes in some hardwares)
  - Resolves: bz#1983086
    (Assertion failure when creating 1024 VCPU VM: [...]UefiCpuPkg/CpuMpPei/CpuBist.c(186): !EFI_ERROR (Status))


author: Miroslav Rezanina <mrezanin@redhat.com> - 20221207gitfff6d81270b5-4
changelog:
  - edk2-ArmVirt-don-t-use-unaligned-CopyMem-on-NOR-flash.patch [bz#2158173]
  - Resolves: bz#2158173
    ([aarch64][numa] Failed to create 2 numa nodes in some hardwares)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20221207gitfff6d81270b5-5
changelog:
  - edk2-Revert-ArmVirtPkg-ArmVirtQemu-enable-initial-ID-map-.patch [bz#2157656]
  - Resolves: bz#2157656
    ([edk2] [aarch64] Unable to initialize EFI firmware when using edk2-aarch64-20221207gitfff6d81270b5-1.el9 in some hardwares)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20221207gitfff6d81270b5-6
changelog:
  - edk2-update-build-script-rhel-only.patch [bz#2168046]
  - edk2-update-build-config-rhel-only.patch [bz#2168046]
  - edk2-add-release-date-to-builds-rh-only.patch [bz#2168046]
  - edk2-openssl-update.patch [bz#2164534 bz#2164550 bz#2164565 bz#2164583]
  - edk2-rh-openssl-add-crypto-bn-rsa_sup_mul.c-to-file-list.patch [bz#2164534 bz#2164550 bz#2164565 bz#2164583]
  - Resolves: bz#2168046
    ([SVVP] job 'Check SMBIOS Table Specific Requirements' failed on win2022)
  - Resolves: bz#2164534
    (CVE-2023-0286 edk2: openssl: X.400 address type confusion in X.509 GeneralName [rhel-9])
  - Resolves: bz#2164550
    (CVE-2022-4304 edk2: openssl: timing attack in RSA Decryption implementation [rhel-9])
  - Resolves: bz#2164565
    (CVE-2023-0215 edk2: openssl: use-after-free following BIO_new_NDEF [rhel-9])
  - Resolves: bz#2164583
    (CVE-2022-4450 edk2: openssl: double free after calling PEM_read_bio_ex [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20221207gitfff6d81270b5-7
changelog:
  - edk2-Revert-MdeModulePkg-TerminalDxe-add-other-text-resol.patch [bz#2162307]
  - Resolves: bz#2162307
    (Broken GRUB output on a serial console)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20221207gitfff6d81270b5-8
changelog:
  - edk2-OvmfPkg-disable-dynamic-mmio-window-rhel-only.patch [bz#2174605]
  - Resolves: bz#2174605
    ([EDK2] disable dynamic mmio window)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20221207gitfff6d81270b5-9
changelog:
  - edk2-remove-amd-sev-feature-flag-from-secure-boot-builds-.patch [bz#2169247]
  - Resolves: bz#2169247
    ([edk2] Install a sev guest with enrolled secure boot failed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20230301gitf80f052277c8-2
changelog:
  - edk2-build-script-update.patch [bz#2183230]
  - edk2-PcdDxeNxMemoryProtectionPolicy-update.patch [bz#2183230]
  - Resolves: bz#2183230
    ([edk2] Instruction abort exception when booting a VM)


author: Mark Wielaard <mjw@redhat.com> - 0.187-4
changelog:
  - Upgrade to elfutils 0.187
    - debuginfod: Support -C option for connection thread pooling.
    - debuginfod-client: Negative cache file are now zero sized instead
      of no-permission files.
    - addr2line: The -A, --absolute option, which shows file names
      includingthe full compilation directory is now the
      default.  To get theold behavior use the new option --relative.
    - readelf, elflint: Recognize FDO Packaging Metadata ELF notes
    - libdw, debuginfo-client: Load libcurl lazily only when files need
      to be fetched remotely. libcurl is now never loaded when
      DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set,
      libcurl is only loaded when the debuginfod_begin function is
      called.
  - Add elfutils-0.187-csh-profile.patch
  - Add elfutils-0.187-debuginfod-client-fd-leak.patch
  - Add elfutils-0.187-mhd_no_dual_stack.patch
  - Add elfutils-0.187-mhd_epoll.patch


author: Frank Ch. Eigler <fche@redhat.com> - 0.187-5
changelog:
  - rhbz2088774: ship /etc/profile.d/debuginfod* files even without
                 default DEBUGINFOD_URLS.


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-9
changelog:
  - Fix etags local command injection vulnerability (#2175190)
  - Fix htmlfontify.el command injection vulnerability (#2175179)
  - Fix ruby-mode.el local command injection vulnerability (#2175142)
  - Fix ob-latex.el command injection vulnerability (#2180590)


author: Jacek Migacz <jmigacz@redhat.com> - 12.3-1
changelog:
  - Fix build failure on CentOS Stream. Related: rhbz#1951306
  - Revert patch for FSF addresses (it became obsolete with 12.2)
  - Remove Obsoletes and Provides tetex-preview


author: Jeff Law <law@redhat.com> - 1.1.2-7
changelog:
  - Force C++14 as this code is not C++17 ready
  - Fix sprintf format issue
  - Fix ordered comparison of a pointer against zero issue
  -


author: Jack Magne <jmagne@redhat.com> - 1.1.2-14
changelog:
  Resolves: rhbs #2007544,2000928,2000929
  - Bugzilla Bug  2007544 - The esc provides outdated configuration for opensc
  - Bugzilla Bug  2000928 - ESC does not detect smart cards and crashes upon launch [rhel-9.0.0]
  - Bugzilla Bug  2000929 - [RHEL-9][AppStream] esc present in comps but missing from repository [rhel-9.0.0]


author: Jack Magne <jmagne@redhat.com> - 1.1.2-16
changelog:
  Resolves: rhbs #2050849
  - Bug 2050849 - Volkswagen Siemens CardOS M4.4 and 5.0 cards display incorrect status in ESC [RHEL 9.1]


author: Marek Kasik <mkasik@redhat.com> - 40.1-5
changelog:
  - Use tmp dir as containing folder for non-native files
  - Backport fixes for issues found by Coverity Scan
  - Fix some other issues found by Coverity Scan
  - Resolves: #1975150


author: Milan Crha <mcrha@redhat.com> - 3.40.4-4
changelog:
  - Resolves: #2071056 (Addressbook: Switch from GData Contacts API to CardDAV API for Google books)
  - Resolves: #2071742 (Add patch to use correct colors in mail preview with webkit2gtk3 2.36.x)


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: #2129703 (EShellWindow: The 'New' menu is not filled after start)
  - Correct Requires for the 'devel' subpackage to enchant-2


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-4
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993247

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993284


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018421

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003670


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-6
changelog:
  - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
  - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
  - CVE-2022-22825 Integer overflow in lookup in xmlparse.c
  - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
  - CVE-2022-22823 Integer overflow in build_model in xmlparse.c
  - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
  - Resolves: CVE-2022-22827
  - Resolves: CVE-2022-22826
  - Resolves: CVE-2022-22825
  - Resolves: CVE-2022-22824
  - Resolves: CVE-2022-22823
  - Resolves: CVE-2022-22822


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-8
changelog:
  - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
  - Resolves: CVE-2021-45960


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-10
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Tomas Korbar <tkorbar@redhat.com> - 2.4.7-1
changelog:
  - Rebase to version 2.4.7
  - Resolves: rhbz#2067201
  - Resolves: CVE-2022-25313
  - Resolves: CVE-2022-25314
  - Resolves: CVE-2022-25236


author: Radovan Sroka <rsroka@redhat.com> - 1.0.3-3
changelog:
  RHEL 9 BETA
  - SELinux prevents fapolicyd from watch_mount/watch_with_perm on /dev/shm
  Resolves: rhbz#1932225
  Resolves: rhbz#1977731


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.4-101
changelog:
  RHEL 9.0.0 ERRATUM
  - rebase to 1.0.4
  - added rpm_sha256_only option
  - added trust.d directory
  - allow file names with whitespaces in trust files
  - use full paths in trust files
  Resolves: rhbz#2032408
  - fix libc.so getting identified as application/x-executable
  Resolves: rhbz#2015307
  - fix selinux DSP module definition in spec file
  Resolves: rhbz#2014449


author: Radovan Sroka <rsroka@redhat.com> - 1.1-100
changelog:
  RHEL 9.0.0 ERRATUM
  - rebase to 1.1
  Resolves: rhbz#2032408
  - introduce rules.d
  Resolves: rhbz#2054740
  - remove pretrans scriptlet
  Resolve: rhbz#2051481


author: Radovan Sroka <rsroka@redhat.com> - 1.1-104
changelog:
  RHEL 9.1.0 ERRATUM
  - CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path
  Resolves: rhbz#2069123
  - Faulty handling of static applications
  Resolves: rhbz#2096457


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-102
changelog:
  RHEL 9.1.0 ERRATUM
  - rebase fapolicyd to the latest stable vesion
  Resolves: rhbz#2100041
  - fapolicyd gets way too easily killed by OOM killer
  Resolves: rhbz#2097385
  - fapolicyd does not correctly handle SIGHUP
  Resolves: rhbz#2070655
  - Introduce ppid rule attribute
  Resolves: rhbz#2102558
  - fapolicyd often breaks package updates
  Resolves: rhbz#2111244
  - drop libgcrypt in favour of openssl
  Resolves: rhbz#2111938
  - Remove dnf plugin
  Resolves: rhbz#2113959
  - fapolicyd.rules doesn't advertise that using a username/groupname instead of uid/gid also works
  Resolves: rhbz#2115849


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-104
changelog:
  RHEL 9.2.0 ERRATUM
  - statically linked app can execute untrusted app
  Resolves: rhbz#2097077
  - fapolicyd ineffective with systemd DynamicUser=yes
  Resolves: rhbz#2136802
  - Starting manually fapolicyd while the service is already running breaks the system
  Resolves: rhbz#2160517
  - Cannot execute /usr/libexec/grepconf.sh when falcon-sensor is enabled
  Resolves: rhbz#2160518
  - fapolicyd: Introduce filtering of rpmdb
  Resolves: RHEL-192


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-36
changelog:
  - fence_virtd: add link to uri examples and uri w/socket path
    example for when VMS are run as non-root user to manpage
    Resolves: rhbz#2138823


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-42
changelog:
  - fencing/fence_wti: add --plug-separator to be able to avoid
    characters that are in node name(s)
    Resolves: rhbz#2152107


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-43
changelog:
  - fence_vmware_soap: set login_timeout lower than default
    pcmk_monitor_timeout (20s) to remove tmp dirs
    Resolves: rhbz#2122944


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #2005307, #1999276


author: Eric Sandeen <sandeen@redhat.com> 3.25-3
changelog:
  - Fix segfault with external IO engines and multiple threads
  - Enable dev-dax, pmemblk, libpmem engines for ppc64le


author: Eric Garver <egarver@redhat.com> - 1.0.0-0.3.alpha
changelog:
  - remove dead symlink (firewalld.conf) left over from old package versions
    before installing new file


author: Richard Hughes <richard@hughsie.com> 1.2-7
changelog:
  - Disable JLink support to remove one extra dep we are not going to support
  - Resolves: rhbz#1948597


author: Debarshi Ray <rishi@fedoraproject.org> - 1.12.4-2
changelog:
  - Don't try to add Fedora's OCI Flatpak repository on RHEL
  - Remove an obsolete Fedora-specific update path
  Resolves: #2051697


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Adam Jackson <ajax@redhat.com> - 1.3.5-9
changelog:
  - Remove BuildRequires xprop entirely. If present, the configure script will call
    it looking for a property on the root window that Fedora's X server does not
    set, and which would not work anyway since there is no X server running in the
    buildroot, so we can just remove the dependency.


author: Fabio Alessandro Locati <fale@fedoraproject.org> - 5.13.1-2
changelog:
  - Provide the right font configuration
  - Drop ttf format since upstream affirms that otf is to be preferred


author: Akira TAGOH <tagoh@redhat.com> - 2.13.94-2
changelog:
  - Fix the score calculation on matching for multiple values.
  - Enable 11-lcdfilter-default.conf.
    Resolves: rhbz#1965684
  - Rebase to the latest release.
    Resolves: rhbz#2023161


author: Akira TAGOH <tagoh@redhat.com> - 2.13.95-1
changelog:
  - New upstream release.
  - Update deps to font(notosans)
    https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts


author: Akira TAGOH <tagoh@redhat.com> - 2.14.0-1
changelog:
  - New upstream release.
  - Rebase to 2.14 and revert Noto Default change happened in f36.
    Resolves: rhbz#2075393


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Benjamin Berg <bberg@redhat.com> - 1.94.0-3
changelog:
  - Use GFDL abbreviation as GFDLv1.1+ is not listed
  - Install PAM module into /usr
  - Pull in further test fixes


author: Antonio Torres <antorres@redhat.com> - 3.0.21-31
changelog:
  - Update OpenSSL 3.0 support backport to current v3.0.x branch state
  - Add "--enable-fips-workaround" to build options
    Related: rhbz#2083699


author: Antonio Torres <antorres@redhat.com> - 3.0.21-34
changelog:
  - Use GID / UID 95 as it's reserved for FreeRADIUS (https://pagure.io/setup/blob/07f8debf03dfb0e5ed36051c13c86c8cd00cd241/f/uidgid#_107)
    Resolves: #2095403


author: Ondrej Holy <oholy@redhat.com> - - 2:2.4.1-4
changelog:
  - CVE-2022-39282: Fix length checks in parallel driver (#2136152)
  - CVE-2022-39283: Add missing length check in video channel (#2136154)
  - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145140)
  - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145140)
  - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145140)
  - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145140)
  - CVE-2022-39347: Fix path validation in drive channel (#2145140)
  - CVE-2022-41877: Add missing length check in drive channel (#2145140)


author: Marek Kasik <mkasik@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Test bitmap size earlier for PNGs
  - Fix memory leak in pngshim.c
  - Enable man pages for demos
  - Resolves: #1887084, #1890211


author: Akira TAGOH <tagoh@redhat.com> - 2.10.4-3
changelog:
  - Enable HarfBuzz support
  - Add bootstrap without HarfBuzz
  - Resolves: #1853937
  - Resolves: #1906714


author: Akira TAGOH <tagoh@redhat.com> - 1.0.10-6.el9.2
changelog:
  - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310
    Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063


author: Michal Ruprich <mruprich@redhat.com> - 8.3.1-1
changelog:
  - Resolves: #2129731 - Rebase FRR to the latest version
  - Resolves: #2129743 - Add targeted SELinux policy for FRR
  - Resolves: #2127494 - BGP incorrectly withdraws routes on graceful restart capable routers


author: Michal Ruprich <mruprich@redhat.com> - 8.3.1-2
changelog:
  - Resolves: #2128738 - out-of-bounds read in the BGP daemon may lead to information disclosure or denial of service


author: Michal Ruprich <mruprich@redhat.com> - 0.17-85
changelog:
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Hughes <richard@hughsie.com> 1.5.9-4
changelog:
  - Rebuilt to use redhatsecureboot503 signatures
  - Undo last Fedora sync to use the RHEL-specific patches
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.1-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Dell TBT4 Docking stations
  - Resolves: rhbz#1974347
  - Resolves: rhbz#1991426


author: Richard Hughes <richard@hughsie.com> 1.7.4-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Lenovo TBT4 Docking stations
  - Do not cause systemd-modules-load failures
  - Build against a new enough pesign
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.4-3
changelog:
  - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c
    which lives in AppStream, not BaseOS.
  - Use the efi_vendor variable from EFI-RPM
  - Resolves: rhbz#2064904


author: Richard Hughes <rhughes@redhat.com> 1.7.9-2
changelog:
  - Include the new dbx updates on the filesystem; clients typically do not have LVFS enabled.
  - Resolves: rhbz#2120708


author: Richard Hughes <richard@hughsie.com> 1.8.10-1
changelog:
  - Rebase to latest upstream release to fix multiple ESP detection problems
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.8.10-2
changelog:
  - Rebuild because distrobaker did entirely the wrong thing.
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Michal Schorm <mschorm@redhat.com> - 26.4.8-2
changelog:
  - Switch from SCONS build tooling to CMAKE build tooling
  - Use upstream variants of Systemd service file and Systemd service file wrapper srcipt


author: Lukas Javorsky <ljavorsk@redhat.com> - 26.4.9-2
changelog:
  - Explicitly require the 'procps-ng' package
  - Otherwise it will not require it in the lightweight systems (e.g. containers)
  - and Galera won't work properly


author: Nick Clifton <nickc@redhat.com> - 10.69-1
changelog:
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries if compiled using LTO.  (#2082146)


author: Nick Clifton <nickc@redhat.com> - 10.73-2
changelog:
  - Annocheck: Fix handling of command line options that take arguments.  (#2086850)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)


author: Nick Clifton <nickc@redhat.com> - 10.75-1
changelog:
  - Annocheck: Fix covscan detected race condition between stat() and open().
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)


author: Nick Clifton <nickc@redhat.com> - 10.76-1
changelog:
  - Spec file: Correct the Provides for the annobin-doc subpackage.  (#2097065)
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.
  - Annocheck: Fix covscan detected race condition between stat() and open().


author: Marek Polacek <polacek@redhat.com> 12.2.1-4
changelog:
  - update from releases/gcc-12 branch (#2110583)
  - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST
    (PR libstdc++/107468)


author: Kevin Buettner - 11.2-2
changelog:
  - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
    (This is a workaround for the bogus warning/error that we now see
    on i686 regarding a "may write a terminating nul past the end of
    the destination" message for the sprintf() call in
    global_symbol_searcher::search() in gdb/symtab.c.)


author: Kevin Buettner - 11.2-3
changelog:
  - Backport upstream patch which removes sizes from debuginfod download
    messages when the size is not available (RHBZ 2068280, Aaron Merey).


author: Filip Januš <fjanus@redhat.com> - 2.2.5-12
changelog:
  - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src)
  - Resolves: #1599032


author: Filip Januš <fjanus@redhat.com> - 2.3.1-1
changelog:
  - Upstream released new version 2.3.1
  - patch bug615 is no more needed - fixed by upstream in release
  - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on
    x390s - XFAIL_TEST definition for x390s is no more necessary


author: Filip Januš <fjanus@redhat.com> - 2.3.2-1
changelog:
  - Add condition if fedora for packages not available in RHEL
  - enable avif support
  - use bcond
  - rebase to version 2.3.2


author: Keith Seitz <keiths@redhat.com> - 10.2-5.el9
changelog:
  - Backport five patches to support glibc 2.34 with merged libpthread.
    (Simon Marchi and Kevin Buettner, RH BZ 1971095)


author: Keith Seitz <keiths@redhat.com> - 10.2-6.el9
changelog:
  - Backport "PowerPC remove 512 bytes region limit if 2nd DAWR is available"
    (Rogerio Alves, RHBZ 1870029)
  - Backport patches for "Support prefixed instructions in GDB"
    (Will Schmidt and Luis Machado, RHBZ 1870031)


author: Bruno Larsen <blarsen@redhat.com>
changelog:
  - Bakport "Fix assertion failure in copy_type"
    (Tom Tromey, RHBZ 2155439)
  - Bakport "[gdb/testsuite] Fix PR20630 regression test in gdb.base/printcmds.exp"
    (Tom de Vries)


author: Bruno Larsen <blarsen@redhat.com> - 10.2-11.el9
changelog:
  - Backport "libiberty: prevent buffer overflow when decoding user input"
    (Luís Ferreira, RHBZ2132600)


author: Tomas Popela <tpopela@redhat.com> - 2.42.6-3
changelog:
  - Backport fixes for CVE-2021-46829 and CVE-2021-44648
  - Resolves: rhbz#2115213
  - Resolves: rhbz#2044346


author: Ray Strode <rstrode@redhat.com> - 40.1-12
changelog:
  - More fixes from RHEL 8:
    - Fix DisallowTCP=false
    - Fix crash when both wayland and xorg are unavailable
    Related: #2056931


author: Ray Strode <rstrode@redhat.com> - 40.1-15
changelog:
  - Fix accountsservice user templates
    Resolves: #2062827
  - Properly force Xorg on matrox cards
    Related: #2074013
  - Fix typo that prevents the correct session type from being
    used when user switching.
    Resolves: #2074014


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Florian Weimer <fweimer@redhat.com> - 2.34-57
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 6484ae5b8c4d4314f748e4d3c9a9baa5385e57c5
  - malloc: Fix -Wuse-after-free warning in tst-mallocalign1 [BZ #26779]
  - s_sincosf.h: Change pio4 type to float [BZ #28713]
  - math: Properly cast X_TLOSS to float [BZ #28713]
  - Regenerate ulps on x86_64 with GCC 12
  - Avoid -Wuse-after-free in tests [BZ #26779].
  - Fix build of nptl/tst-thread_local1.cc with GCC 12
  - Fix stdio-common tests for GCC 12 -Waddress
  - Fix stdlib/tst-setcontext.c for GCC 12 -Warray-compare
  - resolv: Avoid GCC 12 false positive warning [BZ #28439].
  - intl: Avoid -Wuse-after-free [BZ #26779]
  - elf: Drop elf/tls-macros.h in favor of __thread and tls_model attributes [BZ #28152] [BZ #28205]
  - time: Set daylight to 1 for matching DST/offset change (RHBZ#2155352)
  - elf/tst-tlsopt-powerpc fails when compiled with -mcpu=power10 (BZ# 29776)
  - time: Use 64 bit time on tzfile
  - nscd: Use 64 bit time_t on libc nscd routines (BZ# 29402)
  - nis: Build libnsl with 64 bit time_t
  - Use LFS and 64 bit time for installed programs (BZ #15333)


author: Tamar Shacked <tshacked@redhat.com> - 6.0-56.3
changelog:
  - Rebase with latest RHGS-3.5.4
  - Fix changlog chronological order by removing unneeded changelogs
  - fixes bug bz#1939340


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Kalev Lember <klember@redhat.com> - 40~rc-1
changelog:
  - Update to 40.rc
  - Make -extras subpackage require the main package
  - Drop move-adwaita-backgrounds.patch
  - Remove old obsoletes


author: Bastien Nocera <bnocera@redhat.com> - 3.34.3-4
changelog:
  + gnome-bluetooth-3.34.3-4
  - Revert “Require PulseAudio _or_ Pipewire for Bluetooth audio”
  - Closes: #1928166


author: Florian Müllner <fmuellner@redhat.com> - 40.7-4
changelog:
  - Adjust classification banner position in fullscreen
    Resolves: #2153524
  - Don't grab focus when clicking desktop grid
    Resolves: #2150001
  - Make desktop icons resilient to background reloads
    Resolves: #2139895
  - Allow disabling workspace switch gesture
    Resolves: #2154358


author: Felipe Borges <feborges@redhat.com> - 40.0-25
changelog:
  - Backport translations for Multitasking panel
  - Make Multitasking panel capable of handling Right-to-Left locales
    Resolves: #2105228


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.0-1
changelog:
  - Update to 3.40.0
  - Disable the Facebook, Flickr and Foursquare providers
  - Remove Photos support from the Google provider
  Resolves: #1913641


author: Felipe Borges <feborges@redhat.com> - 40.0.1-10
changelog:
  - Default power-button-action to poweroff on servers
    (except when power-button-action=nothing)
    Resolves: #1885639


author: Florian Müllner <fmuellner@redhat.com> - 40.10-4
changelog:
  - Fix struts on login screen
    Resolves: #2145185
  - Allow gnome portal to access introspection API
    Resolves: #2079194


author: Milan Crha <mcrha@redhat.com> - 41.0-2
changelog:
  - Resolves: #2012699 (Backport changes from Fedora 35)
  - Add patch to mark compulsory only repos, not apps from it
  - Resolves: #2011176 (flathub repo can't be added through gnome-software)
  - Resolves: #2010660 (gs-repos-dialog: Can show also desktop applications)
  - Resolves: #2010353 (Optional repos cannot be disabled)
  - Resolves: #2010740 (Refresh on repository setup change)
  - Resolves: #2009063 (Correct update notifications)


author: Milan Crha <mcrha@redhat.com> - 41.5-2
changelog:
  - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file)
  - Resolves: #2129021 (Hide some errors in non-debug builds)


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.1-1
changelog:
  - Update to 3.40.1
  - Rebase the patches
  - Backport yet-to-be-released patches from upstream to avoid translation
    conflicts
  Resolves: #1959384


author: Peter Jones <pjones@redhat.com> - 3.0.9-3
changelog:
  - Fix some minor rpmlint complaints
  - Pull recent patches from upstream
  - Add support for ELF constructors and destructors
  - Fix a minor licensing problem


author: Peter Jones <pjones@redhat.com> - 3.0.11-1
changelog:
  - Update to 3.0.11 (via patches generated from git)
  - Plus newer upstream fixes (also via patches generated from git)
  - Fix shell exit failures in make
  - Fix .reloc section generation
  - Fix CHAR8 definition
  - Fix "make DESTDIR=..."
  - Change the installed .a/.o layout
  - Provide makefiles for consumers to use.
  - Make the -devel noarch since it's just headers.
  - Add a bunch of compatibility symlinks for the 3.0.8 filesystem layout
    These will go away once we've migrated everything using them in fedora
    to use the newer make system...


author: Peter Jones <pjones@redhat.com> - 3.0.11-2
changelog:
  - Make a compat subpackage to provide the old paths to our libraries, linker
    script, and includes.


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-12
changelog:
  - fips: mark PBKDF2 with short key and output sizes non-approved
  - fips: only mark HMAC as approved in PBKDF2
  - fips: mark gnutls_key_generate with short key sizes non-approved
  - fips: fix checking on hash algorithm used in ECDSA
  - fips: preserve operation context around FIPS selftests API


author: Zoltan Fridrich <zfridric@redhat.com> - 3.7.6-13
changelog:
  - fips: make XTS key check failure not fatal (#2130971)
  - enable source archive verification again (#2127094)
  - clear server's session ticket indication at rehandshake (#2136072)
  - crypto-api: add block cipher API with automatic padding (#2084161)
  - fips: remove library path checking from FIPS integrity check (#2140908)


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-14
changelog:
  - cipher: add restriction on CCM tag length under FIPS mode (#2137807)
  - nettle: mark non-compliant RSA-PSS salt length to be not-approved (#2143266)


author: David Benoit <dbenoit@redhat.com> 3.0.9-5
changelog:
  - Remove fedora-specific Go dependency automation macros
  - Remove dependency on golist
  - Temporarily remove incompatible template spec files
  - Update gobuild flags
  - Resolves: rhbz#1982298


author: David Benoit <dbenoit@redhat.com> 3.0.9-9
changelog:
  - Delete remove-fedora-dependency-automation.patch
  - Bundle golist in /usr/libexec
  - Related: rhbz#2043107


author: Derek Parker <deparker@redhat.com> - 1.16.6-1
changelog:
  - Rebase to 1.16.6
  - Resolves: rhbz#1984124
  - Replace symbols no longer present in OpenSSL 3.0 ABI
  - Resolves: rhbz#1984110
  - Fix TestBoringServerCurves failing when ran by itself
  - Resolves: rhbz#1977914


author: David Benoit <dbenoit@redhat.com> - 1.19.4-1
changelog:
  - Rebase to Go 1.19.4
  - Fix ppc64le linker issue
  - Remove defunct patches
  - Remove downstream generated FIPS mode patches
  - Add golang-fips/go as the source for FIPS mode patches
  - Resolves: rhbz#2144539


author: Alejandro Sáez <asm@redhat.com> - 1.17.2-1
changelog:
  - Rebase to Go 1.17.2
  - Related: rhbz#2014087
  - Remove favicon.ico and robots.txt references
  - Exclude TestEd25519Vectors test
  - Update patch rhbz1952381
  - Remove rhbz1904567 patch
  - Remove rhbz1939923 patch


author: Alejandro Sáez <asm@redhat.com> - 1.17.5-1
changelog:
  - Rebase to Go 1.17.5
  - Add remove_waitgroup_misuse_tests patch
  - Add remove_ed25519vectors_test.patch
  - Remove FIPS checks to avoid issues in the CI
  - Related: rhbz#2031116
  - Resolves: rhbz#2022829
  - Resolves: rhbz#2024687
  - Resolves: rhbz#2030851
  - Resolves: rhbz#2031253


author: David Benoit <dbenoit@redhat.com> - 1.18.2-1
changelog:
  - Rebase to Go 1.18.2
  - Move to github.com/golang-fips/go
  - Resolves: rhbz#2075169
  - Resolves: rhbz#2060769
  - Resolves: rhbz#2067531
  - Resolves: rhbz#2067536
  - Resolves: rhbz#2067552
  - Resolves: rhbz#2025637


author: David Benoit <dbenoit@redhat.com> - 1.18.2-2
changelog:
  - Update deprecated openssl algorithms patch
  - Rebuild against openssl-3.0.1-33
  - Resolves: rhbz#2092136
  - Related: rhbz#2092016


author: Alejandro Sáez <asm@redhat.com> - 1.18.4-2
changelog:
  - Update to Go 1.18.4
  - Resolves: rhbz#2109180
  - Deprecates keys smaller than 2048 bits in TestDecryptOAEP in boring mode


author: Parag Nemade <pnemade AT redhat DOT com> - 1:1.002-0.15.20130214
changelog:
  - Un-retire this package in F38+ (#2162532)
  - Update as per suggestions given in rename package review (#2166813)


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20200215-5
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Akira TAGOH <tagoh@redhat.com> - 20201206-1
changelog:
  - Updates to 20201206.
    Resolves: rhbz#1899847
  - Refactoring spec file.
  - Fix invalid metainfo files.
    Resolves: rhbz#1830709


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.20.7-20
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Add upstream commits for git master which contains patches 9, 10 and 11
  - Add GCC10 fix
  - Cleanups


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.11-2
changelog:
  - resolve CVE-2021-44716 golang: net/http: limit growth of header canonicalization cache
  - resolve CVE-2021-43813 grafana: directory traversal vulnerability for *.md files


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.11-3
changelog:
  - use HMAC-SHA-256 instead of SHA-1 to generate password reset tokens
  - update FIPS tests in check phase


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-1
changelog:
  - update to 7.5.15 tagged upstream community sources, see CHANGELOG
  - resolve CVE-2022-21673 grafana: Forward OAuth Identity Token can allow users to access some data sources
  - resolve CVE-2022-21702 grafana: XSS vulnerability in data source handling
  - resolve CVE-2022-21703 grafana: CSRF vulnerability can lead to privilege escalation
  - resolve CVE-2022-21713 grafana: IDOR vulnerability can lead to information disclosure
  - resolve CVE-2021-23648 sanitize-url: XSS
  - resolve CVE-2022-21698 prometheus/client_golang: Denial of service using InstrumentHandlerCounter
  - declare Node.js dependencies of subpackages
  - make vendor and webpack tarballs reproducible


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-3
changelog:
  - resolve CVE-2022-1962 golang: go/parser: stack exhaustion in all Parse* functions
  - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header
  - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working
  - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read
  - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
  - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
  - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode
  - resolve CVE-2022-28131 golang: encoding/xml: stack exhaustion in Decoder.Skip
  - resolve CVE-2022-30633 golang: encoding/xml: stack exhaustion in Unmarshal


author: Andreas Gerstmayr <agerstmayr@redhat.com> 9.0.8-1
changelog:
  - update to 9.0.8 tagged upstream community sources, see CHANGELOG
  - do not list /usr/share/grafana/conf twice
  - drop makefile in favor of create_bundles.sh script
  - sync provides/obsoletes with CentOS versions
  - drop husky patch


author: Andreas Gerstmayr <agerstmayr@redhat.com> 9.0.9-1
changelog:
  - update to 9.0.9 tagged upstream community sources, see CHANGELOG
  - resolve CVE-2022-35957 grafana: Escalation from admin to server admin when auth proxy is used (rhbz#2125530)


author: Stan Cox <scox@redhat.com> 9.0.9-2
changelog:
  - resolve CVE-2022-39229 grafana: Using email as a username can prevent other users from signing in
  - resolve CVE-2022-2880 CVE-2022-41715 grafana: various flaws


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.1.0-1
changelog:
  - update to 3.1.0 tagged upstream community sources, see CHANGELOG
  - remove unused cryptographic implementations


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.2.0-2
changelog:
  - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header
  - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working
  - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read
  - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
  - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
  - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode


author: Andreas Gerstmayr <agerstmayr@redhat.com> 5.0.0-4
changelog:
  - update to 5.0.0 tagged upstream community sources, see CHANGELOG
  - install plugin in /usr/share and create symlink from /var using
    systemd-tmpfiles to work on rpm-ostree based distributions
  - revert the breaking change (change of internal plugin IDs) of upstream v5.0.0,
    i.e. there are no breaking changes when performing this upgrade
  - enable Go modules in build process
  - make vendor and webpack tarballs reproducible
  - drop makefile in favor of create_bundles.sh script


author: Andreas Gerstmayr <agerstmayr@redhat.com> 5.1.1-1
changelog:
  - update to 5.1.1 tagged upstream community sources, see CHANGELOG
  - resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.44.0-19
changelog:
  - Conditionalized guile support
    Resolves: rhbz#1953974
  - Updated RHEL macros
    Resolves: rhbz#1957653


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.14.0-1
changelog:
  - Release 0.14.0 (Peter Robinson)
  - Updated testing documentation (Jose Noguera)
  - README updated with TOC and improved explanations (Jose Noguera)
  - Add watchdog-triggered boot check #2 (Jose Noguera)
  - Update specfile and README to reflect changes in subpackage layout. (Jose Noguera)
  - Ensure all required health checks are run #52 (Jose Noguera)


author: Tomas Popela <tpopela@redhat.com> - 40.0-6
changelog:
  - Require the Source Code Pro font instead of only recommending it to not break
    systems updated from 9.0.0.
    Resolves: rhbz#2093975


author: Wim Taymans <wtaymans@redhat.com> - 1.18.4-5
changelog:
  - Handle both compressed and uncompressed man pages
  - Fix build with small patch
  - Resolves: rhbz#2005247


author: Wim Taymans <wtaymans@redhat.com> - 1.18.4-6
changelog:
  - Fixes for CVE-2022-1920, CVE-2022-1921, CVE-2022-1922, CVE-2022-1923,
    CVE-2022-1924, CVE-2022-1925, CVE-2022-2122
    Resolves: rhbz#2131034, rhbz#2131039, rhbz#2131045, rhbz#2131049,
              rhbz#2131054, rhbz#2131060, rhbz#2131064


author: Daniel P. Berrangé <berrange@redhat.com> - 1.2.0-1
changelog:
  - Update to 1.2.0 release
  - Drop outdated conditionals
  - Drop outdated ldconfig script
  - Use versioned obsoletes tags
  - Resolves: rhbz#1949474


author: Kalev Lember <klember@redhat.com> - 3.24.3-1
changelog:
  - Update to 3.24.3
  - Use https source URLs
  - Re-enable LTO now that we have upstream fix in place (#1898054)
  - Switch to meson build system
  - Tighten soname globs


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-6
changelog:
  - Clean up NetworkManager connection files
  - Add the copy-patches.sh script from virt-v2v
    resolves: rhbz#1980922


author: Richard W.M. Jones <rjones@redhat.com> - 1.48.2-5
changelog:
  - Rebase to guestfs-tools 1.48.2
    resolves: rhbz#2059286
  - Default to --selinux-relabel in various tools
    resolves: rhbz#2075718, rhbz#2089748
  - Add lvm system.devices cleanup operation to virt-sysprep
    resolves: rhbz#2072493
  - Refactor virt-customize --install, --update options in common submodule
  - Add support for Clevis & Tang
    resolves: rhbz#1809453
  - Fix CVE-2022-2211 Denial of Service in --key parameter
    resolves: rhbz#2102721
  - Fix virt-sysprep and LUKS-on-LVM guests
    resolves: rhbz#2106286


author: Richard W.M. Jones <rjones@redhat.com> - 1.48.2-8
changelog:
  - Support Rocky Linux in virt-customize
    resolves: rhbz#2133443
  - Disable OpenSUSE repo in virt-builder
    resolves: rhbz#2145160


author: Richard W.M. Jones <rjones@redhat.com> - 1.50.1-1
changelog:
  - Rebase to guestfs-tools 1.50.1
    resolves: rhbz#2168626
  - Fix virt-drivers inspection of RHEL 9.2 guests
    resolves: rhbz#2184963


author: Tom Stellard <tstellar@redhat.com> - 5.3.3-3
changelog:
  - Fix warning building with clang
  - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type]


author: Ryan O'Hara <rohara@redhat.com> - 2.4.7-1
changelog:
  - Update to 2.4.7 (#1966688)
  - Fix domain parts in :scheme and :path fields (CVE-2021-39240, #1998196)
  - Fix spaces in the :method field (CVE-2021-39241, #1998198)
  - Fix mismatch between :authority and Host fields (CVE-2021-39242, #1998200)
  - Fix request smuggling attack or response splitting (CVE-2021-40346, #2000621)


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Filip Januš <fjanus@redhat.com> - 1.5-1
changelog:
  - Nwe upstream version 1.5
  - Add patch to solve inconsistency between configure.ac and filename
  - Add Build requirement autoconf


author: Davide Caratti <dcaratti@redhat.com> - 2.9-15
changelog:
  - Disable 'badfuncs' in rpminspect tests
  - Build with -fPIE, and enable verbose build log
  - enable CONFIG_SUITEB192


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-4
changelog:
  - 1912147 - Enable matching for '<model>_series' drivers in PPD search algorithm
  - rework optional gui messages


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-5
changelog:
  - 1925259 - %pre scriptlet enables and starts cups.service, which is unnecessary
  - 1919556 - hp-fab crashed: QFileDialog.getOpenFileName is not used correctly


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-1
changelog:
  - new version 2.4.53
  - Resolves: #2079939 - httpd rebase to 2.4.53
  - Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
    with core


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-3
changelog:
  - Resolves: #2065677 - httpd minimisation for ubi-micro
  - minimize httpd dependencies (new httpd-core package)
  - mod_systemd and mod_brotli are now packaged in the main httpd package


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-7
changelog:
  - Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
    smuggling
  - Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in 
    ap_strcmp_match()
  - Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
    by hop-by-hop mechanism
  - Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
  - Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
  - Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
  - Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
    with websockets


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-11
changelog:
  - Resolves: #2162500 - CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write
    of zero byte
  - Resolves: #2162486 - CVE-2022-37436 httpd: mod_proxy: HTTP response splitting
  - Resolves: #2162510 - CVE-2022-36760 httpd: mod_proxy_ajp: Possible request
    smuggling


author: Parag Nemade <pnemade AT redhat DOT com> - 5.1-3
changelog:
  - Resolves:rhbz#1967646 - Correct the License: tag to LGPLv3+ based on LICENSE.txt file
  - Added gating tests


author: Parag Nemade <pnemade AT redhat DOT com> - 1.0.3-21
changelog:
  - Remove the duplicate source file committed to this package git repository
  - Update URL tag and files section to be more verbose


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.36.20190303git
changelog:
  - Synchronize RHEL 8 changes [rhbz#1957651]
  - Resolves: rhbz#1957651
    ([Hyper-V][RHEL-9] Update build to rhel format and syncup RHEL 8 content for hyperv-daemons.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.38.20190303git
changelog:
  - hpvd-Enable-build-on-aarch64.patch [bz#2020148]
  - Resolves: bz#2020148
    ([Hyper-V][RHEL9.0][ARM] No hyperv-daemons package built for aarch64 platform)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.39.20190303git
changelog:
  - hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [bz#2026371]
  - hpvd-Use-filename-for-connection-profile.patch [bz#2026371]
  - Resolves: bz#2026371
    ([RHEL9][Hyper-V]The /usr/libexec/hypervkvpd/hv_set_ifconfig need update for RHEL9 since the ifdown/ifup was not supported on RHEL9)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.40.20190303git
changelog:
  - hpvd-hypervkvpd.service-ordering-fixes.patch [bz#2103188]
  - Resolves: bz#2103188
    ([Hyper-V][RHEL-9] hypervkvpd.service service ordering)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.41.20190303git
changelog:
  - hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [bz#2122115]
  - hpvd-tools-hv-Remove-an-extraneous-the.patch [bz#2139457]
  - hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [bz#2139457]
  - Resolves: bz#2122115
    ([Hyper-V][RHEL-9] Cannot set gateway properly when set static IPADDR0,NETMASK0,GATEWAY in ifcfg-eth0)
  - Resolves: bz#2139457
    ([Hyper-V][RHEL9.2] Update Hyper-V-Daemons)


author: Peter Robinson <pbrobinson@fedoraproject.org> - 4.2-2
changelog:
  - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package)
  - Drop/obsolete eepromer subpackage, deprecated for 6 years
  - Drop python2 conditionals
  - Minor cleanups


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.24-5
changelog:
  - Fix covscan reviews. Related: rhbz#1963071

  - Implement ibus_im_context_set_surrounding_with_selection()


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.11-10
changelog:
  - Replace kasumi with kausmi-unicode
  - Delete to require intltool
  - Delete to call gettext.bind_textdomain_codeset()


author: Mike FABIAN <mfabian@redhat.com> - 1.4.2-1
changelog:
  - Update to  1.4.2
  - New translations: tr (Turkish) 100%, uk (Ukrainian) 100%,
    id (Indonesian) 100%, ja_JP (Japanese) 100%.
  - Translation updates: zh_CN, pt_BR


author: Mike FABIAN <mfabian@redhat.com> - 1.12.4-1
changelog:
  - Update to 1.12.4
  - Update translations from Weblate (updated es, cs, fa, pt_BR, zh_CN).
    zh_CN is 100% complete now.


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-1
changelog:
  - Update to 1.12.5
  - Return False in _execute_command_commit_candidate_number(self, number)
    if number out of range
  - Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/21
  - remove Use-from-unittest-import-mock-instead-of-just-import.patch
    (included upstream)
  - Update translations from Weblate (New translation for Sinhala (si) started)


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-3
changelog:
  - Resolves: rhbz#1974631 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE
    Resolves: https://github.com/definite/ibus-table-chinese/pull/14
  - Add SUGGESTION_MODE = TRUE to the wubi tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/15
  - Support pinyin mode also for stroke5 table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/12
  - Use nicer values for symbol and status prompt
    Resolves: https://github.com/definite/ibus-table-chinese/pull/8
  - update jyutping table; add cantonyale table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/11
  - Update jyutping and cantonese tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/9


author: Mike FABIAN <mfabian@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Use “from unittest import mock” instead of just “import mock”.
  - Update emoji annotations from CLDR
  - Translation update from Weblate for zh_CN (still 100% complete)


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-1
changelog:
  - Update to 2.10.5
  - Run the voikko tests only for libvoikko version >= 4.3
  - Adapt voikko test cases to the newest voikko version
    libvoikko-4.3-3, python3-libvoikko-4.3-3, voikko-fi-2.4-3
  - Log a warning when language is “fi” and “import libvoikko” failed
  - Return an empty list [] in spellcheck_suggest_voikko() when libvoikko was not imported
  - Update emoji annotations from CLDR, switching “no” and “nb”
    See: https://unicode-org.atlassian.net/browse/CLDR-2698
  - Remove icon in emoji-picker.appdata.xml (to avoid warnings
    from appstream-util and appstreamcli).


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-2
changelog:
  - Use the voikko build requires only for Fedora. They are only
    needed to run the voikko test cases during build.


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-3
changelog:
  - Remove gnome-desktop-testing and ibus-desktop-testing from the requires
    of the ibus-typing-booster-tests subpackage


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-1
changelog:
  - Update to 2.11.0
  - Use sensitivity feature of buttons in the setup tool tab where shortcuts are defined
  - Don’t let dialog action area of setup tool expand.
  - Improve the setup tool to make it possible to enter multi-line expansions of shortcuts
  - Resolves https://github.com/mike-fabian/ibus-typing-booster/issues/158
  - Elide extremely long candidates in the lookup table in the middle.
  - If a candidate contains newlines, replace the newlines with arrows in the lookup table.
  - If a commit string contains new-lines, commit it in several chunks
    and forward Return between the chunks.
  - Update emoji annotations from CLDR
  - Put the remote icon back in emoji-picker.appdata.xml, it was a
    false positive by appstreamcli
  - Translation update from Weblate (pt_PT updated, 100% complete now)
  - Skip the inscript2 test cases if these transliterations are not available.


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-3
changelog:
  - Resolves: rhbz#1974636 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.2-1
changelog:
  - Rebase to JSS 5.0.2
  - Bug 2029838 - SHA1withRSA being listed in signing certificates while approving certificate via Agent page in browser


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.3-1
changelog:
  - Rebase to JSS 5.0.3
  - Bug 2046023 - CVE-2021-4213 jss: memory leak in TLS connection leads to OOM [rhel-9.0]


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.2.1-1
changelog:
  - Rebase to JSS 5.2.1
  - Bug 2100807 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.3.0-0.3.beta2
changelog:
  - Rebase to JSS 5.3.0-beta2
  - Bug 2017098 - pki pkcs12-cert-add command failing with 'Unable to validate PKCS #12 file: Digests do not match' exception


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.3-1
changelog:
  - Bug #2033109 Invalid certificates with creation of subCA (pkispawn single step)[rhel-9.0.0]
  - Bug #2013141 kra-key-retrieve failed to accept xml input format to generate .p12 key through cli
  - Bug #2029838 SHA1withRSA being listed in signing certificates while approving certificate via Agent page in browser


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-0.4.beta3
changelog:
  - Rebase to PKI 11.2.0-beta3
  - Bug #2062808 Drop SHA-1 use from authentication challenges [rhel-9.1.0]


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-1
changelog:
  - Rebase to PKI 11.2.0
  - Bug #2084639 ipa cert-request ssl error
  - Bug #2099312 SKI field is not reflected back in generated CSR
  - Bug #2095197 PKI cert-fix operation failing


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.1-1
changelog:
  - Rebase to PKI 11.2.1
  - Bug #2107336 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [rhel-9.1.0]


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.3.0-0.2.beta1
changelog:
  - Rebase to PKI 11.3.0-beta1
  - Bug #1849834 - [RFE] Provide EST Responder (RFC 7030)
  - Bug #1883477 - [RFE] Automatic expired certificate purging
  - Bug #2091999 - Error displayed should be user friendly in case RSNv3 certificate serial number collision
  - Bug #2106452 - softhsm2: Unable to create cert: Private key not found
  - Bug #2106459 - CVE-2022-2393 pki-core: Improper authentication/authorization with caServerKeygen_DirUserCert profile


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.3.0-1
changelog:
  - Rebase to PKI 11.3.0
  - Bug #2091993 - IdM Install fails on RHEL 8.5 Beta when DISA STIG is applied
  - Bug #2122409 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Sohan Kunkerkar <skunkerk@redhat.com> - 2.12.0-1
changelog:
  - Suppress hardcoded library path warning
  - Fix go-mods-to-bundled-provides script to parse correct rpm version
  - Import specfile from Fedora


author: Sohan Kunkerkar <skunkerk@redhat.com> - 2.13.0-2
changelog:
  - Rename -validate-nonlinux subpackage to -validate-redistributable
  - Add static Linux binaries to -redistributable
  - Fix macro invocation in comment
  - Avoid kernel lockdown on VMware when running with secure boot


author: Benjamin Gilbert <bgilbert@redhat.com> - 2.14.0-1
changelog:
  - New release
  - Add ignition-apply symlink
  - Add ignition-rmcfg symlink and ignition-delete-config.service


author: Martin Kolman <mkolman@redhat.com> - 0.3.84-1
changelog:
  - Adjust to logging command changes in Anaconda (#1891621) (mkolman)
  - Make sure the output from custom_getpass() is serialized after stdout (lkundrak)


author: Martin Kolman <mkolman@redhat.com> - 0.3.86-1
changelog:
  - Drop python-nose from the dependencies (#1916799) (vponcova)
  - Add the makeupdates script (vponcova)
  - Remove deprecated support for add-ons (vponcova)
  - Don't run installation tasks of add-ons in a meta task (vponcova)
  - Migrate COPR builds from Jenkins to Packit (jkonecny)
  - Add documentation for the new test solution (jkonecny)
  - Add support for custom Anaconda COPR repository (jkonecny)
  - Use `make test` to run TMT tests locally (jkonecny)
  - Add TMT configuration to get Anaconda COPR build (jkonecny)
  - Add Packit support for initial-setup (jkonecny)
  - Update and use setup.py for archive creation (jkonecny)
  - Fix ChangeLog generation in Makefile (jkonecny)


author: Martin Kolman <mkolman@redhat.com> - 0.3.89-1
changelog:
  - Include scripts in the updates image (vponcova)
  - Drop build time dependency on the anaconda package (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.1-1
changelog:
  - Add gnome-kiosk to window managers usable by initial-setup (#1962198) (vponcova)
    Resolves: rhbz#1962198


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.2-1
changelog:
  - Disable multi TTY handler when running in SSH session (#1951577) (mkolman)
    Resolves: rhbz#1951577


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.0-6
changelog:
  - Resolves: rhbz#2110014 ldap bind occurs when admin user changes password with gracelimit=0
  - Resolves: rhbz#2112901 RFE: Allow grace login limit to be set in IPA WebUI
  - Resolves: rhbz#2115495 group password policy by default does not allow grace logins
  - Resolves: rhbz#2116966 ipa-replica-manage displays traceback: Unexpected error: 'bool' object has no attribute 'lower'


author: Rafael Jeffman <rjeffman@redhat.com> - 4.10.0-7
changelog:
  - Resolves: rhbz#2124547 Attempt to log in as "root" user with admin's password in Web UI does not properly fail
  - Resolves: rhbz#2137555 Attempt to log in as "root" user with admin's password in Web UI does not properly fail [rhel-9.1.0.z]


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.1-1
changelog:
  - Resolves: rhbz#2141315 [Rebase] Rebase ipa to latest 4.10.x release for RHEL 9.2
  - Resolves: rhbz#2094673 ipa-client-install should just use system wide CA store and do not specify TLS_CACERT in ldap.conf
  - Resolves: rhbz#2117167 After leapp upgrade on ipa-client ipa-server package installation failed. (`REQ_FULL_WITH_MEMBERS` returns object from wrong domain)
  - Resolves: rhbz#2127833 Password Policy Grace login limit allows invalid maximum value
  - Resolves: rhbz#2143224 [RFE] add certificate support to ipa-client instead of one time password
  - Resolves: rhbz#2144736 vault interoperability with older RHEL systems is broken
  - Resolves: rhbz#2148258 ipa-client-install does not maintain server affinity during installation
  - Resolves: rhbz#2148379 Add warning for empty targetattr when creating ACI with RBAC
  - Resolves: rhbz#2148380 OTP token sync always returns OK even with random numbers
  - Resolves: rhbz#2148381 Deprecated feature idnssoaserial in IdM appears when creating reverse dns zones
  - Resolves: rhbz#2148382 Introduction of URI records for kerberos breaks location functionality


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.1-2
changelog:
  - Resolves: rhbz#2148887 MemberManager with groups fails
  - Resolves: rhbz#2150335 idm:client is missing dependency on krb5-pkinit


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.1-4
changelog:
  - Resolves: rhbz#2161284 'ERROR Could not remove /tmp/tmpbkw6hawo.ipabkp' can be seen prior to 'ipa-client-install' command was successful
  - Resolves: rhbz#2164403 ipa-trust-add with --range-type=ipa-ad-trust-posix fails while creating an ID range
  - Resolves: rhbz#2162677 RFE: Implement support for PKI certificate and request pruning
  - Resolves: rhbz#2167312 - Backport latest test fixes in python3-ipatests


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.1-5
changelog:
  - Resolves: rhbz#2162656 Passwordless (GSSAPI) SSH not working for subdomain
  - Resolves: rhbz#2166326 Removing the last DNS type for ipa-ca does not work
  - Resolves: rhbz#2167473 RFE - Add a warning note about possible performance impact of the Auto Member rebuild task
  - Resolves: rhbz#2168244 requestsearchtimelimit=0 doesn't seems to be work with ipa-acme-manage pruning command


author: Rob Crittenden <rcritten@redhat.com> - 0.9-7
changelog:
  - debug='True' in ipahealthcheck.conf doesn't enable debug output (#2079861)
  - Validate value formats in the ipahealthcheck.conf file (#2079739)
  - Validate output_type options from ipahealthcheck.conf file (#2079698)


author: Phil Sutter <psutter@redhat.com> - 7.11-8
changelog:
  - Ship iptables-translate utility with ipset package
  - Add missing function to libipset.map and bump library version
  - Fix all debug mode warnings
  - ipset-translate: allow invoking with a path name
  - Fix IPv6 sets nftables translation
  - Fix typo in ipset-translate man page
  - tests: add tests ipset to nftables
  - add ipset to nftables translation infrastructure
  - lib: Detach restore routine from parser
  - lib: split parser from command execution


author: Phil Sutter <psutter@redhat.com> - 1.8.7-29
changelog:
  - libxtables: Boost rule target checks by announcing chain names
  - libxtables: Implement notargets hash table
  - nft: Reject standard targets as chain names when restoring
  - xshared: Merge and share parse_chain()
  - xshared: Prefer xtables_chain_protos lookup over getprotoent
  - nft: Speed up immediate parsing
  - nft: Simplify immediate parsing


author: Phil Sutter <psutter@redhat.com> - 1.8.8-5
changelog:
  - nft: un-break among match with concatenation
  - nft: fix ebtables among match when mac+ip addresses are used


author: Cole Robinson <aintdiscole@gmail.com> - 20200823-1.git4bd064de.git
changelog:
  - Update to newer git snapshot, synced with qemu.git
  - Re-enable HTTPS support, with edk2 fix included (bz 1820836)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-4.git4bd064de
changelog:
  - ipxe-Skip-some-QEMU-ROMs-when-building-for-RHEL.patch [bz#1956931]
  - ipxe-spec-combine-BIOS-and-EFI-roms-using-util-catrom.pl.patch [bz#1957246]
  - Resolves: bz#1956931
    (ipxe-roms-qemu list: Clean out old ROMs)
  - Resolves: bz#1957246
    (boot vm from pxe failed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-5.git4bd064de
changelog:
  - ipxe-Disable-SHA-1.patch [bz#1935932]
  - ipxe-Replace-genisoimage-with-xorriso.patch [bz#1971981]
  - ipxe-spec-Drop-disabled-efi-ia32-build-infrastructure.patch [bz#1980138]
  - ipxe-spec-Generate-qemu-compatible-rom-filenames.patch [bz#1980138]
  - Resolves: bz#1935932
    (ipxe implements and/or uses the deprecated SHA-1 algorithm by default ()
  - Resolves: bz#1971981
    (Please replace genisoimage with xorriso)
  - Resolves: bz#1980138
    (install qemu rom symlinks so qemu doesn't have to)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-6.git4bd064de
changelog:
  - ipxe-Add-ping-command-support.patch [bz#1985658]
  - ipxe-Add-VLAN-tagging-support.patch [bz#1985658]
  - ipxe-netdevice-Strip-802.Q-VLAN-0-priority-tags.patch [bz#1985658]
  - ipxe-Provide-snponly.efi-rom.patch [bz#1985658]
  - ipxe-Build-hwcert-subpackage.patch [bz#1985658]
  - Resolves: bz#1985658
    (carry forward rhel8 ipxe packaging changes)


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 2.11.4-6
changelog:
  - Drop jackson-module-afterburner, jackson-module-guice, jackson-module-mrbean,
    jackson-module-osgi, jackson-module-paranamer, and jackson-module-javadoc


author: Fabio Valentini <decathorpe@gmail.com> - 1.2.2-1
changelog:
  - Update to version 1.2.2.
  - Drop custom maven-compiler-plugin overrides in favor of upstream settings.


author: Marian Koncek <mkoncek@redhat.com> - 2.3.3-4
changelog:
  - Avoid possible NullPointerException
  - Resolves: rhbz#1993889
  - Load native library from the correct location
  - Resolves: rhbz#1994935


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-5
changelog:
  - Allow the default keystore to be configured using security.systemCACerts
  - Use of the property can now be disabled using -Dsecurity.systemCACerts=
  - Move cacerts replacement to install section and retain original of this and tzdb.dat
  - Resolves: rhbz#2077006


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b07-0.2.ea
changelog:
  - Update to shenandoah-jdk8u352-b07 (EA)
  - Update release notes for shenandoah-8u352-b07.
  - Switch to EA mode for 8u352 pre-release builds.
  - Rebase FIPS patch against 8u352-b07
  - Resolves: rhbz#2130623


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Switch to GA mode for final release.
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b01-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b01 (EA)
  - Update release notes for shenandoah-8u362-b01.
  - Switch to EA mode for 8u362 pre-release builds.
  - Drop JDK-8195607/PR3776/RH1760437 now this is upstream
  - Related: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b07 (EA)
  - Update release notes for shenandoah-8u362-b07.
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-3
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Fix broken links and missing release notes in older releases.
  - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
    - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
    - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
    - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-3
changelog:
  - Update cacerts patch to fix OPENJDK-1433 SecurityManager issue
  - Update to shenandoah-jdk8u352-b09 (GA)
  - Update release notes for shenandoah-8u352-b09.
  - Resolves: rhbz#2162714


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Resolves: rhbz#2150202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - Drop use of portable build on s390x due to libffi compatibility issue (needs libffi.so.6)
  - Related: rhbz#2150202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.7-0.1.ea
changelog:
  - Update to jdk-11.0.16+7
  - Update release notes to 11.0.16+7
  - Switch to EA mode for 11.0.16 pre-release builds.
  - Use same tarball naming style as java-17-openjdk and java-latest-openjdk
  - Drop JDK-8257794 patch now upstreamed
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Make use of the vendor version string to store our version & release rather than an upstream release date
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Resolves: rhbz#2083325


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-2
changelog:
  - Update to jdk-11.0.16+8
  - Update release notes to 11.0.16+8
  - Switch to GA mode for release
  - Resolves: rhbz#2106517


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-2
changelog:
  - Update to jdk-11.0.16.1+1
  - Update release notes to 11.0.16.1+1
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2119528


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-3
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121275


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.2.ea
changelog:
  - Update to jdk-11.0.17+1
  - Update release notes to 11.0.17+1
  - Switch to EA mode for 11.0.17 pre-release builds.
  - Bump HarfBuzz bundled version to 4.4.1 following JDK-8289853
  - Bump FreeType bundled version to 2.12.1 following JDK-8290334
  - Related: rhbz#2130619


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2
changelog:
  - Update to jdk-11.0.17+8 (GA)
  - Update release notes to 11.0.17+8
  - Switch to GA mode for release
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds
  - Remove freetype sources along with zlib sources
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.3.ea
changelog:
  - Update to jdk-11.0.18+1
  - Update release notes to 11.0.18+1
  - Switch to EA mode for 11.0.18 pre-release builds.
  - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
  - Drop local copy of JDK-8275535 which is finally upstream
  - Related: rhbz#2150197


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.3.ea
changelog:
  - Update to jdk-11.0.18+9
  - Update release notes to 11.0.18+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150197


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-3
changelog:
  - Update to jdk-11.0.18+10 (GA)
  - Update release notes to 11.0.18+10
  - Switch to GA mode for release
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-5
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121268


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.5+1
  - Update release notes to 17.0.5+1
  - Switch to EA mode for 17.0.5 pre-release builds.
  - Bump HarfBuzz bundled version to 4.4.1 following JDK-8289853
  - Bump FreeType bundled version to 2.12.1 following JDK-8290334
  - Related: rhbz#2130622


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.8-2
changelog:
  - Update to jdk-17.0.5+8 (GA)
  - Update release notes to 17.0.5+8 (GA)
  - Switch to GA mode for final release.
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds
  - Remove freetype sources along with zlib sources
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.8-5
changelog:
  - Update FIPS support to bring in latest changes
  - * Add nss.fips.cfg support to OpenJDK tree
  - * RH2117972: Extend the support for NSS DBs (PKCS11) in FIPS mode
  - * Remove forgotten dead code from RH2020290 and RH2104724
  - Drop local nss.fips.cfg.in handling now this is handled in the patched OpenJDK build
  - Resolves: rhbz#2118493


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.1-0.3.ea
changelog:
  - Update to jdk-17.0.6+1
  - Update release notes to 17.0.6+1
  - Switch to EA mode for 17.0.6 pre-release builds.
  - Re-enable EA upstream status check now it is being actively maintained.
  - Drop JDK-8294357 (tzdata2022d) & JDK-8295173 (tzdata2022e) local patches which are now upstream
  - Drop JDK-8275535 local patch now this has been accepted and backported upstream
  - Bump tzdata requirement to 2022e now the package is available in RHEL
  - Related: rhbz#2150198


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.9-0.3.ea
changelog:
  - Update to jdk-17.0.6+9
  - Update release notes to 17.0.6+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150198


author: Stephan Bergmann <sbergman@redhat.com> - 1:17.0.6.0.9-0.4.ea
changelog:
  - Fix flatpak builds by disabling TestTranslations test due to missing tzdb.dat
  - Related: rhbz#2150198


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.9-0.4.ea
changelog:
  - Update FIPS support to bring in latest changes
  - * OJ1357: Fix issue on FIPS with a SecurityManager in place
  - Related: rhbz#2150198


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.10-3
changelog:
  - Update to jdk-17.0.6.0+10
  - Update release notes to 17.0.6.0+10
  - Switch to GA mode for release
  - Resolves: rhbz#2160111


author: Jiri Vanek <jvanek@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - criu-devel moved to BR
  - now requires criu-libs
  - enabled debuginfo generation
  - excluded i686 build as criu is 64b only
  - .so file moved out of jar. Required teo patches:
  - added and applied patch0 output_loc.patch
  - added and applied patch1 load_library.patch
  - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.3.20210802a3007aa
changelog:
  - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9.
  - This also ensures use of the standard build flags and installs the jar in the expected location.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.4.20210807b2d3751
changelog:
  - Update to latest upstream version with renamed package and consistent use of "jigawatts"
  - Drop library patch which is no longer needed.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.0~SNAPSHOT^20210827.a5f8e31-1
changelog:
  - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.21.0.0.0-4
changelog:
  - Bump release number to make RHEL 9.1 build later than RHEL 9 Beta & RHEL 9 GA builds
  - Resolves: rhbz#2071920


author: Zamir SUN <zsun@fedoraproject.org> - 0-0.17.20191127gitbd56a60
changelog:
  - Workaround "multiple definition of `yyin'"
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=1799559


author: Cestmir Kalina <ckalina@redhat.com> - 0.24
changelog:
  - Fix annocheck failures
  - Fix osci tier0 test reference
  - Fix ET_DYN vmlinux namespace support
  - Resolves: rhbz#2038913
  - Resolves: rhbz#2045976
  - Resolves: rhbz#2038892


author: Akira TAGOH <tagoh@redhat.com> - 2.5-35
changelog:
  - Drop gtk2 dependency completely.
  - Make anthy build conditionally for Fedora release only.
    Resolves: rhbz#1939777
  - Fix build fail without anthy-devel.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.4.0-4
changelog:
  - Fix layout->keymap conversion broken by change in xkeyboard-config
    (patch by Peter Hutterer)
    Resolves: #1950406


author: Kairui Song <kasong@redhat.com> - 006-4.20210721gitd046d22
changelog:
  - Update to latest git snapshot (20210721). Resolves: bz1937035, bz1959203
  - Apply RHEL only patch to enable kdump by default


author: Kairui Song <kasong@redhat.com> - 006-5.20210805gitce26db0
changelog:
  - Update to latest git snapshot, automated installation won't be blocked. Resolves: bz1986969
  - Update RHEL only patch, fix inst.kdump_addon=0 not working issue. Resolves: bz1986942


author: Kairui Song <kasong@redhat.com> - 006-7.20210812git5b74c1d
changelog:
  - Update to latest git snapshot, fix kdump spoke is incomplete after luks device is deleted. Resolves: bz1937035


author: Kairui Song <kasong@redhat.com> - 006-8.20210818git400359b
changelog:
  - Update to latest git snapshot, fix installation failure when reuse old partition. Resolves: bz1937035


author: Kairui Song <kasong@redhat.com> - 006-9.20210819git2026d20
changelog:
  - Update to latest git snapshot, fix encryption warning still present after disabling encryption. Resolves: bz1937035


author: Jan Stancek <jstancek@redhat.com> [5.14.0-296.el9]
changelog:
  - fs: hold writers when changing mount's idmapping (Alex Gladkov) [2179877]
  - fs: simplify check in mount_setattr_commit() (Alex Gladkov) [2179877]
  - filelocks: use mount idmapping for setlease permission check (Alex Gladkov) [2179877]
  - fs: require CAP_SYS_ADMIN in target namespace for idmapped mounts (Alex Gladkov) [2179877]
  - fs: account for group membership (Alex Gladkov) [2179877]
  - fs/mount_setattr: always cleanup mount_kattr (Alex Gladkov) [2179877]
  - fs: handle circular mappings correctly (Alex Gladkov) [2179877]
  - hvcs: Synchronize hotplug remove with port free (Mamatha Inamdar) [2182275]
  - hvcs: Use vhangup in hotplug remove (Mamatha Inamdar) [2182275]
  - hvcs: Get reference to tty in remove (Mamatha Inamdar) [2182275]
  - hvcs: Use driver groups to manage driver attributes (Mamatha Inamdar) [2182275]
  - hvcs: Use dev_groups to manage hvcs device attributes (Mamatha Inamdar) [2182275]
  - hvcs: Fix hvcs port reference counting (Mamatha Inamdar) [2182275]
  - thermal: intel: powerclamp: Fix cpumask and max_idle module parameters (David Arcari) [2180653]
  - Documentation: powerclamp: Fix numbered lists formatting (David Arcari) [2180653]
  - Documentation: powerclamp: Escape wildcard in cpumask description (David Arcari) [2180653]
  - Documentation: admin-guide: Add toctree entry for thermal docs (David Arcari) [2180653]
  - thermal: intel: powerclamp: Add two module parameters (David Arcari) [2180653]
  - Documentation: admin-guide: Move intel_powerclamp documentation (David Arcari) [2180653]
  - thermal: intel: powerclamp: Fix duration module parameter (David Arcari) [2180653]
  - thermal: intel: powerclamp: Return last requested state as cur_state (David Arcari) [2180653]
  - thermal: intel: powerclamp: Use powercap idle-inject feature (David Arcari) [2180653]
  - thermal: intel: powerclamp: Fix cur_state for multi package system (David Arcari) [2180653]
  - powercap: idle_inject: Add update callback (David Arcari) [2180653]
  - powercap: idle_inject: Export symbols (David Arcari) [2180653]
  - powercap: idle_inject: Support 100% idle injection (David Arcari) [2180653]
  - powercap: fix possible name leak in powercap_register_zone() (David Arcari) [2180653]
  - powercap: idle_inject: Fix warnings with make W=1 (David Arcari) [2180653]
  - Turn on IDLE_INJECT for x86 (David Arcari) [2180653]
  - powercap: Use kstrtobool() instead of strtobool() (David Arcari) [2180653]
  - thermal: intel_powerclamp: Use first online CPU as control_cpu (David Arcari) [2180653]
  - powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain (David Arcari) [2180653]
  - thermal: intel_powerclamp: Remove accounting for IRQ wakes (David Arcari) [2180653]
  - thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash (David Arcari) [2180653]
  - powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue (David Arcari) [2180653]
  - thermal: intel_powerclamp: don't use bitmap_weight() in end_power_clamp() (David Arcari) [2180653]
  - thermal: fix Documentation bullet list warning (David Arcari) [2180653]
  - thermal/drivers/intel_powerclamp: Constify static thermal_cooling_device_ops (David Arcari) [2180653]
  - thermal: Move ABI documentation to Documentation/ABI (David Arcari) [2180653]
  - thermal: intel_powerclamp: Use bitmap_zalloc/bitmap_free when applicable (David Arcari) [2180653]
  - thermal: Update information in MAINTAINERS (David Arcari) [2180653]
  - sched/rt: pick_next_rt_entity(): check list_entry (Phil Auld) [RHEL-303]
  - sched/deadline: Move __dl_clear_params out of dl_bw lock (Phil Auld) [RHEL-303]
  - sched/deadline: Add replenish_dl_new_period helper (Phil Auld) [RHEL-303]
  - sched/deadline: Add dl_task_is_earliest_deadline helper (Phil Auld) [RHEL-303]
  - sched/deadline: Use sched_dl_entity's dl_density in dl_task_fits_capacity() (Phil Auld) [RHEL-303]
  - sched/deadline: Make dl_cpuset_cpumask_can_shrink() capacity-aware (Phil Auld) [RHEL-303]
  - sched/core: Introduce sched_asym_cpucap_active() (Phil Auld) [RHEL-303]
  - i40e: Fix for VF MAC address 0 (Stefan Assmann) [2169053]
  - macsec: fix UAF bug for real_dev (Xin Long) [2180612]
  - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [2180612]
  - Revert "vlan: move dev_put into vlan_dev_uninit" (Xin Long) [2180612]
  - net: avoid quadratic behavior in netdev_wait_allrefs_any() (Xin Long) [2180612]
  - net: allow out-of-order netdev unregistration (Xin Long) [2180612]
  - net: transition netdev reg state earlier in run_todo (Xin Long) [2180612]
  - ipv6: blackhole_netdev needs snmp6 counters (Xin Long) [2180612]
  - ipv4: add (struct uncached_list)->quarantine list (Xin Long) [2180612]
  - ipv6: add (struct uncached_list)->quarantine list (Xin Long) [2180612]
  - ipv6: give an IPv6 dev to blackhole_netdev (Xin Long) [2180612]
  - ipv6: get rid of net->ipv6.rt6_stats->fib_rt_uncache (Xin Long) [2180612]
  - Make RHJOBS container friendly (Don Zickus)
  - Use RHJOBS for create-tarball (Don Zickus)
  - rxrpc: Fix wrong error return in rxrpc_connect_call() (Marc Dionne) [2170099]
  - rxrpc: Fix incoming call setup race (Marc Dionne) [2170099]
  - rxrpc: Move client call connection to the I/O thread (Marc Dionne) [2170099]
  - rxrpc: Move the client conn cache management to the I/O thread (Marc Dionne) [2170099]
  - rxrpc: Remove call->state_lock (Marc Dionne) [2170099]
  - rxrpc: Move call state changes from recvmsg to I/O thread (Marc Dionne) [2170099]
  - rxrpc: Move call state changes from sendmsg to I/O thread (Marc Dionne) [2170099]
  - rxrpc: Wrap accesses to get call state to put the barrier in one place (Marc Dionne) [2170099]
  - rxrpc: Split out the call state changing functions into their own file (Marc Dionne) [2170099]
  - rxrpc: Set up a connection bundle from a call, not rxrpc_conn_parameters (Marc Dionne) [2170099]
  - rxrpc: Offload the completion of service conn security to the I/O thread (Marc Dionne) [2170099]
  - rxrpc: Make the set of connection IDs per local endpoint (Marc Dionne) [2170099]
  - rxrpc: Tidy up abort generation infrastructure (Marc Dionne) [2170099]
  - rxrpc: Clean up connection abort (Marc Dionne) [2170099]
  - rxrpc: Implement a mechanism to send an event notification to a connection (Marc Dionne) [2170099]
  - rxrpc: Only disconnect calls in the I/O thread (Marc Dionne) [2170099]
  - rxrpc: Only set/transmit aborts in the I/O thread (Marc Dionne) [2170099]
  - rxrpc: Separate call retransmission from other conn events (Marc Dionne) [2170099]
  - rxrpc: Make the local endpoint hold a ref on a connected call (Marc Dionne) [2170099]
  - rxrpc: Stash the network namespace pointer in rxrpc_local (Marc Dionne) [2170099]
  - rxrpc: Fix a couple of potential use-after-frees (Marc Dionne) [2170099]
  - rxrpc: Fix the return value of rxrpc_new_incoming_call() (Marc Dionne) [2170099]
  - rxrpc: rxperf: Fix uninitialised variable (Marc Dionne) [2170099]
  - rxrpc: Fix I/O thread stop (Marc Dionne) [2170099]
  - rxrpc: Fix switched parameters in peer tracing (Marc Dionne) [2170099]
  - rxrpc: Fix locking issues in rxrpc_put_peer_locked() (Marc Dionne) [2170099]
  - rxrpc: Fix I/O thread startup getting skipped (Marc Dionne) [2170099]
  - rxrpc: Fix NULL deref in rxrpc_unuse_local() (Marc Dionne) [2170099]
  - rxrpc: Fix security setting propagation (Marc Dionne) [2170099]
  - rxrpc: Fix missing unlock in rxrpc_do_sendmsg() (Marc Dionne) [2170099]
  - rxrpc: Transmit ACKs at the point of generation (Marc Dionne) [2170099]
  - rxrpc: Fold __rxrpc_unuse_local() into rxrpc_unuse_local() (Marc Dionne) [2170099]
  - rxrpc: Move the cwnd degradation after transmitting packets (Marc Dionne) [2170099]
  - rxrpc: Trace/count transmission underflows and cwnd resets (Marc Dionne) [2170099]
  - rxrpc: Remove the _bh annotation from all the spinlocks (Marc Dionne) [2170099]
  - rxrpc: Make the I/O thread take over the call and local processor work (Marc Dionne) [2170099]
  - rxrpc: Extract the peer address from an incoming packet earlier (Marc Dionne) [2170099]
  - rxrpc: Reduce the use of RCU in packet input (Marc Dionne) [2170099]
  - rxrpc: Simplify skbuff accounting in receive path (Marc Dionne) [2170099]
  - rxrpc: Remove RCU from peer->error_targets list (Marc Dionne) [2170099]
  - rxrpc: Move DATA transmission into call processor work item (Marc Dionne) [2170099]
  - rxrpc: Copy client call parameters into rxrpc_call earlier (Marc Dionne) [2170099]
  - rxrpc: Implement a mechanism to send an event notification to a call (Marc Dionne) [2170099]
  - rxrpc: Don't use sk->sk_receive_queue.lock to guard socket state changes (Marc Dionne) [2170099]
  - rxrpc: Remove call->input_lock (Marc Dionne) [2170099]
  - rxrpc: Move error processing into the local endpoint I/O thread (Marc Dionne) [2170099]
  - rxrpc: Move packet reception processing into I/O thread (Marc Dionne) [2170099]
  - rxrpc: Create a per-local endpoint receive queue and I/O thread (Marc Dionne) [2170099]
  - rxrpc: Split the receive code (Marc Dionne) [2170099]
  - rxrpc: Don't hold a ref for connection workqueue (Marc Dionne) [2170099]
  - rxrpc: Don't hold a ref for call timer or workqueue (Marc Dionne) [2170099]
  - rxrpc: trace: Don't use __builtin_return_address for sk_buff tracing (Marc Dionne) [2170099]
  - rxrpc: Trace rxrpc_bundle refcount (Marc Dionne) [2170099]
  - rxrpc: trace: Don't use __builtin_return_address for rxrpc_call tracing (Marc Dionne) [2170099]
  - rxrpc: trace: Don't use __builtin_return_address for rxrpc_conn tracing (Marc Dionne) [2170099]
  - rxrpc: trace: Don't use __builtin_return_address for rxrpc_peer tracing (Marc Dionne) [2170099]
  - rxrpc: trace: Don't use __builtin_return_address for rxrpc_local tracing (Marc Dionne) [2170099]
  - rxrpc: Extract the code from a received ABORT packet much earlier (Marc Dionne) [2170099]
  - rxrpc: Drop rxrpc_conn_parameters from rxrpc_connection and rxrpc_bundle (Marc Dionne) [2170099]
  - rxrpc: Remove the [_k]net() debugging macros (Marc Dionne) [2170099]
  - rxrpc: Remove the [k_]proto() debugging macros (Marc Dionne) [2170099]
  - rxrpc: Remove handling of duplicate packets in recvmsg_queue (Marc Dionne) [2170099]
  - rxrpc: Fix call leak (Marc Dionne) [2170099]
  - rxrpc: Enable rxperf test module (Marc Dionne) [2170099]
  - rxrpc: Implement an in-kernel rxperf server for testing purposes (Marc Dionne) [2170099]
  - rxrpc: Fix checker warning (Marc Dionne) [2170099]
  - rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] (Marc Dionne) [2170099]
  - rxrpc: uninitialized variable in rxrpc_send_ack_packet() (Marc Dionne) [2170099]
  - rxrpc: fix rxkad_verify_response() (Marc Dionne) [2170099]
  - rxrpc: Fix network address validation (Marc Dionne) [2170099]
  - rxrpc: Fix oops from calling udpv6_sendmsg() on AF_INET socket (Marc Dionne) [2170099]
  - rxrpc: Allocate an skcipher each time needed rather than reusing (Marc Dionne) [2170099]
  - rxrpc: Fix congestion management (Marc Dionne) [2170099]
  - rxrpc: Remove the rxtx ring (Marc Dionne) [2170099]
  - rxrpc: Save last ACK's SACK table rather than marking txbufs (Marc Dionne) [2170099]
  - rxrpc: Remove call->lock (Marc Dionne) [2170099]
  - rxrpc: Don't use a ring buffer for call Tx queue (Marc Dionne) [2170099]
  - rxrpc: Get rid of the Rx ring (Marc Dionne) [2170099]
  - rxrpc: Clone received jumbo subpackets and queue separately (Marc Dionne) [2170099]
  - rxrpc: Split the rxrpc_recvmsg tracepoint (Marc Dionne) [2170099]
  - rxrpc: Clean up ACK handling (Marc Dionne) [2170099]
  - rxrpc: Allocate ACK records at proposal and queue for transmission (Marc Dionne) [2170099]
  - rxrpc: Define rxrpc_txbuf struct to carry data to be transmitted (Marc Dionne) [2170099]
  - rxrpc: Remove call->tx_phase (Marc Dionne) [2170099]
  - rxrpc: Remove the flags from the rxrpc_skb tracepoint (Marc Dionne) [2170099]
  - rxrpc: Remove unnecessary header inclusions (Marc Dionne) [2170099]
  - rxrpc: Call udp_sendmsg() directly (Marc Dionne) [2170099]
  - rxrpc: Fix ack.bufferSize to be 0 when generating an ack (Marc Dionne) [2170099]
  - rxrpc: Record stats for why the REQUEST-ACK flag is being set (Marc Dionne) [2170099]
  - rxrpc: Record statistics about ACK types (Marc Dionne) [2170099]
  - rxrpc: Add stats procfile and DATA packet stats (Marc Dionne) [2170099]
  - rxrpc: Track highest acked serial (Marc Dionne) [2170099]
  - rxrpc: Split call timer-expiration from call timer-set tracepoint (Marc Dionne) [2170099]
  - rxrpc: Trace setting of the request-ack flag (Marc Dionne) [2170099]
  - rxrpc: Automatically generate trace tag enums (Marc Dionne) [2170099]
  - rxrpc: remove rxrpc_max_call_lifetime declaration (Marc Dionne) [2170099]
  - rxrpc: Remove rxrpc_get_reply_time() which is no longer used (Marc Dionne) [2170099]
  - rxrpc: Fix calc of resend age (Marc Dionne) [2170099]
  - rxrpc: Fix local destruction being repeated (Marc Dionne) [2170099]
  - rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2() (Marc Dionne) [2170099]
  - rxrpc: Fix locking in rxrpc's sendmsg (Marc Dionne) [2170099]
  - net: rxrpc: fix clang -Wformat warning (Marc Dionne) [2170099]
  - rxrpc: Fix decision on when to generate an IDLE ACK (Marc Dionne) [2170099]
  - rxrpc: Don't let ack.previousPacket regress (Marc Dionne) [2170099]
  - rxrpc: Fix overlapping ACK accounting (Marc Dionne) [2170099]
  - rxrpc: Don't try to resend the request if we're receiving the reply (Marc Dionne) [2170099]
  - rxrpc: Fix listen() setting the bar too high for the prealloc rings (Marc Dionne) [2170099]
  - rxrpc, afs: Fix selection of abort codes (Marc Dionne) [2170099]
  - rxrpc: Return an error to sendmsg if call failed (Marc Dionne) [2170099]
  - rxrpc: Fix locking issue (Marc Dionne) [2170099]
  - rxrpc: Use refcount_t rather than atomic_t (Marc Dionne) [2170099]
  - rxrpc: Allow list of in-use local UDP endpoints to be viewed in /proc (Marc Dionne) [2170099]
  - rxrpc: Enable IPv6 checksums on transport socket (Marc Dionne) [2170099]
  - rxrpc: Restore removed timer deletion (Marc Dionne) [2170099]
  - rxrpc: fix a race in rxrpc_exit_net() (Marc Dionne) [2170099]
  - rxrpc: fix some null-ptr-deref bugs in server_key.c (Marc Dionne) [2170099]
  - rxrpc: Fix call timer start racing with call destruction (Marc Dionne) [2170099]
  - rxrpc: Adjust retransmission backoff (Marc Dionne) [2170099]
  - rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (Marc Dionne) [2170099]
  - rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (Marc Dionne) [2170099]
  - rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies() (Marc Dionne) [2170099]
  - net: RxRPC: make dependent Kconfig symbols be shown indented (Marc Dionne) [2170099]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-297.el9]
changelog:
  - igb: conditionalize I2C bit banging on external thermal sensor support (Corinna Vinschen) [2173594]
  - Add process name and pid to locks warning (Jeffrey Layton) [2172087]
  - nfsd: use locks_inode_context helper (Jeffrey Layton) [2172087]
  - nfs: use locks_inode_context helper (Jeffrey Layton) [2172087]
  - lockd: use locks_inode_context helper (Jeffrey Layton) [2172087]
  - cifs: use locks_inode_context helper (Jeffrey Layton) [2172087]
  - ceph: use locks_inode_context helper (Jeffrey Layton) [2172087]
  - filelock: add a new locks_inode_context accessor function (Jeffrey Layton) [2172087]
  - filelock: new helper: vfs_inode_has_locks (Jeffrey Layton) [2172087]
  - filelock: WARN_ON_ONCE when ->fl_file and filp don't match (Jeffrey Layton) [2172087]
  - locks: Fix dropped call to ->fl_release_private() (Jeffrey Layton) [2172087]
  - fs/lock: Rearrange ops in flock syscall. (Jeffrey Layton) [2172087]
  - fs/lock: Don't allocate file_lock in flock_make_lock(). (Jeffrey Layton) [2172087]
  - fs/lock: add 2 callbacks to lock_manager_operations to resolve conflict (Jeffrey Layton) [2172087]
  - fs/lock: add helper locks_owner_has_blockers to check for blockers (Jeffrey Layton) [2172087]
  - fs/lock: documentation cleanup. Replace inode->i_lock with flc_lock. (Jeffrey Layton) [2172087]
  - net: rename reference+tracking helpers (Íñigo Huguet) [2175258]
  - llc: only change llc->dev when bind() succeeds (Íñigo Huguet) [2175258]
  - llc: fix netdevice reference leaks in llc_ui_bind() (Íñigo Huguet) [2175258]
  - net: macvlan: add net device refcount tracker (Íñigo Huguet) [2175258]
  - macsec: dump IFLA_MACSEC_OFFLOAD attribute as part of macsec dump (Sabrina Dubroca) [2173895]
  - macsec: add support for IFLA_MACSEC_OFFLOAD in macsec_changelink (Sabrina Dubroca) [2173895]
  - net: macsec: fix net device access prior to holding a lock (Sabrina Dubroca) [2173895]
  - macsec: add missing attribute validation for offload (Sabrina Dubroca) [2173895]
  - macsec: Fix invalid error code set (Sabrina Dubroca) [2173895]
  - macsec: clear encryption keys from the stack after setting up offload (Sabrina Dubroca) [2173895]
  - macsec: fix detection of RXSCs when toggling offloading (Sabrina Dubroca) [2173895]
  - macsec: fix secy->n_rx_sc accounting (Sabrina Dubroca) [2173895]
  - macsec: delete new rxsc when offload fails (Sabrina Dubroca) [2173895]
  - Revert "net: macsec: report real_dev features when HW offloading is enabled" (Sabrina Dubroca) [2173895]
  - macsec: don't free NULL metadata_dst (Sabrina Dubroca) [2173895]
  - net: atlantic: macsec: remove checks on the prepare phase (Sabrina Dubroca) [2173895]
  - net: phy: mscc: macsec: remove checks on the prepare phase (Sabrina Dubroca) [2173895]
  - net: macsec: remove the prepare phase when offloading (Sabrina Dubroca) [2173895]
  - net: atlantic: macsec: make the prepare phase a noop (Sabrina Dubroca) [2173895]
  - net: phy: mscc: macsec: make the prepare phase a noop (Sabrina Dubroca) [2173895]
  - net: macsec: Expose extended packet number (EPN) properties to macsec offload (Sabrina Dubroca) [2173895]
  - net/macsec: Move some code for sharing with various drivers that implements offload (Sabrina Dubroca) [2173895]
  - net: drivers: get ready for const netdev->dev_addr (Sabrina Dubroca) [2173895]
  - net/macsec: Add MACsec skb_metadata_dst Rx Data path support (Sabrina Dubroca) [2173895]
  - net/macsec: Add MACsec skb_metadata_dst Tx Data path support (Sabrina Dubroca) [2173895]
  - kernel-rt: config: adjust MAX_LOCKDEP_ENTRIES and MAX_LOCKDEP_CHAINS for RT (Luis Claudio R. Goncalves) [2178947]
  - vfio: fix deadlock between group lock and kvm lock (Alex Williamson) [2177087]
  - kvm/vfio: Fix potential deadlock on vfio group_lock (Alex Williamson) [2177087]
  - vfio/type1: Respect IOMMU reserved regions in vfio_test_domain_fgsp() (Alex Williamson) [2177087]
  - samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() (Alex Williamson) [2177087]
  - vfio/ap/ccw/samples: Fix device_register() unwind path (Alex Williamson) [2177087]
  - vfio: Fold vfio_virqfd.ko into vfio.ko (Alex Williamson) [2177087]
  - vfio: Remove CONFIG_VFIO_SPAPR_EEH (Alex Williamson) [2177087]
  - vfio: Move vfio_spapr_iommu_eeh_ioctl into vfio_iommu_spapr_tce.c (Alex Williamson) [2177087]
  - vfio/spapr: Move VFIO_CHECK_EXTENSION into tce_iommu_ioctl() (Alex Williamson) [2177087]
  - vfio/pci: Move all the SPAPR PCI specific logic to vfio_pci_core.ko (Alex Williamson) [2177087]
  - vfio: Remove vfio_free_device (Alex Williamson) [2177087]
  - vfio/ccw: replace vfio_init_device with _alloc_ (Alex Williamson) [2177087]
  - vfio/ccw: remove release completion (Alex Williamson) [2177087]
  - vfio/ccw: move private to mdev lifecycle (Alex Williamson) [2177087]
  - vfio/ccw: move private initialization to callback (Alex Williamson) [2177087]
  - vfio/ccw: remove private->sch (Alex Williamson) [2177087]
  - vfio/ccw: remove WARN_ON during shutdown (Alex Williamson) [2177087]
  - vfio/ccw: create a parent struct (Alex Williamson) [2177087]
  - vfio/iova_bitmap: Explicitly include linux/slab.h (Alex Williamson) [2177087]
  - vfio: platform: Do not pass return buffer to ACPI _RST method (Alex Williamson) [2177087]
  - MAINTAINERS: git://github -> https://github.com for awilliam (Alex Williamson) [2177087]
  - s390/vfio-ap: GISA: sort out physical vs virtual pointers usage (Alex Williamson) [2177087]
  - iommufd: Change the order of MSI setup (Alex Williamson) [2177087]
  - iommufd: Improve a few unclear bits of code (Alex Williamson) [2177087]
  - iommufd: Fix comment typos (Alex Williamson) [2177087]
  - vfio: Fix NULL pointer dereference caused by uninitialized group->iommufd (Alex Williamson) [2177087]
  - vfio: Move vfio group specific code into group.c (Alex Williamson) [2177087]
  - vfio: Refactor dma APIs for emulated devices (Alex Williamson) [2177087]
  - vfio: Wrap vfio group module init/clean code into helpers (Alex Williamson) [2177087]
  - vfio: Refactor vfio_device open and close (Alex Williamson) [2177087]
  - vfio: Make vfio_device_open() truly device specific (Alex Williamson) [2177087]
  - vfio: Swap order of vfio_device_container_register() and open_device() (Alex Williamson) [2177087]
  - vfio: Set device->group in helper function (Alex Williamson) [2177087]
  - vfio: Create wrappers for group register/unregister (Alex Williamson) [2177087]
  - vfio: Move the sanity check of the group to vfio_create_group() (Alex Williamson) [2177087]
  - vfio: Simplify vfio_create_group() (Alex Williamson) [2177087]
  - iommufd: Allow iommufd to supply /dev/vfio/vfio (Alex Williamson) [2177087]
  - vfio: Make vfio_container optionally compiled (Alex Williamson) [2177087]
  - vfio: Move container related MODULE_ALIAS statements into container.c (Alex Williamson) [2177087]
  - vfio-iommufd: Support iommufd for emulated VFIO devices (Alex Williamson) [2177087]
  - vfio-iommufd: Support iommufd for physical VFIO devices (Alex Williamson) [2177087]
  - vfio-iommufd: Allow iommufd to be used in place of a container fd (Alex Williamson) [2177087]
  - vfio: Use IOMMU_CAP_ENFORCE_CACHE_COHERENCY for vfio_file_enforced_coherent() (Alex Williamson) [2177087]
  - vfio: Rename vfio_device_assign/unassign_container() (Alex Williamson) [2177087]
  - vfio: Move vfio_device_assign_container() into vfio_device_first_open() (Alex Williamson) [2177087]
  - vfio: Move vfio_device driver open/close code to a function (Alex Williamson) [2177087]
  - vfio/ap: Validate iova during dma_unmap and trigger irq disable (Alex Williamson) [2177087]
  - i915/gvt: Move gvt mapping cache initialization to intel_vgpu_init_dev() (Alex Williamson) [2177087]
  - selftests: iommu: Fix test_cmd_destroy_access() call in user_copy (Alex Williamson) [2177087]
  - iommufd: Make sure to zero vfio_iommu_type1_info before copying to user (Alex Williamson) [2177087]
  - iommufd: Do not add the same hwpt to the ioas->hwpt_list twice (Alex Williamson) [2177087]
  - iommufd: Add three missing structures in ucmd_buffer (Alex Williamson) [2177087]
  - iommufd: Add a selftest (Alex Williamson) [2177087]
  - iommufd: Add additional invariant assertions (Alex Williamson) [2177087]
  - iommufd: Add some fault injection points (Alex Williamson) [2177087]
  - iommufd: Add kernel support for testing iommufd (Alex Williamson) [2177087]
  - iommufd: vfio container FD ioctl compatibility (Alex Williamson) [2177087]
  - iommufd: Add kAPI toward external drivers for kernel access (Alex Williamson) [2177087]
  - iommufd: Add kAPI toward external drivers for physical devices (Alex Williamson) [2177087]
  - iommufd: Add a HW pagetable object (Alex Williamson) [2177087]
  - iommufd: IOCTLs for the io_pagetable (Alex Williamson) [2177087]
  - iommufd: Data structure to provide IOVA to PFN mapping (Alex Williamson) [2177087]
  - iommufd: Algorithms for PFN storage (Alex Williamson) [2177087]
  - iommufd: PFN handling for iopt_pages (Alex Williamson) [2177087]
  - kernel/user: Allow user_struct::locked_vm to be usable for iommufd (Alex Williamson) [2177087]
  - redhat/configs: Add CONFIG_IOMMUFD (Alex Williamson) [2177087]
  - iommufd: File descriptor, context, kconfig and makefiles (Alex Williamson) [2177087]
  - iommufd: Document overview of iommufd (Alex Williamson) [2177087]
  - scripts/kernel-doc: support EXPORT_SYMBOL_NS_GPL() with -export (Alex Williamson) [2177087]
  - interval-tree: Add a utility to iterate over spans in an interval tree (Alex Williamson) [2177087]
  - iommu: Fix refcount leak in iommu_device_claim_dma_owner (Alex Williamson) [2177087]
  - iommu: Add device-centric DMA ownership interfaces (Alex Williamson) [2177087]
  - iommu: Add IOMMU_CAP_ENFORCE_CACHE_COHERENCY (Alex Williamson) [2177087]
  - scripts: kernel-doc: Refresh the copyright lines (Alex Williamson) [2177087]
  - scripts: kernel-doc: Drop obsolete comments (Alex Williamson) [2177087]
  - scripts: kernel-doc: Replace the usage function (Alex Williamson) [2177087]
  - scripts: kernel-doc: Translate the "Other parameters" subsection of OPTIONS (Alex Williamson) [2177087]
  - scripts: kernel-doc: Translate the "Output selection modifiers" subsection of OPTIONS (Alex Williamson) [2177087]
  - scripts: kernel-doc: Translate the "Output selection" subsection of OPTIONS (Alex Williamson) [2177087]
  - scripts: kernel-doc: Translate the "Output format selection modifier" subsection of OPTIONS (Alex Williamson) [2177087]
  - scripts: kernel-doc: Translate the "Output format selection" subsection of OPTIONS (Alex Williamson) [2177087]
  - scripts: kernel-doc: Translate the DESCRIPTION section (Alex Williamson) [2177087]
  - scripts: kernel-doc: Relink argument parsing error handling to pod2usage (Alex Williamson) [2177087]
  - scripts: kernel-doc: Add the basic POD sections (Alex Williamson) [2177087]
  - scripts: kernel-doc: Ignore __alloc_size() attribute (Alex Williamson) [2177087]
  - scripts/kernel-doc: Override -Werror from KCFLAGS with KDOC_WERROR (Alex Williamson) [2177087]
  - iommu: Rename iommu-sva-lib.{c,h} (Alex Williamson) [2177087]
  - iommu: Per-domain I/O page fault handling (Alex Williamson) [2177087]
  - iommu: Prepare IOMMU domain for IOPF (Alex Williamson) [2177087]
  - iommu: Remove SVA related callbacks from iommu ops (Alex Williamson) [2177087]
  - iommu/sva: Refactoring iommu_sva_bind/unbind_device() (Alex Williamson) [2177087]
  - arm-smmu-v3/sva: Add SVA domain support (Alex Williamson) [2177087]
  - iommu/vt-d: Add SVA domain support (Alex Williamson) [2177087]
  - iommu: Add IOMMU SVA domain support (Alex Williamson) [2177087]
  - iommu: Add attach/detach_dev_pasid iommu interfaces (Alex Williamson) [2177087]
  - PCI: Enable PASID only when ACS RR & UF enabled on upstream path (Alex Williamson) [2177087]
  - iommu: Remove SVM_FLAG_SUPERVISOR_MODE support (Alex Williamson) [2177087]
  - iommu: Add max_pasids field in struct dev_iommu (Alex Williamson) [2177087]
  - iommu: Add max_pasids field in struct iommu_device (Alex Williamson) [2177087]
  - iommu: Propagate return value in ->attach_dev callback functions (Alex Williamson) [2177087]
  - iommu: Use EINVAL for incompatible device/domain in ->attach_dev (Alex Williamson) [2177087]
  - iommu: Regulate EINVAL in ->attach_dev callback functions (Alex Williamson) [2177087]
  - iommu: Add return value rules to attach_dev op and APIs (Alex Williamson) [2177087]
  - iommu/amd: Drop unnecessary checks in amd_iommu_attach_device() (Alex Williamson) [2177087]
  - iommu/vt-d: Fix PCI device refcount leak in prq_event_thread() (Alex Williamson) [2177087]
  - iommu/vt-d: Remove unnecessary SVA data accesses in page fault path (Alex Williamson) [2177087]
  - iommu/virtio: Fix compile error with viommu_capable() (Alex Williamson) [2177087]
  - iommu/arm-smmu: Report IOMMU_CAP_CACHE_COHERENCY even betterer (Alex Williamson) [2177087]
  - iommu/arm-smmu: Report IOMMU_CAP_CACHE_COHERENCY better (Alex Williamson) [2177087]
  - iommu: Retire iommu_capable() (Alex Williamson) [2177087]
  - vfio/fsl-mc: Remove linux/msi.h include (Alex Williamson) [2177087]
  - vfio/ccw: identify CCW data addresses as physical (Alex Williamson) [2177087]
  - vfio/ccw: sort out physical vs virtual pointers usage (Alex Williamson) [2177087]
  - s390/vfio-ap: Fix memory allocation for mdev_types array (Alex Williamson) [2177087]
  - vfio: More vfio_file_is_group() use cases (Alex Williamson) [2177087]
  - vfio: Make the group FD disassociate from the iommu_group (Alex Williamson) [2177087]
  - vfio: Hold a reference to the iommu_group in kvm for SPAPR (Alex Williamson) [2177087]
  - vfio: Add vfio_file_is_group() (Alex Williamson) [2177087]
  - vfio: Change vfio_group->group_rwsem to a mutex (Alex Williamson) [2177087]
  - vfio: Remove the vfio_group->users and users_comp (Alex Williamson) [2177087]
  - vfio/mdev: add mdev available instance checking to the core (Alex Williamson) [2177087]
  - vfio/mdev: consolidate all the description sysfs into the core code (Alex Williamson) [2177087]
  - vfio/mdev: consolidate all the available_instance sysfs into the core code (Alex Williamson) [2177087]
  - vfio/mdev: consolidate all the name sysfs into the core code (Alex Williamson) [2177087]
  - vfio/mdev: consolidate all the device_api sysfs into the core code (Alex Williamson) [2177087]
  - vfio/mdev: remove mtype_get_parent_dev (Alex Williamson) [2177087]
  - vfio/mdev: remove mdev_parent_dev (Alex Williamson) [2177087]
  - vfio/mdev: remove mdev_from_dev (Alex Williamson) [2177087]
  - vfio/mdev: simplify mdev_type handling (Alex Williamson) [2177087]
  - vfio/mdev: embedd struct mdev_parent in the parent data structure (Alex Williamson) [2177087]
  - vfio/mdev: make mdev.h standalone includable (Alex Williamson) [2177087]
  - drm/i915/gvt: simplify vgpu configuration management (Alex Williamson) [2177087]
  - drm/i915/gvt: fix a memory leak in intel_gvt_init_vgpu_types (Alex Williamson) [2177087]
  - vfio: Follow a strict lifetime for struct iommu_group (Alex Williamson) [2177087]
  - vfio: Move container code into drivers/vfio/container.c (Alex Williamson) [2177087]
  - vfio: Rename vfio_ioctl_check_extension() (Alex Williamson) [2177087]
  - vfio: Split out container code from the init/cleanup functions (Alex Williamson) [2177087]
  - vfio: Remove #ifdefs around CONFIG_VFIO_NOIOMMU (Alex Williamson) [2177087]
  - vfio: Split the container logic into vfio_container_attach_group() (Alex Williamson) [2177087]
  - vfio: Rename __vfio_group_unset_container() (Alex Williamson) [2177087]
  - vfio: Add header guards and includes to drivers/vfio/vfio.h (Alex Williamson) [2177087]
  - vfio: Add struct device to vfio_device (Alex Williamson) [2177087]
  - vfio: Rename vfio_device_put() and vfio_device_try_get() (Alex Williamson) [2177087]
  - vfio/ccw: Use the new device life cycle helpers (Alex Williamson) [2177087]
  - vfio/amba: Use the new device life cycle helpers (Alex Williamson) [2177087]
  - vfio: platform: ignore missing reset if disabled at module init (Alex Williamson) [2177087]
  - vfio/platform: Use the new device life cycle helpers (Alex Williamson) [2177087]
  - vfio/fsl-mc: Use the new device life cycle helpers (Alex Williamson) [2177087]
  - vfio/ap: Use the new device life cycle helpers (Alex Williamson) [2177087]
  - drm/i915/gvt: Use the new device life cycle helpers (Alex Williamson) [2177087]
  - vfio/mbochs: Use the new device life cycle helpers (Alex Williamson) [2177087]
  - vfio/mtty: Use the new device life cycle helpers (Alex Williamson) [2177087]
  - vfio/mdpy: Use the new device life cycle helpers (Alex Williamson) [2177087]
  - vfio/hisi_acc: Use the new device life cycle helpers (Alex Williamson) [2177087]
  - vfio/pci: Use the new device life cycle helpers (Alex Williamson) [2177087]
  - vfio: Add helpers for unifying vfio_device life cycle (Alex Williamson) [2177087]
  - vfio/fsl-mc: Fix a typo in a message (Alex Williamson) [2177087]
  - vfio: Remove vfio_group dev_counter (Alex Williamson) [2177087]
  - vfio/pci: Implement VFIO_DEVICE_FEATURE_LOW_POWER_ENTRY_WITH_WAKEUP (Alex Williamson) [2177087]
  - vfio/pci: Implement VFIO_DEVICE_FEATURE_LOW_POWER_ENTRY/EXIT (Alex Williamson) [2177087]
  - vfio/pci: Mask INTx during runtime suspend (Alex Williamson) [2177087]
  - vfio: Increment the runtime PM usage count during IOCTL call (Alex Williamson) [2177087]
  - vfio: Add the device features for the low power entry and exit (Alex Williamson) [2177087]
  - vfio: Split VFIO_GROUP_GET_STATUS into a function (Alex Williamson) [2177087]
  - vfio: Follow the naming pattern for vfio_group_ioctl_unset_container() (Alex Williamson) [2177087]
  - vfio: Fold VFIO_GROUP_SET_CONTAINER into vfio_group_set_container() (Alex Williamson) [2177087]
  - vfio: Fold VFIO_GROUP_GET_DEVICE_FD into vfio_group_get_device_fd() (Alex Williamson) [2177087]
  - vfio-pci: Replace 'void __user *' with proper types in the ioctl functions (Alex Williamson) [2177087]
  - vfio-pci: Re-indent what was vfio_pci_core_ioctl() (Alex Williamson) [2177087]
  - vfio-pci: Break up vfio_pci_core_ioctl() into one function per ioctl (Alex Williamson) [2177087]
  - vfio-pci: Fix vfio_pci_ioeventfd() to return int (Alex Williamson) [2177087]
  - vfio/pci: Simplify the is_intx/msi/msix/etc defines (Alex Williamson) [2177087]
  - vfio/pci: Rename vfio_pci_register_dev_region() (Alex Williamson) [2177087]
  - vfio/pci: Split linux/vfio_pci_core.h (Alex Williamson) [2177087]
  - vfio/pci: Remove console drivers (Alex Williamson) [2177087]
  - powerpc/pseries: Avoid hcall in plpks_is_available() on non-pseries (Mamatha Inamdar) [1873865]
  - powerpc/pseries: Fix endianness issue when parsing PLPKS secvar flags (Mamatha Inamdar) [1873865]
  - integrity/powerpc: Support loading keys from PLPKS (Mamatha Inamdar) [1873865]
  - integrity/powerpc: Improve error handling & reporting when loading certs (Mamatha Inamdar) [1873865]
  - powerpc/pseries: Implement secvars for dynamic secure boot (Mamatha Inamdar) [1873865]
  - powerpc/pseries: Pass PLPKS password on kexec (Mamatha Inamdar) [1873865]
  - powerpc/pseries: Add helper to get PLPKS password length (Mamatha Inamdar) [1873865]
  - powerpc/pseries: Clarify warning when PLPKS password already set (Mamatha Inamdar) [1873865]
  - powerpc/pseries: Turn PSERIES_PLPKS into a hidden option (Mamatha Inamdar) [1873865]
  - powerpc/pseries: Make caller pass buffer to plpks_read_var() (Mamatha Inamdar) [1873865]
  - powerpc/pseries: Log hcall return codes for PLPKS debug (Mamatha Inamdar) [1873865]
  - powerpc/pseries: Implement signed update for PLPKS objects (Mamatha Inamdar) [1873865]
  - powerpc/pseries: Expose PLPKS config values, support additional fields (Mamatha Inamdar) [1873865]
  - powerpc/pseries: Move PLPKS constants to header file (Mamatha Inamdar) [1873865]
  - powerpc/pseries: Move plpks.h to include directory (Mamatha Inamdar) [1873865]
  - powerpc/secvar: Don't print error on ENOENT when reading variables (Mamatha Inamdar) [1873865]
  - powerpc/secvar: Warn when PAGE_SIZE is smaller than max object size (Mamatha Inamdar) [1873865]
  - powerpc/secvar: Allow backend to populate static list of variable names (Mamatha Inamdar) [1873865]
  - powerpc/secvar: Extend sysfs to include config vars (Mamatha Inamdar) [1873865]
  - powerpc/secvar: Clean up init error messages (Mamatha Inamdar) [1873865]
  - powerpc/secvar: Handle max object size in the consumer (Mamatha Inamdar) [1873865]
  - powerpc/secvar: Handle format string in the consumer (Mamatha Inamdar) [1873865]
  - powerpc/secvar: Use sysfs_emit() instead of sprintf() (Mamatha Inamdar) [1873865]
  - powerpc/secvar: Warn and error if multiple secvar ops are set (Mamatha Inamdar) [1873865]
  - powerpc/secvar: Use u64 in secvar_operations (Mamatha Inamdar) [1873865]
  - powerpc/secvar: Fix incorrect return in secvar_sysfs_load() (Mamatha Inamdar) [1873865]
  - powerpc/pseries: Fix alignment of PLPKS structures and buffers (Mamatha Inamdar) [1873865]
  - powerpc/pseries: Fix handling of PLPKS object flushing timeout (Mamatha Inamdar) [1873865]
  - powerpc/pseries: fix plpks_read_var() code for different consumers (Mamatha Inamdar) [1873865]
  - powerpc/pseries: replace kmalloc with kzalloc in PLPKS driver (Mamatha Inamdar) [1873865]
  - powerpc/pseries: cleanup error logs in plpks driver (Mamatha Inamdar) [1873865]
  - powerpc/pseries: Return -EIO instead of -EINTR for H_ABORTED error (Mamatha Inamdar) [1873865]
  - powerpc/pseries: Fix the H_CALL error code in PLPKS driver (Mamatha Inamdar) [1873865]
  - powerpc/pseries: fix the object owners enum value in plpks driver (Mamatha Inamdar) [1873865]
  - powerpc/pseries: Fix plpks crash on non-pseries (Mamatha Inamdar) [1873865]
  - powerpc/pseries: define driver for Platform KeyStore (Mamatha Inamdar) [1873865]
  - x86/tsc: Add option to force frequency recalibration with HW timer (David Arcari) [2100598]
  - Reinstate "GFS2: free disk inode which is deleted by remote node -V2" (Bob Peterson) [2181344]
  - iavf: fix hang on reboot with ice (Stefan Assmann) [2175775]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-298.el9]
changelog:
  - kernel-rt: config: disable SLUB_CPU_PARTIAL for real time kernels (Luis Claudio R. Goncalves) [2182930]
  - kernel-rt: config: disable KGDB in the production and development variants (Luis Claudio R. Goncalves) [2182890]
  - mm/migrate: fix wrongly apply write bit after mkdirty on sparc64 (Rafael Aquini) [2168392]
  - mm/thp: re-apply mkdirty for small pages after split (Rafael Aquini) [2168392]
  - Partly revert "mm/thp: carry over dirty bit when thp splits on pmd" (Rafael Aquini) [2168392]
  - mm/swap: fix SWP_PFN_BITS with CONFIG_PHYS_ADDR_T_64BIT on 32bit (Rafael Aquini) [2168392]
  - mm/swap: cache swap migration A/D bits support (Rafael Aquini) [2168392]
  - mm/swap: cache maximum swapfile size when init swap (Rafael Aquini) [2168392]
  - mm: remember young/dirty bit for page migrations (Rafael Aquini) [2168392]
  - mm/thp: carry over dirty bit when thp splits on pmd (Rafael Aquini) [2168392]
  - mm/swap: add swp_offset_pfn() to fetch PFN from swap entry (Rafael Aquini) [2168392]
  - mm/swap: comment all the ifdef in swapops.h (Rafael Aquini) [2168392]
  - mm/x86: use SWP_TYPE_BITS in 3-level swap macros (Rafael Aquini) [2168392]
  - mm/swapops: make is_pmd_migration_entry more strict (Rafael Aquini) [2168392]
  - include/linux/swapops.h: remove stub for non_swap_entry() (Rafael Aquini) [2168392]
  - cifs: fix regression in very old smb1 mounts (Ronnie Sahlberg) [2182556]
  - hwrng: core - use per-rng quality value instead of global setting (Jose Ignacio Tornos Martinez) [2172887]
  - hwrng: core - start and stop in-kernel rngd in separate function (Jose Ignacio Tornos Martinez) [2172887]
  - hwrng: core - do not bother to order list of devices by quality (Jose Ignacio Tornos Martinez) [2172887]
  - hwrng: core - credit entropy for low quality sources of randomness (Jose Ignacio Tornos Martinez) [2172887]
  - hwrng: core - break out of hwrng_fillfn if current rng is not trusted (Jose Ignacio Tornos Martinez) [2172887]
  - hwrng: core - only set cur_rng_set_by_user if it is working (Jose Ignacio Tornos Martinez) [2172887]
  - hwrng: core - use rng_fillbuf in add_early_randomness() (Jose Ignacio Tornos Martinez) [2172887]
  - hwrng: core - read() callback must be called for size of 32 or more bytes (Jose Ignacio Tornos Martinez) [2172887]
  - hwrng: core - explicit ordering of initcalls (Jose Ignacio Tornos Martinez) [2172887]
  - sfc: Change VF mac via PF as first preference if available. (Íñigo Huguet) [2121027]
  - genirq/affinity: Only build SMP-only helper functions on SMP kernels (Ming Lei) [2153649]
  - blk-mq: Build default queue map via group_cpus_evenly() (Ming Lei) [2153649]
  - genirq/affinity: Move group_cpus_evenly() into lib/ (Ming Lei) [2153649]
  - genirq/affinity: Rename irq_build_affinity_masks as group_cpus_evenly (Ming Lei) [2153649]
  - genirq/affinity: Don't pass irq_affinity_desc array to irq_build_affinity_masks (Ming Lei) [2153649]
  - genirq/affinity: Pass affinity managed mask array to irq_build_affinity_masks (Ming Lei) [2153649]
  - genirq/affinity: Remove the 'firstvec' parameter from irq_build_affinity_masks (Ming Lei) [2153649]
  - genirq/affinity: Replace cpumask_weight() with cpumask_empty() where appropriate (Ming Lei) [2153649]
  - ipmi: ipmb: Fix the MODULE_PARM_DESC associated to 'retry_time_ms' (Tony Camuso) [2174224]
  - ipmi:ssif: Add a timer between request retries (Tony Camuso) [2174224]
  - ipmi:ssif: Remove rtc_us_timer (Tony Camuso) [2174224]
  - ipmi_ssif: Rename idle state and check (Tony Camuso) [2174224]
  - ipmi:ssif: resend_msg() cannot fail (Tony Camuso) [2174224]
  - ipmi/watchdog: use strscpy() to instead of strncpy() (Tony Camuso) [2174224]
  - ipmi: ssif_bmc: Convert to i2c's .probe_new() (Tony Camuso) [2174224]
  - ipmi: fix use after free in _ipmi_destroy_user() (Tony Camuso) [2174224]
  - ipmi/watchdog: Include <linux/kstrtox.h> when appropriate (Tony Camuso) [2174224]
  - ipmi:ssif: Increase the message retry time (Tony Camuso) [2174224]
  - ipmi: Fix some kernel-doc warnings (Tony Camuso) [2174224]
  - ipmi: ssif_bmc: Use EPOLLIN instead of POLLIN (Tony Camuso) [2174224]
  - ipmi: fix msg stack when IPMI is disconnected (Tony Camuso) [2174224]
  - ipmi: fix memleak when unload ipmi driver (Tony Camuso) [2174224]
  - ipmi: fix long wait in unload when IPMI disconnect (Tony Camuso) [2174224]
  - ipmi: kcs: Poll OBF briefly to reduce OBE latency (Tony Camuso) [2174224]
  - ipmi: ssif_bmc: Add SSIF BMC driver (Tony Camuso) [2174224]
  - ipmi: ssif_bmc: Add SSIF BMC driver config (Tony Camuso) [2174224]
  - ipmi: Remove unused struct watcher_entry (Tony Camuso) [2174224]
  - ipmi: kcs: aspeed: Update port address comments (Tony Camuso) [2174224]
  - ipmi: Add __init/__exit annotations to module init/exit funcs (Tony Camuso) [2174224]
  - ipmi:ipmb: Don't call ipmi_unregister_smi() on a register failure (Tony Camuso) [2174224]
  - ipmi:ipmb: Fix a vague comment and a typo (Tony Camuso) [2174224]
  - ipmi: Fix comment typo (Tony Camuso) [2174224]
  - char: ipmi: modify NPCM KCS configuration (Tony Camuso) [2174224]
  - KVM: x86: Propagate the AMD Automatic IBRS feature to the guest (Waiman Long) [1898184]
  - x86/cpu: Support AMD Automatic IBRS (Waiman Long) [1898184]
  - x86/cpu, kvm: Add the SMM_CTL MSR not present feature (Waiman Long) [1898184]
  - x86/cpu, kvm: Add the Null Selector Clears Base feature (Waiman Long) [1898184]
  - x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf (Waiman Long) [1898184]
  - x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature (Waiman Long) [1898184]
  - KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code (Waiman Long) [1898184]
  - x86/cpu, kvm: Add support for CPUID_80000021_EAX (Waiman Long) [1898184]
  - x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 (Waiman Long) [1898184]
  - KVM: x86: Advertise that the SMM_CTL MSR is not supported (Waiman Long) [1898184]
  - KVM: x86: Advertise AVX-VNNI-INT8 CPUID to user space (Waiman Long) [1898184]
  - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [1898184]
  - tools headers cpufeatures: Sync with the kernel sources (Waiman Long) [1898184]
  - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [1898184]
  - Documentation/hw-vuln: Update spectre doc (Waiman Long) [1898184]
  - x86/cpufeatures: Add LbrExtV2 feature bit (Waiman Long) [1898184]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-299.el9]
changelog:
  - powerpc/xive: Use XIVE domain under xmon and debugfs (David Arcari) [2114045]
  - powerpc/xics: Drop unmask of MSIs at startup (David Arcari) [2114045]
  - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (David Arcari) [2114045]
  - Update CONFIG_LOCKDEP_CHAINS_BITS to 18 (David Arcari) [2114045]
  - irqdomain: Add missing NULL pointer check in irq_domain_create_hierarchy() (David Arcari) [2114045]
  - irqdomain: Switch to per-domain locking (David Arcari) [2114045]
  - irqchip/mvebu-odmi: Use irq_domain_create_hierarchy() (David Arcari) [2114045]
  - irqchip/gic-v3-mbi: Use irq_domain_create_hierarchy() (David Arcari) [2114045]
  - irqchip/gic-v3-its: Use irq_domain_create_hierarchy() (David Arcari) [2114045]
  - irqchip/gic-v2m: Use irq_domain_create_hierarchy() (David Arcari) [2114045]
  - irqchip/alpine-msi: Use irq_domain_add_hierarchy() (David Arcari) [2114045]
  - x86/uv: Use irq_domain_create_hierarchy() (David Arcari) [2114045]
  - x86/ioapic: Use irq_domain_create_hierarchy() (David Arcari) [2114045]
  - irqdomain: Clean up irq_domain_push/pop_irq() (David Arcari) [2114045]
  - irqdomain: Drop leftover brackets (David Arcari) [2114045]
  - irqdomain: Drop dead domain-name assignment (David Arcari) [2114045]
  - irqdomain: Drop revmap mutex (David Arcari) [2114045]
  - irqdomain: Fix domain registration race (David Arcari) [2114045]
  - irqdomain: Fix mapping-creation race (David Arcari) [2114045]
  - irqdomain: Refactor __irq_domain_alloc_irqs() (David Arcari) [2114045]
  - irqdomain: Look for existing mapping only once (David Arcari) [2114045]
  - irqdomain: Drop bogus fwspec-mapping error handling (David Arcari) [2114045]
  - irqdomain: Fix disassociation race (David Arcari) [2114045]
  - irqdomain: Fix association race (David Arcari) [2114045]
  - irqdomain: Use hwirq_max instead of revmap_size for NOMAP domains (David Arcari) [2114045]
  - PCI: apple: Add INTx and per-port interrupt support (David Arcari) [2114045]
  - irqdomain: Change the type of 'size' in __irq_domain_add() to be consistent (David Arcari) [2114045]
  - genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask() (David Arcari) [2114045]
  - iommu/amd: Enable PCI/IMS (David Arcari) [2114045]
  - iommu/vt-d: Enable PCI/IMS (David Arcari) [2114045]
  - genirq: Drop redundant irq_init_effective_affinity (David Arcari) [2114045]
  - x86/apic/msi: Enable PCI/IMS (David Arcari) [2114045]
  - PCI/MSI: Provide pci_ims_alloc/free_irq() (David Arcari) [2114045]
  - PCI/MSI: Provide IMS (Interrupt Message Store) support (David Arcari) [2114045]
  - genirq: Return a const cpumask from irq_data_get_affinity_mask (David Arcari) [2114045]
  - genirq: Add and use an irq_data_update_affinity helper (David Arcari) [2114045]
  - genirq: Refactor accessors to use irq_data_get_affinity_mask (David Arcari) [2114045]
  - genirq/msi: Provide constants for PCI/IMS support (David Arcari) [2114045]
  - x86/apic/msi: Enable MSI_FLAG_PCI_MSIX_ALLOC_DYN (David Arcari) [2114045]
  - x86/apic/msi: Remove arch_create_remap_msi_irq_domain() (David Arcari) [2114045]
  - iommu/amd: Switch to MSI base domains (David Arcari) [2114045]
  - iommu/vt-d: Switch to MSI parent domains (David Arcari) [2114045]
  - oc: ti: ti_sci_inta_msi: Switch to domain id aware MSI functions (David Arcari) [2114045]
  - genirq/irqdesc: Don't try to remove non-existing sysfs files (David Arcari) [2114045]
  - irqchip/gic: Use kstrtobool() instead of strtobool() (David Arcari) [2114045]
  - irqchip/irq-mtk-cirq: Add support for System CIRQ on MT8192 (David Arcari) [2114045]
  - irqchip/irq-mtk-cirq: Move register offsets to const array (David Arcari) [2114045]
  - dt-bindings: interrupt-controller: mediatek,cirq: Document MT8192 (David Arcari) [2114045]
  - dt-bindings: interrupt-controller: mediatek,cirq: Migrate to dt schema (David Arcari) [2114045]
  - irqchip/sl28cpld: Replace irqchip mask_invert with unmask_base (David Arcari) [2114045]
  - irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init() (David Arcari) [2114045]
  - irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() (David Arcari) [2114045]
  - irqchip/al-fic: Drop obsolete dependency on COMPILE_TEST (David Arcari) [2114045]
  - irqchip/st: Use device_get_match_data() to simplify the code (David Arcari) [2114045]
  - genirq/irqreturn: Fix kernel-doc warnings (David Arcari) [2114045]
  - iommu/of: Remove linux/msi.h include (David Arcari) [2114045]
  - vfio/fsl-mc: Remove linux/msi.h include (David Arcari) [2114045]
  - soc: fsl: dpio: Remove linux/msi.h include (David Arcari) [2114045]
  - bus: fsl-mc: Remove linux/msi.h includes (David Arcari) [2114045]
  - Documentation: PCI: Add reference to PCI/MSI device driver APIs (David Arcari) [2114045]
  - iommu/amd: Remove bogus check for multi MSI-X (David Arcari) [2114045]
  - iommu/vt-d: Remove bogus check for multi MSI-X (David Arcari) [2114045]
  - genirq: Remove unused argument force of irq_set_affinity_deactivated() (David Arcari) [2114045]
  - powerpc/64: warn if local irqs are enabled in NMI or hardirq context (David Arcari) [2114045]
  - powerpc/traps: do not enable irqs in _exception (David Arcari) [2114045]
  - powerpc/xics: Set the IRQ chip data for the ICS native backend (David Arcari) [2114045]
  - powerpc: use IRQF_NO_DEBUG for IPIs (David Arcari) [2114045]
  - powerpc/xics: Fix IRQ migration (David Arcari) [2114045]
  - powerpc/xics: Add support for IRQ domain hierarchy (David Arcari) [2114045]
  - powerpc/xics: Give a name to the default XICS IRQ domain (David Arcari) [2114045]
  - powerpc/xics: Rename the map handler in a check handler (David Arcari) [2114045]
  - powerpc/xics: Remove ICS list (David Arcari) [2114045]
  - powerpc/xive: Remove irqd_is_started() check when setting the affinity (David Arcari) [2114045]
  - powerpc/xive: Drop unmask of MSIs at startup (David Arcari) [2114045]
  - powerpc/xive: Ease debugging of xive_irq_set_affinity() (David Arcari) [2114045]
  - powerpc/xive: Add support for IRQ domain hierarchy (David Arcari) [2114045]
  - watchdog: imx7ulp: Use devm_clk_get_enabled() helper (Steve Best) [2180762]
  - KVM: VMX: Fix crash due to uninitialized current_vmcs (Vitaly Kuznetsov) [2181329]
  - scsi: target: iscsi: Fix an error message in iscsi_check_key() (Maurizio Lombardi) [2175687]
  - scsi: target: core: Fix warning on RT kernels (Maurizio Lombardi) [2175687]
  - scsi: target: core: Change the way target_xcopy_do_work() sets restiction on max I/O (Maurizio Lombardi) [2175687]
  - scsi: target: core: Make hw_max_sectors store the sectors amount in blocks (Maurizio Lombardi) [2175687]
  - scsi: target: core: Send max transfer length in blocks (Maurizio Lombardi) [2175687]
  - scsi: target: Use kstrtobool() instead of strtobool() (Maurizio Lombardi) [2175687]
  - scsi: target: core: Remove unused variable 'unit_serial_len' (Maurizio Lombardi) [2175687]
  - scsi: target: core: Dynamically set DPO and FUA in usage_bits (Maurizio Lombardi) [2175687]
  - scsi: target: core: Check emulate_3pc for RECEIVE COPY (Maurizio Lombardi) [2175687]
  - scsi: target: core: Add emulate_rsoc attribute (Maurizio Lombardi) [2175687]
  - scsi: target: core: Dynamic opcode support in RSOC (Maurizio Lombardi) [2175687]
  - scsi: target: core: Add list of opcodes for RSOC (Maurizio Lombardi) [2175687]
  - scsi: target: core: Add support for RSOC command (Maurizio Lombardi) [2175687]
  - scsi: target: Remove the unused function transport_lba_64_ext() (Maurizio Lombardi) [2175687]
  - [target] fix iov_iter_bvec() "direction" argument (Maurizio Lombardi) [2175687]
  - scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() (Maurizio Lombardi) [2175687]
  - scsi: target: iblock: Fold iblock_emulate_read_cap_with_block_size() into iblock_get_blocks() (Maurizio Lombardi) [2175687]
  - scsi: target: core: UA on all LUNs after reset (Maurizio Lombardi) [2175687]
  - scsi: target: core: New key must be used for moved PR (Maurizio Lombardi) [2175687]
  - scsi: target: core: Abort all preempted regs if requested (Maurizio Lombardi) [2175687]
  - scsi: target: core: Fix memory leak in preempt_and_abort (Maurizio Lombardi) [2175687]
  - scsi: target: core: Fix preempt and abort for allreg res (Maurizio Lombardi) [2175687]
  - scsi: target: Remove unused se_tmr_req_cache declaration (Maurizio Lombardi) [2175687]
  - scsi: target: alua: Do not report emtpy port group (Maurizio Lombardi) [2175687]
  - scsi: target: core: Set MULTIP bit for se_device with multiple ports (Maurizio Lombardi) [2175687]
  - scsi: target: pscsi: Remove repeated word "calling" (Maurizio Lombardi) [2175687]
  - net: avoid double iput when sock_alloc_file fails (Jeff Moyer) [2123490]
  - io_uring: do not recycle buffer in READV (Jeff Moyer) [2123490]
  - io_uring: fix free of unallocated buffer list (Jeff Moyer) [2123490]
  - io_uring: check that we have a file table when allocating update slots (Jeff Moyer) [2123490]
  - io_uring: explicit sqe padding for ioctl commands (Jeff Moyer) [2123490]
  - io_uring: fix provided buffer import (Jeff Moyer) [2123490]
  - io_uring: keep sendrecv flags in ioprio (Jeff Moyer) [2123490]
  - io_uring: use original request task for inflight tracking (Jeff Moyer) [2123490]
  - io_uring: move io_uring_get_opcode out of TP_printk (Jeff Moyer) [2123490]
  - io_uring: fix double poll leak on repolling (Jeff Moyer) [2123490]
  - io_uring: fix wrong arm_poll error handling (Jeff Moyer) [2123490]
  - io_uring: fail links when poll fails (Jeff Moyer) [2123490]
  - io_uring: fix req->apoll_events (Jeff Moyer) [2123490]
  - io_uring: mark reissue requests with REQ_F_PARTIAL_IO (Jeff Moyer) [2123490]
  - io_uring: recycle provided buffer if we punt to io-wq (Jeff Moyer) [2123490]
  - io_uring: do not use prio task_work_add in uring_cmd (Jeff Moyer) [2123490]
  - io_uring: commit non-pollable provided mapped buffers upfront (Jeff Moyer) [2123490]
  - io_uring: make io_fill_cqe_aux honour CQE32 (Jeff Moyer) [2123490]
  - io_uring: remove __io_fill_cqe() helper (Jeff Moyer) [2123490]
  - io_uring: fix ->extra{1,2} misuse (Jeff Moyer) [2123490]
  - io_uring: fill extra big cqe fields from req (Jeff Moyer) [2123490]
  - io_uring: unite fill_cqe and the 32B version (Jeff Moyer) [2123490]
  - io_uring: get rid of __io_fill_cqe{32}_req() (Jeff Moyer) [2123490]
  - io_uring: remove IORING_CLOSE_FD_AND_FILE_SLOT (Jeff Moyer) [2123490]
  - Revert "io_uring: add buffer selection support to IORING_OP_NOP" (Jeff Moyer) [2123490]
  - Revert "io_uring: support CQE32 for nop operation" (Jeff Moyer) [2123490]
  - io_uring: limit size of provided buffer ring (Jeff Moyer) [2123490]
  - io_uring: fix types in provided buffer ring (Jeff Moyer) [2123490]
  - io_uring: fix index calculation (Jeff Moyer) [2123490]
  - io_uring: fix double unlock for pbuf select (Jeff Moyer) [2123490]
  - io_uring: kbuf: fix bug of not consuming ring buffer in partial io case (Jeff Moyer) [2123490]
  - io_uring: openclose: fix bug of closing wrong fixed file (Jeff Moyer) [2123490]
  - io_uring: fix not locked access to fixed buf table (Jeff Moyer) [2123490]
  - io_uring: fix races with buffer table unregister (Jeff Moyer) [2123490]
  - io_uring: fix races with file table unregister (Jeff Moyer) [2123490]
  - fix the breakage in close_fd_get_file() calling conventions change (Jeff Moyer) [2123490]
  - io_uring: reinstate the inflight tracking (Jeff Moyer) [2123490]
  - io_uring: fix deadlock on iowq file slot alloc (Jeff Moyer) [2123490]
  - io_uring: let IORING_OP_FILES_UPDATE support choosing fixed file slots (Jeff Moyer) [2123490]
  - io_uring: defer alloc_hint update to io_file_bitmap_set() (Jeff Moyer) [2123490]
  - io_uring: ensure fput() called correspondingly when direct install fails (Jeff Moyer) [2123490]
  - io_uring: wire up allocated direct descriptors for socket (Jeff Moyer) [2123490]
  - io_uring: fix a memory leak of buffer group list on exit (Jeff Moyer) [2123490]
  - io_uring: move shutdown under the general net section (Jeff Moyer) [2123490]
  - io_uring: unify calling convention for async prep handling (Jeff Moyer) [2123490]
  - io_uring: add io_op_defs 'def' pointer in req init and issue (Jeff Moyer) [2123490]
  - io_uring: make prep and issue side of req handlers named consistently (Jeff Moyer) [2123490]
  - io_uring: make timeout prep handlers consistent with other prep handlers (Jeff Moyer) [2123490]
  - io_uring: cleanup handling of the two task_work lists (Jeff Moyer) [2123490]
  - io_uring: fix incorrect __kernel_rwf_t cast (Jeff Moyer) [2123490]
  - io_uring: disallow mixed provided buffer group registrations (Jeff Moyer) [2123490]
  - io_uring: initialize io_buffer_list head when shared ring is unregistered (Jeff Moyer) [2123490]
  - io_uring: add fully sparse buffer registration (Jeff Moyer) [2123490]
  - io_uring: use rcu_dereference in io_close (Jeff Moyer) [2123490]
  - io_uring: consistently use the EPOLL* defines (Jeff Moyer) [2123490]
  - io_uring: make apoll_events a __poll_t (Jeff Moyer) [2123490]
  - io_uring: drop a spurious inline on a forward declaration (Jeff Moyer) [2123490]
  - io_uring: don't use ERR_PTR for user pointers (Jeff Moyer) [2123490]
  - io_uring: use a rwf_t for io_rw.flags (Jeff Moyer) [2123490]
  - io_uring: add support for ring mapped supplied buffers (Jeff Moyer) [2123490]
  - io_uring: add io_pin_pages() helper (Jeff Moyer) [2123490]
  - io_uring: add buffer selection support to IORING_OP_NOP (Jeff Moyer) [2123490]
  - io_uring: fix locking state for empty buffer group (Jeff Moyer) [2123490]
  - Unify the primitives for file descriptor closing (Jeff Moyer) [2123490]
  - file: let pick_file() tell caller it's done (Jeff Moyer) [2123490]
  - io_uring: implement multishot mode for accept (Jeff Moyer) [2123490]
  - io_uring: let fast poll support multishot (Jeff Moyer) [2123490]
  - io_uring: add REQ_F_APOLL_MULTISHOT for requests (Jeff Moyer) [2123490]
  - io_uring: add IORING_ACCEPT_MULTISHOT for accept (Jeff Moyer) [2123490]
  - io_uring: only wake when the correct events are set (Jeff Moyer) [2123490]
  - io_uring: avoid io-wq -EAGAIN looping for !IOPOLL (Jeff Moyer) [2123490]
  - io_uring: add flag for allocating a fully sparse direct descriptor space (Jeff Moyer) [2123490]
  - io_uring: bump max direct descriptor count to 1M (Jeff Moyer) [2123490]
  - io_uring: allow allocated fixed files for accept (Jeff Moyer) [2123490]
  - io_uring: allow allocated fixed files for openat/openat2 (Jeff Moyer) [2123490]
  - io_uring: add basic fixed file allocator (Jeff Moyer) [2123490]
  - io_uring: track fixed files with a bitmap (Jeff Moyer) [2123490]
  - io_uring_enter(): don't leave f.flags uninitialized (Jeff Moyer) [2123490]
  - nvme: add vectored-io support for uring-cmd (Jeff Moyer) [2123490]
  - nvme: wire-up uring-cmd support for io-passthru on char-device. (Jeff Moyer) [2123490]
  - nvme: refactor nvme_submit_user_cmd() (Jeff Moyer) [2123490]
  - nvme: add vectored-io support for user-passthrough (Jeff Moyer) [2123490]
  - fs,io_uring: add infrastructure for uring-cmd (Jeff Moyer) [2123490]
  - io_uring: support CQE32 for nop operation (Jeff Moyer) [2123490]
  - io_uring: enable CQE32 (Jeff Moyer) [2123490]
  - io_uring: support CQE32 in /proc info (Jeff Moyer) [2123490]
  - io_uring: add tracing for additional CQE32 fields (Jeff Moyer) [2123490]
  - io_uring: overflow processing for CQE32 (Jeff Moyer) [2123490]
  - io_uring: flush completions for CQE32 (Jeff Moyer) [2123490]
  - io_uring: modify io_get_cqe for CQE32 (Jeff Moyer) [2123490]
  - io_uring: add CQE32 completion processing (Jeff Moyer) [2123490]
  - io_uring: add CQE32 setup processing (Jeff Moyer) [2123490]
  - io_uring: change ring size calculation for CQE32 (Jeff Moyer) [2123490]
  - io_uring: store add. return values for CQE32 (Jeff Moyer) [2123490]
  - io_uring: support CQE32 in io_uring_cqe (Jeff Moyer) [2123490]
  - io_uring: add support for 128-byte SQEs (Jeff Moyer) [2123490]
  - io_uring: don't clear req->kbuf when buffer selection is done (Jeff Moyer) [2123490]
  - io_uring: eliminate the need to track provided buffer ID separately (Jeff Moyer) [2123490]
  - io_uring: move provided buffer state closer to submit state (Jeff Moyer) [2123490]
  - io_uring: move provided and fixed buffers into the same io_kiocb area (Jeff Moyer) [2123490]
  - io_uring: abstract out provided buffer list selection (Jeff Moyer) [2123490]
  - io_uring: never call io_buffer_select() for a buffer re-select (Jeff Moyer) [2123490]
  - io_uring: get rid of hashed provided buffer groups (Jeff Moyer) [2123490]
  - io_uring: always use req->buf_index for the provided buffer group (Jeff Moyer) [2123490]
  - io_uring: ignore ->buf_index if REQ_F_BUFFER_SELECT isn't set (Jeff Moyer) [2123490]
  - io_uring: kill io_rw_buffer_select() wrapper (Jeff Moyer) [2123490]
  - io_uring: make io_buffer_select() return the user address directly (Jeff Moyer) [2123490]
  - io_uring: kill io_recv_buffer_select() wrapper (Jeff Moyer) [2123490]
  - io_uring: use 'sr' vs 'req->sr_msg' consistently (Jeff Moyer) [2123490]
  - io_uring: add POLL_FIRST support for send/sendmsg and recv/recvmsg (Jeff Moyer) [2123490]
  - io_uring: check IOPOLL/ioprio support upfront (Jeff Moyer) [2123490]
  - io_uring: replace smp_mb() with smp_mb__after_atomic() in io_sq_thread() (Jeff Moyer) [2123490]
  - io_uring: add IORING_SETUP_TASKRUN_FLAG (Jeff Moyer) [2123490]
  - io_uring: use TWA_SIGNAL_NO_IPI if IORING_SETUP_COOP_TASKRUN is used (Jeff Moyer) [2123490]
  - io_uring: set task_work notify method at init time (Jeff Moyer) [2123490]
  - io-wq: use __set_notify_signal() to wake workers (Jeff Moyer) [2123490]
  - io_uring: serialize ctx->rings->sq_flags with atomic_or/and (Jeff Moyer) [2123490]
  - task_work: allow TWA_SIGNAL without a rescheduling IPI (Jeff Moyer) [2123490]
  - io_uring: return hint on whether more data is available after receive (Jeff Moyer) [2123490]
  - net: clear msg_get_inq in __get_compat_msghdr() (Jeff Moyer) [2123490]
  - net: clear msg_get_inq in __sys_recvfrom() and __copy_msghdr_from_user() (Jeff Moyer) [2123490]
  - tcp: pass back data left in socket after receive (Jeff Moyer) [2123490]
  - io_uring: use the text representation of ops in trace (Jeff Moyer) [2123490]
  - io_uring: rename op -> opcode (Jeff Moyer) [2123490]
  - io_uring: add io_uring_get_opcode (Jeff Moyer) [2123490]
  - io_uring: add type to op enum (Jeff Moyer) [2123490]
  - io_uring: fix compile warning for 32-bit builds (Jeff Moyer) [2123490]
  - io_uring: cleanup error-handling around io_req_complete (Jeff Moyer) [2123490]
  - io_uring: add socket(2) support (Jeff Moyer) [2123490]
  - net: add __sys_socket_file() (Jeff Moyer) [2123490]
  - io_uring: fix trace for reduced sqe padding (Jeff Moyer) [2123490]
  - io_uring: add fgetxattr and getxattr support (Jeff Moyer) [2123490]
  - io_uring: add fsetxattr and setxattr support (Jeff Moyer) [2123490]
  - fs: split off do_getxattr from getxattr (Jeff Moyer) [2123490]
  - fs: split off setxattr_copy and do_setxattr function from setxattr (Jeff Moyer) [2123490]
  - io_uring: return an error when cqe is dropped (Jeff Moyer) [2123490]
  - io_uring: use constants for cq_overflow bitfield (Jeff Moyer) [2123490]
  - io_uring: rework io_uring_enter to simplify return value (Jeff Moyer) [2123490]
  - io_uring: trace cqe overflows (Jeff Moyer) [2123490]
  - io_uring: add trace support for CQE overflow (Jeff Moyer) [2123490]
  - io_uring: allow re-poll if we made progress (Jeff Moyer) [2123490]
  - io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG) (Jeff Moyer) [2123490]
  - io_uring: add support for IORING_ASYNC_CANCEL_ANY (Jeff Moyer) [2123490]
  - io_uring: allow IORING_OP_ASYNC_CANCEL with 'fd' key (Jeff Moyer) [2123490]
  - io_uring: add support for IORING_ASYNC_CANCEL_ALL (Jeff Moyer) [2123490]
  - io_uring: pass in struct io_cancel_data consistently (Jeff Moyer) [2123490]
  - io_uring: remove dead 'poll_only' argument to io_poll_cancel() (Jeff Moyer) [2123490]
  - io_uring: refactor io_disarm_next() locking (Jeff Moyer) [2123490]
  - io_uring: move timeout locking in io_timeout_cancel() (Jeff Moyer) [2123490]
  - io_uring: store SCM state in io_fixed_file->file_ptr (Jeff Moyer) [2123490]
  - io_uring: kill ctx arg from io_req_put_rsrc (Jeff Moyer) [2123490]
  - io_uring: add a helper for putting rsrc nodes (Jeff Moyer) [2123490]
  - io_uring: store rsrc node in req instead of refs (Jeff Moyer) [2123490]
  - io_uring: refactor io_assign_file error path (Jeff Moyer) [2123490]
  - io_uring: use right helpers for file assign locking (Jeff Moyer) [2123490]
  - io_uring: add data_race annotations (Jeff Moyer) [2123490]
  - io_uring: inline io_req_complete_fail_submit() (Jeff Moyer) [2123490]
  - io_uring: refactor io_submit_sqe() (Jeff Moyer) [2123490]
  - io_uring: refactor lazy link fail (Jeff Moyer) [2123490]
  - io_uring: introduce IO_REQ_LINK_FLAGS (Jeff Moyer) [2123490]
  - io_uring: refactor io_queue_sqe() (Jeff Moyer) [2123490]
  - io_uring: rename io_queue_async_work() (Jeff Moyer) [2123490]
  - io_uring: inline io_queue_sqe() (Jeff Moyer) [2123490]
  - io_uring: helper for prep+queuing linked timeouts (Jeff Moyer) [2123490]
  - io_uring: inline io_free_req() (Jeff Moyer) [2123490]
  - io_uring: kill io_put_req_deferred() (Jeff Moyer) [2123490]
  - io_uring: minor refactoring for some tw handlers (Jeff Moyer) [2123490]
  - io_uring: clean poll tw PF_EXITING handling (Jeff Moyer) [2123490]
  - io_uring: optimise io_get_cqe() (Jeff Moyer) [2123490]
  - io_uring: optimise submission left counting (Jeff Moyer) [2123490]
  - io_uring: optimise submission loop invariant (Jeff Moyer) [2123490]
  - io_uring: add helper to return req to cache list (Jeff Moyer) [2123490]
  - io_uring: helper for empty req cache checks (Jeff Moyer) [2123490]
  - io_uring: inline io_flush_cached_reqs (Jeff Moyer) [2123490]
  - io_uring: shrink final link flush (Jeff Moyer) [2123490]
  - io_uring: memcpy CQE from req (Jeff Moyer) [2123490]
  - io_uring: explicitly keep a CQE in io_kiocb (Jeff Moyer) [2123490]
  - io_uring: rename io_sqe_file_register (Jeff Moyer) [2123490]
  - io_uring: deduplicate SCM accounting (Jeff Moyer) [2123490]
  - io_uring: don't pass around fixed index for scm (Jeff Moyer) [2123490]
  - io_uring: refactor __io_sqe_files_scm (Jeff Moyer) [2123490]
  - io_uring: uniform SCM accounting (Jeff Moyer) [2123490]
  - io_uring: don't scm-account for non af_unix sockets (Jeff Moyer) [2123490]
  - io_uring: move finish_wait() outside of loop in cqring_wait() (Jeff Moyer) [2123490]
  - io_uring: refactor io_req_add_compl_list() (Jeff Moyer) [2123490]
  - io_uring: silence io_for_each_link() warning (Jeff Moyer) [2123490]
  - io_uring: partially uninline io_put_task() (Jeff Moyer) [2123490]
  - io_uring: cleanup conditional submit locking (Jeff Moyer) [2123490]
  - io_uring: optimise mutex locking for submit+iopoll (Jeff Moyer) [2123490]
  - io_uring: pre-calculate syscall iopolling decision (Jeff Moyer) [2123490]
  - io_uring: split off IOPOLL argument verifiction (Jeff Moyer) [2123490]
  - io_uring: clean up io_queue_next() (Jeff Moyer) [2123490]
  - io_uring: move poll recycling later in compl flushing (Jeff Moyer) [2123490]
  - io_uring: optimise io_free_batch_list (Jeff Moyer) [2123490]
  - io_uring: refactor io_req_find_next (Jeff Moyer) [2123490]
  - io_uring: remove extra ifs around io_commit_cqring (Jeff Moyer) [2123490]
  - io_uring: small optimisation of tctx_task_work (Jeff Moyer) [2123490]
  - ipvs: add sysctl_run_estimation to support disable estimation (Hangbin Liu) [2174312]
  - netfilter: nf_conntrack: allow early drop of offloaded UDP conns (Florian Westphal) [2183085]
  - net/sched: act_ct: offload UDP NEW connections (Florian Westphal) [2183085]
  - net/sched: act_ct: set ctinfo in meta action depending on ct state (Florian Westphal) [2183085]
  - netfilter: flowtable: cache info of last offload (Florian Westphal) [2183085]
  - netfilter: flowtable: allow unidirectional rules (Florian Westphal) [2183085]
  - netfilter: flowtable: fixup UDP timeout depending on ct state (Florian Westphal) [2183085]
  - ovl: fix use after free in struct ovl_aio_req (Miklos Szeredi) [2176161] {CVE-2023-1252}
  - ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165345] {CVE-2023-0386}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-300.el9]
changelog:
  - remoteproc: imx_rproc: Correct i.MX93 DRAM mapping (Steve Best) [2180764]
  - remoteproc: imx_rproc: Enable attach recovery for i.MX8QM/QXP (Steve Best) [2180764]
  - remoteproc: imx_rproc: Request mbox channel later (Steve Best) [2180764]
  - remoteproc: imx_rproc: Support i.MX8QM (Steve Best) [2180764]
  - remoteproc: imx_rproc: Support kicking Mcore from Linux for i.MX8QXP (Steve Best) [2180764]
  - remoteproc: imx_rproc: Support attaching to i.MX8QXP M4 (Steve Best) [2180764]
  - netdevsim: Fix memory leak of nsim_dev->fa_cookie (Petr Oros) [2181505]
  - netdevsim: fix memory leak in nsim_bus_dev_new() (Petr Oros) [2181505]
  - netdevsim: remove dir in nsim_dev_debugfs_init() when creating ports dir failed (Petr Oros) [2181505]
  - netdevsim: fix memory leak in nsim_drv_probe() when nsim_dev_resources_register() failed (Petr Oros) [2181505]
  - netdevsim: remove redundant variable ret (Petr Oros) [2181505]
  - selftests: netdevsim: Add test cases for route deletion failure (Petr Oros) [2181505]
  - netdevsim: fib: Add debugfs knob to simulate route deletion failure (Petr Oros) [2181505]
  - netdevsim: fib: Fix reference count leak on route deletion failure (Petr Oros) [2181505]
  - netdevsim: rely on XFRM state direction instead of flags (Petr Oros) [2181505]
  - powerpc/64s/radix: Fix RWX mapping with relocated kernel (Avnish Chouhan) [2161680]
  - powerpc/64s/radix: Fix crash with unaligned relocated kernel (Avnish Chouhan) [2161680]
  - mm/filemap: fix page end in filemap_get_read_batch (Nico Pache) [2181263]
  - dt-bindings: clock: imx93: drop TPM1/3 LPIT1/2 entry (Steve Best) [2178965]
  - clk: imx: imx93: invoke imx_register_uart_clocks (Steve Best) [2178965]
  - clk: imx: rename imx_obtain_fixed_clk_hw() to imx_get_clk_hw_by_name() (Steve Best) [2178965]
  - clk: imx93: keep sys ctr clock always on (Steve Best) [2178965]
  - clk: imx: keep hsio bus clock always on (Steve Best) [2178965]
  - clk: imx93: drop tpm1/3, lpit1/2 clk (Steve Best) [2178965]
  - clk: imx93: correct enet clock (Steve Best) [2178965]
  - clk: imx93: unmap anatop base in error handling path (Steve Best) [2178965]
  - clk: imx93: correct the flexspi1 clock setting (Steve Best) [2178965]
  - soc: imx: imx93-src: No need to set device_driver owner (Steve Best) [2180773]
  - soc: imx: imx93-pd: No need to set device_driver owner (Steve Best) [2180773]
  - sched/topology: fix KASAN warning in hop_cmp() (Phil Auld) [RHEL-318]
  - lib/cpumask: update comment for cpumask_local_spread() (Phil Auld) [RHEL-318]
  - sched/topology: Introduce for_each_numa_hop_mask() (Phil Auld) [RHEL-318]
  - sched/topology: Introduce sched_numa_hop_mask() (Phil Auld) [RHEL-318]
  - lib/cpumask: reorganize cpumask_local_spread() logic (Phil Auld) [RHEL-318]
  - cpumask: improve on cpumask_local_spread() locality (Phil Auld) [RHEL-318]
  - sched: add sched_numa_find_nth_cpu() (Phil Auld) [RHEL-318]
  - cpumask: introduce cpumask_nth_and_andnot (Phil Auld) [RHEL-318]
  - lib/find: introduce find_nth_and_andnot_bit (Phil Auld) [RHEL-318]
  - cpumask: add cpumask_nth_{,and,andnot} (Phil Auld) [RHEL-318]
  - lib/bitmap: remove bitmap_ord_to_pos (Phil Auld) [RHEL-318]
  - lib: remove lib/nodemask.c (Phil Auld) [RHEL-318]
  - gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file (Phil Auld) [RHEL-318]
  - powerpc: drop dependency on <asm/machdep.h> in archrandom.h (Phil Auld) [RHEL-318]
  - lib/nodemask: inline next_node_in() and node_random() (Phil Auld) [RHEL-318]
  - lib/bitmap: add tests for find_nth_bit() (Phil Auld) [RHEL-318]
  - lib: add find_nth{,_and,_andnot}_bit() (Phil Auld) [RHEL-318]
  - lib/find_bit: optimize find_next_bit() functions (Phil Auld) [RHEL-318]
  - lib/find_bit: create find_first_zero_bit_le() (Phil Auld) [RHEL-318]
  - lib/find_bit: introduce FIND_FIRST_BIT() macro (Phil Auld) [RHEL-318]
  - lib/bitmap: add bitmap_weight_and() (Phil Auld) [RHEL-318]
  - lib/bitmap: don't call __bitmap_weight() in kernel code (Phil Auld) [RHEL-318]
  - lib/cpumask: move trivial wrappers around find_bit to the header (Phil Auld) [RHEL-318]
  - lib/cpumask: change return types to unsigned where appropriate (Phil Auld) [RHEL-318]
  - cpumask: change return types to bool where appropriate (Phil Auld) [RHEL-318]
  - cpumask: Always inline helpers which use bit manipulation functions (Phil Auld) [RHEL-318]
  - cpumask: use find_first_and_bit() (Phil Auld) [RHEL-318]
  - asm-generic/bitops: Always inline all bit manipulation helpers (Phil Auld) [RHEL-318]
  - lib/bitmap: change type of bitmap_weight to unsigned long (Phil Auld) [RHEL-318]
  - lib/bitmap: change return types to bool where appropriate (Phil Auld) [RHEL-318]
  - arm: align find_bit declarations with generic kernel (Phil Auld) [RHEL-318]
  - nodemask: Fix return values to be unsigned (Phil Auld) [RHEL-318]
  - bitmap: Fix return values to be unsigned (Phil Auld) [RHEL-318]
  - net: thunderbolt: fix memory leak in tbnet_open() (Desnes Nunes) [2181663]
  - usb: dwc3: gadget: Clear ep descriptor last (Desnes Nunes) [2181663]
  - usb: dwc3: exynos: Fix remove() function (Desnes Nunes) [2181663]
  - usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer (Desnes Nunes) [2181663]
  - USB: serial: option: add u-blox LARA-L6 modem (Desnes Nunes) [2181663]
  - USB: serial: option: add u-blox LARA-R6 00B modem (Desnes Nunes) [2181663]
  - USB: serial: option: remove old LARA-R6 PID (Desnes Nunes) [2181663]
  - net: thunderbolt: Fix error handling in tbnet_init() (Desnes Nunes) [2181663]
  - USB: serial: option: add Fibocom FM160 0x0111 composition (Desnes Nunes) [2181663]
  - usb: add NO_LPM quirk for Realforce 87U Keyboard (Desnes Nunes) [2181663]
  - usb: chipidea: fix deadlock in ci_otg_del_timer (Desnes Nunes) [2181663]
  - usb: dwc3: Do not get extcon device when usb-role-switch is used (Desnes Nunes) [2181663]
  - usb: typec: tipd: Prevent uninitialized event{1,2} in IRQ handler (Desnes Nunes) [2181663]
  - usb: typec: mux: Enter safe mode only when pins need to be reconfigured (Desnes Nunes) [2181663]
  - Revert "usb: dwc3: disable USB core PHY management" (Desnes Nunes) [2181663]
  - usb: dwc3: gadget: Return -ESHUTDOWN on ep disable (Desnes Nunes) [2181663]
  - USB: serial: option: add Sierra Wireless EM9191 (Desnes Nunes) [2181663]
  - usb: dwc3: gadget: Don't set IMI for no_interrupt (Desnes Nunes) [2181663]
  - usb: dwc3: gadget: Stop processing more requests on IMI (Desnes Nunes) [2181663]
  - xhci: Remove device endpoints from bandwidth list when freeing the device (Desnes Nunes) [2181663]
  - xhci: Add quirk to reset host back to default state at shutdown (Desnes Nunes) [2181663]
  - usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller (Desnes Nunes) [2181663]
  - usb: typec: ucsi: acpi: Implement resume callback (Desnes Nunes) [2181663]
  - usb: typec: ucsi: Check the connection on resume (Desnes Nunes) [2181663]
  - usb: dwc3: gadget: Don't delay End Transfer on delayed_status (Desnes Nunes) [2181663]
  - usb: dwc3: Don't switch OTG -> peripheral if extcon is present (Desnes Nunes) [2181663]
  - Revert "usb: dwc3: Don't switch OTG -> peripheral if extcon is present" (Desnes Nunes) [2181663]
  - Revert "USB: fixup for merge issue with "usb: dwc3: Don't switch OTG -> peripheral if extcon is present"" (Desnes Nunes) [2181663]
  - USB: omap_udc: Fix spelling mistake: "tranceiver_ctrl" -> "transceiver_ctrl" (Desnes Nunes) [2181663]
  - usb: typec: Replace custom implementation of device_match_fwnode() (Desnes Nunes) [2181663]
  - usb: idmouse: fix an uninit-value in idmouse_open (Desnes Nunes) [2181663]
  - usb: phy: generic: Switch to use dev_err_probe() helper (Desnes Nunes) [2181663]
  - usb: ulpi: use DEFINE_SHOW_ATTRIBUTE to simplify ulpi_regs (Desnes Nunes) [2181663]
  - usb: cdc-wdm: Use skb_put_data() instead of skb_put/memcpy pair (Desnes Nunes) [2181663]
  - usb: typec: fusb302: Switch to use dev_err_probe() helper (Desnes Nunes) [2181663]
  - USB: serial: qcserial: add new usb-id for Dell branded EM7455 (Desnes Nunes) [2181663]
  - media: flexcop-usb: use usb_endpoint_maxp() (Desnes Nunes) [2181663]
  - media: flexcop-usb: clean up URB initialisation (Desnes Nunes) [2181663]
  - media: flexcop-usb: clean up endpoint sanity checks (Desnes Nunes) [2181663]
  - media: usb/dvb-usb-v2: fix repeated words in comments (Desnes Nunes) [2181663]
  - thunderbolt: Use dev_err_probe() (Desnes Nunes) [2181663]
  - thunderbolt: Convert to use sysfs_emit()/sysfs_emit_at() APIs (Desnes Nunes) [2181663]
  - Revert "usb: storage: Add quirk for Samsung Fit flash" (Desnes Nunes) [2181663]
  - usb: dwc3: core: fix some leaks in probe (Desnes Nunes) [2181663]
  - usb: dwc3: core: Enable GUCTL1 bit 10 for fixing termination error after resume bug (Desnes Nunes) [2181663]
  - dt-bindings: usb: snps,dwc3: Add 'snps,resume-hs-terminations' quirk (Desnes Nunes) [2181663]
  - USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM (Desnes Nunes) [2181663]
  - usb: dwc3: core: add gfladj_refclk_lpm_sel quirk (Desnes Nunes) [2181663]
  - dt-bindings: usb: dwc3: Add gfladj-refclk-lpm-sel-quirk (Desnes Nunes) [2181663]
  - usb: dwc3: pci: Add PCIe device ID for USB3 controller on CPU sub-system for Alder Lake P (Desnes Nunes) [2181663]
  - usb: dwc3: pci: Update the macro names for USB PCIe device ID's for Alder Lake platforms (Desnes Nunes) [2181663]
  - usb: dwc3: xilinx: fix usb3 non-wakeup source resume failure (Desnes Nunes) [2181663]
  - usb: dwc3: xilinx: add power management ops support (Desnes Nunes) [2181663]
  - media: uvcvideo: move uvc_format_desc to common header (Desnes Nunes) [2181663]
  - media: v4l: move helper functions for fractions from uvc to v4l2-common (Desnes Nunes) [2181663]
  - dt-bindings: usb: dwc3: add sdm670 compatible (Desnes Nunes) [2181663]
  - usb: dwc3: qcom: drop unneeded compatibles (Desnes Nunes) [2181663]
  - usb: dwc3: gadget: Do not clear ep delayed stop flag during ep disable (Desnes Nunes) [2181663]
  - dt-bindings: usb: dwc2: rockchip: add rockchip,rk3128-usb (Desnes Nunes) [2181663]
  - dt-bindings: usb: qcom,dwc3: Fix SM6115 clocks, irqs (Desnes Nunes) [2181663]
  - usb: dwc2: Remove redundant license text (Desnes Nunes) [2181663]
  - usb: dwc3: Fix typos in gadget.c (Desnes Nunes) [2181663]
  - xhci: remove unused lpm_failed_dev member from struct xhci_hcd (Desnes Nunes) [2181663]
  - xhci: remove unused command member from struct xhci_hcd struct (Desnes Nunes) [2181663]
  - xhci: show fault reason for a failed enable slot command (Desnes Nunes) [2181663]
  - xhci: Don't show warning for reinit on known broken suspend (Desnes Nunes) [2181663]
  - xhci: dbc: Fix memory leak in xhci_alloc_dbc() (Desnes Nunes) [2181663]
  - usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() (Desnes Nunes) [2181663]
  - USB: serial: ftdi_sio: clean up driver prefix (Desnes Nunes) [2181663]
  - USB: serial: ftdi_sio: move driver structure (Desnes Nunes) [2181663]
  - USB: serial: ftdi_sio: clean up attribute visibility logic (Desnes Nunes) [2181663]
  - USB: serial: console: move mutex_unlock() before usb_serial_put() (Desnes Nunes) [2181663]
  - USB: serial: ftdi_sio: convert to use dev_groups (Desnes Nunes) [2181663]
  - USB: serial: ftdi_sio: add support for HP and HA devices (Desnes Nunes) [2181663]
  - USB: serial: ftdi_sio: simplify divisor handling (Desnes Nunes) [2181663]
  - USB: serial: ftdi_sio: assume hi-speed type (Desnes Nunes) [2181663]
  - USB: serial: ftdi_sio: clean up baudrate request (Desnes Nunes) [2181663]
  - USB: serial: ftdi_sio: clean up attribute handling (Desnes Nunes) [2181663]
  - USB: serial: ftdi_sio: clean up modem-status handling (Desnes Nunes) [2181663]
  - USB: serial: ftdi_sio: tighten device-type detection (Desnes Nunes) [2181663]
  - USB: serial: ftdi_sio: rename channel index (Desnes Nunes) [2181663]
  - USB: serial: ftdi_sio: include FT2232D in type string (Desnes Nunes) [2181663]
  - USB: serial: ftdi_sio: rename chip types (Desnes Nunes) [2181663]
  - USB: serial: ftdi_sio: drop redundant chip type comments (Desnes Nunes) [2181663]
  - USB: serial: ftdi_sio: clean up chip type enum (Desnes Nunes) [2181663]
  - USB: serial: ftdi_sio: fix 300 bps rate for SIO (Desnes Nunes) [2181663]
  - usb: typec: intel_pmc_mux: Use the helper acpi_dev_get_memory_resources() (Desnes Nunes) [2181663]
  - usb: misc: usb3503: call clk_disable_unprepare in the error handling (Desnes Nunes) [2181663]
  - usb: chipidea: make configs for glue drivers visible with EXPERT (Desnes Nunes) [2181663]
  - usb: dwc3: gadget: Submit endxfer command if delayed during disconnect (Desnes Nunes) [2181663]
  - usb: dwc3: gadget: Skip waiting for CMDACT cleared during endxfer (Desnes Nunes) [2181663]
  - usb: dwc3: Increase DWC3 controller halt timeout (Desnes Nunes) [2181663]
  - usb: dwc3: Remove DWC3 locking during gadget suspend/resume (Desnes Nunes) [2181663]
  - usb: dwc3: Avoid unmapping USB requests if endxfer is not complete (Desnes Nunes) [2181663]
  - usb: misc: uss720: fix uninitialized variable rlen (Desnes Nunes) [2181663]
  - thunderbolt: debugfs: Fix spelling mistakes in seq_puts text (Desnes Nunes) [2181663]
  - thunderbolt: Add support for ASMedia NVM image format (Desnes Nunes) [2181663]
  - thunderbolt: Move vendor specific NVM handling into nvm.c (Desnes Nunes) [2181663]
  - thunderbolt: Provide tb_retimer_nvm_read() analogous to tb_switch_nvm_read() (Desnes Nunes) [2181663]
  - thunderbolt: Rename and make nvm_read() available for other files (Desnes Nunes) [2181663]
  - thunderbolt: Extend NVM version fields to 32-bits (Desnes Nunes) [2181663]
  - thunderbolt: Allow NVM upgrade of USB4 host routers (Desnes Nunes) [2181663]
  - scsi: uas: Drop DID_TARGET_FAILURE use (Desnes Nunes) [2181663]
  - usb: clean up after dropping driver registration log spam (Desnes Nunes) [2181663]
  - usb: phy: tegra: switch to using devm_gpiod_get() (Desnes Nunes) [2181663]
  - USB: xhci: make xhci_get_endpoint_address static (Desnes Nunes) [2181663]
  - thunderbolt: Add support for receiver lane margining (Desnes Nunes) [2181663]
  - thunderbolt: Add helper to check if CL states are enabled on port (Desnes Nunes) [2181663]
  - thunderbolt: Pass CL state bitmask to tb_port_clx_supported() (Desnes Nunes) [2181663]
  - thunderbolt: Move port CL state functions into correct place in switch.c (Desnes Nunes) [2181663]
  - thunderbolt: Move tb_xdomain_parent() to tb.h (Desnes Nunes) [2181663]
  - USB: hcd-pci: Drop the unused id parameter from usb_hcd_pci_probe() (Desnes Nunes) [2181663]
  - net: thunderbolt: Update module description with mention of USB4 (Desnes Nunes) [2181663]
  - net: thunderbolt: Enable full end-to-end flow control (Desnes Nunes) [2181663]
  - thunderbolt: Add back Intel Falcon Ridge end-to-end flow control workaround (Desnes Nunes) [2181663]
  - thunderbolt: Show link type for XDomain connections too (Desnes Nunes) [2181663]
  - net: thunderbolt: Enable DMA paths only after rings are enabled (Desnes Nunes) [2181663]
  - usb: reduce kernel log spam on driver registration (Desnes Nunes) [2181663]
  - usb: dwc3: gadget: Continue handling EP0 xfercomplete events (Desnes Nunes) [2181663]
  - usb: dwc3: gadget: Synchronize IRQ between soft connect/disconnect (Desnes Nunes) [2181663]
  - usb: dwc3: gadget: Force sending delayed status during soft disconnect (Desnes Nunes) [2181663]
  - usb: dwc3: Do not service EP0 and conndone events if soft disconnected (Desnes Nunes) [2181663]
  - usb: host: xhci-plat: suspend/resume clks for brcm (Desnes Nunes) [2181663]
  - usb: host: xhci-plat: suspend and resume clocks (Desnes Nunes) [2181663]
  - usb: phy: mxs: fix MXS_PHY_TX_CAL45_MIN and MXS_PHY_TX_CAL45_MAX (Desnes Nunes) [2181663]
  - usb: host: Initiate urb ep with udev ep0 (Desnes Nunes) [2181663]
  - usb: ehci: Use endpoint in URB to get maxpacket (Desnes Nunes) [2181663]
  - usb: chipidea: Add support for VBUS control with PHY (Desnes Nunes) [2181663]
  - dt-bindings: usb: Add missing (unevaluated|additional)Properties on child nodes (Desnes Nunes) [2181663]
  - media: uvcvideo: Limit power line control for Sonix Technology (Desnes Nunes) [2181663]
  - media: uvcvideo: Use entity get_cur in uvc_ctrl_set (Desnes Nunes) [2181663]
  - media: uvcvideo: Fix typo 'the the' in comment (Desnes Nunes) [2181663]
  - media: uvcvideo: Use indexed loops in uvc_ctrl_init_ctrl() (Desnes Nunes) [2181663]
  - media: uvcvideo: Fix memory leak in uvc_gpio_parse (Desnes Nunes) [2181663]
  - media: gspca: Fix typo 'the the' in comment (Desnes Nunes) [2181663]
  - thunderbolt: Add support for Intel Meteor Lake (Desnes Nunes) [2181663]
  - thunderbolt: Add comment where Thunderbolt 4 PCI IDs start (Desnes Nunes) [2181663]
  - usb/hcd: Fix dma_map_sg error check (Desnes Nunes) [2181663]
  - usb: move from strlcpy with unused retval to strscpy (Desnes Nunes) [2181663]
  - dt-bindings: usb: renesas, usb3-peri: Document RZ/V2M r9a09g011 support (Desnes Nunes) [2181663]
  - usb: typec: tcpci_rt1711h: Fix CC PHY noise filter of voltage level (Desnes Nunes) [2181663]
  - usb: typec: tcpci: Move function "tcpci_to_typec_cc" to common (Desnes Nunes) [2181663]
  - usb: typec: tcpci_rt1711h: Add compatible id with rt1715 (Desnes Nunes) [2181663]
  - usb: typec: tcpci_rt1711h: Add initial phy setting (Desnes Nunes) [2181663]
  - usb: typec: tcpci_rt1711h: Add regulator support when source vbus (Desnes Nunes) [2181663]
  - usb: typec: tcpci_rt1711h: Fix vendor setting when set vconn (Desnes Nunes) [2181663]
  - dt-bindings usb: typec: rt1711h: Add binding for Richtek RT1711H (Desnes Nunes) [2181663]
  - usb: dwc3: qcom: clean up icc init (Desnes Nunes) [2181663]
  - usb: dwc3: qcom: only parse 'maximum-speed' once (Desnes Nunes) [2181663]
  - usb: common: debug: Check non-standard control requests (Desnes Nunes) [2181663]
  - usb: dwc3: trace: add Start of Frame Number to trace event (Desnes Nunes) [2181663]
  - usb: dwc3: debug: show events parameters in hex (Desnes Nunes) [2181663]
  - usb: dwc3: gadget: conditionally remove requests (Desnes Nunes) [2181663]
  - usb: typec: ucsi: stm32g0: Fix spelling mistake "booloader" -> "bootloader" (Desnes Nunes) [2181663]
  - usb: common: usb-conn-gpio: Simplify some error message (Desnes Nunes) [2181663]
  - block: Add error codes for common PR failures (Maurizio Lombardi) [2160677]
  - nvmet: avoid potential UAF in nvmet_req_complete() (Maurizio Lombardi) [2160677]
  - nvme-tcp: add nvme-tcp pdu size build protection (Maurizio Lombardi) [2160677]
  - nvme-tcp: fix opcode reporting in the timeout handler (Maurizio Lombardi) [2160677]
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for Lexar NM620 (Maurizio Lombardi) [2160677]
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for Netac NV3000 (Maurizio Lombardi) [2160677]
  - nvme-pci: fixing memory leak in probe teardown path (Maurizio Lombardi) [2160677]
  - nvme: fix handling single range discard request (Maurizio Lombardi) [2160677]
  - nvme-fabrics: show well known discovery name (Maurizio Lombardi) [2160677]
  - nvme-tcp: don't access released socket during error recovery (Maurizio Lombardi) [2160677]
  - nvme-auth: fix an error code in nvme_auth_process_dhchap_challenge() (Maurizio Lombardi) [2160677]
  - nvme: bring back auto-removal of deleted namespaces during sequential scan (Maurizio Lombardi) [2160677]
  - nvme: fix sparse warning on effects masking (Maurizio Lombardi) [2160677]
  - nvme-pci: remove iod use_sgls (Maurizio Lombardi) [2160677]
  - nvme-pci: fix freeing single sgl (Maurizio Lombardi) [2160677]
  - nvme: mask CSE effects for security receive (Maurizio Lombardi) [2160677]
  - nvme: always initialize known command effects (Maurizio Lombardi) [2160677]
  - nvmet: for nvme admin set_features cmd, call nvmet_check_data_len_lte() (Maurizio Lombardi) [2160677]
  - nvme-tcp: add additional info for nvme_tcp_timeout log (Maurizio Lombardi) [2160677]
  - nvme: add nvme_opcode_str function for all nvme cmd types (Maurizio Lombardi) [2160677]
  - nvme: remove nvme_execute_passthru_rq (Maurizio Lombardi) [2160677]
  - nvme-pci: place descriptor addresses in iod (Maurizio Lombardi) [2160677]
  - nvme-pci: use mapped entries for sgl decision (Maurizio Lombardi) [2160677]
  - nvme-pci: remove SGL segment descriptors (Maurizio Lombardi) [2160677]
  - nvme-auth: don't use NVMe status codes (Maurizio Lombardi) [2160677]
  - nvme-fabrics: clarify AUTHREQ result handling (Maurizio Lombardi) [2160677]
  - nvme-pci: add bogus ID quirk for ADATA SX6000PNP (Maurizio Lombardi) [2160677]
  - nvme-auth: mark nvme_auth_wq static (Maurizio Lombardi) [2160677]
  - nvme-auth: use workqueue dedicated to authentication (Maurizio Lombardi) [2160677]
  - nvme: clear the request_queue pointers on failure in nvme_alloc_io_tag_set (Maurizio Lombardi) [2160677]
  - nvme: clear the request_queue pointers on failure in nvme_alloc_admin_tag_set (Maurizio Lombardi) [2160677]
  - nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association (Maurizio Lombardi) [2160677]
  - nvme: fix passthrough csi check (Maurizio Lombardi) [2160677]
  - nvme-pci: fix timeout request state check (Maurizio Lombardi) [2160677]
  - nvme-apple: only reset the controller when RTKit is running (Maurizio Lombardi) [2160677]
  - nvme-apple: reset controller during shutdown (Maurizio Lombardi) [2160677]
  - nvme-pci: add NVME_QUIRK_IDENTIFY_CNS quirk to Apple T2 controllers (Maurizio Lombardi) [2160677]
  - nvme-apple: add NVME_QUIRK_IDENTIFY_CNS quirk to fix regression (Maurizio Lombardi) [2160677]
  - nvme-auth: fix smatch warning complaints (Maurizio Lombardi) [2160677]
  - nvme: also return I/O command effects from nvme_command_effects (Maurizio Lombardi) [2160677]
  - nvmet: don't defer passthrough commands with trivial effects to the workqueue (Maurizio Lombardi) [2160677]
  - nvmet: set the LBCC bit for commands that modify data (Maurizio Lombardi) [2160677]
  - nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it (Maurizio Lombardi) [2160677]
  - nvme-pci: update sqsize when adjusting the queue depth (Maurizio Lombardi) [2160677]
  - nvme: fix setting the queue depth in nvme_alloc_io_tag_set (Maurizio Lombardi) [2160677]
  - nvme-pci: use the tagset alloc/free helpers (Maurizio Lombardi) [2160677]
  - nvme-pci: fix page size checks (Maurizio Lombardi) [2160677]
  - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [2160677]
  - nvme-pci: fix doorbell buffer value endianness (Maurizio Lombardi) [2160677]
  - nvme: Convert NVMe errors to PR errors (Maurizio Lombardi) [2160677]
  - nvmet: don't open-code NVME_NS_ATTR_RO enumeration (Maurizio Lombardi) [2160677]
  - nvme: add the Apple shared tag workaround to nvme_alloc_io_tag_set (Maurizio Lombardi) [2160677]
  - nvme: only set reserved_tags in nvme_alloc_io_tag_set for fabrics controllers (Maurizio Lombardi) [2160677]
  - nvme: consolidate setting the tagset flags (Maurizio Lombardi) [2160677]
  - nvme-pci: split out a nvme_pci_ctrl_is_dead helper (Maurizio Lombardi) [2160677]
  - nvme-pci: return early on ctrl state mismatch in nvme_reset_work (Maurizio Lombardi) [2160677]
  - nvme-pci: rename nvme_disable_io_queues (Maurizio Lombardi) [2160677]
  - nvme-pci: cleanup nvme_suspend_queue (Maurizio Lombardi) [2160677]
  - nvme-pci: remove nvme_pci_disable (Maurizio Lombardi) [2160677]
  - nvme-pci: remove nvme_disable_admin_queue (Maurizio Lombardi) [2160677]
  - nvme: merge nvme_shutdown_ctrl into nvme_disable_ctrl (Maurizio Lombardi) [2160677]
  - nvme: use nvme_wait_ready in nvme_shutdown_ctrl (Maurizio Lombardi) [2160677]
  - nvme-apple: fix controller shutdown in apple_nvme_disable (Maurizio Lombardi) [2160677]
  - nvme-fc: move common code into helper (Maurizio Lombardi) [2160677]
  - nvme-fc: avoid null pointer dereference (Maurizio Lombardi) [2160677]
  - nvme-multipath: support io stats on the mpath device (Maurizio Lombardi) [2160677]
  - nvme: introduce nvme_start_request (Maurizio Lombardi) [2160677]
  - nvme: use kstrtobool() instead of strtobool() (Maurizio Lombardi) [2160677]
  - nvmet: expose firmware revision to configfs (Maurizio Lombardi) [2160677]
  - nvmet: expose IEEE OUI to configfs (Maurizio Lombardi) [2160677]
  - nvme: rename the queue quiescing helpers (Maurizio Lombardi) [2160677]
  - nvme: avoid fallback to sequential scan due to transient issues (Maurizio Lombardi) [2160677]
  - nvme-auth: have dhchap_auth_work wait for queues auth to complete (Maurizio Lombardi) [2160677]
  - nvme-auth: remove redundant auth_work flush (Maurizio Lombardi) [2160677]
  - nvme-auth: convert dhchap_auth_list to an array (Maurizio Lombardi) [2160677]
  - nvme-auth: check chap ctrl_key once constructed (Maurizio Lombardi) [2160677]
  - nvme-auth: no need to reset chap contexts on re-authentication (Maurizio Lombardi) [2160677]
  - nvme-auth: remove redundant deallocations (Maurizio Lombardi) [2160677]
  - nvme-auth: clear sensitive info right after authentication completes (Maurizio Lombardi) [2160677]
  - nvme-auth: guarantee dhchap buffers under memory pressure (Maurizio Lombardi) [2160677]
  - nvme-auth: don't keep long lived 4k dhchap buffer (Maurizio Lombardi) [2160677]
  - nvme-auth: remove redundant if statement (Maurizio Lombardi) [2160677]
  - nvme-auth: don't override ctrl keys before validation (Maurizio Lombardi) [2160677]
  - nvme-auth: don't ignore key generation failures when initializing ctrl keys (Maurizio Lombardi) [2160677]
  - nvme-auth: remove redundant buffer deallocations (Maurizio Lombardi) [2160677]
  - nvme-auth: don't re-authenticate if the controller is not LIVE (Maurizio Lombardi) [2160677]
  - nvme-auth: remove symbol export from nvme_auth_reset (Maurizio Lombardi) [2160677]
  - nvme-auth: rename authentication work elements (Maurizio Lombardi) [2160677]
  - nvme-auth: rename __nvme_auth_[reset|free] to nvme_auth[reset|free]_dhchap (Maurizio Lombardi) [2160677]
  - nvme: implement the DEAC bit for the Write Zeroes command (Maurizio Lombardi) [2160677]
  - nvme-fc: improve memory usage in nvme_fc_rcv_ls_req() (Maurizio Lombardi) [2160677]
  - nvmet: only allocate a single slab for bvecs (Maurizio Lombardi) [2160677]
  - nvmet: force reconnect when number of queue changes (Maurizio Lombardi) [2160677]
  - nvmet: use try_cmpxchg in nvmet_update_sq_head (Maurizio Lombardi) [2160677]
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for Netac NV7000 (Maurizio Lombardi) [2160677]
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for Micron Nitro (Maurizio Lombardi) [2160677]
  - nvme: quiet user passthrough command errors (Maurizio Lombardi) [2160677]
  - nvme-multipath: set queue dma alignment to 3 (Maurizio Lombardi) [2160677]
  - nvme-tcp: replace sg_init_marker() with sg_init_table() (Maurizio Lombardi) [2160677]
  - nvme-hwmon: kmalloc the NVME SMART log buffer (Maurizio Lombardi) [2160677]
  - nvme-hwmon: consistently ignore errors from nvme_hwmon_init (Maurizio Lombardi) [2160677]
  - nvme-apple: don't limit DMA segement size (Maurizio Lombardi) [2160677]
  - nvme-pci: disable write zeroes on various Kingston SSD (Maurizio Lombardi) [2160677]
  - nvme-pci: avoid the deepest sleep state on ZHITAI TiPro5000 SSDs (Maurizio Lombardi) [2160677]
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for Lexar NM760 (Maurizio Lombardi) [2160677]
  - nvme: Use blk_rq_map_user_io helper (Maurizio Lombardi) [2160677]
  - nvmet: don't look at the request_queue in nvmet_bdev_set_limits (Maurizio Lombardi) [2160677]
  - nvmet: don't look at the request_queue in nvmet_bdev_zone_mgmt_emulate_all (Maurizio Lombardi) [2160677]
  - nvmet: add helpers to set the result field for connect commands (Maurizio Lombardi) [2160677]
  - nvme: improve the NVME_CONNECT_AUTHREQ* definitions (Maurizio Lombardi) [2160677]
  - nvmet-tcp: handle ICReq PDU received in NVMET_TCP_Q_LIVE state (Maurizio Lombardi) [2160677]
  - nvme-pci: report the actual number of tagset maps (Maurizio Lombardi) [2160677]
  - nvme: ensure subsystem reset is single threaded (Maurizio Lombardi) [2160677]
  - nvme: restrict management ioctls to admin (Maurizio Lombardi) [2160677]
  - nvme: copy firmware_rev on each init (Maurizio Lombardi) [2160677]
  - nvme: handle effects after freeing the request (Maurizio Lombardi) [2160677]
  - nvme-tcp: print actual source IP address through sysfs "address" attr (Maurizio Lombardi) [2160677]
  - nvme-pci: move iod dma_len fill gaps (Maurizio Lombardi) [2160677]
  - nvme-pci: iod npages fits in s8 (Maurizio Lombardi) [2160677]
  - nvme-pci: iod's 'aborted' is a bool (Maurizio Lombardi) [2160677]
  - nvme-pci: remove nvme_queue from nvme_iod (Maurizio Lombardi) [2160677]
  - nvme: consider also host_iface when checking ip options (Maurizio Lombardi) [2160677]
  - nvmet: avoid unnecessary flush bio (Maurizio Lombardi) [2160677]
  - nvmet-auth: remove redundant parameters req (Maurizio Lombardi) [2160677]
  - nvmet-auth: clean up with done_kfree (Maurizio Lombardi) [2160677]
  - nvme-auth: remove the redundant req->cqe->result.u16 assignment operation (Maurizio Lombardi) [2160677]
  - nvme: move from strlcpy with unused retval to strscpy (Maurizio Lombardi) [2160677]
  - nvme: add comment for unaligned "fake" nqn (Maurizio Lombardi) [2160677]
  - nvme-pci: disable Write Zeroes on Phison E3C/E4C (Maurizio Lombardi) [2160677]
  - nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices (Maurizio Lombardi) [2160677]
  - locking/rwsem: Disable preemption in all down_write*() and up_write() code paths (Joel Savitz) [2176147]
  - locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Joel Savitz) [2176147]
  - locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Joel Savitz) [2176147]
  - rtmutex: Ensure that the top waiter is always woken up (Joel Savitz) [2176147]
  - locking/lockdep: Print more debug information - report name and key when look_up_lock_class() got confused (Joel Savitz) [2176147]
  - locking: Fix qspinlock/x86 inline asm error (Joel Savitz) [2176147]
  - locking: Add __lockfunc to slow path functions (Joel Savitz) [2176147]
  - locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Joel Savitz) [2176147]
  - kernel/lockdep: move lockdep sysctls to its own file (Joel Savitz) [2176147]
  - locking/qrwlock: Change "queue rwlock" to "queued rwlock" (Joel Savitz) [2176147]
  - locking/mutex: Make contention tracepoints more consistent wrt adaptive spinning (Joel Savitz) [2176147]
  - locking: Apply contention tracepoints in the slow path (Joel Savitz) [2176147]
  - locking/rwsem: Always try to wake waiters in out_nolock path (Joel Savitz) [2176147]
  - locking/rwsem: No need to check for handoff bit if wait queue empty (Joel Savitz) [2176147]
  - lockdep: Use memset_startat() helper in reinit_class() (Joel Savitz) [2176147]
  - locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Joel Savitz) [2176147]
  - locking/rwsem: Make handoff bit handling more consistent (Joel Savitz) [2176147]
  - Revert "locking/rwsem: Conditionally wake waiters in reader/writer slowpaths" (Joel Savitz) [2176147]
  - futex: Fix futex_waitv() hrtimer debug object leak on kcalloc error (Joel Savitz) [2176147]
  - futex: Remove a PREEMPT_RT_FULL reference. (Joel Savitz) [2176147]
  - futex: Fix additional regressions (Joel Savitz) [2176147]
  - futex: Fix sparc32/m68k/nds32 build regression (Joel Savitz) [2176147]
  - futex: Ensure futex_atomic_cmpxchg_inatomic() is present (Joel Savitz) [2176147]
  - futex: Remove futex_cmpxchg detection (Joel Savitz) [2176147]
  - dm: fix __send_duplicate_bios() to always allow for splitting IO (Benjamin Marzinski) [2184420]
  - dm: fix improper splitting for abnormal bios (Benjamin Marzinski) [2184420]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-301.el9]
changelog:
  - kernel.spec: gcov: make gcov subpackages per variant (Jan Stancek) [2180784]
  - block: don't set GD_NEED_PART_SCAN if scan partition failed (Ming Lei) [2179915]
  - net: ethtool: fix __ethtool_dev_mm_supported() implementation (Ivan Vecera) [2175237]
  - ethtool: pse-pd: Fix double word in comments (Ivan Vecera) [2175237]
  - netlink-specs: add rx-push to ethtool family (Ivan Vecera) [2175237]
  - net: ethtool: extend ringparam set/get APIs for rx_push (Ivan Vecera) [2175237]
  - ethtool: mm: fix get_mm() return code not propagating to user space (Ivan Vecera) [2175237]
  - netlink: specs: add partial specification for ethtool (Ivan Vecera) [2175237]
  - Documentation: networking: correct spelling (Ivan Vecera) [2175237]
  - ethtool: netlink: convert commands to common SET (Ivan Vecera) [2175237]
  - ethtool: netlink: handle SET intro/outro in the common code (Ivan Vecera) [2175237]
  - net: ethtool: provide shims for stats aggregation helpers when CONFIG_ETHTOOL_NETLINK=n (Ivan Vecera) [2175237]
  - net: ethtool: fix NULL pointer dereference in pause_prepare_data() (Ivan Vecera) [2175237]
  - net: ethtool: fix NULL pointer dereference in stats_prepare_data() (Ivan Vecera) [2175237]
  - ethtool: Add and use ethnl_update_bool. (Ivan Vecera) [2175237]
  - net: ethtool: add helpers for MM fragment size translation (Ivan Vecera) [2175237]
  - net: ethtool: add helpers for aggregate statistics (Ivan Vecera) [2175237]
  - docs: ethtool: document ETHTOOL_A_STATS_SRC and ETHTOOL_A_PAUSE_STATS_SRC (Ivan Vecera) [2175237]
  - net: ethtool: netlink: retrieve stats from multiple sources (eMAC, pMAC) (Ivan Vecera) [2175237]
  - docs: ethtool-netlink: document interface for MAC Merge layer (Ivan Vecera) [2175237]
  - net: ethtool: add support for MAC Merge layer (Ivan Vecera) [2175237]
  - plca.c: fix obvious mistake in checking retval (Ivan Vecera) [2175237]
  - ethtool: add tx aggregation parameters (Ivan Vecera) [2175237]
  - ethtool: add netlink attr in rss get reply only if value is not null (Ivan Vecera) [2175237]
  - net/ethtool: add netlink interface for the PLCA RS (Ivan Vecera) [2175237]
  - ethtool: Replace 0-length array with flexible array (Ivan Vecera) [2175237]
  - net/ethtool/ioctl: split ethtool_get_phy_stats into multiple helpers (Ivan Vecera) [2175237]
  - net/ethtool/ioctl: remove if n_stats checks from ethtool_get_phy_stats (Ivan Vecera) [2175237]
  - net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats (Ivan Vecera) [2175237]
  - ethtool: add netlink based get rss support (Ivan Vecera) [2175237]
  - ethtool: avoiding integer overflow in ethtool_phys_id() (Ivan Vecera) [2175237]
  - ethtool: doc: clarify what drivers can implement in their get_drvinfo() (Ivan Vecera) [2175237]
  - ethtool: ethtool_get_drvinfo: populate drvinfo fields even if callback exits (Ivan Vecera) [2175237]
  - ethtool: Fail number of channels change when it conflicts with rxnfc (Ivan Vecera) [2175237]
  - ethtool: linkstate: add a statistic for PHY down events (Ivan Vecera) [2175237]
  - ethtool: Add support for 800Gbps link modes (Ivan Vecera) [2175237]
  - ethtool: pse-pd: fix null-deref on genl_info in dump (Ivan Vecera) [2175237]
  - eth: pse: add missing static inlines (Ivan Vecera) [2175237]
  - ethtool: add interface to interact with Ethernet Power Equipment (Ivan Vecera) [2175237]
  - net: mdiobus: search for PSE nodes by parsing PHY nodes. (Ivan Vecera) [2175237]
  - net: mdiobus: fwnode_mdiobus_register_phy() rework error handling (Ivan Vecera) [2175237]
  - redhat: configs: Add config for PSE_CONTROLLER (Ivan Vecera) [2175237]
  - net: add framework to support Ethernet PSE and PDs devices (Ivan Vecera) [2175237]
  - ethtool: tunnels: check the return value of nla_nest_start() (Ivan Vecera) [2175237]
  - ethtool: move from strlcpy with unused retval to strscpy (Ivan Vecera) [2175237]
  - net: delete extra space and tab in blank line (Ivan Vecera) [2175237]
  - treewide: uapi: Replace zero-length arrays with flexible-array members (Ivan Vecera) [2175237]
  - ethtool: Fix and simplify ethtool_convert_link_mode_to_legacy_u32() (Ivan Vecera) [2175237]
  - net: ethtool: move checks before rtnl_lock() in ethnl_set_rings (Ivan Vecera) [2175237]
  - net: ethtool: extend ringparam set/get APIs for tx_push (Ivan Vecera) [2175237]
  - ethtool: add support to set/get completion queue event size (Ivan Vecera) [2175237]
  - ethtool: stats: Use struct_group() to clear all stats at once (Ivan Vecera) [2175237]
  - net: convert users of bitmap_foo() to linkmode_foo() (Ivan Vecera) [2175237]
  - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (Ronnie Sahlberg) [2182524]
  - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (Ronnie Sahlberg) [2182524]
  - cifs: update internal module number (Ronnie Sahlberg) [2182524]
  - cifs: fix double free on failed kerberos auth (Ronnie Sahlberg) [2182524]
  - cifs: fix interface count calculation during refresh (Ronnie Sahlberg) [2182524]
  - cifs: fix memory leaks in session setup (Ronnie Sahlberg) [2182524]
  - smb3: interface count displayed incorrectly (Ronnie Sahlberg) [2182524]
  - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Ronnie Sahlberg) [2182524]
  - cifs: Fix xid leak in cifs_ses_add_channel() (Ronnie Sahlberg) [2182524]
  - cifs: Fix xid leak in cifs_flock() (Ronnie Sahlberg) [2182524]
  - cifs: Fix xid leak in cifs_create() (Ronnie Sahlberg) [2182524]
  - cifs: Fix xid leak in cifs_copy_file_range() (Ronnie Sahlberg) [2182524]
  - smb3: improve SMB3 change notification support (Ronnie Sahlberg) [2182524]
  - cifs: lease key is uninitialized in two additional functions when smb1 (Ronnie Sahlberg) [2182524]
  - cifs: lease key is uninitialized in smb1 paths (Ronnie Sahlberg) [2182524]
  - cifs: fix double-fault crash during ntlmssp (Ronnie Sahlberg) [2182524]
  - cifs: fix mount on old smb servers (Ronnie Sahlberg) [2182524]
  - cifs: use ALIGN() and round_up() macros (Ronnie Sahlberg) [2182524]
  - cifs: prevent copying past input buffer boundaries (Ronnie Sahlberg) [2182524]
  - cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message (Ronnie Sahlberg) [2182524]
  - cifs: destage dirty pages before re-reading them for cache=none (Ronnie Sahlberg) [2182524]
  - cifs: return correct error in ->calc_signature() (Ronnie Sahlberg) [2182524]
  - smb3: rename encryption/decryption TFMs (Ronnie Sahlberg) [2182524]
  - cifs: replace kfree() with kfree_sensitive() for sensitive data (Ronnie Sahlberg) [2182524]
  - cifs: remove initialization value (Ronnie Sahlberg) [2182524]
  - cifs: Replace a couple of one-element arrays with flexible-array members (Ronnie Sahlberg) [2182524]
  - smb3: add dynamic trace points for tree disconnect (Ronnie Sahlberg) [2182524]
  - cifs: misc: fix spelling typo in comment (Ronnie Sahlberg) [2182524]
  - cifs: update internal module number (Ronnie Sahlberg) [2182524]
  - cifs: Fix memory leak on the deferred close (Ronnie Sahlberg) [2182524]
  - SMB3: fix lease break timeout when multiple deferred close handles for the same file. (Ronnie Sahlberg) [2182524]
  - smb3: lower default deferred close timeout to address perf regression (Ronnie Sahlberg) [2182524]
  - smb3: allow deferred close timeout to be configurable (Ronnie Sahlberg) [2182524]
  - cifs: update internal module number (Ronnie Sahlberg) [2182524]
  - cifs: alloc_mid function should be marked as static (Ronnie Sahlberg) [2182524]
  - cifs: remove "cifs_" prefix from init/destroy mids functions (Ronnie Sahlberg) [2182524]
  - cifs: remove useless DeleteMidQEntry() (Ronnie Sahlberg) [2182524]
  - cifs: fix wrong unlock before return from cifs_tree_connect() (Ronnie Sahlberg) [2182524]
  - Documentation: networking: TC queue based filtering (Ivan Vecera) [2178209]
  - act_skbedit: skbedit queue mapping for receive queue (Ivan Vecera) [2178209]
  - wifi: iwlwifi: mvm: protect TXQ list manipulation (Jose Ignacio Tornos Martinez) [2183490]
  - wifi: iwlwifi: mvm: fix mvmtxq->stopped handling (Jose Ignacio Tornos Martinez) [2183490]
  - smb3: clarify multichannel warning (Ronnie Sahlberg) [2180669]
  - smb3: do not log confusing message when server returns no network interfaces (Ronnie Sahlberg) [2180669]
  - cifs: do not query ifaces on smb1 mounts (Ronnie Sahlberg) [2180669]
  - cifs: periodically query network interfaces from server (Ronnie Sahlberg) [2180669]
  - smb3: workaround negprot bug in some Samba servers (Ronnie Sahlberg) [2180669]
  - smb3: use netname when available on secondary channels (Ronnie Sahlberg) [2180669]
  - smb3: fix empty netname context on secondary channels (Ronnie Sahlberg) [2180669]
  - cifs: populate empty hostnames for extra channels (Ronnie Sahlberg) [2180669]
  - redhat/kernel.spec.template: fix installonlypkg for meta package (Jan Stancek)
  - s390/dump: save IPL CPU registers once DAT is available (Chris von Recklinghausen) [2185692]
  - gen_compile_commands: handle multiple lines per .mod file (Joel Slebodnick) [2160559]
  - scripts/nsdeps: adjust to the format change of *.mod files (Joel Slebodnick) [2160559]
  - kbuild: avoid regex RS for POSIX awk (Joel Slebodnick) [2160559]
  - kbuild: make *.mod rule robust against too long argument error (Joel Slebodnick) [2160559]
  - kbuild: make built-in.a rule robust against too long argument error (Joel Slebodnick) [2160559]
  - kbuild: read *.mod to get objects passed to $(LD) or $(AR) (Joel Slebodnick) [2160559]
  - kbuild: make *.mod not depend on *.o (Joel Slebodnick) [2160559]
  - kbuild: get rid of duplication in *.mod files (Joel Slebodnick) [2160559]
  - kbuild: split the second line of *.mod into *.usyms (Joel Slebodnick) [2160559]
  - kbuild: reuse real-search to simplify cmd_mod (Joel Slebodnick) [2160559]
  - kbuild: Fixup the IBT kbuild changes (Joel Slebodnick) [2160559]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-302.el9]
changelog:
  - blk-mq: directly poll requests (Ming Lei) [2186507]
  - inet: control sockets should not use current thread task_frag (Guillaume Nault) [2183213]
  - net: simplify sk_page_frag (Guillaume Nault) [2183213]
  - Treewide: Stop corrupting socket's task_frag (Guillaume Nault) [2183213]
  - net: Introduce sk_use_task_frag in struct sock. (Guillaume Nault) [2183213]
  - PCI: Fix use-after-free in pci_bus_release_domain_nr() (Myron Stowe) [2184109]
  - powerpc/pseries/vas: Ignore VAS update for DLPAR if copy/paste is not enabled (Mamatha Inamdar) [2185505]
  - nfs42: do not fail with EIO if ssc returns NFS4ERR_OFFLOAD_DENIED (Benjamin Coddington) [2170423]
  - cnic: don't pass bogus GFP_ flags to dma_alloc_coherent (Nilesh Javali) [2164967]
  - cnic: Use the bitmap API to allocate bitmaps (Nilesh Javali) [2164967]
  - arm64/sve: Add Perf extensions documentation (Mark Salter) [2167398]
  - arm64: asm/perf_regs.h: Avoid C++-style comment in UAPI header (Mark Salter) [2167398]
  - perf: arm64: Add SVE vector granule register to user regs (Mark Salter) [2167398]
  - arm64/cpufeature: Fix field sign for DIT hwcap detection (Mark Salter) [2167398]
  - arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning (Mark Salter) [2167398]
  - arm64/sysreg: Fix errors in 32 bit enumeration values (Mark Salter) [2167398]
  - KVM: arm64: vgic: Add Apple M2 cpus to the list of broken SEIS implementations (Mark Salter) [2167398]
  - tools headers arm64: Sync arm64's cputype.h with the kernel sources (Mark Salter) [2167398]
  - tools headers arm64: Sync arm64's cputype.h with the kernel sources (Mark Salter) [2167398]
  - tools headers arm64: Sync arm64's cputype.h with the kernel sources (Mark Salter) [2167398]
  - tools headers arm64: Sync arm64's cputype.h with the kernel sources (Mark Salter) [2167398]
  - perf: arm_spe: Use feature numbering for PMSEVFR_EL1 defines (Mark Salter) [2167398]
  - redhat/configs: enable ARM64_ERRATUM_2645198 (Mark Salter) [2167398]
  - arm64: errata: Workaround possible Cortex-A715 [ESR|FAR]_ELx corruption (Mark Salter) [2167398]
  - arm64:uprobe fix the uprobe SWBP_INSN in big-endian (Mark Salter) [2167398]
  - arm64: insn: always inline hint generation (Mark Salter) [2167398]
  - arm64: insn: simplify insn group identification (Mark Salter) [2167398]
  - arm64: insn: always inline predicates (Mark Salter) [2167398]
  - arm64: insn: remove aarch64_insn_gen_prefetch() (Mark Salter) [2167398]
  - arm64: alternatives: make apply_alternatives_vdso() static (Mark Salter) [2167398]
  - arm64: make is_ttbrX_addr() noinstr-safe (Mark Salter) [2167398]
  - arm64: atomics: lse: remove stale dependency on JUMP_LABEL (Mark Salter) [2167398]
  - arm64/asm: Remove unused enable_da macro (Mark Salter) [2167398]
  - clocksource/drivers/arm_arch_timer: Use kstrtobool() instead of strtobool() (Mark Salter) [2167398]
  - arm64: move on_thread_stack() to <asm/stacktrace.h> (Mark Salter) [2167398]
  - arm64: remove current_top_of_stack() (Mark Salter) [2167398]
  - arm64/sysreg: Remove duplicate definitions from asm/sysreg.h (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_DFR1_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_DFR0_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_AFR0_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_MMFR5_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert MVFR2_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert MVFR1_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert MVFR0_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_PFR2_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_PFR1_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_PFR0_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_ISAR6_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_ISAR5_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_ISAR4_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_ISAR3_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_ISAR2_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_ISAR1_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_ISAR0_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_MMFR4_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_MMFR3_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_MMFR2_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_MMFR1_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_MMFR0_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Extend the maximum width of a register and symbol name (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming for MVFR2_EL1 (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming for MVFR1_EL1 (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming for MVFR0_EL1 (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming for ID_DFR1_EL1 (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming for ID_DFR0_EL1 (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming for ID_PFR2_EL1 (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming for ID_PFR1_EL1 (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming for ID_PFR0_EL1 (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming for ID_ISAR6_EL1 (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming for ID_ISAR5_EL1 (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming for ID_ISAR4_EL1 (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming for ID_ISAR0_EL1 (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming for ID_MMFR5_EL1 (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming for ID_MMFR4_EL1 (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming for ID_MMFR0_EL1 (Mark Salter) [2167398]
  - arm64: booting: Require placement within 48-bit addressable memory (Mark Salter) [2167398]
  - arm64: mm: kfence: only handle translation faults (Mark Salter) [2167398]
  - arm64/mm: Simplify and document pte_to_phys() for 52 bit addresses (Mark Salter) [2167398]
  - arm64: armv8_deprecated: fix unused-function error (Mark Salter) [2167398]
  - arm64: armv8_deprecated: rework deprected instruction handling (Mark Salter) [2167398]
  - arm64: armv8_deprecated: move aarch32 helper earlier (Mark Salter) [2167398]
  - arm64: armv8_deprecated move emulation functions (Mark Salter) [2167398]
  - arm64: armv8_deprecated: fold ops into insn_emulation (Mark Salter) [2167398]
  - arm64: rework EL0 MRS emulation (Mark Salter) [2167398]
  - arm64: factor insn read out of call_undef_hook() (Mark Salter) [2167398]
  - arm64: factor out EL1 SSBS emulation hook (Mark Salter) [2167398]
  - arm64: split EL0/EL1 UNDEF handlers (Mark Salter) [2167398]
  - arm64: allow kprobes on EL0 handlers (Mark Salter) [2167398]
  - arm64: Add Cortex-715 CPU part definition (Mark Salter) [2167398]
  - arm64/hwcap: Add support for SVE 2.1 (Mark Salter) [2167398]
  - arm64/hwcap: Add support for FEAT_RPRFM (Mark Salter) [2167398]
  - arm64/hwcap: Add support for FEAT_CSSC (Mark Salter) [2167398]
  - arm64: Enable data independent timing (DIT) in the kernel (Mark Salter) [2167398]
  - arm64/fpsimd: Make kernel_neon_ API _GPL (Mark Salter) [2167398]
  - arm64: alternative: constify alternative_has_feature_* argument (Mark Salter) [2167398]
  - arm64: jump_label: mark arguments as const to satisfy asm constraints (Mark Salter) [2167398]
  - clocksource/drivers/arm_arch_timer: Fix XGene-1 TVAL register math error (Mark Salter) [2167398]
  - arm64: efi: Fix handling of misaligned runtime regions and drop warning (Mark Salter) [2167398]
  - arm64: cpufeature: Fix the visibility of compat hwcaps (Mark Salter) [2167398]
  - arm64: entry: avoid kprobe recursion (Mark Salter) [2167398]
  - clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value (Mark Salter) [2167398]
  - clocksource/drivers/arm_arch_timer: Fix handling of ARM erratum 858921 (Mark Salter) [2167398]
  - redhat/configs: Enable CONFIG_ARM64_ERRATUM_2441007 (Mark Salter) [2167398]
  - arm64: errata: Add Cortex-A55 to the repeat tlbi list (Mark Salter) [2167398]
  - arm64/sysreg: Fix typo in SCTR_EL1.SPINTMASK (Mark Salter) [2167398]
  - arm64: alternatives: Use vdso/bits.h instead of linux/bits.h (Mark Salter) [2167398]
  - arm64: uaccess: simplify uaccess_mask_ptr() (Mark Salter) [2167398]
  - arm64: support huge vmalloc mappings (Mark Salter) [2167398]
  - arm64: spectre: increase parameters that can be used to turn off bhb mitigation individually (Mark Salter) [2167398]
  - arm64: run softirqs on the per-CPU IRQ stack (Mark Salter) [2167398]
  - arm64: vdso: use SYS_CNTVCTSS_EL0 for gettimeofday (Mark Salter) [2167398]
  - arm64: alternative: patch alternatives in the vDSO (Mark Salter) [2167398]
  - arm64: module: move find_section to header (Mark Salter) [2167398]
  - arm64: module: Remove unused plt_entry_is_initialized() (Mark Salter) [2167398]
  - arm64: module: Make plt_equals_entry() static (Mark Salter) [2167398]
  - arm64: fix the build with binutils 2.27 (Mark Salter) [2167398]
  - arm64: avoid BUILD_BUG_ON() in alternative-macros (Mark Salter) [2167398]
  - arm64: alternatives: add shared NOP callback (Mark Salter) [2167398]
  - arm64: alternatives: add alternative_has_feature_*() (Mark Salter) [2167398]
  - arm64: alternatives: have callbacks take a cap (Mark Salter) [2167398]
  - arm64: alternatives: make alt_region const (Mark Salter) [2167398]
  - arm64: alternatives: hoist print out of __apply_alternatives() (Mark Salter) [2167398]
  - arm64: alternatives: proton-pack: prepare for cap changes (Mark Salter) [2167398]
  - arm64: alternatives: kvm: prepare for cap changes (Mark Salter) [2167398]
  - arm64: cpufeature: make cpus_have_cap() noinstr-safe (Mark Salter) [2167398]
  - arm64/ptrace: Support access to TPIDR2_EL0 (Mark Salter) [2167398]
  - arm64/sysreg: Fix a few missed conversions (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_AA64AFRn_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_AA64DFR1_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_AA64FDR0_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Use feature numbering for PMU and SPE revisions (Mark Salter) [2167398]
  - arm64/sysreg: Add _EL1 into ID_AA64DFR0_EL1 definition names (Mark Salter) [2167398]
  - arm64/sysreg: Align field names in ID_AA64DFR0_EL1 with architecture (Mark Salter) [2167398]
  - arm64/sysreg: Add defintion for ALLINT (Mark Salter) [2167398]
  - arm64/sysreg: Convert SCXTNUM_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert TIPDR_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_AA64PFR1_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_AA64PFR0_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_AA64MMFR2_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_AA64MMFR1_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_AA64MMFR0_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert HCRX_EL2 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming of ID_AA64PFR1_EL1 SME enumeration (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming of ID_AA64PFR1_EL1 BTI enumeration (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming of ID_AA64PFR1_EL1 fractional version fields (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming for MTE feature enumeration (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming for SSBS feature enumeration (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming for ID_AA64PFR0_EL1.AdvSIMD constants (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming for ID_AA64PFR0_EL1 constants (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming for ID_AA64MMFR2_EL1.CnP (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming for ID_AA64MMFR2_EL1.VARange (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming for ID_AA64MMFR1_EL1 fields (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming of ID_AA64MMFR0_EL1.ASIDBits (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming of ID_AA64MMFR0_EL1.BigEnd (Mark Salter) [2167398]
  - arm64/sysreg: Add _EL1 into ID_AA64PFR1_EL1 constant names (Mark Salter) [2167398]
  - arm64/sysreg: Add _EL1 into ID_AA64PFR0_EL1 definition names (Mark Salter) [2167398]
  - arm64/sysreg: Add _EL1 into ID_AA64MMFR2_EL1 definition names (Mark Salter) [2167398]
  - arm64/sysreg: Add _EL1 into ID_AA64MMFR0_EL1 definition names (Mark Salter) [2167398]
  - arm64: cache: Remove unused CTR_CACHE_MINLINE_MASK (Mark Salter) [2167398]
  - arm64/sysreg: Describe ID_AA64SMFR0_EL1.SMEVer as an enumeration (Mark Salter) [2167398]
  - arm64/sysreg: Remove stray SMIDR_EL1 defines (Mark Salter) [2167398]
  - redhat/configs: Enable CONFIG_ARM64_ERRATUM_2658417 (Mark Salter) [2167398]
  - arm64: errata: remove BF16 HWCAP due to incorrect result on Cortex-A510 (Mark Salter) [2167398]
  - arm64: cpufeature: Expose get_arm64_ftr_reg() outside cpufeature.c (Mark Salter) [2167398]
  - arm64: cpufeature: Force HWCAP to be based on the sysreg visible to user-space (Mark Salter) [2167398]
  - arm64: rework BTI exception handling (Mark Salter) [2167398]
  - arm64: rework FPAC exception handling (Mark Salter) [2167398]
  - arm64: consistently pass ESR_ELx to die() (Mark Salter) [2167398]
  - arm64: die(): pass 'err' as long (Mark Salter) [2167398]
  - arm64: report EL1 UNDEFs better (Mark Salter) [2167398]
  - arm64: atomic: always inline the assembly (Mark Salter) [2167398]
  - arm64: atomics: remove LL/SC trampolines (Mark Salter) [2167398]
  - arm64: stacktrace: track hyp stacks in unwinder's address space (Mark Salter) [2167398]
  - arm64: stacktrace: track all stack boundaries explicitly (Mark Salter) [2167398]
  - arm64: stacktrace: remove stack type from fp translator (Mark Salter) [2167398]
  - arm64: stacktrace: rework stack boundary discovery (Mark Salter) [2167398]
  - arm64: stacktrace: add stackinfo_on_stack() helper (Mark Salter) [2167398]
  - arm64: stacktrace: move SDEI stack helpers to stacktrace code (Mark Salter) [2167398]
  - arm64: stacktrace: rename unwind_next_common() -> unwind_next_frame_record() (Mark Salter) [2167398]
  - arm64: stacktrace: simplify unwind_next_common() (Mark Salter) [2167398]
  - arm64: stacktrace: fix kerneldoc comments (Mark Salter) [2167398]
  - arm64/sysreg: Add hwcap for SVE EBF16 (Mark Salter) [2167398]
  - redhat/configs: aarch64: enable ERRATUM_2457168 workaround (Mark Salter) [2167398]
  - arm64: topology: fix possible overflow in amu_fie_setup() (Mark Salter) [2167398]
  - arm64: mm: don't acquire mutex when rewriting swapper (Mark Salter) [2167398]
  - arm64: mm: fix resume for 52-bit enabled builds (Mark Salter) [2167398]
  - arm64/ptrace: Don't clear calling process' TIF_SME on OOM (Mark Salter) [2167398]
  - arm64/bti: Disable in kernel BTI when cross section thunks are broken (Mark Salter) [2167398]
  - arm64: mm: Reserve enough pages for the initial ID map (Mark Salter) [2167398]
  - perf/arm_pmu_platform: fix tests for platform_get_irq() failure (Mark Salter) [2167398]
  - arm64: head: Ignore bogus KASLR displacement on non-relocatable kernels (Mark Salter) [2167398]
  - arm64/signal: Raise limit on stack frames (Mark Salter) [2167398]
  - arm64/cache: Fix cache_type_cwg() for register generation (Mark Salter) [2167398]
  - arm64/sysreg: Guard SYS_FIELD_ macros for asm (Mark Salter) [2167398]
  - arm64/sysreg: Directly include bitfield.h (Mark Salter) [2167398]
  - arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly (Mark Salter) [2167398]
  - arm64: Fix comment typo (Mark Salter) [2167398]
  - arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76 (Mark Salter) [2167398]
  - arm64: Update 'unwinder howto' (Mark Salter) [2167398]
  - arm64: Delay initialisation of cpuinfo_arm64::reg_{zcr,smcr} (Mark Salter) [2167398]
  - arm64: fix KASAN_INLINE (Mark Salter) [2167398]
  - arm64: Add an override for ID_AA64SMFR0_EL1.FA64 (Mark Salter) [2167398]
  - arm64: Add the arm64.nosve command line option (Mark Salter) [2167398]
  - arm64: Add the arm64.nosme command line option (Mark Salter) [2167398]
  - arm64: Expose a __check_override primitive for oddball features (Mark Salter) [2167398]
  - arm64: Allow the idreg override to deal with variable field width (Mark Salter) [2167398]
  - arm64: Factor out checking of a feature against the override into a macro (Mark Salter) [2167398]
  - arm64: Allow sticky E2H when entering EL1 (Mark Salter) [2167398]
  - arm64: Save state of HCR_EL2.E2H before switch to EL1 (Mark Salter) [2167398]
  - arm64: Rename the VHE switch to "finalise_el2" (Mark Salter) [2167398]
  - arm64: mm: fix booting with 52-bit address space (Mark Salter) [2167398]
  - arm64: head: remove __PHYS_OFFSET (Mark Salter) [2167398]
  - arm64: lds: use PROVIDE instead of conditional definitions (Mark Salter) [2167398]
  - arm64: setup: drop early FDT pointer helpers (Mark Salter) [2167398]
  - arm64: head: avoid relocating the kernel twice for KASLR (Mark Salter) [2167398]
  - arm64: kaslr: defer initialization to initcall where permitted (Mark Salter) [2167398]
  - arm64: head: record CPU boot mode after enabling the MMU (Mark Salter) [2167398]
  - arm64: head: populate kernel page tables with MMU and caches on (Mark Salter) [2167398]
  - arm64: head: factor out TTBR1 assignment into a macro (Mark Salter) [2167398]
  - arm64: idreg-override: use early FDT mapping in ID map (Mark Salter) [2167398]
  - arm64: head: create a temporary FDT mapping in the initial ID map (Mark Salter) [2167398]
  - arm64: head: use relative references to the RELA and RELR tables (Mark Salter) [2167398]
  - arm64: head: cover entire kernel image in initial ID map (Mark Salter) [2167398]
  - arm64: head: add helper function to remap regions in early page tables (Mark Salter) [2167398]
  - arm64: mm: provide idmap pointer to cpu_replace_ttbr1() (Mark Salter) [2167398]
  - arm64: head: pass ID map root table address to __enable_mmu() (Mark Salter) [2167398]
  - arm64: kernel: drop unnecessary PoC cache clean+invalidate (Mark Salter) [2167398]
  - arm64: head: split off idmap creation code (Mark Salter) [2167398]
  - arm64: head: switch to map_memory macro for the extended ID map (Mark Salter) [2167398]
  - arm64: head: simplify page table mapping macros (slightly) (Mark Salter) [2167398]
  - arm64: head: drop idmap_ptrs_per_pgd (Mark Salter) [2167398]
  - arm64: head: move assignment of idmap_t0sz to C code (Mark Salter) [2167398]
  - arm64: mm: make vabits_actual a build time constant if possible (Mark Salter) [2167398]
  - arm64: head: move kimage_vaddr variable into C file (Mark Salter) [2167398]
  - arm64: trap implementation defined functionality in userspace (Mark Salter) [2167398]
  - arm64/mm: use GENMASK_ULL for TTBR_BADDR_MASK_52 (Mark Salter) [2167398]
  - arm64: numa: Don't check node against MAX_NUMNODES (Mark Salter) [2167398]
  - arm64: Do not forget syscall when starting a new thread. (Mark Salter) [2167398]
  - arm64: boot: add zstd support (Mark Salter) [2167398]
  - arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1 (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_AA64ZFR0_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_AA64SMFR0_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert LORID_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert LORC_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert LORN_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert LOREA_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert LORSA_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_AA64ISAR2_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert ID_AA64ISAR1_EL1 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert GMID to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert DCZID_EL0 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Convert CTR_EL0 to automatic generation (Mark Salter) [2167398]
  - arm64/sysreg: Add _EL1 into ID_AA64ISAR2_EL1 definition names (Mark Salter) [2167398]
  - arm64/sysreg: Add _EL1 into ID_AA64ISAR1_EL1 definition names (Mark Salter) [2167398]
  - arm64/sysreg: Remove defines for RPRES enumeration (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming for ID_AA64ZFR0_EL1 fields (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming for ID_AA64SMFR0_EL1 enums (Mark Salter) [2167398]
  - arm64/sysreg: Standardise naming for WFxT defines (Mark Salter) [2167398]
  - arm64: stackleak: fix current_top_of_stack() (Mark Salter) [2167398]
  - clocksource/drivers/arm_arch_timer: Force inlining of erratum_set_next_event_generic() (Mark Salter) [2167398]
  - clocksource/drivers/arm_arch_timer: Move drop _tval from erratum function names (Mark Salter) [2167398]
  - arm64: Add handling of CNTVCTSS traps (Mark Salter) [2167398]
  - arm64: Add CNT{P,V}CTSS_EL0 alternatives to cnt{p,v}ct_el0 (Mark Salter) [2167398]
  - clocksource/drivers/arch_arm_timer: Move workaround synchronisation around (Mark Salter) [2167398]
  - clocksource/drivers/arm_arch_timer: Fix masking for high freq counters (Mark Salter) [2167398]
  - clocksource/drivers/arm_arch_timer: Drop unnecessary ISB on CVAL programming (Mark Salter) [2167398]
  - clocksource/drivers/arm_arch_timer: Remove any trace of the TVAL programming interface (Mark Salter) [2167398]
  - clocksource/drivers/arm_arch_timer: Work around broken CVAL implementations (Mark Salter) [2167398]
  - clocksource/drivers/arm_arch_timer: Advertise 56bit timer to the core code (Mark Salter) [2167398]
  - clocksource/drivers/arm_arch_timer: Move MMIO timer programming over to CVAL (Mark Salter) [2167398]
  - clocksource/drivers/arm_arch_timer: Fix MMIO base address vs callback ordering issue (Mark Salter) [2167398]
  - clocksource/drivers/arm_arch_timer: Move system register timer programming over to CVAL (Mark Salter) [2167398]
  - clocksource/drivers/arm_arch_timer: Extend write side of timer register accessors to u64 (Mark Salter) [2167398]
  - clocksource/drivers/arm_arch_timer: Drop CNT*_TVAL read accessors (Mark Salter) [2167398]
  - clocksource/arm_arch_timer: Add build-time guards for unhandled register accesses (Mark Salter) [2167398]
  - s390/qeth: fix use-after-free in hsci (Tobias Huschle) [2183991]
  - s390/uaccess: add missing earlyclobber annotations to __clear_user() (Tobias Huschle) [2183079]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-303.el9]
changelog:
  - vfs: remove the FL_EXT_LMOPS flag (Jeffrey Layton) [2185616]
  - SUNRPC: Fix a server shutdown leak (Benjamin Coddington) [2180601]
  - net: mpls: fix stale pointer if allocation fails during device rename (Guillaume Nault) [2184955] {CVE-2023-26545}
  - net-ipv6: changes to ->tclass (via IPV6_TCLASS) should sk_dst_reset() (Felix Maurer) [2172062]
  - net-ipv6: do not allow IPV6_TCLASS to muck with tcp's ECN (Felix Maurer) [2172062]
  - x86/acpi/boot: Correct acpi_is_processor_usable() check (Prarit Bhargava) [2163809]
  - x86/ACPI/boot: Use FADT version to check support for online capable (Prarit Bhargava) [2163809]
  - x86/acpi/boot: Do not register processors that cannot be onlined for x2APIC (Prarit Bhargava) [2163809]
  - x86/pkey: Fix undefined behaviour with PKRU_WD_BIT (Prarit Bhargava) [2163809]
  - x86/boot: Move EFI range reservation after cmdline parsing (Prarit Bhargava) [2163809]
  - Revert "x86/boot: Pull up cmdline preparation and early param parsing" (Prarit Bhargava) [2163809]
  - Revert "x86/boot: Mark prepare_command_line() __init" (Prarit Bhargava) [2163809]
  - x86/sev: Fix SEV-ES INS/OUTS instructions for word, dword, and qword (Prarit Bhargava) [2163809]
  - x86/64/mm: Map all kernel memory into trampoline_pgd (Prarit Bhargava) [2163809]
  - xen: make HYPERVISOR_set_debugreg() always_inline (Prarit Bhargava) [2163809]
  - xen: make HYPERVISOR_get_debugreg() always_inline (Prarit Bhargava) [2163809]
  - x86/boot: Mark prepare_command_line() __init (Prarit Bhargava) [2163809]
  - xen/pvh: add missing prototype to header (Prarit Bhargava) [2163809]
  - signal/vm86_32: Remove pointless test in BUG_ON (Prarit Bhargava) [2163809]
  - x86/mce: Add errata workaround for Skylake SKX37 (Prarit Bhargava) [2163809]
  - x86: mm: rename __is_kernel_text() to is_x86_32_kernel_text() (Prarit Bhargava) [2163809]
  - sections: move is_kernel_inittext() into sections.h (Prarit Bhargava) [2163809]
  - x86: remove memory hotplug support on X86_32 (Prarit Bhargava) [2163809]
  - x86/xen: remove 32-bit awareness from startup_xen (Prarit Bhargava) [2163809]
  - xen: remove highmem remnants (Prarit Bhargava) [2163809]
  - xen: allow pv-only hypercalls only with CONFIG_XEN_PV (Prarit Bhargava) [2163809]
  - xen-pciback: allow compiling on other archs than x86 (Prarit Bhargava) [2163809]
  - x86/xen: remove 32-bit pv leftovers (Prarit Bhargava) [2163809]
  - x86/xen: remove xen_have_vcpu_info_placement flag (Prarit Bhargava) [2163809]
  - x86/xen: Remove redundant irq_enter/exit() invocations (Prarit Bhargava) [2163809]
  - x86/pvh: add prototype for xen_pvh_init() (Prarit Bhargava) [2163809]
  - xen/x86: restrict PV Dom0 identity mapping (Prarit Bhargava) [2163809]
  - xen/x86: there's no highmem anymore in PV mode (Prarit Bhargava) [2163809]
  - xen/x86: adjust handling of the L3 user vsyscall special page table (Prarit Bhargava) [2163809]
  - xen/x86: adjust xen_set_fixmap() (Prarit Bhargava) [2163809]
  - xen/x86: restore (fix) xen_set_pte_init() behavior (Prarit Bhargava) [2163809]
  - xen/x86: streamline set_pte_mfn() (Prarit Bhargava) [2163809]
  - x86/apic: Reduce cache line misses in __x2apic_send_IPI_mask() (Prarit Bhargava) [2163809]
  - x86/Makefile: Remove unneeded whitespaces before tabs (Prarit Bhargava) [2163809]
  - x86/boot/compressed: Avoid duplicate malloc() implementations (Prarit Bhargava) [2163809]
  - x86/boot: Allow a "silent" kaslr random byte fetch (Prarit Bhargava) [2163809]
  - x86/tools/relocs: Support >64K section headers (Prarit Bhargava) [2163809]
  - signal/vm86_32: Replace open coded BUG_ON with an actual BUG_ON (Prarit Bhargava) [2163809]
  - kbuild: use more subdir- for visiting subdirectories while cleaning (Prarit Bhargava) [2163809]
  - x86/irq: Ensure PI wakeup handler is unregistered before module unload (Prarit Bhargava) [2163809]
  - x86/sev: Allow #VC exceptions on the VC2 stack (Prarit Bhargava) [2163809]
  - x86/sev: Fix stack type check in vc_switch_off_ist() (Prarit Bhargava) [2163809]
  - x86/CPU: Add support for Vortex CPUs (Prarit Bhargava) [2163809]
  - ftrace/x86_64: Have function graph tracer depend on DYNAMIC_FTRACE (Prarit Bhargava) [2163809]
  - x86: dt: Use of_get_cpu_hwid() (Prarit Bhargava) [2163809]
  - samples: add HAVE_SAMPLE_FTRACE_DIRECT config option (Prarit Bhargava) [2163809]
  - ftrace: Cleanup ftrace_dyn_arch_init() (Prarit Bhargava) [2163809]
  - x86: Fix misspelled Kconfig symbols (Prarit Bhargava) [2163809]
  - x86/Kconfig: Remove references to obsolete Kconfig symbols (Prarit Bhargava) [2163809]
  - x86/Kconfig: Fix an unused variable error in dell-smm-hwmon (Prarit Bhargava) [2163809]
  - x86: add CPU field to struct thread_info (Prarit Bhargava) [2163809]
  - x86/boot: Fix make hdimage with older versions of mtools (Prarit Bhargava) [2163809]
  - x86/umip: Downgrade warning messages to debug loglevel (Prarit Bhargava) [2163809]
  - x86/mce: Get rid of the ->quirk_no_way_out() indirect call (Prarit Bhargava) [2163809]
  - x86/mce: Get rid of msr_ops (Prarit Bhargava) [2163809]
  - x86: Increase exception stack sizes (Prarit Bhargava) [2163809]
  - x86/smp: Remove unnecessary assignment to local var freq_scale (Prarit Bhargava) [2163809]
  - crypto: aesni - check walk.nbytes instead of err (Prarit Bhargava) [2163809]
  - arch: remove unused function syscall_set_arguments() (Prarit Bhargava) [2163809]
  - x86/asm: Avoid adding register pressure for the init case in static_cpu_has() (Prarit Bhargava) [2163809]
  - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (Prarit Bhargava) [2163809]
  - x86/ACPI: Don't add CPUs that are not online capable (Prarit Bhargava) [2163809]
  - x86/mce: Get rid of stray semicolons (Prarit Bhargava) [2163809]
  - crypto: qat - add support for 402xx devices (Vladis Dronov) [2144528]
  - crypto: qat - drop log level of msg in get_instance_node() (Vladis Dronov) [2144528]
  - crypto: qat - fix out-of-bounds read (Vladis Dronov) [2144528]
  - Documentation: qat: change kernel version (Vladis Dronov) [2144528]
  - crypto: qat - add qat_zlib_deflate (Vladis Dronov) [2144528]
  - crypto: qat - extend buffer list logic interface (Vladis Dronov) [2144528]
  - crypto: qat - fix spelling mistakes from 'bufer' to 'buffer' (Vladis Dronov) [2144528]
  - crypto: qat - add resubmit logic for decompression (Vladis Dronov) [2144528]
  - crypto: acomp - define max size for destination (Vladis Dronov) [2144528]
  - crypto: qat - enable deflate for QAT GEN4 (Vladis Dronov) [2144528]
  - crypto: qat - expose deflate through acomp api for QAT GEN2 (Vladis Dronov) [2144528]
  - crypto: qat - rename and relocate GEN2 config function (Vladis Dronov) [2144528]
  - crypto: qat - relocate qat_algs_alloc_flags() (Vladis Dronov) [2144528]
  - crypto: qat - relocate backlog related structures (Vladis Dronov) [2144528]
  - crypto: qat - extend buffer list interface (Vladis Dronov) [2144528]
  - crypto: qat - generalize crypto request buffers (Vladis Dronov) [2144528]
  - crypto: qat - change bufferlist logic interface (Vladis Dronov) [2144528]
  - crypto: qat - rename bufferlist functions (Vladis Dronov) [2144528]
  - crypto: qat - relocate bufferlist logic (Vladis Dronov) [2144528]
  - crypto: qat - Use helper to set reqsize (Vladis Dronov) [2144528]
  - crypto: kpp - Add helper to set reqsize (Vladis Dronov) [2144528]
  - crypto: qat - fix error return code in adf_probe (Vladis Dronov) [2144528]
  - crypto: qat - remove ADF_STATUS_PF_RUNNING flag from probe (Vladis Dronov) [2144528]
  - tracing/hwlat: Replace sched_setaffinity with set_cpus_allowed_ptr (Jerome Marchand) [2178234]
  - cpuidle: psci: Do not suspend topology CPUs on PREEMPT_RT (Radu Rendec) [2173028]
  - ipv4: prevent potential spectre v1 gadget in fib_metrics_match() (Guillaume Nault) [2186795]
  - ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() (Guillaume Nault) [2186795]
  - tcp: avoid the lookup process failing to get sk in ehash table (Guillaume Nault) [2186795]
  - tcp/udp: Make early_demux back namespacified. (Guillaume Nault) [2186795]
  - ipv4: add net_hash_mix() dispersion to fib_info_laddrhash keys (Guillaume Nault) [2186795]
  - ipv4: avoid quadratic behavior in netns dismantle (Guillaume Nault) [2186795]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-304.el9]
changelog:
  - redhat/configs: turn off BBNSM RTC Driver (Steve Best) [2182332]
  - dt-bindings: mfd: Add NXP BBNSM (Steve Best) [2182332]
  - rtc: bbnsm: Add the bbnsm rtc support (Steve Best) [2182332]
  - redhat/configs: turn off i.MX8MP interconnect Driver (Steve Best) [2184106]
  - interconnect: imx: Make imx_icc_unregister() return void (Steve Best) [2184106]
  - interconnect: imx: Ignore return value of icc_provider_del() in .remove() (Steve Best) [2184106]
  - interconnect: imx: Add platform driver for imx8mp (Steve Best) [2184106]
  - interconnect: imx: configure NoC mode/prioriry/ext_control (Steve Best) [2184106]
  - interconnect: imx: introduce imx_icc_provider (Steve Best) [2184106]
  - interconnect: imx: set src node (Steve Best) [2184106]
  - interconnect: imx: fix max_node_id (Steve Best) [2184106]
  - NFSv4: Fix hangs when recovering open state after a server reboot (Benjamin Coddington) [2186011]
  - scsi: ses: Don't attach if enclosure has no components (Tomas Henzl) [2102283]
  - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (Tomas Henzl) [2102283]
  - scsi: ses: Fix possible desc_ptr out-of-bounds accesses (Tomas Henzl) [2102283]
  - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (Tomas Henzl) [2102283]
  - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (Tomas Henzl) [2102283]
  - vmxnet3: move rss code block under eop descriptor (Izabela Bakollari) [2169514]
  - selftests: forwarding: add tunnel_key "nofrag" test case (Davide Caratti) [2183450]
  - selftests: tc-testing: add tunnel_key "nofrag" test case (Davide Caratti) [2183450]
  - selftests: tc-testing: add "depends_on" property to skip tests (Davide Caratti) [2183450]
  - net/sched: act_tunnel_key: add support for "don't fragment" (Davide Caratti) [2183450]
  - NFSD: fix use-after-free in nfsd4_ssc_setup_dul() (Jeffrey Layton) [2182039] {CVE-2023-1652}
  - sched/core: Fix arch_scale_freq_tick() on tickless systems (Phil Auld) [1996625]
  - perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[] (Michael Petlan) [2153897]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-305.el9]
changelog:
  - i40e: Fix kernel crash during reboot when adapter is in recovery mode (Stefan Assmann) [2153285]
  - i40e: add double of VLAN header when computing the max MTU (Stefan Assmann) [2153285]
  - i40e: Add checking for null for nlmsg_find_attr() (Stefan Assmann) [2153285]
  - net/i40e: Replace 0-length array with flexible array (Stefan Assmann) [2153285]
  - i40e: use ERR_PTR error print in i40e messages (Stefan Assmann) [2153285]
  - i40e: use int for i40e_status (Stefan Assmann) [2153285]
  - i40e: Remove string printing for i40e_status (Stefan Assmann) [2153285]
  - i40e: Remove unused i40e status codes (Stefan Assmann) [2153285]
  - net/sched: move struct tc_mqprio_qopt_offload from pkt_cls.h to pkt_sched.h (Stefan Assmann) [2153285]
  - i40e: Remove redundant pci_enable_pcie_error_reporting() (Stefan Assmann) [2153285]
  - virtchnl: i40e/iavf: rename iwarp to rdma (Stefan Assmann) [2153285]
  - treewide: Convert del_timer*() to timer_shutdown*() (Stefan Assmann) [2153285]
  - i40e: Fix the inability to attach XDP program on downed interface (Stefan Assmann) [2153285]
  - i40e: allow toggling loopback mode via ndo_set_features callback (Stefan Assmann) [2153285]
  - i40e: Disallow ip4 and ip6 l4_4_bytes (Stefan Assmann) [2153285]
  - i40e: Fix for VF MAC address 0 (Stefan Assmann) [2153285]
  - i40e: Fix not setting default xps_cpus after reset (Stefan Assmann) [2153285]
  - redhat/configs: Enable CONFIG_SLS (Waiman Long) [2180952]
  - x86,retpoline: Be sure to emit INT3 after JMP *%\reg (Waiman Long) [2180952]
  - selftests: tls: add a test for queuing data before setting the ULP (Sabrina Dubroca) [2183538]
  - net: tls: fix device-offloaded sendpage straddling records (Sabrina Dubroca) [2183538]
  - net: tls: avoid hanging tasks on the tx_lock (Sabrina Dubroca) [2183538]
  - tls: rx: fix return value for async crypto (Sabrina Dubroca) [2183538]
  - net/tls: tls_is_tx_ready() checked list_entry (Sabrina Dubroca) [2183538]
  - net/tls: Fix memory leak in tls_enc_skb() and tls_sw_fallback_init() (Sabrina Dubroca) [2183538]
  - net: tls: Add ARIA-GCM algorithm (Sabrina Dubroca) [2183538]
  - net/tls: Support 256 bit keys with TX device offload (Sabrina Dubroca) [2183538]
  - net/tls: Use cipher sizes structs (Sabrina Dubroca) [2183538]
  - net/tls: Describe ciphers sizes by const structs (Sabrina Dubroca) [2183538]
  - mlxsw: core: Register devlink instance before sub-objects (Petr Oros) [2172273]
  - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Petr Oros) [2172273]
  - mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations (Petr Oros) [2172273]
  - mlxsw: spectrum_acl_tcam: Make fini symmetric to init (Petr Oros) [2172273]
  - mlxsw: spectrum_acl_tcam: Add missing mutex_destroy() (Petr Oros) [2172273]
  - net/mlx5e: Create auxdev devlink instance in the same ns as parent devlink (Petr Oros) [2172273]
  - bnxt_en: fix devlink port registration to netdev (Petr Oros) [2172273]
  - ice: move devlink port creation/deletion (Petr Oros) [2172273]
  - sefltests: netdevsim: wait for devlink instance after netns removal (Petr Oros) [2172273]
  - devlink: Fix netdev notifier chain corruption (Petr Oros) [2172273]
  - devlink: Fix TP_STRUCT_entry in trace of devlink health report (Petr Oros) [2172273]
  - devlink: Update devlink health documentation (Petr Oros) [2172273]
  - devlink: Move health common function to health file (Petr Oros) [2172273]
  - devlink: Move devlink health test to health file (Petr Oros) [2172273]
  - devlink: Move devlink health dump to health file (Petr Oros) [2172273]
  - devlink: Move devlink fmsg and health diagnose to health file (Petr Oros) [2172273]
  - devlink: Move devlink health report and recover to health file (Petr Oros) [2172273]
  - devlink: Move devlink health get and set code to health file (Petr Oros) [2172273]
  - devlink: health: Fix nla_nest_end in error flow (Petr Oros) [2172273]
  - devlink: Split out health reporter create code (Petr Oros) [2172273]
  - devlink: don't allow to change net namespace for FW_ACTIVATE reload action (Petr Oros) [2172273]
  - devlink: add forgotten devlink instance lock assertion to devl_param_driverinit_value_set() (Petr Oros) [2172273]
  - devlink: allow to call devl_param_driverinit_value_get() without holding instance lock (Petr Oros) [2172273]
  - devlink: convert param list to xarray (Petr Oros) [2172273]
  - devlink: use xa_for_each_start() helper in devlink_nl_cmd_port_get_dump_one() (Petr Oros) [2172273]
  - devlink: fix the name of value arg of devl_param_driverinit_value_get() (Petr Oros) [2172273]
  - devlink: make sure driver does not read updated driverinit param before reload (Petr Oros) [2172273]
  - devlink: don't use strcpy() to copy param value (Petr Oros) [2172273]
  - devlink: stop using NL_SET_ERR_MSG_MOD (Petr Oros) [2172273]
  - devlink: change port event netdev notifier from per-net to global (Petr Oros) [2172273]
  - devlink: Fix memleak in health diagnose callback (Petr Oros) [2172273]
  - devlink: Move devlink dev selftest code to dev (Petr Oros) [2172273]
  - devlink: Move devlink_info_req struct to be local (Petr Oros) [2172273]
  - devlink: Move devlink dev flash code to dev (Petr Oros) [2172273]
  - devlink: Move devlink dev info code to dev (Petr Oros) [2172273]
  - devlink: Move devlink dev eswitch code to dev (Petr Oros) [2172273]
  - devlink: Move devlink dev reload code to dev (Petr Oros) [2172273]
  - devlink: Split out dev get and dump code (Petr Oros) [2172273]
  - devlink: rename and reorder instances of struct devlink_cmd (Petr Oros) [2172273]
  - devlink: remove "gen" from struct devlink_gen_cmd name (Petr Oros) [2172273]
  - devlink: rename devlink_nl_instance_iter_dump() to "dumpit" (Petr Oros) [2172273]
  - devlink: remove devlink features (Petr Oros) [2172273]
  - devlink: send objects notifications during devlink reload (Petr Oros) [2172273]
  - devlink: move devlink reload notifications back in between _down() and _up() calls (Petr Oros) [2172273]
  - mlxsw: spectrum: Remove pointless call to devlink_param_driverinit_value_set() (Petr Oros) [2172273]
  - net/mlx5: Move eswitch port metadata devlink param to flow eswitch code (Petr Oros) [2172273]
  - net/mlx5: Move flow steering devlink param to flow steering code (Petr Oros) [2172273]
  - net/mlx5: Move fw reset devlink param to fw reset code (Petr Oros) [2172273]
  - devlink: protect devlink param list by instance lock (Petr Oros) [2172273]
  - devlink: put couple of WARN_ONs in devlink_param_driverinit_value_get() (Petr Oros) [2172273]
  - devlink: make devlink_param_driverinit_value_set() return void (Petr Oros) [2172273]
  - qed: remove pointless call to devlink_param_driverinit_value_set() (Petr Oros) [2172273]
  - ice: remove pointless calls to devlink_param_driverinit_value_set() (Petr Oros) [2172273]
  - devlink: don't work with possible NULL pointer in devlink_param_unregister() (Petr Oros) [2172273]
  - devlink: make devlink_param_register/unregister static (Petr Oros) [2172273]
  - net/mlx5: Covert devlink params registration to use devlink_params_register/unregister() (Petr Oros) [2172273]
  - net/mlx5: Change devlink param register/unregister function names (Petr Oros) [2172273]
  - net/mlx5: Unregister traps on driver unload flow (Petr Oros) [2172273]
  - devlink: remove a dubious assumption in fmsg dumping (Petr Oros) [2172273]
  - netlink: fix spelling mistake in dump size assert (Petr Oros) [2172273]
  - devlink: add instance lock assertion in devl_is_registered() (Petr Oros) [2172273]
  - devlink: remove devlink_dump_for_each_instance_get() helper (Petr Oros) [2172273]
  - devlink: convert reporters dump to devlink_nl_instance_iter_dump() (Petr Oros) [2172273]
  - devlink: convert linecards dump to devlink_nl_instance_iter_dump() (Petr Oros) [2172273]
  - devlink: remove reporter reference counting (Petr Oros) [2172273]
  - devlink: remove devl*_port_health_reporter_destroy() (Petr Oros) [2172273]
  - devlink: remove reporters_lock (Petr Oros) [2172273]
  - devlink: protect health reporter operation with instance lock (Petr Oros) [2172273]
  - net/mlx5: Remove MLX5E_LOCKED_FLOW flag (Petr Oros) [2172273]
  - net/mlx5e: Create separate devlink instance for ethernet auxiliary device (Petr Oros) [2172273]
  - devlink: remove linecard reference counting (Petr Oros) [2172273]
  - devlink: remove linecards lock (Petr Oros) [2172273]
  - mlxsw: core_linecards: Separate line card init and fini flow (Petr Oros) [2172273]
  - devlink: remove some unnecessary code (Petr Oros) [2172273]
  - devlink: keep the instance mutex alive until references are gone (Petr Oros) [2172273]
  - netdevsim: move devlink registration under the instance lock (Petr Oros) [2172273]
  - netdevsim: rename a label (Petr Oros) [2172273]
  - devlink: allow registering parameters after the instance (Petr Oros) [2172273]
  - devlink: don't require setting features before registration (Petr Oros) [2172273]
  - devlink: remove the registration guarantee of references (Petr Oros) [2172273]
  - devlink: always check if the devlink instance is registered (Petr Oros) [2172273]
  - devlink: protect devlink->dev by the instance lock (Petr Oros) [2172273]
  - devlink: update the code in netns move to latest helpers (Petr Oros) [2172273]
  - devlink: bump the instance index directly when iterating (Petr Oros) [2172273]
  - devlink: convert remaining dumps to the by-instance scheme (Petr Oros) [2172273]
  - devlink: add by-instance dump infra (Petr Oros) [2172273]
  - devlink: uniformly take the devlink instance lock in the dump loop (Petr Oros) [2172273]
  - devlink: restart dump based on devlink instance ids (function) (Petr Oros) [2172273]
  - devlink: restart dump based on devlink instance ids (nested) (Petr Oros) [2172273]
  - devlink: restart dump based on devlink instance ids (simple) (Petr Oros) [2172273]
  - devlink: health: combine loops in dump (Petr Oros) [2172273]
  - devlink: drop the filter argument from devlinks_xa_find_get (Petr Oros) [2172273]
  - devlink: remove start variables from dumps (Petr Oros) [2172273]
  - devlink: use an explicit structure for dump context (Petr Oros) [2172273]
  - netlink: add macro for checking dump ctx size (Petr Oros) [2172273]
  - devlink: split out netlink code (Petr Oros) [2172273]
  - devlink: split out core code (Petr Oros) [2172273]
  - devlink: rename devlink_netdevice_event -> devlink_port_netdevice_event (Petr Oros) [2172273]
  - devlink: move code to a dedicated directory (Petr Oros) [2172273]
  - devlink: protect devlink dump by the instance lock (Petr Oros) [2172273]
  - selftests: devlink: add a warning for interfaces coming up (Petr Oros) [2172273]
  - selftests: devlink: fix the fd redirect in dummy_reporter_test (Petr Oros) [2172273]
  - devlink: hold region lock when flushing snapshots (Petr Oros) [2172273]
  - net: devlink: Add missing error check to devlink_resource_put() (Petr Oros) [2172273]
  - devlink: Expose port function commands to control migratable (Petr Oros) [2172273]
  - devlink: Expose port function commands to control RoCE (Petr Oros) [2172273]
  - devlink: Move devlink port function hw_addr attr documentation (Petr Oros) [2172273]
  - net/mlx5: Fix orthography errors in documentation (Petr Oros) [2172273]
  - devlink: Validate port function request (Petr Oros) [2172273]
  - net: devlink: add DEVLINK_INFO_VERSION_GENERIC_FW_BOOTLOADER (Petr Oros) [2172273]
  - net: devlink: convert port_list into xarray (Petr Oros) [2172273]
  - net: devlink: clean-up empty devlink_ops::info_get() (Petr Oros) [2172273]
  - net: devlink: make the devlink_ops::info_get() callback optional (Petr Oros) [2172273]
  - net: devlink: let the core report the driver name instead of the drivers (Petr Oros) [2172273]
  - devlink: support directly reading from region memory (Petr Oros) [2172273]
  - devlink: refactor region_read_snapshot_fill to use a callback function (Petr Oros) [2172273]
  - devlink: remove unnecessary parameter from chunk_fill function (Petr Oros) [2172273]
  - devlink: find snapshot in devlink_nl_cmd_region_read_dumpit (Petr Oros) [2172273]
  - devlink: report extended error message in region_read_dumpit() (Petr Oros) [2172273]
  - devlink: use min_t to calculate data_size (Petr Oros) [2172273]
  - net: devlink: add WARN_ON_ONCE to check return value of unregister_netdevice_notifier_net() call (Petr Oros) [2172273]
  - devlink: remove redundant health state set to error (Petr Oros) [2172273]
  - Documentation: devlink: Add blank line padding on numbered lists in Devlink Port documentation (Petr Oros) [2172273]
  - Documentation: Add documentation for new devlink-rate attributes (Petr Oros) [2172273]
  - devlink: Allow to set up parent in devl_rate_leaf_create() (Petr Oros) [2172273]
  - devlink: Allow for devlink-rate nodes parent reassignment (Petr Oros) [2172273]
  - devlink: Enable creation of the devlink-rate nodes from the driver (Petr Oros) [2172273]
  - devlink: Introduce new attribute 'tx_weight' to devlink-rate (Petr Oros) [2172273]
  - devlink: Introduce new attribute 'tx_priority' to devlink-rate (Petr Oros) [2172273]
  - devlink: Fix warning when unregistering a port (Petr Oros) [2172273]
  - net: devlink: move netdev notifier block to dest namespace during reload (Petr Oros) [2172273]
  - net: introduce a helper to move notifier block to different namespace (Petr Oros) [2172273]
  - selftests: devlink_lib: Split out helper (Petr Oros) [2172273]
  - devlink: Add packet traps for 802.1X operation (Petr Oros) [2172273]
  - net: devlink: reintroduce ndo_get_devlink_port (Petr Oros) [2172273]
  - net: expose devlink port over rtnetlink (Petr Oros) [2172273]
  - net: remove unused ndo_get_devlink_port (Petr Oros) [2172273]
  - net: devlink: use devlink_port pointer instead of ndo_get_devlink_port (Petr Oros) [2172273]
  - net: devlink: add not cleared type warning to port unregister (Petr Oros) [2172273]
  - net: devlink: store copy netdevice ifindex and ifname to allow port_fill() without RTNL held (Petr Oros) [2172273]
  - net: devlink: remove net namespace check from devlink_nl_port_fill() (Petr Oros) [2172273]
  - net: devlink: remove netdev arg from devlink_port_type_eth_set() (Petr Oros) [2172273]
  - net: make drivers to use SET_NETDEV_DEVLINK_PORT to set devlink_port (Petr Oros) [2172273]
  - net: devlink: track netdev with devlink_port assigned (Petr Oros) [2172273]
  - net: devlink: take RTNL in port_fill() function only if it is not held (Petr Oros) [2172273]
  - net: devlink: move port_type_netdev_checks() call to __devlink_port_type_set() (Petr Oros) [2172273]
  - net: devlink: move port_type_warn_schedule() call to __devlink_port_type_set() (Petr Oros) [2172273]
  - net: devlink: convert devlink port type-specific pointers to union (Petr Oros) [2172273]
  - Documentation: devlink: fix the locking section (Petr Oros) [2172273]
  - ionic: change order of devlink port register and netdev register (Petr Oros) [2172273]
  - ice: reorder PF/representor devlink port register/unregister flows (Petr Oros) [2172273]
  - Revert "block: Merge bio before checking ->cached_rq" (Ming Lei) [2188514]
  - redhat/configs: Enable WERROR only for gcc 11 (Waiman Long) [2184097]
  - redhat/configs: Enable WERROR for x86_64 builds (Prarit Bhargava) [2184097]
  - redhat/Makefile.variables: Add ENABLE_WERROR (Prarit Bhargava) [2184097]
  - mlx4: Fix compilation warning in drivers/net/ethernet/mellanox/mlx4/fw.c (Waiman Long) [2184097]
  - iomap: Remove unused iomap variable in iomap_zero_iter() (Waiman Long) [2184097]
  - xfs: Fix bug in xfs_discard_folio() (Waiman Long) [2184097]
  - drm/amd/display: fix i386 frame size warning (Waiman Long) [2184097]
  - gcc: disable -Warray-bounds for gcc-11 too (Waiman Long) [2184097]
  - HID: Make lowlevel driver structs const (Waiman Long) [2184097]
  - HID: Unexport struct i2c_hid_ll_driver (Waiman Long) [2184097]
  - HID: Unexport struct hidp_hid_driver (Waiman Long) [2184097]
  - HID: Unexport struct uhid_hid_driver (Waiman Long) [2184097]
  - HID: Unexport struct usb_hid_driver (Waiman Long) [2184097]
  - HID: Remove unused function hid_is_using_ll_driver() (Waiman Long) [2184097]
  - HID: usbhid: Make hid_is_usb() non-inline (Waiman Long) [2184097]
  - HID: letsketch: Use hid_is_usb() (Waiman Long) [2184097]
  - tty: Make tty_termios_copy_hw() old ktermios const (Waiman Long) [2184097]
  - tty: Remove baudrate dead code & make ktermios params const (Waiman Long) [2184097]
  - tty: remove IBSHIFT ifdefs (Waiman Long) [2184097]
  - tty: remove BOTHER ifdefs (Waiman Long) [2184097]
  - tty: reformat tty_struct::flags into kernel-doc (Waiman Long) [2184097]
  - tty: finish kernel-doc of tty_struct members (Waiman Long) [2184097]
  - tty: baudrate: Explicit usage of B0 for encoding input baudrate (Waiman Long) [2184097]
  - tty: remove extern from functions in tty headers (Waiman Long) [2184097]
  - tty: make tty_set_operations an inline (Waiman Long) [2184097]
  - tty: tty_flip.h needs only tty_buffer and tty_port (Waiman Long) [2184097]
  - tty: move tty_port to new tty_port.h (Waiman Long) [2184097]
  - tty: move tty_buffer definitions to new tty_buffer.h (Waiman Long) [2184097]
  - tty: move tty_ldisc_receive_buf to tty_flip.h (Waiman Long) [2184097]
  - tty: include list & lockdep from tty_ldisc.h (Waiman Long) [2184097]
  - tty: move ldisc prototypes to tty_ldisc.h (Waiman Long) [2184097]
  - tty: include kref.h in tty_driver.h (Waiman Long) [2184097]
  - tty: move tty_driver related prototypes to tty_driver.h (Waiman Long) [2184097]
  - PCI: Restrict device disabled status check to DT (Myron Stowe) [2184745]
  - null_blk: Always check queue mode setting from configfs (Ming Lei) [2186146]
  - coredump: Use the vma snapshot in fill_files_note (Ricardo Robaina) [2169741] {CVE-2023-1249}
  - coredump: Remove the WARN_ON in dump_vma_snapshot (Ricardo Robaina) [2169741] {CVE-2023-1249}
  - random: schedule jitter credit for next jiffy, not in two jiffies (Prarit Bhargava) [2109238]
  - random: use expired timer rather than wq for mixing fast pool (Prarit Bhargava) [2109238]
  - random: avoid reading two cache lines on irq randomness (Prarit Bhargava) [2109238]
  - random: clamp credited irq bits to maximum mixed (Prarit Bhargava) [2109238]
  - random: cap jitter samples per bit to factor of HZ (Prarit Bhargava) [2109238]
  - random: schedule mix_interrupt_randomness() less often (Prarit Bhargava) [2109238]
  - siphash: use one source of truth for siphash permutations (Prarit Bhargava) [2109238]
  - random: help compiler out with fast_mix() by using simpler arguments (Prarit Bhargava) [2109238]
  - random: do not use input pool from hard IRQs (Prarit Bhargava) [2109238]
  - random: order timer entropy functions below interrupt functions (Prarit Bhargava) [2109238]
  - random: do not pretend to handle premature next security model (Prarit Bhargava) [2109238]
  - random: mix in timestamps and reseed on system restore (Prarit Bhargava) [2109238]
  - random: use first 128 bits of input as fast init (Prarit Bhargava) [2109238]
  - random: do not use batches when !crng_ready() (Prarit Bhargava) [2109238]
  - random: vary jitter iterations based on cycle counter speed (Prarit Bhargava) [2109238]
  - random: insist on random_get_entropy() existing in order to simplify (Prarit Bhargava) [2109238]
  - workqueue: Fold rebind_worker() within rebind_workers() (Waiman Long) [2182337]
  - workqueue: Unbind kworkers before sending them to exit() (Waiman Long) [2182337]
  - workqueue: Don't hold any lock while rcuwait'ing for !POOL_MANAGER_ACTIVE (Waiman Long) [2182337]
  - workqueue: Convert the idle_timer to a timer + work_struct (Waiman Long) [2182337]
  - workqueue: Factorize unbind/rebind_workers() logic (Waiman Long) [2182337]
  - workqueue: Protects wq_unbound_cpumask with wq_pool_attach_mutex (Waiman Long) [2182337]
  - workqueue: don't skip lockdep work dependency in cancel_work_sync() (Waiman Long) [2182337]
  - workqueue: Change the comments of the synchronization about the idle_list (Waiman Long) [2182337]
  - workqueue: Remove the mb() pair between wq_worker_sleeping() and insert_work() (Waiman Long) [2182337]
  - workqueue: Remove the cacheline_aligned for nr_running (Waiman Long) [2182337]
  - workqueue: Move the code of waking a worker up in unbind_workers() (Waiman Long) [2182337]
  - workqueue: Remove the outdated comment before wq_worker_sleeping() (Waiman Long) [2182337]
  - workqueue: Fix unbind_workers() VS wq_worker_sleeping() race (Waiman Long) [2182337]


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-10
changelog:
  - Add conflicts of kernel-srpm-macros with kernel-rpm-macros < 185-9
    as macros.kmp, kmodtool, and rpmsort were moved from the latter
    to the former.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-11
changelog:
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x
  - Resolves: #2055464


author: Patrik Koncity <pkoncity@redhat.com> - 6.4.2-3
changelog:
  - Add keylime-selinux policy as subpackage
  - See https://fedoraproject.org/wiki/SELinux/IndependentPolicy
  - Resolves: rhbz#2121058


author: Sergio Correia <scorreia@redhat.com> - 6.5.2-1
changelog:
  - Update to 6.5.2
    Resolves: CVE-2022-3500
    Resolves: rhbz#2138167 - agent fails IMA attestation when one scripts is executed quickly after the other
    Resolves: rhbz#2140670 - Segmentation fault in /usr/share/keylime/create_mb_refstate script
    Resolves: rhbz#142009 - Registrar may crash during EK validation when require_ek_cert is enabled


author: Sergio Correia <scorreia@redhat.com> - 6.5.2-4
changelog:
  - Backport upstream PR#1240 - logging: remove option to log into separate file
    Resolves: rhbz#2154584 - keylime verifier is not logging to /var/log/keylime


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Set supplementary groups when dropping privileges
  - Show more descriptive error messages on missing files errors
  - Create /usr/libexec/keylime directory


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Use classic release instead of autorelease macro
  - Use classic changelog instead of autochangelog macro


author: Julien Rische <jrische@redhat.com> - 1.19.1-21
changelog:
  - Fix libkrad client cleanup
  - Allow use of larger RADIUS attributes in krad library
  - Resolves: rhbz#2100351


author: Julien Rische <jrische@redhat.com> - 1.19.1-22
changelog:
  - Restore "supportedCMSTypes" attribute in PKINIT preauth requests
  - Set SHA-512 or SHA-256 with RSA as preferred CMS signature algorithms
  - Resolves: rhbz#2068935


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
  - Resolves: rhbz#2151513
  - Remove invalid password expiry warning
  - Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
  - Resolves: rhbz#2063838
  - New upstream version (1.20.1)
  - Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
  - Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
  - Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
  - Resolves: rhbz#2162461


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.0~BETA-1
changelog:
  - new upstream release
  - remove upstreamed patches
  - update CCFLAGS (https://github.com/ksh93/ksh/commit/98f989afcc7)
    Resolves: #1986897


author: Mike FABIAN <mfabian@redhat.com> - 0.0.51-1
changelog:
  - Parse stuff in glibc locale names after @ which is not a script as a variant
  - Add ckb_IQ.UTF-8 locale


author: Mike FABIAN <mfabian@redhat.com> - 0.0.52-1
changelog:
  - Update to 0.0.52
  - add list_common_keyboards() to public api by Sundeep ANAND <suanand@redhat.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.53-1
changelog:
  - Update to 0.0.53
  - Capitalize the return values of language_name() and territory_name()
    (See: https://github.com/rhinstaller/anaconda/pull/2837).
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Mike FABIAN <mfabian@redhat.com> - 0.0.54-1
changelog:
  - Update to 0.0.54
  - add list_common_languages derived from gnome-control-center
    by Sundeep ANAND <suanand@redhat.com>


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-2
changelog:
  - Rebuild with openssl3, presumably in a buildroot with xmlsec1
    linked against openssl3
  - Resolves: rhbz#1962052 - lasso: Port to OpenSSL 3.0


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Petr Menšík <pemensik@redhat.com> - 1.7.1-2
changelog:
  - Use make_build and make_install macro instead of make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Lescak <rlescak@redhat.com> - 1.7.1-9
changelog:
  - Fix for CVE-2020-19860 ldns: heap overread vulnerability (#2051211)
  - Added also patch for deprecated distutils Python module used in build


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: Tom Stellard <tstellar@redhat.com> - 2.2.53-6
changelog:
  - Spec file cleanups and build fix
  - Add BuildRequires: perl-FileHandle to fix make check
  - Add BuildRequres: gcc [1]
  - Use make_build [2] and make_install[3] macros
  - [1] https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_buildrequires_and_requires
  - [2] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - [3] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: Richard Hughes <richard@hughsie.com> 0.7.16-1
changelog:
  - Update to 0.7.15
  - Add UPL short name to SPDX conversion
  - Allow parsing desktop files using as_app_parse_data()
  - Do not preserve restrictive permissions when installing AppStream files
  - Modernize the validation requirements
  - Remove relative path from icon names
  - Support loading YAML from as_store_from_bytes()
  - Update list of allowed metadata licences
  - Update the SPDX license list to v3.5


author: Richard Hughes <richard@hughsie.com> 0.7.17-1
changelog:
  - New upstream release
  - Add "icon-theme" as recognised component type
  - Fix CI by moving 'future' back a bit
  - Make default content rating values match OARS semantics
  - Properly initialize unique_id_mutex


author: Richard Hughes <richard@hughsie.com> 0.7.18-1
changelog:
  - New upstream release
  - Add content rating system APIs from gnome-software
  - Add "validate-version" command
  - Allow timestamp in the future in validate-relax
  - Don't ignore localized strings that are the same as original
  - Fix crash with invalid children of <ul/>
  - Properly initialize mutexes
  - Test launchable tags in validation


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-10
changelog:
  - Fix reading statistics for VDO pools with VDO 8
    Resolves: rhbz#1994220
  - vdo_stats: Default to 100 % savings for invalid savings values
    Resolves: rhbz#2025880
  - Add support for creating and unlocking standalone integrity devices
    Resolves: rhbz#2011365


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-11
changelog:
  - tests: Wait for raid and mirrored LVs to be synced before removing
    Resolves: rhbz#2030647
  - spec: Require the same version of utils for lvm-devel and lvm-dbus-devel
    Resolves: rhbz#2028113


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-14
changelog:
  - tests: Fix expected extended partition flags with new parted
    Related: rhbz#2109026
  - mdraid: Fix copy-paste error when checking return value
    Related: rhbz#2109026


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-1
changelog:
  - Rebase to the latest upstream release 2.28
    Resolves: rhbz#2123346
  - Add dependency on device-mapper-multipath to libblockdev-mpath
    Resolves: rhbz#2121072
  - Fix spec issues found by rpminspect
    Resolves: rhbz#2116544


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-4
changelog:
  - nvme: Fix namespace identifiers
    Resolves: rhbz#2151535
  - nvme: Avoid sending NVME_IDENTIFY_CNS_NS_DESC_LIST on older devices
    Related: rhbz#2151535


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-5
changelog:
  - Allow resizing of inactive LVs with latest LVM
    Resolves: rhbz#2161181
  - Fix test_swapon_pagesize on systems with 64k pages
    Resolves: rhbz#2168220


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-15
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix bad local IPv6 connection reuse (CVE-2022-27775)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-19
changelog:
  - fix unpreserved file permissions (CVE-2022-32207)
  - fix HTTP compression denial of service (CVE-2022-32206)
  - fix FTP-KRB bad message verification (CVE-2022-32208)


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: Vishal Vijayraghavan <vvijayra AT redhat DOT com> - 1:2.1.3-1
changelog:
  - New release of liberation-fonts 2.1.3
  - Resolves:rh#1464310 : Tilded G not works with Liberation Sans and Serif


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040454


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Resolves: rhbz#1963838 restore missing functions
    Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libformula
    didn't use its built-in loaders so libreoffice's database
    report generator didn't show all categories in formula wizard


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.46.1-1
changelog:
  - Rebase to new stable branch version 1.46.1
    resolves: rhbz#2011711
  - Add --enable-appliance-format-auto
  - Add support for Kylin
  - Document lazy-counters setting cannot be changed in XFS version 5
    resolves: rhbz#2025944, rhbz#1995391, rhbz#2024022
  - Require libvirt-daemon-driver-storage-core
    resolves: rhbz#2018358
  - Fix usage of strerror_r which caused corrupted error messages
    resolves: rhbz#2030396


author: Laszlo Ersek <lersek@redhat.com> - 1:1.46.1-2
changelog:
  - Add detection support for Rocky Linux
    resolves: rhbz#2030709
  - Resolve conflict between manual and libvirt-assigned PCI addresses
    resolves: rhbz#2034160


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.48.4-2
changelog:
  - Rebase to new stable branch version 1.48.4
    resolves: rhbz#2059285
  - Disable 5-level page tables when using -cpu max
    resolves: rhbz#2084568
  - SELinux relabelling should not stop on ext4 immutable bits
    resolves: rhbz#1794518
  - Ignore "iface" in add-drive variants
    resolves: rhbz#1844341
  - Lift protocol limit on guestfs_readdir()
    resolves: rhbz#1674392
  - Check return values from librpm calls (2089623)
  - Document limitations of encrypted RBD disks
    resolves: rhbz#2033247
  - Fix lvm-set-filter failed in guestfish with the latest lvm2 package
    resolves: rhbz#1965941
  - Enable PHP bindings
    resolves: rhbz#2097718
  - Add support for Clevis & Tang
    resolves: rhbz#1809453
  - Fix CVE-2022-2211 Denial of Service in --key parameter
    resolves: rhbz#2101281
  - Add clevis-luks to BRs, required for Clevis & Tang
    related: rhbz#1809453
  - Add zstd support to guestfs_file_architecture
    resolves: rhbz#2117004


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.48.4-4
changelog:
  - New API: guestfs_inspect_get_build_id
  - Add support for detecting Windows >= 10, returned through osinfo
    resolves: rhbz#2012658


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-1
changelog:
  - Rebase libguestfs to 1.50.1
    resolves: rhbz#2168625
  - Use q35 machine type for libguestfs appliance
    resolves: rhbz#2168578


author: Richard W.M. Jones <rjones@redhat.com> - 9.2-1
changelog:
  - Rebase to ntfs-3g 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
    resolves: rhbz#2127235 rhbz#2127242
    (also 2127264 2127250 2127257)


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Keith Seitz <keiths@redhat.com> - 2.0.4-2
changelog:
  - Add support for pre-generated documenation, allowing removal
    of pandoc dependency. (RHBZ 1943531, Keith Seitz)


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Mohan Boddu <mboddu@redhat.com> - 0.2.10-24
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951286 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951284 replace apache-commons-logging with java.util.logging


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libloader
    didn't use its built-in loaders so libreoffice's database
    report generator didn't work


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Michal Ruprich <mruprich@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64
  - Fix for CVE-2020-28241


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.8.2-2
changelog:
  - Fix nbdcopy progress bar.
  - Add nbdinfo --map --totals and --can/--is options.
    resolves: rhbz#1950630


author: Richard W.M. Jones <rjones@redhat.com> - 1.10.5-1
changelog:
  - Rebase to new stable branch version 1.10.5
    resolves: rhbz#2011708
  - Map uint32_t to OCaml int64 to avoid signedness problems
    resolves: rhbz#2040610
  - CVE-2022-0485 nbdcopy destination image corruption
  - New upstream API to control initialization of pread buffer
    resolves: rhbz#2046194


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.6-1
changelog:
  - Rebase to new stable branch version 1.12.6
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660
  - Fix remote TLS failures
    resolves: rhbz#2111524
    (and 2111813)


author: Adrian Reber <areber@redhat.com> - 1.2-5
changelog:
  - Repack tarball to remove problematic license from unused code
  - Apply fixes for warnings found by gcc -fanalyzer


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: Michel Normand <normand@linux.vnet.ibm.com> 1.1.0-5
changelog:
  - Add remove_2_backslashes_in_shell_call.patch
    Add remove_eng_inc_in_version_pl.patch
    to avoid f33 build failure


author: Bryan Gurney <bgurney@redhat.com> - 1.12-8
changelog:
  - Apply patch to fix undefined behavior on realloc
  - Also add and apply patch to fix referencing empty array
  - Related: rhbz#2034641


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Remi Collet <remi@remirepo.net> - 0.11.0-1
changelog:
  - update to 0.11.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/665


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951282 replace apache-commons-logging with java.util.logging


author: Daiki Ueno <dueno@redhat.com> - 4.4-1
changelog:
  - Update to 4.4. Resolves: rhbz#1975812
  - Port compiler warning suppression by Paul Wouters:
    https://src.fedoraproject.org/rpms/libreswan/c/8d7f98d41444ac77c562f735b4b93038f5346ce2?branch=rawhide


author: Daiki Ueno <dueno@redhat.com> - 4.4-3
changelog:
  - Backport removal gethostbyname2 uses from the upstream
  - Fix issues spotted by covscan (rhbz#1938784)


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.99.20-1
changelog:
  - 1900160 - sane-airscan-0.99.20 is available
  - 1897935 - Crash on libsane-airscan when trying to activate scanner


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Mohan Boddu <mboddu@redhat.com> - 1.1.2-29
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951281 replace apache-commons-logging with java.util.logging


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    Resolves: rhbz#1970826 rhbz#1970839 rhbz#1970857 rhbz#1970847


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.31-6
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985029)


author: Kalev Lember <klember@redhat.com> - 2.72.0-2
changelog:
  - Tighten soname globs
  - Avoid automatic requires on sysprof-devel package
  - Update required glib2 version


author: Kalev Lember <klember@redhat.com> - 2.72.0-5
changelog:
  - Don't try to avoid sysprof dep any more now that sysprof-capture-devel is
    split out to a separate subpackage


author: Norbert pocs <npocs@redhat.com> - 0.10.4-1
changelog:
  - Rebase to version 0.10.4
  - Add pkcs11 support
  - Disallow ssh-rsa key in FIPS mode
  - Fix openssl KDF check at build
  - ChangeLog was renamed to CHANGELOG
  - Resolves: rhbz#2068475, rhbz#2026449, rhbz#2004021,
              rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Matej Mužila <mmuzila@redhat.com> 4.4.0-2
changelog:
  - Update to version 4.4.0
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354
    CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.3
changelog:
  - Add -Wno-error=deprecated-declarations, to ignore OpenSSL 3.0 deprecation warnings.
    Fixes: rhbz#1958054


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.5
changelog:
  - Fixes CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
    Resolves: rhbz#1976814


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.7
changelog:
  - Fixes CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets
    Resolves: rhbz#1999303


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.1-3.20211126git1ff6fe1f43
changelog:
  - Backport "tpm2: Check size of buffer before accessing it" (CVE-2023-1017 & CVE-2023-1018)
    Resolves: rhbz#2173960
    Resolves: rhbz#2173967


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-4
changelog:
  - Fix a couple of issues found by Coverity (#1938890)
  - Ignore systemd "Extended Boot Loader" GPT partition


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-1
changelog:
  - Version 2.9.4 (#2010363)
  - CVE-2021-3802: Harden the default mount options for ext filesystems (#2004423)
  - Fix double free on daemon exit (unaligned fastbin chunk) (#2001549)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.5-1
changelog:
  - Update license to GPL-2.0 OR MIT
  - Add io_uring_prep_epoll_ctl()
  - Add io_uring_get_probe(), io_uring_get_probe_ring()
  - Add io_uring_register_probe()
  - Add io_uring_{register,unregister}_personality()
  - Add io_uring_prep_{recv,send}()
  - Add io_uring_prep_openat2()
  - Add io_uring_ring_dontfork()
  - Add io_uring_prep_read() and io_uring_prep_write()
  - Documentation fixes and improvements


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.6-1
changelog:
  - add io_uring_prep_splice()
  - add io_uring_prep_provide_buffers()
  - add io_uring_prep_remove_buffers()
  - add io_uring_register_eventfd_async()
  - reinstate io_uring_unregister_eventfd() (it was accidentally removed in 0.4)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.7-1
changelog:
  - Add io_uring_cq_eventfd_toggle() helper for new IORING_CQ_EVENTFD_DISABLED flag
  - Add IORING_OP_TEE
  - Documentation fixes and improvements


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Jiri Denemark <jdenemar@redhat.com> - 8.9.0-2
changelog:
  - RHEL: rpminspect: Disable abidiff inspection (rhbz#2124466)
  - spec: Fix python3-libvirt requirement in client-qemu package (rhbz#2124466)


author: Jiri Denemark <jdenemar@redhat.com> - 8.10.0-1
changelog:
  - Rebased to libvirt-8.10.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2128993, rhbz#2143235, rhbz#2143840, rhbz#1874163, rhbz#2000075
      rhbz#2143838, rhbz#2104919, rhbz#2072204, rhbz#2137298


author: Jiri Denemark <jdenemar@redhat.com> - 8.10.0-2
changelog:
  - qemu_process: Document qemuProcessPrepare{Domain,Host}() order (rhbz#2150760)
  - qemu_extdevice: Init paths in qemuExtDevicesPrepareDomain() (rhbz#2150760)
  - qemu_extdevice: Expose qemuExtDevicesInitPaths() (rhbz#2150760)
  - qemu: Init ext devices paths on reconnect (rhbz#2150760)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-1
changelog:
  - Rebased to libvirt-9.0.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2151064, rhbz#1874163, rhbz#2130192, rhbz#2111948, rhbz#1824722
      rhbz#2150455, rhbz#2063723, rhbz#1717611, rhbz#2160448, rhbz#2151869
      rhbz#2040272, rhbz#2144738, rhbz#2159851, rhbz#2156289, rhbz#2033879
      rhbz#1820437, rhbz#2151202


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-2
changelog:
  - vircgroupv2: fix cpu.weight limits check (rhbz#2037998)
  - domain_validate: drop cpu.shares cgroup check (rhbz#2037998)
  - docs: document correct cpu shares limits with both cgroups v1 and v2 (rhbz#2037998)
  - qemu_interface: Fix managed='no' case when creating an ethernet interface (rhbz#2144738)
  - conf: clarify some external TPM error messages (rhbz#2063723)
  - qemu: hotplug: Remove legacy quirk for 'dimm' address generation (rhbz#2158701)
  - qemu: alias: Remove 'oldAlias' argument of qemuAssignDeviceMemoryAlias (rhbz#2158701)
  - qemu: Remove 'memAliasOrderMismatch' field from VM private data (rhbz#2158701)
  - rpc: Fix error message in virNetServerSetClientLimits (rhbz#2033879)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-3
changelog:
  - src: Don't use virReportSystemError() on virProcessGetStatInfo() failure (rhbz#2148266)
  - qemu: Provide virDomainGetCPUStats() implementation for session connection (rhbz#2148266)
  - virsh: Make domif-setlink work more than once (rhbz#2165466)
  - qemu_fd: Remove declaration for 'qemuFDPassNewDirect' (rhbz#2040272)
  - qemuStorageSourcePrivateDataFormat: Rename 'tmp' to 'objectsChildBuf' (rhbz#2040272)
  - qemu: command: Handle FD passing commandline via qemuBuildBlockStorageSourceAttachDataCommandline (rhbz#2040272)
  - qemuFDPassTransferCommand: Mark that FD was passed (rhbz#2040272)
  - qemu: fd: Add helpers allowing storing FD set data in status XML (rhbz#2040272)
  - qemu: domain: Store fdset ID for disks passed to qemu via FD (rhbz#2040272)
  - qemu: block: Properly handle FD-passed disk hot-(un-)plug (rhbz#2040272)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-4
changelog:
  - qemuProcessStop: Fix detection of outgoing migration for external devices (rhbz#2161557)
  - qemuExtTPMStop: Restore TPM state label more often (rhbz#2161557)
  - qemuProcessLaunch: Tighten rules for external devices wrt incoming migration (rhbz#2161557)
  - qemu_process: Produce better debug message wrt domain namespaces (rhbz#2167302)
  - qemu_namespace: Deal with nested mounts when umount()-ing /dev (rhbz#2167302)
  - qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (rhbz#2166411)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-5
changelog:
  - qemu_extdevice: Do cleanup host only for VIR_DOMAIN_TPM_TYPE_EMULATOR (rhbz#2168762)
  - qemu: blockjob: Handle 'pending' blockjob state only when we need it (rhbz#2168769)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-6
changelog:
  - rpc: client: Don't check return value of virNetMessageNew (rhbz#2145188)
  - rpc: Don't warn about "max_client_requests" in single-threaded daemons (rhbz#2145188)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-7
changelog:
  - qemu_snapshot: remove memory snapshot when deleting external snapshot (rhbz#2170826)
  - qemu_snapshot: refactor qemuSnapshotDeleteExternalPrepare (rhbz#2170826)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-1
changelog:
  - Rebased to libvirt-python-8.5.0 (rhbz#2060316)
  - The rebase also fixes the following bugs:
      rhbz#2092752


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-2
changelog:
  - Drop libwacom-show-stylus, it's a debugging tool that requires extra
    dependencies that we shouldn't pull in everywhere (#2044710)


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: David King <dking@redhat.com> - 2.9.10-12
changelog:
  - Fix CVE-2021-3516 (#1956969)
  - Fix CVE-2021-3517 (#1957002)
  - Fix CVE-2021-3518 (#1957029)
  - Fix CVE-2021-3537 (#1957285)


author: Simo Sorce <simo@redhat.com> - 1.1.34-3
changelog:
  - Drop crypto dependency.
  - The "cryptography" implemented in exslt is outdated and bad supporting only
    insecure algorithms (RC4, SHA1, MD5, MD4), and should not be used anyway.


author: Michal Ruprich <mruprich@redhat.com> - 1.0.225-3
changelog:
  - Resolves: #1965253 - CVE-2021-28902 libyang: NULL pointer dereference in read_yin_container()
  - Resolves: #1965255 - CVE-2021-28903 libyang: recursive call to lyxml_parse_mem() lead to crash


author: Remi Collet <remi@remirepo.net> - 1.7.2-1
changelog:
  - update to 1.7.2
  - fix installation layout using merged patch from
    https://github.com/nih-at/libzip/pull/190


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "aarch64-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j32  
    cd -


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-1
changelog:
  - update to 3.1.1 (#1979954 CVE-2021-3570 CVE-2021-3571)
  - add read-only UDS port
  - add option to set clockClass threshold
  - don't repeat some log messages in multi-port configuration
  - increase default TX timestamp timeout to 10 ms
  - limit unicast message rate per address and grant duration


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-6
changelog:
  - add support for VLAN over bond (#2120521)
  - handle EINTR when waiting for transmit timestamp (#2128786)
  - check for unexpected changes in frequency offset (#2150815)


author: Artem Egorenkov <aegorenk@redhat.com> - 3.6.0-7
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Sérgio Basto <sergio@serjux.com> - 2.14.1-1
changelog:
  - Update to 2.14.1
  - Disable javadoc (#1988896)
  - Build with jansi-2
  - Remove deps on slf4j-ext (no longer available in Fedora 35)


author: Brian C. Lane <bcl@redhat.com> 34.9.15-1
changelog:
  - tito: Add the LoraxRHELTagger from rhel8-branch (bcl)
    Related: rhbz#2070910
  - runtime-postinstall: Remove machine specific nvme files (bcl)
    Resolves: rhbz#2070910


author: Brian C. Lane <bcl@redhat.com> 34.9.16-1
changelog:
  - Makefile: Add local-srpm target to create a .src.rpm from HEAD (bcl)
    Related: rhbz#2088631
  - mkksiso: Fix s390x support (bcl)
    Related: rhbz#2088631
  - mkksiso: Remove use of os.path.join (bcl)
    Related: rhbz#2088631
  - Makefile: Add mkksiso to coverage report (bcl)
    Related: rhbz#2088631
  - setup.py: Install mkksiso to /usr/bin (bcl)
    Related: rhbz#2088631
  - mkksiso: Fix grub2 editing error (bcl)
    Related: rhbz#2088631
  - mkksiso: Rewrite to use xorriso features (bcl)
    Resolves: rhbz#2088631


author: Brian C. Lane <bcl@redhat.com> 34.9.17-1
changelog:
  - minimal.ks: Add include for architecture specific packages (bcl)
    Related: rhbz#2051548
  - livemedia.ks: Add include for architecture specific packages (bcl)
    Resolves: rhbz#2051548
  - tests: Add tests for mkksiso (bcl)
    Related: rhbz#2037015
  - mkksiso: Add kernel cmdline customization support (bcl)
    Resolves: rhbz#2037015
  - mkksiso: Move kickstart to --ks KICKSTART (bcl)
    Related: rhbz#2037015
  - mkksiso: Add helper functions for kernel cmdline modifications (bcl)
    Related: rhbz#2037015
  - lorax.spec: Fix changelog order (bcl)
    Resolves: rhbz#1972099


author: Brian C. Lane <bcl@redhat.com> 34.9.18-1
changelog:
  - mkksiso: Set u+rw permission on extracted files and directories (bcl)
    Related: rhbz#2088631
  - lorax.spec: Fix changelog (bcl)
    Resolves: rhbz#1972099


author: Brian C. Lane <bcl@redhat.com> 34.9.19-1
changelog:
  - mkksiso: Optionally support 3 arguments or --ks (bcl)
    Resolves: rhbz#2037015
  - mkksiso: Add -U to xorriso on ppc64le (bcl)
    Resolves: rhbz#2109665
  - mkksiso: Fix passing -iso-level to xorriso (bcl)
    Related: rhbz#2109665


author: Brian C. Lane <bcl@redhat.com> 34.9.20-1
changelog:
  - templates: Update runtime-* templates (bcl)
    Resolves: rhbz#2042057
  - templates: Update path to license files (bcl)
    Related: rhbz#2042057
  - templates: Update boot timeout to 5s (bcl)
    Related: rhbz#2042057


author: Brian C. Lane <bcl@redhat.com> 34.9.23-1
changelog:
  - rsyslog.conf: Set WorkDirectory to /var/lib/rsyslog (bcl)
    Resolves: rhbz#2158731
  - lorax.spec: fix changelog entry for 2132511 (bcl)
    Related: rhbz#2132511


author: Brian C. Lane <bcl@redhat.com> - 9.0-29
changelog:
  - Drop ia32 uefi package installation (bcl)
    Resolves: rhbz#2038397
  - Enable sftp when using inst.sshd (bcl)
    Resolves: rhbz#2035049


author: Brian C. Lane <bcl@redhat.com> - 9.0-30
changelog:
  - Add .discinfo on all arches (bcl)
    Resolves: rhbz#2030008
  - Add inst.rngd cmdline option (bcl)
    Resolves: rhbz#2028720


author: Brian C. Lane <bcl@redhat.com> - 9.0-31
changelog:
  - Do not install rng-tools (bcl)
    Resolves: rhbz#2028720
  - Revert "Add inst.rngd cmdline option" (bcl)
    Related: rhbz#2028720


author: Brian C. Lane <bcl@redhat.com> - 9.0-35
changelog:
  - Makefile: Making it easier to create releases (bcl)
    Related: rhbz#2071074
  - runtime-postinstall: Remove machine specific nvme files (bcl)
    Resolves: rhbz#2071074


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: Miro Hrončok <mhroncok@redhat.com> - 1-3
changelog:
  - Modify several conditionals to support RHEL 9+ and drop ancient Fedora 17
  - Add explicit conflict with older lua-devel
  - Require rpm, not redhat-rpm-config


author: Marian Csontos <mcsontos@redhat.com> - 2.03.16-2
changelog:
  - Exit with error when --devicesfile used does not exist.
  - Restore --reportformat option in pvdisplay.
  - Improve multipath backlist option handling.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.16-3
changelog:
  - Fix effect of setting multipath_component_detection to 0.
  - Fix lvmdbusd using lvm shell with editline.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-4
changelog:
  - Fix missing warning on thin pool over provisioning.
  - Fix infinite recursion in lvresize_fs_helper when resizing LUKS device.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-5
changelog:
  - Fix vgimportclone fail if PV has no metadata.
  - Fix lvmdbusd missing stderr for commands not returning JSON.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-6
changelog:
  - Fix lvresize resizing LUKS device only when resizing FS is enabled.
  - Improve lvresize handling of renamed volumes.
  - Fix random unmount when resizing volume backed by thin pool.


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: Ondrej Dubaj <odubaj@redhat.com> - 3.0.1-1
changelog:
  - Rebase to new major version 3.0.1 (it's Beta version)
  - Removed documentation/ folder, as it was removed by upstream


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.0.3-1
changelog:
  - Rebase to 3.0.3
  - Temporarily disable generation of -javadoc.rpm, due to missing feature in xmvn,
    which leads to build crash


author: Cornelia Huck <cohuck@redhat.com> - 0.69-1
changelog:
  - a2621934aa37 ("Merge pull request #18 from cohuck/validate")
  - ffbcef5a1c84 ("Merge pull request #25 from etrunko/master")
  - 5ec75a83bf30 ("Remove never used 'available' option")
  - d49b0f0db6b3 ("Merge pull request #23 from eskultety/man-fix")
  - 4cfe37eb2d99 ("man: Point --verbose to the 'list' command rather than 'types'")
  - a0ae49eb7178 ("Merge pull request #17 from cohuck/install_symlinks")
  - 504beba6e8f9 ("Force symlink cretion")
  - 522c5ded00ff ("Fix attribute validation")


author: Alex Williamson <alex.williamson@redhat.com> - 0.78-1
changelog:
  - e029640033d3 ("Automatic version commit for tag 0.78")
  - e32f506656fd ("use standard bash path")
  - 70690b64401f ("avoid other tags spilling into the .spec changelog")
  - 70b89c18cf5b ("Merge pull request #31 from awilliam/20201113.0")
  - 80187bc9ba03 ("Merge pull request #30 from fiuczy/fix-error-cleanup")
  - 97ea8bbeefb7 ("mdevctl: fix cleanup on error when creating and removing mdev")
  - b45d33dfd36c ("version support")
  - 2b1c16ce6fb0 ("Fix attributes getting applied via start-parent-mdevs")
  - 25d5e8d24d57 ("mdevctl: fix cleanup on error when writing to attribute")


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.31-0.1.beta
changelog:
  - New version
    Resolves: rhbz#1758783
  - Dropped no-scp, no-optimization, compile-fix, crash-fix patches (all upstreamed)
  - Dropped fgnu89-inline patch (probably not needed)


author: Konstantin Kostiuk <kkostiuk@redhat.com> 103.0.0
changelog:
  - Set version to 103.0.0
  - BZ#1992643 - Add mingw-qemu-ga-win package to CentOS stream
  - Rebase to qemu-6.2.0


author: Konstantin Kostiuk <kkostiuk@redhat.com> 104.0.0
changelog:
  - Set version to 104.0.0
  - BZ#2078384 - Rebase QEMU Guest Agent Windows to 7.0.0
  - Rebase to qemu-7.0.0


author: Konstantin Kostiuk <kkostiuk@redhat.com> 104.0.2
changelog:
  - Set version to 104.0.2
  - BZ#2084608 - Fix mismatched allocation function
  - BZ#2084613 - qga-win: race condition in build


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.1
changelog:
  - Set version to 105.0.1
  - Remove redundant package
  - BZ#2090333 - [mingw-qemu-ga-win] qga command 'guest-get-fsinfo' can't query bus-type of USB


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.2
changelog:
  - Set version to 105.0.2
  - Fix wrong requires
  - Fix missing patch0002
  - Remove extra Summary
  - BZ#2090333 - [mingw-qemu-ga-win] qga command 'guest-get-fsinfo' can't query bus-type of USB


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.3
changelog:
  - Set version to 105.0.3
  - BZ#2090250 - mingw-qemu-ga-win: Add Provides: bundled() to rpm packages [rhel-9]


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.0
changelog:
  - Set version to 106.0.0
  - RHEL-408 - Add provides, obsoletes for mingw-qemu-ga-win
  - RHEL-385 - Rebase mingw-qemu-ga-win to QEMU 8.0


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Jakub Hrozek <jhrozek@redhat.com> - 0.17.0-6
changelog:
  - Related: rhbz#1986806 - CVE-2021-3639 mod_auth_mellon: Open Redirect
                            vulnerability in logout URLs


author: Jakub Hrozek <jhrozek@redhat.com> - 2.4.9.1-1
changelog:
  - Resolves: rhbz#1987223 - CVE-2021-32792 mod_auth_openidc: XSS when using
                             OIDCPreservePost On [rhel-9.0]
  - Resolves: rhbz#1987217 - CVE-2021-32791 mod_auth_openidc: hardcoded
                             static IV and AAD with a reused key in AES GCM
                             encryption [rhel-9.0]
  - Resolves: rhbz#1987204 - CVE-2021-32786 mod_auth_openidc: open redirect in
                             oidc_validate_redirect_url() [rhel-9.0]


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-1
changelog:
  - Resolves: rhbz#2001852 - CVE-2021-39191 mod_auth_openidc: open redirect
                             by supplying a crafted URL in the target_link_uri
                             parameter


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-2
changelog:
  - Resolves: rhbz#2153656 - CVE-2022-23527 - Open Redirect in
    oidc_validate_redirect_url() using tab character


author: Paul Howarth <paul@city-fan.org> - 2.3.9-24
changelog:
  - Drop EL-6 support
    - Use %license unconditionally
    - _httpd_* macros always available
    - Run directory is always /run on tmpfs
    - Assume httpd ≥ 2.4 filesystem layout
    - systemd-units always provided by systemd


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-26
changelog:
  - Resolves: #1958882 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-3
changelog:
  - Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
    in forward proxy configurations


author: Coty Sutherland <csutherl@redhat.com> - 1.2.48-20
changelog:
  - Cleanup spec file and remove .redhat-N suffix from release
  - Remove ap24 subpackage since we only need to build for one version of httpd


author: Fedora Release Engineering <releng@fedoraproject.org> - 2.9.3-10
changelog:
  - Resolves: #1930664 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules
  - rename mlogc to mod_security-mlogc


author: Tomas Orsava <torsava@redhat.com> - 4.7.1-9
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Use the modern way of filtering Provides not to interfere with modern Python
    RPM generators
  - Related: rhbz#1990421


author: Jakub Kadlcik <frostyx@email.cz> 0.5-1
changelog:
  - Release for epel8 as well (frostyx@email.cz)
  - Require createrepo_c for the createrepo_mod package (frostyx@email.cz)
  - modulemd-merge: improve README.md file (frostyx@email.cz)
  - repo2module: improve README.md file (frostyx@email.cz)
  - dir2module: improve README.md file (frostyx@email.cz)
  - Improve README.md file (frostyx@email.cz)
  - createrepo_mod: improve README.md file (frostyx@email.cz)
  - Loosen the python3-libmodulemd dependency to just libmodulemd
    (frostyx@email.cz)
  - createrepo_mod: use just createrepo_c if it has built-in module support
    (frostyx@email.cz)
  - Explicitly depend on python3-setuptools (frostyx@email.cz)
  - createrepo_mod: dump modules.yaml into the correct directory
    (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6-1
changelog:
  - Generate manpages for all tools in this repository 
  - modulemd-generate-macros: add a tool for generating module-build-macros
  - modulemd_tools: add the first pieces of a python library (for internal usage only)


author: Jakub Kadlcik <frostyx@email.cz> 0.7-1
changelog:
  - Generate manpages on the fly
  - Automated test builds incl. Docker/Travis
  - Fix PEP8 in all tools
  - modulemd_tools: temporarily skip some tests on EPEL8 or Fedora
  - Drop libmodulemd dependency in favor of python3-libmodulemd


author: Jakub Kadlcik <frostyx@email.cz> 0.8-1
changelog:
  - modulemd_tools: drop python3-parameterized dependency (frostyx@email.cz)
  - Package modulemd_tools helper lib (fvalder@redhat.com)
  - Add modulemd-merge tests (fvalder@redhat.com)
  - Add createrepo_mod tests (fvalder@redhat.com)
  - Replace master in fedora releaser to rawhide (frostyx@email.cz)


author: Adam Jackson <ajax@redhat.com> - 2.3.4-25
changelog:
  - Fix invoking autogen/configure so the default CFLAGS actually get applied
    Resolves: rhbz#2044881


author: Jan Horak <jhorak@redhat.com> - 1.9-28
changelog:
  - Removed NPAPI from the description, since is no longer supported in Mozilla
    products
    Resolves: rhbz#2041339


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Honggang Li <honli@redhat.com> - 5.7-3
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960479


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2015392


author: Davide Caratti <dcaratti@redhat.com> - 0.7-2
changelog:
  - add a simple sanity test and enable gating. Related: rhbz#1962741
  - don't overwrite global build options. Related: rhbz#1967697
  - fix 'check_conflicts' on multilib. Related: rhbz#1967697


author: Davide Caratti <dcaratti@redhat.com> - 0.8-2
changelog:
  - fix mptcpize to work also when protocol number is 0 (upstream issue #159)
    and when command resides in another file system (upstream issue #161)
    Related: rhbz#2015623


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 0.5.13-6
changelog:
  - updating line in /usr/lib/tmpfiles.d/munge.conf: /var/run/munge → /run/munge
  - add license tag
  - add requires logrotate


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, OpenSSL 3, s390 and robin hood
  - Add a new plugin


author: Michal Schorm <mschorm@redhat.com> - 1.0.1-1
changelog:
  - Rebase to 1.0.1 release
    This release is just a sync-up with upstream selinux-policy
  - URL changed to a new upstream repository


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.3-1
changelog:
  - New upstream stable version 1.26.3.
    resolves: rhbz#1950632
  - Add Python .cleanup() method.
  - Fix data corruption in zero and trim on unaligned tail.
    resolves: rhbz#1990134


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.3-3
changelog:
  - Fix parsing of delay-* options
    resolves: rhbz#1991649
  - Fix assertion failure during server shutdown
  - Fix delay-close option
    resolves: rhbz#1991652
  - tests/test-debug-flags.sh: Don't use port 10809 during test
    resolves: rhbz#1991945


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.5-1
changelog:
  - Rebase along stable branch to 1.26.5
    resolves: rhbz#1995327
  - Add nbdkit-vddk-plugin -D vddk.stats=1 flag
    resolves: rhbz#1995329
  - Add nbdkit-cow-filter cow-block-size parameter
    resolves: rhbz#1995332
  - Fix CVE-2021-3716 nbdkit: NBD_OPT_STRUCTURED_REPLY injection on STARTTLS
  - Update keyring


author: Richard W.M. Jones <rjones@redhat.com> - 1.28.5-1
changelog:
  - Rebase to new stable branch version 1.28.5
    resolves: rhbz#2011709
  - Move nbdkit-null-plugin to nbdkit-server package
    resolves: rhbz#2021154
  - Add asynchronous support in nbdkit-vddk-plugin
  - Drop obsolete documentation related to thread model in vddk plugin
    resolves: rhbz#2018463
  - Switch to xorriso (instead of genisoimage)
  - Distribute README.VDDK in nbdkit-vddk-plugin subpackage
  - Fix nbdkit-cow-filter cow-block-size=4096
  - file: Fix implementation of cache=none for writes
    resolves: rhbz#2029751
  - vddk: Implement VMDK creation


author: Richard W.M. Jones <rjones@redhat.com> - 1.30.8-1
changelog:
  - Rebase to new stable branch version 1.30.8
    resolves: rhbz#2059289
  - Add automatic provides generator and subpackage nbdkit-srpm-macros
    resolves: rhbz#2059291
  - New filters: blocksize-policy, protect, retry-request
  - Fix license of bash-completion subpackage
  - vddk: Fix use of uninitialized memory when computing block size
    resolves: rhbz#2066655
  - Skip vsock tests unless the vsock_loopback module is loaded
    resolves: rhbz#2069558
  - Add support for ssh create remote file.
  - Suppress excess messages from nbdkit-nbd-plugin
    resolves: rhbz#2083498
  - Suppress incorrect VDDK error when converting guests from vCenter
    resolves: rhbz#2083617
  - Backport new readahead filter from 1.32.
  - Backport new LUKS filter from 1.32.
  - Backport new scan filter from 1.32.
  - Add new Python binding for nbdkit_parse_size from 1.32
  - Add new rate filter burstiness setting from 1.32
  - vddk: Suppress new VDDK "phone home" messages
    resolves: rhbz#2104720
  - vddk: Clearer error message when thumbprint is wrong
    resolves: rhbz#1905772
  - Fix memory allocator=malloc,mlock=true
    resolves: rhbz#2044432
  - Fix multiple Coverity problems
  - Fix bounds error in nbdkit-checkwrite-filter
    resolves: rhbz#2108545


author: Richard W.M. Jones <rjones@redhat.com> - 1.32.5-4
changelog:
  - Rebase to new stable branch version 1.32.5
    resolves: rhbz#2135765
  - Move stats filter to new subpackage.
  - Improve error message when PasswordAuthentication is set to 'no'
    resolves: rhbz#2158300
  - luks: Avoid crash when image does not contain a LUKS header
    resolves: rhbz#2159581
  - curl: Enable multi-conn for read-only connections
    resolves: rhbz#2166686


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-9
changelog:
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141902) and (#2141906)
  - fix memory leak when ipv6 disable set to 1 (#2151540)


author: Thomas Haller <thaller@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0 release
  - Drop NotShowIn=GNOME
  - Use wireless-security code from libnma
  - Add flatpak build configuration
  - applet: hide unmanaged ethernet devices in nm-applet
  - applet: fix Wi-Fi scan requests with appindicator
  - editor: fix drop down list for connection.secondaries


author: Steve Dickson <steved@redhat.com> 2.5.4-11
changelog:
  - nfs.man: adding new mount option max_connect (bz 2106848)
  - systemd: Fix format-overflow warning (bz 2106896)


author: Steve Dickson <steved@redhat.com> 2.5.4-12
changelog:
  - idmapd: Fix error status when nfs-idmapd exits (bz 2001764)
  - mount.nfs Fix error reporting for already mounted shares (bz 2054300)
  - rpcctl - fix failure when setting xprt offline and online (bz 2081934)
  - rpc-pipefs-generator: allocate enough space (bz 2109420)


author: Steve Dickson <steved@redhat.com> 2.5.4-15
changelog:
  - Fix uninstall warnings (bz 2048023)
  - rpc-statd.service: Stop rpcbind and rpc.stat in an exit race (bz 2112941)


author: Steve Dickson <steved@redhat.com> 2.5.4-16
changelog:
  - nfsd.man: Explain that setting nfsv4=n turns off all v4 versions (bz 2042362)
  - mount.nfs: fix NULL pointer derefernce in nfs_parse_square_bracket (bz 2136807)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-5
changelog:
  - Add -mod-devel subpackage for building external nginx modules
    Resolves: rhbz#1991720 (Neal Gompa)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-10
changelog:
  - Resolves: #1975747 - CVE-2021-3618 nginx: ALPACA: Application Layer Protocol
    Confusion - Analyzing and Mitigating Cracks in TLS Authentication


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1
changelog:
  - Resolves: #2096174 - RFE: add nginx:1.22 module stream
  - switch to pcre2
  - add stream_geoip_module and stream_realip_module
  - enable kTLS support


author: Martin Osvald <mosvald@redhat.com> - 3:7.92-1
changelog:
  - New version 7.92
  - Resolves: #2180330 - Rebase nmap for TLS v1.3 support
  - Resolves: #2164833 - Remove duplicate tests


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-1
changelog:
  - Update to latest version
  - Use jinja and jq
  - Don't fix python3
  - Resolves: CVE-2022-21824, CVE-2021-44531, CVE-2021-44532, CVE-2021-44533
  - Resolves CVE-2020-15095
  - Resolves: CVE-2021-3918, CVE-2021-22959, CVE-2021-22960
  - Resolves: CVE-2021-3807, CVE-2021-27290


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-2
changelog:
  - Build with bootstrap by default due to old versions of dependencies available
  - Resolves: #2042995, #2042970, #2042981, #2042989
  - Resolves: #2029936, #2024890, #2014499, #2014135
  - Resolves: #2013834, #1945299


author: Jan Staněk <jstanek@redhat.com> - 16.16.0-1
changelog:
  - Rebase to version 16.16.0
    Resolves: RHBZ#2106290
    Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
    Resolves: CVE-2022-29244


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.18.1-2
changelog:
  - Add back libs and v8-devel subpackages
  - Related: RHBZ#2121126
  - Record previously fixed CVE
  - Resolves: CVE-2021-44906


author: Jan Staněk <jstanek@redhat.com> - 1:16.14.0-5
changelog:
  - Unify configure calls into single command
  - Refactor bootstrap-related parts
  - Decouple dependency bundling from bootstrapping


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.7.0-1
changelog:
  - Update to latest release
  - Resolves CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
  - Resolves CVE-2022-29244
  - Resolves: RHBZ#2111009


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.8.0-1
changelog:
  - Update to latest release
  - Resolves: RHBZ#2111009
  - Provide undici and cjs-module-lexer + wasi-sdk sources
  - Resolves: RBHZ#2111861


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
changelog:
  - Resolves: RHBZ#2005419
  - Resolves CVE-2020-28469
  - Rebase to newest version
  - Change source to npmjs.com


author: Jan Staněk <jstanek@redhat.com> - 2.0.19-1
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469
    Resolves: CVE-2020-7788


author: Stephen Gallagher <sgallagh@redhat.com> - 2021.06-1
changelog:
  - Update to 2021.06-1
  - bundler: Handle archaic license metadata
  - bundler: Warn about bundled dependencies with no license metadata


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-17
changelog:
  - fix consistency return errors. We shouldn't lock the FIPS
    token if the application asked for invalid DH parameters on
    on keygen.


author: Andreas Schneider <asn@redhat.com> - 1.1.11-8
changelog:
  - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install
                             smaller footprint


author: Jan Macku <jamacku@redhat.com> - 1.15-1
changelog:
  - spec: sync specfile with Fedora
  - makefile: Use rpmdev-bumpspec's legacy date option
  - Add feature to generate specfile entry, commit and archive


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Tomas Orsava <torsava@redhat.com> - 1.20.1-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Bryan Gurney <bgurney@redhat.com> - 1.10-8.el9
changelog:
  - Supersede uninitialized value patch with upstream version
  - Add upstream patch: common: fix mismatch between prototype and body
  - Makefile: bypass check-doc in check target
  - Related: rhbz#1985096


author: Bryan Gurney <bgurney@redhat.com> - 1.10.1-1
changelog:
  - Update to PMDK version 1.10.1
  - Related: rhbz#1874208
  - Remove BuildRequires line for libfabric-devel
  - Related: rhbz#2009502


author: Jerry James <loganjerry@gmail.com> - 8.0.1-1
changelog:
  - Version 8.0.1
  - Add 0002-Catch-CompileException-in-test.patch to fix compilation of a test
  - Make generate-tarball.sh actually compress the tarball


author: Jindrich Novy <jnovy@redhat.com> - 1.2.5-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.5
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.6-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.6
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.8-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.8
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1.2.9-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9
  - Related: #2176063


author: Zuzana Miklankova <zmiklank@redhat.com> - 1.9.0~beta1-1
changelog:
  - Rebase to 1.9-beta1
  - change of licences of ongres-scram and ongres-scram-javadoc to "BSD and MIT and ASL 2.0"


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-4
changelog:
  - ovt-Fix-a-memory-leak-reported-by-a-partner-from-their-C.patch [bz#1954040]
  - Resolves: bz#1954040
    ([ESXi][RHEL9.0][open-vm-tools] Coverity detected an important defect in open-vm-tools-11.2.5 rebase)


author: Miroslav Rezanina <rezanin@redhat.com> - 11.3.0-1
changelog:
  - Rebase to 11.3.0 [bz#1974471]
  - Resolves: bz#1974471
    ([ESXi][RHEL9]Open-vm-tools release 11.3.0 has been released - please update for RHEL 9.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.3.5-1
changelog:
  - Rebase to 11.3.5 [bz#2008243]
  - Resolves: bz#2008243
    ([ESXi][RHEL9]Open-vm-tools release 11.3.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.0.0-1
changelog:
  - Rebase to 12.0.0 [bz#2061193]
  - Resolves: bz#2061193
    ([ESXi][RHEL9]Open-vm-tools release 12.0.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.0.5-1
changelog:
  - Rebase to open-vm-tools 12.0.5 [bz#2090275]
  - Resolves: bz#2090275
    ([ESXi][RHEL9]Open-vm-tools release 12.0.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.1.0-1
changelog:
  - Rebase to open-mv-tools 12.1.0 [bz#2121203]
  - Resolves: bz#2121203
    ([ESXi][RHEL9]Open-vm-tools release 12.1.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.1.5-1
changelog:
  - Rebase to open-vm-tools 12.1.5 [bz#2150190]
  - Resolves: bz#2150190
    ([ESXi][RHEL9]Open-vm-tools release 12.1.5 has been released - please rebase)


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Milan Crha <mcrha@redhat.com> - 2.3-38
changelog:
  - Related: #2013578 (Add patch to build against samba 4.15)
  - Avoid build time dependencies related to server, when it's not built


author: Karol Herbst <kherbst@redhat.com> - 3.0-0.20200512git5cc337c
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Bump CLHPP version to 2.0.11


author: Karol Herbst <kherbst@redhat.com> - 3.0-1.20200512gitd082d42
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Rework CLHPP handling as file is not downloadable anymore
  - Bump CLHPP version to 2.0.12


author: Michael Petlan <mpetlan@redhat.com> - 1.0.0-5
changelog:
  - Added some linker hardening flags to pass annocheck
    Related: rhbz#2031802

    * Tue Dec 14 2021 Michael Petlan <mpetlan@redhat.com> - 1.0.0-5
  - Added gating
    Related: rhbz#2031794


author: Michael Petlan <mpetlan@redhat.com> - 1.2.0-2
changelog:
  - Update to upstream 1.2.0 -- fix opencsd_tag
    Related: rhbz#2041578

    * Fri Jan 21 2022 Michael Petlan <mpetlan@redhat.com> - 1.2.0-1
  - Update to upstream 1.2.0
    Related: rhbz#2041578


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-11
changelog:
  - Initialize crypto API only once (rhbz#2020044)
  - Add support for Blueprint remediations (rhbz#2020052)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-12
changelog:
  - Allow using local files instead of remote resources (rhbz#2015518)
  - Add an alternative source of hostname (rhbz#2021509)
  - Lower memory limits and improve their checking (rhbz#2022362)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041782)
  - Select and exclude groups of rules on the command line (rhbz#2020580, rhbz#2020581)
  - The boot-time remediation service for systemd's Offline Update mode


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2109485)
  - Remove oscap-remediate service (rhbz#2111358)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159286)
  - Fix error when processing OVAL filters (rhbz#2126883)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2138884)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-22
changelog:
  - Avoid spirous message on connecting to the machine with ssh-rsa keys
    Related: rhbz#2115246
  - Set minimal value of RSA key length via configuration option
    Related: rhbz#2066882


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-24
changelog:
  - Set minimal value of RSA key length via configuration option - support both names
    Resolves: rhbz#2128352


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-26
changelog:
  - Fix one-byte overflow in SSH banner processing
    Resolves: rhbz#2138345
  - Fix double free() in error path
    Resolves: rhbz#2138347


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-28
changelog:
  - Do not try to use SHA1 for host key ownership proof when we don't support it server-side
    Resolves: rhbz#2088750


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-41
changelog:
  - Zeroize public keys as required by FIPS 140-3
    Related: rhbz#2102542
  - Add FIPS indicator for HKDF
    Related: rhbz#2114772


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-43
changelog:
  - CVE-2022-3602: X.509 Email Address Buffer Overflow
  - CVE-2022-3786: X.509 Email Address Buffer Overflow
    Resolves: CVE-2022-3602


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-44
changelog:
  - SHAKE-128/256 are not allowed with RSA in FIPS mode
    Resolves: rhbz#2144010
  - Avoid memory leaks in TLS
    Resolves: rhbz#2144008
  - FIPS RSA CRT tests must use correct parameters
    Resolves: rhbz#2144006
  - FIPS-140-3 permits only SHA1, SHA256, and SHA512 for DRBG-HASH/DRBG-HMAC
    Resolves: rhbz#2144017
  - Remove support for X9.31 signature padding in FIPS mode
    Resolves: rhbz#2144015
  - Add explicit indicator for SP 800-108 KDFs with short key lengths
    Resolves: rhbz#2144019
  - Add explicit indicator for HMAC with short key lengths
    Resolves: rhbz#2144000
  - Set minimum password length for PBKDF2 in FIPS mode
    Resolves: rhbz#2144003
  - Add explicit indicator for PSS salt length in FIPS mode
    Resolves: rhbz#2144012
  - Clamp default PSS salt length to digest size for FIPS 186-4 compliance
    Related: rhbz#2144012
  - Forbid short RSA keys for key encapsulation/decapsulation in FIPS mode
    Resolves: rhbz#2145170


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-2
changelog:
  - Various provider-related imrovements necessary for PKCS#11 provider correct operations
    Resolves: rhbz#2142517
  - We should export 2 versions of OPENSSL_str[n]casecmp to be compatible with upstream
    Resolves: rhbz#2133809
  - Removed recommended package for openssl-libs
    Resolves: rhbz#2093804
  - Adjusting include for the FIPS_mode macro
    Resolves: rhbz#2083879
  - Backport of ppc64le Montgomery multiply enhancement
    Resolves: rhbz#2130708
  - Fix explicit indicator for PSS salt length in FIPS mode when used with
    negative magic values
    Resolves: rhbz#2142087
  - Update change to default PSS salt length with patch state from upstream 
    Related: rhbz#2142087


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-5
changelog:
  - Fixed X.509 Name Constraints Read Buffer Overflow
    Resolves: CVE-2022-4203
  - Fixed Timing Oracle in RSA Decryption
    Resolves: CVE-2022-4304
  - Fixed Double free after calling PEM_read_bio_ex
    Resolves: CVE-2022-4450
  - Fixed Use-after-free following BIO_new_NDEF
    Resolves: CVE-2023-0215
  - Fixed Invalid pointer dereference in d2i_PKCS7 functions
    Resolves: CVE-2023-0216
  - Fixed NULL dereference validating DSA public key
    Resolves: CVE-2023-0217
  - Fixed X.400 address type confusion in X.509 GeneralName
    Resolves: CVE-2023-0286
  - Fixed NULL dereference during PKCS7 data verification
    Resolves: CVE-2023-0401


author: Matej Tyc <matyc@redhat.com> - 2.0.0-8
changelog:
  - Introduce unified help support
    Resolves: rhbz#2043512
  - Update translations
    Resolves: rhbz#2017374


author: Matej Tyc <matyc@redhat.com> - 2.0.0-9
changelog:
  - Introduce the firstboot remediation
    Resolves: rhbz#1999587
  - Add better error handling of installation using unsupported installation sources
    Resolves: rhbz#2042334


author: Matej Tyc <matyc@redhat.com> - 2.0.0-12
changelog:
  - Remove the firstboot remediation feature completely.
    We can't have it, while maintaining the standard UX.
    Resolves: rhbz#2065751


author: Matej Tyc <matyc@redhat.com> - 2.0.0-13
changelog:
  - Fix problems with handling multi-datastream archives
    Resolves: rhbz#2129846
  - Fix a crash when compulsively clicking in the GUI
    Resolves: rhbz#2127502


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210809-1
changelog:
  - Update for new release (v20210809) [bz#1970881]
  - Resolves: bz#1970881
    ([RHEL-9] virt-install --location fails with Could not find an installable distribution at URL '/var/lib/libvirt/images/boot.iso')


author: Victor Toso <victortoso@redhat.com> - 20221130-1
changelog:
  - Update for new release (v20221130)
    Resolves: rhbz#2135751
  - Add rhel-8.8 and rhel-9.2 prereleases
    Related: rhbz#2135751


author: Luca BRUNO <lucab@redhat.com> - 2021.6-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2021.6
    Resolves: rhbz#2026931


author: Luca BRUNO <lucab@redhat.com> - 2022.2-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2022.2
    Resolves: rhbz#2070964


author: Luca BRUNO <lucab@redhat.com> - 2022.5-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2022.5
    Resolves: rhbz#2119815


author: Luca BRUNO <lucab@redhat.com> - 2022.6-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2022.6
    Resolves: rhbz#2134054


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-14
changelog:
  - pam_lastlog: check localtime_r() return value. Resolves: #2130124
  - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2126632
  - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2126648


author: Peng Wu <pwu@redhat.com> - 1.48.7-3
changelog:
  - Update pango-emoji-table.h for emoji 14 support
  - Add pango-update-emoji.patch
  - Resolves: #2119674


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.42.2-3
changelog:
  - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use
    cairomm1.0, which may be a virtual Provides, in the manual lib Requires


author: Stefano Brivio <sbrivio@redhat.com> - 0^20221015.gb3f3591-1
changelog:
  - Add versioning information
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2022_09_29.06aa26f..2022_10_15.b3f3591


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230222.g4ddbcb9-2
changelog:
  - udp: Actually use host resolver to forward DNS queries (rhbz#2177075)
  - conf: Split add_dns{4,6}() out of get_dns() (rhbz#2177075)
  - conf, udp: Allow any loopback address to be used as resolver (rhbz#2177075)
  - tcp, tcp_splice: Get rid of false positive CWE-394 Coverity warning from fls() (rhbz#2177084)
  - tcp: Avoid false (but convoluted) positive Coverity CWE-476 warning (rhbz#2177084)
  - tcp: Avoid (theoretical) resource leak (CWE-772) Coverity warning (rhbz#2177084)
  - Fix definitions of SOCKET_MAX, TCP_MAX_CONNS (rhbz#2177084)
  - doc/demo: Fix and suppress ShellCheck warnings (rhbz#2177084)
  - contrib/selinux: Drop duplicate init_daemon_domain() rule (rhbz#2176813)
  - contrib/selinux: Let passt write to stdout and stderr when it starts (rhbz#2176813)
  - contrib/selinux: Allow binding and connecting to all UDP and TCP ports (rhbz#2176813)
  - contrib/selinux: Let interface users set paths for log, PID, socket files (rhbz#2176813)
  - contrib/selinux: Drop "example" from headers: this is the actual policy (rhbz#2176813)
  - contrib/selinux: Drop unused passt_read_data() interface (rhbz#2176813)
  - contrib/selinux: Split interfaces into smaller bits (rhbz#2176813)
  - fedora: Install SELinux interface files to shared include directory (rhbz#2176813)
  - tcp, udp, util: Pass socket creation errors all the way up (rhbz#2177080)
  - tcp, udp: Fix partial success return codes in {tcp,udp}_sock_init() (rhbz#2177080)
  - conf: Terminate on EMFILE or ENFILE on sockets for port mapping (rhbz#2177080)
  - tcp: Clamp MSS value when queueing data to tap, also for pasta (rhbz#2177083)
  - Fix up SELinux labels on install/uninstall, require matching -selinux package (rhbz#2176813)
  - Resolves: rhbz#2177075 rhbz#2177084 rhbz#2177080 rhbz#2177083 rhbz#2176813


author: Nathan Scott <nathans@redhat.com> - 5.3.5-8
changelog:
  - Fix pcp-zeroconf logger interval override regression (BZ 1991764)
  - Remove warnings from spec setup of PCP systemd units (BZ 2048024)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-3
changelog:
  - Fix remaining issues in the pcp-ss(1) utility (BZ 1981886)
  - Remove benign pmie systemd unit file warning (BZ 2072971)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-5
changelog:
  - Harden pmdapostfix(1) against missing Postfix (BZ 2059463)
  - Fix cgroups failure on non-x86_64 platforms (BZ 2081262)


author: Nathan Scott <nathans@redhat.com> - 6.0.0-1
changelog:
  - Support --top* options in the pcp-dstat(1) utility (BZ 2020988)
  - Performance improvements, fixes in pmseries --load (BZ 2027430)
  - Switch from static pcp useradd to systemd-sysusers (BZ 2095445)
  - Rebase to latest stable version of PCP (BZ 2117074)


author: Nathan Scott <nathans@redhat.com> - 6.0.1-1
changelog:
  - Convert to independent selinux policy (BZs 1941873, 2127037)
  - Improve pmproxy REST API timeout handling (BZ 2130208)
  - Rebase to latest stable version of PCP (BZ 2117074)


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Petr Pisar <ppisar@redhat.com> - 10.36-4
changelog:
  - Fix a mismatch if \K was involved in a recursion
  - Restore single character repetition optimization in JIT (upstream bug #2698)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-1
changelog:
  - Rebase to the 10.37
  - libpcre2-posix.so.2* SONAME bump to libpcre2-posix.so.3*
  - Enable JIT for s390x arch
  - Patches upstreamed: Patch 1,2,3,4
  - Resolves: rhbz#1970765, BZ#1965025


