# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-3
changelog:
  - Resolves: RHEL-18333 Can't rename users member of automember rule
  - Resolves: RHEL-61341 After an initial failure, subsequent online backups will not work.
  - Resolves: RHEL-63887 nsslapd-mdb-max-dbs autotuning doesn't work properly
  - Resolves: RHEL-63891 dbscan crashes when showing statistics for MDB
  - Resolves: RHEL-63998 dsconf should check for number of available named databases
  - Resolves: RHEL-78344 During import of entries without nsUniqueId, a supplier generates duplicate nsUniqueId (LMDB only) [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-4
changelog:
  - Resolves: RHEL-78722 - Failed to set sslversionmax to TLS1.3 in FIPS mode with dsconf $INSTANCE security set --tls-protocol-max TLS1.3


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-3
changelog:
  - Resolves: RHEL-77983 - Defects found by OpenScanHub
  - Resolves: RHEL-79673 - Improve the "result" field of ipa-healthcheck if replicas are busy
  - Resolves: RHEL-80496 - Can't rename users member of automember rule [rhel-9]
  - Resolves: RHEL-81141 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9]
  - Resolves: RHEL-89736 - dsconf backend replication monitor fails if replica id starts with 0 [rhel-9]
  - Resolves: RHEL-89745 - ns-slapd crash in dbmdb_import_prepare_worker_entry() [rhel-9]
  - Resolves: RHEL-89753 - Nested group does not receive memberOf attribute [rhel-9]
  - Resolves: RHEL-89769 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-9]
  - Resolves: RHEL-89782 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-9]
  - Resolves: RHEL-95768 - Improve error message when bulk import connection is closed [rhel-9]
  - Resolves: RHEL-101189 - lib389/replica.py is using unexisting datetime.UTC in python3.9


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-4
changelog:
  - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-5
changelog:
  - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9]
  - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry
  - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9]
  - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore.
  - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9]
  - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9]
  - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9]
  - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9]
  - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9]
  - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-7
changelog:
  - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9]
  - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9]
  - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9]
  - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9]
  - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9]
  - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9]
  - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9]
  - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9]


author: Caolán McNamara <caolanm@redhat.com> - 2.4.1-5
changelog:
  - disable building BOX2D_BUILD_UNIT_TESTS due to "SIGSTKSZ ... no
    longer constant on Linux ... redefined to sysconf(_SC_SIGSTKSZ)"
    https://github.com/bminor/glibc/blob/master/NEWS causing build failure


author: Paul Howarth <paul@city-fan.org> - 1.0.5-23
changelog:
  - Don't pass gcc-only compiler flags to other compilers, e.g. clang
    (based on https://src.fedoraproject.org/rpms/Judy/pull-request/3 from
    Timm Baeder)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.52.0-1
changelog:
  - Update to 1.52.0
  - Add support for creating VLANs for secondary VNICs in nm-cloud-setup (RHEL-36423)
  - Always reset retries when unblocking children or ports (RHEL-78122)
  - Prevent the activation of unavailable OVS interfaces (RHEL-79997)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.53.1-1
changelog:
  - Update to 1.53.1 (dev)
  - Update MPTCP endpoints creation order (RHEL-78752)
  - Print all warnings from nmcli to stderr (RHEL-74255)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.2-1
changelog:
  - Update to 1.53.2 (dev)
  - Fix invalid memory access on Dnsconfd DBUS error (RHEL-83175)
  - Avoid getting transient hostname when "localhost" set in /etc/hostname (RHEL-55730)


author: Filip Pokrývka <fpokryvk@redhat.com> - 1:1.53.3-1
changelog:
  - Update to 1.53.3 (dev)
  - Add more IPv6 prefix delegation options (RHEL-85765)
  - Fix order of parsing port/controller properties in nmcli (RHEL-85767)
  - Improve interface activation logic (RHEL-85766)
  - Fix WireGuard IPv6 firewall rules (RHEL-85763)
  - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.4-1
changelog:
  - Update to 1.53.4 (dev)
  - initrd: add new NBFT parser (RHEL-83061)
  - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
  - Support reapply on OVS settings (RHEL-86877)
  - Add support for configuring the loopback interface in nmtui (RHEL-85770)
  - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
  - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
  - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

  Resolves: RHEL-83061
  Resolves: RHEL-59083
  Resolves: RHEL-87596
  Resolves: RHEL-85770
  Resolves: RHEL-85764
  Resolves: RHEL-85778
  Resolves: RHEL-87168


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.90-1
changelog:
  - Update to 1.54.0 (rc1)
  - Devices not becoming managed sometimes (RHEL-93108)
  - Crash on _l3cfg_notify_cb (RHEL-92314)
  - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.91-1
changelog:
  - Update to 1.54.0 (rc2)
  - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
  - Fix a race condition in ovs tun interface (RHEL-98551)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.92-1
changelog:
  - Update to 1.54.0 (rc3)
  - Fix ipv6 static route deleted with dualstack (RHEL-102772)
  - Allow setting IP method to disabled in port connection (RHEL-102768)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.54.0-1
changelog:
  - Update to 1.54.0
  - Fix reaply on bridge port VLAN (RHEL-102743)
  - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)


author: Vladimír Beneš <vbenes@redhat.com>- 1:1.54.1-1
changelog:
  - Update to 1.54.1
  - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
  - Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
  - Global DNS config without domains silently ignored from D-Bus (RHEL-115973)


author: Neal Gompa <ngompa@centosproject.org> - 2.0.18-1
changelog:
  - Update to 2.0.18
    Resolves: rhbz#2028076
  - Fix multilib conflict with SDL_revision.h (rhbz#2008838)
  - Backport fix for building against wayland-1.20+
  - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-10
changelog:
  - wla-Disable-automatic-log-collector.patch [RHEL-7273]
  - Resolves: RHEL-7273
    ([Azure][WALA] Consider to disable Log collector)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-11
changelog:
  - wla-redhat-Add-a-udev-rule-to-avoid-managing-slave-NICs-.patch [RHEL-5880]
  - Resolves: RHEL-5880
    ([Azure][RHEL-9]68-azure-sriov-nm-unmanaged.rules cannot stop NetworkManager-wait-online.service checking SRIOV interface)


author: Jon Maloy <jmaloy@redhat.com> - 2.7.0.6-12
changelog:
  - wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-40957]
  - Resolves: RHEL-40957
    ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs)


author: Jon Maloy <jmaloy@redhat.com> - 2.13.1.1-2
changelog:
  - wla-docs-add-waagent-manpage-3401.patch [RHEL-109496]
  - Resolves: RHEL-109496
    ([Azure][WALA][RHEL-9] Missing man page)


author: Jon Maloy <jmaloy@redhat.com> - 2.13.1.1-3
changelog:
  - wla-Use-systemctl-instead-of-service-to-manager-services.patch [RHEL-97572]
  - Resolves: RHEL-97572
    ([Azure][RHEL-9][WALA][Image mode] Cannot find 'service' command)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.14.0.1-2
changelog:
  - wla-Remove-10-azure-unmanaged-sriov.rules.patch [RHEL-124218]
  - Resolves: RHEL-124218
    ([Azure][WALA][RHEL-9] Remove 10-azure-unmanaged-sriov.rules)


author: Ray Strode <rstrode@redhat.com> - 0.6.55-10
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations.
    Resolves: #2057576


author: Kalev Lember <klember@redhat.com> - 3.28-12
changelog:
  - Split highcontrast-icon-theme out to a new subpackage
  - Explicitly require cursor and icon themes required for the gtk2 themes


author: Radovan Sroka <rsroka@redhat.com> - 0.16-102
changelog:
  RHEL 9.5.0 ERRATUM
  - aide fails with "Not enough parameters in db:15384. Trying to continue." unexpectedly
  Resolves: RHEL-27606
  - AIDE fails when using root_prefix option
  Resolves: RHEL-28882


author: Radovan Sroka <rsroka@redhat.com> - 0.16-103
changelog:
  RHEL 9.6.0 ERRATUM
  - /boot/grub2/grubenv's timestamp is getting modified continuously due to "boot_success" implementation
  Resolves: RHEL-4331


author: Attila Lakatos <alakatos@redhat.com> - 0.16-105
changelog:
  RHEL 9.7 ERRATUM
  - CVE-2025-54389 aide: improper output neutralization enables bypassing
  Resolves: RHEL-109912


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-1
changelog:
  RHEL 9.8.0 ERRATUM
  - rebase to 0.19.2
  Resolves: RHEL-110573
  - Switch to libnettle for hashing
  - prevent aide from crashing if database is a HTTPS URL
  Resolves: RHEL-76014
  - prevent aide from exiting if a file is truncated during check
  Resolves: RHEL-1569


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-4
changelog:
  - /boot/grub2/grubenv is excluded from check due to boot_success implementation
  Resolves: RHEL-83776


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.1-1
changelog:
  - network: disable NM autoconnections also when BOOTIF is used (rvykydal)
    Resolves: RHEL-78272
  - network: support inst.net.noautodefault option (rvykydal)
    Related: RHEL-78272
  - security: fix dnsconfd backend option check in initramfs (rvykydal)
    Resolves: RHEL-83214
  - Support leavebootorder for bootupd (jkonecny)
    Resolves: RHEL-40897
  - bootupd: call bootupctl with --update-firmware (awilliam)
    Resolves: RHEL-40897


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.2-1
changelog:
  - Fix typo in systemd service (jstodola)
    Resolves: RHEL-78272
  - s390x - enable raid1 as a stage2 device (dan)
    Resolves: INSTALLER-4148
    Resolves: RHEL-21691
  - edns: restart dnsconfd only after the first kickstart parsing (rvykydal)
    Resolves: RHEL-82694
  - edns: allow dnsconfd name resolution for kickstart fetching (rvykydal)
    Resolves: RHEL-82694


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.3-1
changelog:
  - Sort RPM versions via rpm.labelCompare() and not via
    packaging.version.LegacyVersion() (miro)
    Resolves: RHEL-87358
  - rpm_ostree/installation.py: fix image deployment on s390x (rvykydal)
    Resolves: RHEL-63237
  - Add additional config_get Dracut function tests (jkonecny)
    Related: RHEL-48837
  - Update the tests/README.rst file (jkonecny)
    Related: RHEL-48837
  - Move shell testing to a separated directory (jkonecny)
    Related: RHEL-48837
  - Enable dynamic bash commands disable for tests (jkonecny)
    Related: RHEL-48837
  - Add test for config_get dracut function (jkonecny)
    Related: RHEL-48837
  - Fix trailing `/` when downloading stage2 image (jkonecny)
    Resolves: RHEL-48837
  - Fix whitespace chars broke Dracut config parsing (jkonecny)
    Related: RHEL-48837


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.4-1
changelog:
  - Revert "s390x - enable raid1 as a stage2 device" (jkonecny)
    Reverts: RHEL-21691
  - test_module_part_blivet: fix pylint disable (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module.common.task fix cyclic import (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module_manager: fix ciclic import (k.koukiou)
    Related: RHEL-85416
  - pyanaconda: bootloader: fix ImportError (k.koukiou)
    Related: RHEL-85416
  - ruff: enable isort rules and autofix all isort warnings Autofixed with: ruff
    check --exclude pyanaconda/core/kickstart/commands.py --fix --select I .
    (jkonecny)
    Resolves: RHEL-85416
  - Add ruff, a very fast linter (vslavik)
    Related: RHEL-85416
  - Relabel /var/log/ and /root/original-ks.cfg (champetier.etienne)
    Resolves: RHEL-85298


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.5-1
changelog:
  - bootloader: drop write_config_console, just preserve console= (awilliam)
    Resolves: RHEL-98670
  - payload/rpm-ostree: Include program output in exception (walters)
    Resolves: RHEL-45184


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.6-1
changelog:
  - Fix vconsole layout doesn't work for ostree (jkonecny)
    Resolves: RHEL-101057
  - test: make dnf substitutions test check only relevant values (rvykydal)
  - test: add new substitution members in dnf tests (rvykydal)


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.7-1
changelog:
  - pyanaconda: payload: return exception details for payload failures
    (k.koukiou)
  - ui: tui: installation_source: show error message in the TUI screen
    (k.koukiou)
    Resolves: RHEL-4705
  - storage: fix mount point assignment of non-formatted swap partitions
    (rvykydal)
    Related: RHEL-16355
  - storage: include only fstab devices in fsset swap devices property (rvykydal)
    Resolves: RHEL-16355


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.8-1
changelog:
  - Fix: UnboundLocalError: local variable 'e' referenced before assignment
    (k.koukiou)
    Related to: RHEL-4705
  - Emit authselect in KS when fingerprint is enabled (adamkankovsky)
    Resolves: RHEL-85175


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.9-1
changelog:
  - Set Authselect agruments after run in Security module (adamkankovsky)
    Resolves: RHEL-85175
  - Authselect code simplification (adamkankovsky)
    Resolves: RHEL-85175
  - custom: Reallocate partitions when removing a partition (vtrefny)
    Resolves: RHEL-114169


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.10-1
changelog:
  - Fixing authselect logical differences not resolved during backporting
    (adamkankovsky)
    Resolves: RHEL-85175


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76809)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-76040)


author: Nick Clifton <nickc@redhat.com> - 12.91-1
changelog:
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)


author: Nick Clifton <nickc@redhat.com> - 12.93-1
changelog:
  - Rebuild against LLVM v20.  (RHEL-82001)
  - Rebase to 12.93.
  - Annocheck: Fix test for GO revision.  (RHEL-56031)


author: Nick Clifton <nickc@redhat.com> - 12.96-1
changelog:
  - Annocheck: Fix bugs in debug rpm location code.  Add more glibc exceptions.  (RHEL-95216)
  - Annocheck: Improve performance with multiple debug info files and multiple files to scan.  (#2366180)
  - Annocheck: Update heuristic for detecting gcc files to cope with gcc 15.  (#2365824)


author: Nick Clifton <nickc@redhat.com> - 12.98-1
changelog:
  - Rebase to 12.98.  (RHEL-105574)
  - Improve configure and meson files for consistent builds.
  - Annocheck: Delete the temporary debug info directory after the tests have finished.


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.0-1
changelog:
  - Support installing SQL Server 2022 on RHEL 9 and running as a selinux-confined application
    Resolves: RHEL-16342
  - Remove unnecessary variable and RPM requirements for read-scale clusters
    Resolves: RHEL-3540
  - Add the mssql_ha_prep_for_pacemaker variable to configure SQL Server for Pacemaker
    Resolves: RHEL-19091
  - Deprecate `mssql_ha_cluster_run_role` for `mssql_manage_ha_cluster`
    Resolves: RHEL-19092


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-2
changelog:
  - Use latest auto-maintenance for updates in lsr_role2collection.py
  - Remove with_html, instead use built-in .README.html
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-3
changelog:
  - CHANGELOG.md was missing in some places
  - In legacy role, sed repalced unexpected strings at some places
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.3-1
changelog:
  - Add support for running SQL Server as a SELinux unconfined application with SELinux in enforcing mode on RHEL 9
    Resolves: RHEL-16342
  - ExcludeArch: i686


author: Sergei Petrosian <spetrosi@redhat.com> - 2.5.2-1
changelog:
  - Fail on RHEL or CentOS 10 because it's not supported
    Resolves: RHEL-67804
  - Use new adutil functionality to enable AES encryption
    Resolves: RHEL-67807
  - Add mssql_tools_versions, mssql_tls_self_sign to allow installing different versions of mssql-tools
    Resolves: RHEL-68374
  - Deprecate mssql_accept_microsoft_odbc_driver_17_for_sql_server_eula
    Resolves: RHEL-69311


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.1-1
changelog:
  - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database
    Resolves: RHEL-92712
  - Add secondary_role_allow_connections and mssql_ha_read_only_routing_list
    Resolves: RHEL-92718


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.2-1
changelog:
  - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database
    Resolves: RHEL-92712


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.14-1
changelog:
  - ansible-core 2.14.14 release (RHEL-23783)
  - Fix CVE-2024-0690 (possible information leak in tasks that ignore
    ANSIBLE_NO_LOG configuration) (RHEL-22124)


author: Thomas Woerner <twoerner@redhat.com> - 1.13.2-1
changelog:
  - Update to version 1.13.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.2
    Resolves: RHEL-35565
  - Convert input certificates
    Resolves: RHEL-44614
  - Fix rolesdeployment with IPA 4.12
    Resolves: RHEL-40869


author: Thomas Woerner <twoerner@redhat.com> - 1.14.0-1
changelog:
  - Update to version 1.14.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.0
    Resolves: RHEL-67566
  - Multi sudorule management with the ipasudorule module
    Resolves: RHEL-61431


author: Thomas Woerner <twoerner@redhat.com> - 1.14.1-1
changelog:
  - Update to version 1.14.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1
    Resolves: RHEL-67566
  - Fix requirements for ansible-core
    Resolves: RHEL-69146


author: Thomas Woerner <twoerner@redhat.com> - 1.14.2-1
changelog:
  - Update to version 1.14.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2
    Resolves: RHEL-67566
  - ipareplica: Pass ipareplica_ip_addresses to ipaclient
    Resolves: RHEL-40227
  - ipagroup: Correctly handle externalmember in member actions
    Resolves: RHEL-25009
  - ipasudorule: Evaluate all members related to hosts and users
    Resolves: RHEL-68439
  - ipacert: Correctly handle removFromCRL revocation
    Resolves: RHEL-70016
  - Collection: No more role module duplication
    Resolves: RHEL-71123


author: Thomas Woerner <twoerner@redhat.com> - 1.14.3-1
changelog:
  - Update to version 1.14.3
    Resolves: RHEL-67566
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-25009


author: Thomas Woerner <twoerner@redhat.com> - 1.14.4-1
changelog:
  - Update to version 1.14.4
    Resolves: RHEL-67566
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-25009


author: Thomas Woerner <twoerner@redhat.com> - 1.14.5-1
changelog:
  - Update to version 1.14.5
    Resolves: RHEL-67566
  - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343)
    Resolves: RHEL-78230


author: Thomas Woerner <twoerner@redhat.com> - 1.15.0-1
changelog:
  - Update to version 1.15.0
    Resolves: RHEL-104652
  - ipaclient: Fix AttributeError by defaulting dns_over_tls to False
    Resolves: RHEL-92844
  - Provide compatibility for AAH naming
    Resolves: RHEL-94769
  - Ensure ipaidrange required parameters are correct on recent versions of IPA
    Resolves: RHEL-79820
  - Add support for DNS-over-TLS for ipaclient, ipareplica and ipaserver roles
    Resolves: RHEL-78636


author: Thomas Woerner <twoerner@redhat.com> - 1.15.1-1
changelog:
  - Update to version 1.15.1
    Resolves: RHEL-104652
  - ipaclient: client_dns has new statestore arg with IPA change e6445b8
    Resolves: RHEL-106558


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.10.9-15
changelog:
  - Implement new Java bindings and fix ant-manual license
  - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519


author: Neal Gompa <ngompa@centosproject.org> - 0.15.5-2
changelog:
  - Create symlinks manually to make it build
    (the symlinks were not created because of reverting the patch to
    upgrade to Meson 0.62)


author: Neal Gompa <ngompa@centosproject.org> - 0.16.1-1
changelog:
  - Rebase to 0.16.1
    Resolves: rhbz#2169103
  - Drop unneeded downstream hacks to build with older Meson


author: Richard Hughes <richard@hughsie.com> 1:9-20240827
changelog:
  - New metadata version
  - Do not ship fedora-specific files
  - Resolves: #RHEL-4522
  - Resolves: #RHEL-19012


author: Omair Majid <omajid@redhat.com> - 10.0.100~rc.2.25502.107-0.10
changelog:
  - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
  - Resolves: RHEL-121559


author: Kalev Lember <klember@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1
  - Switch to meson build system
  - Update source URLs
  - Tighten -devel subpackage deps
  - Tighten soname globs


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3.13
changelog:
  - Sync with rhel 8.3 + cleanup
  - Add new subpackages - z{14,15}
  - Unlike in rhel8, the base subpackage still needs to be build for z12.
  - Covscan related bugfixes
  - Spec and git cleanup (remove unused patches/sources)


author: Sergio Correia <scorreia@redhat.com> - 3.1.2-2
changelog:
  - Remove 
   
  if [ $1 -eq 0 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then 
          /usr/lib/systemd/systemd-update-helper remove-system-units from %preun scriptlet, as it was causing troubles when removing audit || : 
  fi 

    Related: RHEL-14896


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-1
changelog:
  - New upstream maintenance release, 3.1.4
  - Prevent scriplets from failing
  - When upgrading, restart the daemon if it's running
  - If uninstalling, stop the daemon
  - auditctl: use pidfd_send_signal for signaling auditd
    Resolves: RHEL-45865
  - Minor doc update
    Resolves: RHEL-5186
  - augenrules: do not exit with failure if in immutable mode
    Resolves: RHEL-40110
  - auditd.service: Disable ProtectControlGroups
    Resolves: RHEL-5197
  - auditctl: correct output when displaying rules with exe/path/dir
    Resolves: RHEL-40243


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-2
changelog:
  - Disable ProtectKernelModules=true in service file
    Resolves: RHEL-59570
  - af_unix plugin: restore original behavior in binary mode
    Resolves: RHEL-59585
  - Support image mode
    Resolves: RHEL-69033
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-11252
  - Filter syscalls to ensure architecture-specific availability
    Resolves: RHEL-70455


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-5
changelog:
  - ausearch: correct search for DAEMON related events
  - allow hex digits when interpreting tty data
    Resolves: RHEL-82279
  - Fix TTY hostname in log messages
    Resolves: RHEL-78323


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-2
changelog:
  - Fix Japanese translations (RHBZ #2153364)
  - Update translations (RHBZ #2189498)
  - Do not prompt for password twice when changing password of local user (RHBZ #2228098)


author: Frederic Berat <fberat@redhat.com> - 2.71-4
changelog:
  - Cherry-pick: Fix typo in variable name (#2132715)
  - Backport: Fix testsuite failures with bash 5.2


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Michal Sekletar <msekleta@redhat.com> - 0.8-21
changelog:
  - fix file attributes on /run/avahi-daemon (RHEL-5633)
  - avahi-client: fix resource leak (RHEL-27722)
  - fix resource leak in avahi_time_event_queue_new (RHEL-27717)


author: Jerome Marchand <jmarchan@redhat.com> - 0.34.0-1
changelog:
  - Rebase to version 0.34.0 (RHEL-78920)
  - Rebuild with LLVM 20 (RHEL-81773)
  - Fix biosnoop pattern option (RHEL-90848)
  - Fix bpf-klockstat on aarch64 and ppc64le (RHEL-78619)
  - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-78166)
  - Remove unsupported slaratetop tool (RHEL-78162)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-35
changelog:
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
  - Replace downstream fixes with upstream changes
  - Address various spoofing attacks (CVE-2025-40778)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.27-2
changelog:
  - Disable building of DLZ packages
  - Conflict explicitly with more bind subpackages
  - Merge license subpackage into libs


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-2
changelog:
  - Backport nsupdate TLS support into 9.18 (RHEL-76331)
  - Update nsupdate manual about new TLS options
  - Test nsupdate TLS support


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-3
changelog:
  - Limit additional section records CPU processing (CVE-2024-11187)
  - Read HTTPS requests in limited chunks and prevent overload (CVE-2024-12705)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-6
changelog:
  - Refuse malformed DNSKEY records (CVE-2025-8677)
  - Address various spoofing attacks (CVE-2025-40778)
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-7
changelog:
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream created test to this regression


author: Nick Clifton <nickc@redhat.com> - 2.35.2-61
changelog:
  - Add an option to objcopy that creates padding sections that eliminate gaps between segments.  (RHEL-60807)


author: Nick Clifton <nickc@redhat.com> - 2.35.2-67
changelog:
  - Adds tests for the linker's --error-execstack and --error-rwx-segments command line options.  (RHEL-109970)


author: Peng Wu <pwu@redhat.com> - 0.3-33
changelog:
  - Provide OpenType Bitmap fonts
  - Use bitmapfonts2otb.py to combine bitmap fonts
  - Add bitmap-*-opentype-fonts sub packages


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-25
changelog:
  - Get the actual PV format size for LVMPV format
    Resolves: RHEL-74078
  - Include additional information in PartitioningError
    Resolves: RHEL-8005


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-26
changelog:
  - Make ActionDestroyFormat optional when the device is also scheduled to be removed
    Resolves: RHEL-8008
    Resolves: RHEL-8012


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-27
changelog:
  - Backport upstream PR 120 to fix segfault on invalid unit types
    Resolves: rhbz#2224578
  - Add vendor ID for NVIDIA BMCs
    Resolves: rhbz#2218358
  - Update /var/run to /run in ipmievd.service that systemd warns about
    Resolves: rhbz#2100475
  - Add upstream ipmievd patch to check received msg id against expectation
    Fixes problem where SEL response is not recognized correctly
    when SEL request times out
    Resolves: rhbz#2224569


author: Adrian Reber <adrian@lisas.de> - 1.2.5-1
changelog:
  - Updated to 1.2.5
  - No longer necessary to re-package sources: All problematic files have
    been re-licensed
  - All 19 patches are part of the 1.2.5 release and have been removed


author: Bryan Gurney <bgurney@redhat.com> - 1.6.1-2
changelog:
  - Add issues resolved by release 1.6.1
  - Resolves: RHEL-36001
  - Resolves: RHEL-36664
  - Resolves: RHEL-36667
  - Resolves: RHEL-36691


author: Patrick Palka <ppalka@redhat.com> - 1.75.0-9
changelog:
  - Apply upstream Boost.Asio patch to resolve RHEL-67973
  - Fix %patch directive compatibility with RPM 4.20


author: Joseph Marrero <jmarrero@fedoraproject.org> - 0.2.18-1
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.18
    backport patch to support GRUB console.cfg
    Resolves: RHEL-26439


author: Viktor Malik <vmalik@redhat.com> - 0.19.1-1
changelog:
  - Rebase on bpftrace 0.19.1 (RHEL-10693)
  - Rebuild for LLVM 17 (RHEL-10592)
  - Enhancements and fixes for PowerPC (RHEL-3690, RHEL-11476)


author: Viktor Malik <vmalik@redhat.com> - 0.20.3-1
changelog:
  - Rebase on bpftrace 0.20.3 (RHEL-30779)
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)
  - Fix bpftrace creating BPF programs with truncated names (RHEL-8502)


author: Viktor Malik <vmalik@redhat.com> - 0.20.4-1
changelog:
  - Rebase on bpftrace 0.20.4
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 4.0.11-1
changelog:
  - Upgrated to latest upstream version 4.0.11
  - Added a patch to fix rpm build issue caused due to misconfiguration in upstream
  - Added required additional plugins required for build


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-6
changelog:
  - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.19.1-1
changelog:
  - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
  - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
  - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
  - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
  - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-3
changelog:
  - Switch from autotools to meson; enable the tests, since the meson build system
    permits us to use a shared boost library
  - Install examples in the -doc subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-4
changelog:
  - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual
    Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name
    of a future package that continues to provide API/ABI version 1.0 after the
    upgrade.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-7
changelog:
  - Working (but weak, dependent on SHA1) source signature verification
  - Added API/ABI version to descriptions


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-6
changelog:
  - Review comment #16 addressed
  - It make more sense that -selinux and -certmonger depends on main package,
    Not the other round
  - Recommends: logrotate
  - Supplements: -selinux, -certmonger


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-6
changelog:
  - Certificate format validation when adding the SCEP server's CA
    (#1492112)
  - Replace some SHA1 usages with SHA256 in the unit tests


author: <thalman@redhat.com> - 0.6.1-16
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Paul Murphy <murp@redhat.com> - 20.1.8-3
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-20
changelog:
  - ci-Fix-metric-setting-for-ifcfg-network-connections-for.patch [RHEL-61224]
  - ci-fix-python3.13-Fix-import-error-for-passlib-on-Pytho.patch [RHEL-61224]
  - Resolves: RHEL-61224
    (Configuring metric for default gateway is not working)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-21
changelog:
  - ci-fix-Render-bridges-correctly-for-v2-on-sysconfig-wit.patch [RHEL-38927]
  - ci-fix-Render-v2-bridges-correctly-on-network-manager-w.patch [RHEL-38927]
  - Resolves: RHEL-38927
    (NoCloud - network_config bridges incorrectly configured)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-22
changelog:
  - ci-Prevent-NM-from-handling-DNS-when-network-interfaces.patch [RHEL-65768]
  - Resolves: RHEL-65768
    ([RHEL-9] Prevent NM from handling DNS when network interfaces have DNS config)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-2
changelog:
  - ci-downstream-Revert-feat-Use-NetworkManager-renderer-b.patch [RHEL-74334]
  - Resolves: RHEL-74334
    ([rhel-9.6] Suggest to continue using sysconfig as the default network renderer in rhel-9.6)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-3
changelog:
  - ci-Use-log_with_downgradable_level-for-user-password-wa.patch [RHEL-71122]
  - ci-downstream-set-deprecation-boundary-version.patch [RHEL-71122]
  - Resolves: RHEL-71122
    (Suggest to change some log messages from warning to info after rebase cloud-init-24.4 [RHEL-9.6] )


author: Jon Maloy <jmaloy@redhat.com> - 24.4-4
changelog:
  - ci-net-sysconfig-do-not-remove-all-existing-settings-of.patch [RHEL-76361]
  - Resolves: RHEL-76361
    ([c9s] cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-5
changelog:
  - ci-fix-NM-reload-and-bring-up-individual-network-conns-.patch [RHEL-81703]
  - Resolves: RHEL-81703
    (DataSourceNoCloudNet network configuration is ineffective - c9s)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-6
changelog:
  - ci-feat-aliyun-datasource-support-crawl-metadata-at-onc.patch [RHEL-88658]
  - Resolves: RHEL-88658
    (Cloud-Init Backport Optimization Features on Alibaba Cloud)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-7
changelog:
  - ci-fix-Don-t-attempt-to-identify-non-x86-OpenStack-inst.patch [RHEL-100615]
  - ci-fix-strict-disable-in-ds-identify-on-no-datasources-.patch [RHEL-100615]
  - Fix missing patch [RHEL-101692]
  - Resolves: RHEL-100615
    (CVE-2024-6174 cloud-init: From CVEorg collector [rhel-9.7])
  - Resolves: RHEL-101692
    (c9s dist-git missing patch "downstream: Retain exit code in cloud-init status for recoverable errors")


author: Bob Mader <bob@redhat.com> - 0.1.7-2
changelog:
  - Initial build for EL9
  - Applying changes for gating - adding the .fmf directory
  - Resolves: RHEL-57044


author: Packit <hello@packit.dev> - 336-1
changelog:
  - Graphical VNC and serial consoles improvements
  - Control VNC console resizing and scaling
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 339-1
changelog:
  - Serial consoles now keep their content and stay alive
  - No longer copies qemu.conf values into VM definitions


author: Justin Stephenson <jstephen@redhat.com> - 16-1
changelog:
  - Rebase to upstream release 16
  - Config: Add sssd-proxy requirement
  - Commits from release 15
  - Config: Update to authselect with-tlog feature
  - stylelint: handle stylelint-scss deprecation
  - Add ruff configuration
  - package.json: drop flowtype plugin
  - package.json: drop po2json
  - package.json: document the required nodejs version
  - fmf: Plumb through $TEST_* variables for unexpected messages
  - tests: Use mc for testPlayBinary
  - package.json: drop deprecated eslint-plugin-standard
  - Revert "build: add support for /pybridge scenario"
  - Player: Stop making the Terminal object state
  - build.js: support flags
  - packaging: Update spec License: to SPDX format
  - build.js: Fix LINT env variable check
  - Tests: Allow charset journal messages
  - Update to the new root creation function
  - package.json: Bump stylelint to 15
  - test: add check for sssd config id_provider proxy
  - Tests: Allow invalid non-UTF8 journal messages
  - Add xterm-canvas-addon dependency for rendering
  - Minor Eslint fixes
  - Tests: Update data list to PF5 for testAppMenu
  - Update org.cockpit-project.session-recording.metainfo.xml
  - Makefile: bump our test/common dependency
  - patternfly-5-overrides should be auto-imported by the page.scss file
  - Drop obsolete pf-m-redhat-font class
  - Commits from release 14
  - Upgrade to PatternFly 5 Alpha
  - Makefile: Update Cockpit lib to da5abbb4245b0455cc8b610efe01e684
  - package.json: Pin down versions of @patternfly/react-{styles,icons}
  - Makefile: Update Cockpit lib to 947f1753867e3924b9617aaace936225
  - Makefile: Fix watch dependencies
  - Update release.yml
  - Automate the release process


author: Justin Stephenson <jstephen@redhat.com> - 17-1
changelog:
  - Rebase to upstream release 17
  - Config: Use authselect enable-feature when possible
  - Test: Move from CDP to BiDi
  - Replace jQuery extend() with standard JS spread
  - Convert to TypeScript
  - Convert Application to a functional component
  - package.json: Drop date-fns
  - Various test fixes and build related fixes


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20141121-15
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Phil Sutter <psutter@redhat.com> - 1.4.7-1
changelog:
  - config: Fix -Wimplicit-function-declaration
  - network: Fix -Wstrict-prototypes
  - build: don't suppress various warnings
  - build: conntrack-tools requires libnetfilter_conntrack >= 1.0.9
  - New version 1.4.7


author: Kelvin Fan <kfan@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Require util-linux >= 2.36-1
  - Remove files related to the issuegen and motdgen executables


author: Jindrich Novy <jnovy@redhat.com> - 3:2.234.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.234.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 3:2.235.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.235.0
  - Resolves: RHEL-80473


author: Jindrich Novy <jnovy@redhat.com> - 3:2.236.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.236.0
  - Resolves: RHEL-80473


author: Jindrich Novy <jnovy@redhat.com> - 3:2.237.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.237.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.238.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.238.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.239.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.239.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.240.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.240.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.241.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.241.0
  - Resolves: RHEL-112187


author: Jindrich Novy <jnovy@redhat.com> - 4:2.242.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.242.0
  - Related: RHEL-111919


author: Lokesh Mandvekar <lsm5@redhat.com> - 1-14
changelog:
  - rebuild with updated dependencies:
    [python-]podman 4.8.0, buildah 1.33.2, skopeo 1.14.0,
    aardvark-dns and netavark 1.9.0
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.4.1
  - Resolves: RHEL-28855


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.1
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.2-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.7.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.7.1
  - Resolves: RHEL-89428


author: Jindrich Novy <jnovy@redhat.com> - 1:1.8.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.8.0
  - Related: RHEL-111919


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1-131
changelog:
  - fetch TMT podman revdep tests from podman dist-git
  - needs at least podman 5.4.0-8.el9
  - Related: RHEL-80816


author: Aashish Radhakrishnan <aaradhak@redhat.com> - 0.24.0-2
changelog:
  - Restore single-decimal precision to stream output
    Backport https://github.com/coreos/coreos-installer/pull/1654


author: Joel Capitao <jcapitao@redhat.com> - 0.24.0-3
changelog:
  - Use the full path for the 'root=' kernel arg when rootfs on mpath
    Backport https://github.com/coreos/coreos-installer/pull/1677


author: Florian Weimer <fweimer@redhat.com> - 11.5.0-10
changelog:
  - Exception handling performance improvements (RHEL-105072)
  - libgcc: Use _dl_find_object to find DWARF data in unwinder
  - libgcc: Use lock-free data structures for run-time unwinder registration


author: David Malcolm <dmalcolm@redhat.com> - 11.5.0-14
changelog:
  - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
    branches and calls to gcov output, but not conditions (RHEL-105416).


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-2
changelog:
  - vmware_guestdump: Version 7 support
  - Fix incorrect task state during exit
  - Add multi-threads support in crash target
  - Call cmd_bt silently after "set pid"
  - x86_64: Add gdb multi-stack unwind support
  - arm64: Add gdb multi-stack unwind support
  - ppc64: Add gdb multi-stack unwind support
  - Fix the issue of "page excluded" messages flooding
  - Fix "kmem -p" option on Linux 6.16-rc1 and later kernels


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-3
changelog:
  - x86_64: filter unwanted warning message for "bt -T" cmd
  - doc: Update requirements for building on Fedora
  - gdb: Fix a regression for eppic extension on gdb-16.2
  - Fix crash initialization failure on LoongArch with recent GDB versions
  - gdb: Disable DT_DEBUG lookup by GDB inside the vmcore


author: Vladis Dronov <vdronov@redhat.com> - 15.9-26
changelog:
  - Update cscope to 15.9-26 from Fedora (RHEL-65465)
  - Fix signal handling at exit
  - Minor edits in the rpm scripts and the changelog
  - Make xemacs a bcond


author: Pavol Zacik <pzacik@redhat.com> - 1:2.3.3op2-28
changelog:
  - RHEL-39940 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.2.3.3op2-34
changelog:
  - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
  - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-35
changelog:
  - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-18
changelog:
  - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file
  - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes
  - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source


author: Jeff Moyer <jmoyer@redhat.com> - 78-1
changelog:
  - Rebase to v78
  - Add support for legacy monitor.conf file location
  - Fix a test failure.
  - Resolves: RHEL-10382
  - Resolves: RHEL-8204
  - Resolves: RHEL-29151


author: Martin Osvald <mosvald@redhat.com> - 3.4.1-11
changelog:
  - Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly
    for shared mailboxes
  - cyrus-imapd.spec: rename patches to correspond with others


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Bryan Gurney <bgurney@redhat.com> - 1.10-8.el9
changelog:
  - Supersede uninitialized value patch with upstream version
  - Add upstream patch: common: fix mismatch between prototype and body
  - Makefile: bypass check-doc in check target
  - Related: rhbz#1985096


author: Bryan Gurney <bgurney@redhat.com> - 1.10.1-1
changelog:
  - Update to PMDK version 1.10.1
  - Related: rhbz#1874208
  - Remove BuildRequires line for libfabric-devel
  - Related: rhbz#2009502


author: Mark Wielaard <mjw@redhat.com> - 5.0-8
changelog:
  - Add 0001-debug_str_offsets-header-version-and-padding-are-2-b.patch
  - Add 0001-debugedit-Handle-unused-.debug_str_offsets-entries.patch


author: Mark Wielaard <mjw@redhat.com> - 5.0-11
changelog:
  - Add 0001-Add-basic-find-debuginfo-script-tests.patch
  - Add debugedit-5.0-find-debuginfo-tests-fixups.patch


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-1
changelog:
  - Rebase to 1.21.2
  - Add support for ppc64le and aarch64
  - Enable the test suite
  - Resolves: RHEL-22429


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-2
changelog:
  - Modify ports: Some CI systems complain about the usage of the 8888 port.
  - Improve the way PPC64LE support is enabled.
  - Resolves: RHEL-22429


author: Evan Goode <egoode@redhat.com> - 4.14.0-30
changelog:
  - Mark transient transactions in DNF history (RHEL-84512)
  - Warn/disallow changes outside /usr, /etc with --transient (RHEL-84499)


author: Evan Goode <egoode@redhat.com> - 4.14.0-31
changelog:
  - Introduce $releasever_major, $releasever_minor variables, shell-style
    variable substitution (RHEL-65817)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-14
changelog:
  - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
  - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)


author: Pavel Valena <pvalena@redhat.com> - 057-67.git20240812
changelog:
  - feat(systemd): install systemd-executor
  - test: use -device instead of -watchdog to remove qemu
  - fix(fips): remove /dev/{random,urandom} pre-creation
  - fix(systemd): always include sg module
  - fix(fips): do not blindly remove /boot
  - fix(github): update format of labeler
  - fix(network-manager): add "After" dependency on dbus.service
  - fix(url-lib.sh): nfs_already_mounted() with trailing slash in
  - feat(systemd-pcrphase): introducing the systemd-pcrphase
  - fix(systemd-pcrphase): only include
  - fix(nfs): include also entries from /usr/lib/{passwd,group}


author: Pavel Valena <pvalena@redhat.com> - 057-70.git20240819
changelog:
  - fix(systemd): set right permissions for the machine-id file
  - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
  - feat(dracut-init.sh): give --force-add precedence over --omit


author: Pavel Valena <pvalena@redhat.com> - 057-79.git20241127
changelog:
  - fix(35network-manager): install nftables kernel modules
  - fix(35network-manager): install nft binary during module
  - fix(dracut-install): copy xattr when use clone ioctl
  - feat(dracut.sh): add --add-confdir option
  - fix: typo in variable name
  - feat(fips): add support for UKIs
  - fix(kernel-modules): use modalias info in get_dev_module()
  - fix(dracut-functions.sh): convert mmcblk to the real kernel


author: Pavel Valena <pvalena@redhat.com> - 057-86.git20250217
changelog:
  - fix(35network-manager): remove duplicate installkernel
  - feat(fips): include fips module unconditionally
  - fix(dracut.sh): make omit-drivers option do exact match for
  - feat: add openssl module


author: Pavel Valena <pvalena@redhat.com> - 057-101.git20250808
changelog:
  - fix(systemd): add missing modprobe@.service
  - fix: let check_vol_slaves_all return 1 when checks on all
  - improvement(74nvmf): lookup required NIC kernel modules for
  - fix(74nvmf): set root=nvmf
  - chore(multipath): remove `rd_NO_MULTIPATH` kernel command
  - refactor(multipath): remove custom multipathd.service
  - fix(systemd): systemd.volatile needs overlayfs kernel module
  - refactor(dracut): introduce clamp_mtimes helper function
  - fix(dracut): ensure hardlink deduplication is reproducible


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-30780
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Gregory Bell <grbell@redhat.com> - 1.30-1
changelog:
  - New release: 1.30
  - Better detection of abort during DWARF loader thread processing
  - pahole now detects presence of libbpf APIs and BTF features using weak function
    declarations when built using a shared library libbpf
  - Type tags are emitted for BPF arena pointers with new BTF "attributes" feature
  - New release: 1.29
  - Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads.
  - The BTF encoding now is always reproducible, and as fast/faster than before.
  - The memory consumption is reduced.
  - Support for multiple BTF_DECL_TAGs pointing to same tag.
  - Verify that pfunct prints btf_decl_tags read from BTF.
  - Don't print functions twice when using 'pfunct -f function_name'.
  - New release: 1.28
  - Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding.
  - Show flexible arrays statistics
  - Add '--padding N' and '--padding_ge N' to show structs with paddings
  - Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel.
  - Don't stop pfunct output at the first function that matches a filter, show all of them
  - Allow encoding data about all global variables, not just per CPU ones
  - Handle .BTF_ids section endianness, fully supporting cross builds
  - Generate decl tags for bpf_fastcall for eligible kfuncs
  - Add "distilled_base" BTF feature to split BTF generation.
  - Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization
  - Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var
  - Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var
  - Serialize access to elfutils dwarf_getlocation().
  - Honour --lang_exclude when merging LTO built CUs.
  - Add the debuginfod client cache directory to the vmlinux search path.
  - Print the CU's language when a tag isn't supported.
  - Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags.
  - Improve the parameter parsing by checking DW_OP_[GNU_]entry_value
  - Introduce a tests/ directory with regression tests


author: Hui Wang <huwang@redhat.com> - 1:4.20-4
changelog:
  - Drop unnecessary javax16.api.jar
  - Add dependency on javapackages-tools since the ecj binary requires it to run


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-9
changelog:
  - edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66230]
  - Resolves: RHEL-66230
    ([Regression] [aarch64] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])


author: Jon Maloy <jmaloy@redhat.com> - 20240524-10
changelog:
  - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-58631]
  - Resolves: RHEL-58631
    ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20241117-2
changelog:
  - edk2-Fix-amd-sev-firmware-file-for-amd-snp.patch [RHEL-72447]
  - Resolves: RHEL-72447
    ( QEMU should creating new json file that will correctly describe firmware for amd-sev-snp [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 20241117-3
changelog:
  - edk2-OvmfPkg-Use-the-OvmfPkg-version-of-CcProbeLib.patch [RHEL-70865]
  - edk2-Update-dbx-revocation-list-to-2025-02-24-version.patch [RHEL-83019]
  - Resolves: RHEL-70865
    (SNP guest failed to boot with SVSM using OVMF.amdsev.fd [rhel-9.7])
  - Resolves: RHEL-83019
    (The newer revocation file and Server 2025 required to update it [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20241117-4
changelog:
  - edk2-update-dbx-to-20250610.patch [RHEL-96869]
  - Resolves: RHEL-96869
    ([edk2,rhel-9] dbx update 20250610)


author: Jon Maloy <jmaloy@redhat.com> - 20241117-5
changelog:
  - edk2-MdePkg-Acpi66.h-Add-ACPI-6.6-header.patch [RHEL-109010]
  - edk2-OvmfPkg-WorkArea.h-Add-MAILBOX_GDT.patch [RHEL-109010]
  - edk2-OvmfPkg-Add-the-Test-command-in-TDX-MailBox.patch [RHEL-109010]
  - edk2-OvmfPkg-Add-the-ResetVector-in-TDX-MailBox.patch [RHEL-109010]
  - edk2-OvmfPkg-TdxDxe-Support-5-level-paging-for-ResetVecto.patch [RHEL-109010]
  - edk2-OvmfPkg-IoMmuDxe-Fix-1M-and-2M-buffer-handling.patch [RHEL-69780]
  - Resolves: RHEL-109010
    (TD guest dmesg reports ACPI BIOS Warning (bug): Incorrect checksum in table [APIC] - 0x29)
  - Resolves: RHEL-69780
    (Fail to create AMD SEV SLES 15 SP4 guest via virt-install --cdrom [rhel-9.8])


author: Jon Maloy <jmaloy@redhat.com> - 20241117-6
changelog:
  - edk2-OvmfPkg-MemEncryptSevLib-Evict-cache-lines-during-SN.patch [RHEL-121983]
  - edk2-MdePkg-Add-the-COHERENCY_SFW_NO-CPUID-bit-field.patch [RHEL-121983]
  - edk2-OvmfPkg-ResetVector-Make-ReceivedVc-a-flag-in-SEV-ES.patch [RHEL-121983]
  - edk2-OvmfPkg-MemEncryptSevLib-Check-if-SEV-SNP-coherency-.patch [RHEL-121983]
  - Resolves: RHEL-121983
    ([edk2] VM panic on booting SNP guest with large memory on Genoa)


author: Jon Maloy <jmaloy@redhat.com> - 20241117-7
changelog:
  - edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126100]
  - edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126100]
  - Resolves: RHEL-126100
    ([edk2,rhel-9] dbx update to 20251016 / v1.6.1)


author: Jon Maloy <jmaloy@redhat.com> - 20241117-8
changelog:
  - edk2-openssl-flatten-contents-of-openssl-tarball.patch [RHEL-115922]
  - edk2-Bumped-openssl-submodule-to-version-3.0.7-29.1.patch [RHEL-115922]
  - Resolves: RHEL-115922
    (CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap [rhel-9.8])


author: Felix Kolwa <fkolwa@redhat.com> - 1.35.1-7
changelog:
  - Bump revision number to 7.
  - Pull in changes from Major Hayden:
    - Skip version check test
      Opened upstream bug:
          https://github.com/aws/efs-utils/issues/194
    - Disable automatic version check


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-fix-free.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-stacktrace-lto.patch


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-10
changelog:
  - Disable xwidgets (RHEL-14551)
  - org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
  - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
  - Add protection for LaTeX preview (CVE-2024-30204)
  - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-18
changelog:
  - Fix nsm-should-check for "google.com" failure (RHEL-94297)
  - Fix package tests for tetris no longer existing as a package (RHEL-94297)
  - Introduce untrusted-content variable (RHEL-94297)


author: Jacek Migacz <jmigacz@redhat.com> - 12.3-1
changelog:
  - Fix build failure on CentOS Stream. Related: rhbz#1951306
  - Revert patch for FSF addresses (it became obsolete with 12.2)
  - Remove Obsoletes and Provides tetex-preview


author: Jeff Law <law@redhat.com> - 1.1.2-7
changelog:
  - Force C++14 as this code is not C++17 ready
  - Fix sprintf format issue
  - Fix ordered comparison of a pointer against zero issue
  -


author: Jack Magne <jmagne@redhat.com> - 1.1.2-14
changelog:
  Resolves: rhbs #2007544,2000928,2000929
  - Bugzilla Bug  2007544 - The esc provides outdated configuration for opensc
  - Bugzilla Bug  2000928 - ESC does not detect smart cards and crashes upon launch [rhel-9.0.0]
  - Bugzilla Bug  2000929 - [RHEL-9][AppStream] esc present in comps but missing from repository [rhel-9.0.0]


author: Jack Magne <jmagne@redhat.com> - 1.1.2-16
changelog:
  Resolves: rhbs #2050849
  - Bug 2050849 - Volkswagen Siemens CardOS M4.4 and 5.0 cards display incorrect status in ESC [RHEL 9.1]


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add requirement on ui subpackage into ui-devel subpackage


author: Milan Crha <mcrha@redhat.com> - 3.40.4-2
changelog:
  - Resolves: RHEL-19371 (Backport upstream patch to workaround broken text/calendar mail attachments by the server)


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-4
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993247

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993284


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018421

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003670


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-2
changelog:
  - Fix parsing of large tokens
  - Reject direct parameter entity recursion
  - Resolves: RHEL-29699
  - Resolves: RHEL-29696


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-3
changelog:
  - Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
  - Resolves: RHEL-56761
  - Resolves: RHEL-57520
  - Resolves: RHEL-57511


author: Radovan Sroka <rsroka@redhat.com> - 1.3.3-105
changelog:
  RHEL 9.7.0 ERRATUM
  - RPMDB crashes with SIGBUS when updating the RPMDB repeatedly
  Resolves: RHEL-63090
  - File /run/fapolicyd differs from RPM expectations
  Resolves: RHEL-59626
  - fapolicyd.service badly instructs how to start after nss-user-lookup.target
  Resolves: RHEL-21871
  - fapolicy rule containing 'pattern=normal' produces error
  Resolves: RHEL-30020
  - "fapolicyd-cli --file add" crashes when processing sockets
  Resolves: RHEL-69136


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4-1
changelog:
  - fapolicyd-1.4 and fapolicyd-selinux-1.0
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4


author: Antonio Murdaca <amurdaca@redhat.com> - 0.5.1-1
changelog:
  * chore: update patch for new release by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/625
   * chore: fix require error with commitlint by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636
   * fix(license): replace space with - in Apache 2.0 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/632
   * fix(data-formats): use serde_tuple serializer for error messages by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/629
   * fix: cargo test for non-root users by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/635
   * fix(get_current_user_name): remove trailing whitespaces. by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/638
   * chore: bump mio from 0.8.10 to 0.8.11 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/640
   * fix: vendored tarfile creation by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/634
   * fix: static-mut-refs warning by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/651
   * Enable CentOS 9 builds and add Testing Farm e2e tests by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/650
   * Add an OV re-registration window option when using DB storage by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/643
   * chore: bump pem from 2.0.1 to 3.0.3 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/639
   * chore: bump h2 from 0.3.25 to 0.3.26 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/659
   * feat: verify trusted manufacturers by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/656
   * database enhancements by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/666
   * chore: bump openssl to 0.10.66 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/664
   * chore(store): make the store OVs agnostic by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/671
   * feat(manufacturing-server): implement an export OVs endpoint  by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/673
   * fix(systemd-units): run before powering off the system by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/676
   * fix(dracut): use isolate on error in the manufacturing-client service by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/678
   * fix(systemd-generator): write configuration to '/run' by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/677
   * fix(owner-tool): use the new API to export ovs by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/675
   * chore: update diesel to 2.2.3 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/669
   * chore: bump reqwest from 0.11.27 to 0.12.7 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/683
   * fix: use centos-stream-9 target instead of epel-9 by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/687
   * enhance onboarding testing by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/681
   * ci: add konflux test cases by @yih-redhat in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688
   * fix(make-vendored-tarfile.sh): exclude idna tests with unicode points by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/692
   * chore: bump for 0.5.1 by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/693

   * @miabbott made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636
   * @yih-redhat made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688

   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.0...v0.5.1


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-87
changelog:
  - fence_ibm_vpc: refresh bearer-token if token data is corrupt, and
    avoid edge-case of writing empty token file
    Resolves: RHEL-83255


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-88
changelog:
  - fence_compute/fence_evacuate: dont use deprecated inspect.getargspec()
    Resolves: RHEL-84448
  - fence_sbd: get devices from SBD_DEVICE env variable if devices
    parameter isnt set
    Resolves: RHEL-79798


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #2005307, #1999276


author: Pavel Reichl <preichl@redhat.com> - 3.35-1
changelog:
  - Rebase to new upstream release
  - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc
  - Add signature check
  - Related: rhbz#2188805


author: Eric Garver <egarver@redhat.com> - 1.3.4-6
changelog:
  - feat(IPv6_rpfilter): support loose rpfilter
  - feat(IPv6_rpfilter): support loose-forward rpfilter
  - feat(IPv6_rpfilter): support strict-forward rpfilter


author: Richard Hughes <richard@hughsie.com> 1.2-7
changelog:
  - Disable JLink support to remove one extra dep we are not going to support
  - Resolves: rhbz#1948597


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Adam Jackson <ajax@redhat.com> - 1.3.5-9
changelog:
  - Remove BuildRequires xprop entirely. If present, the configure script will call
    it looking for a property on the root window that Fedora's X server does not
    set, and which would not work anyway since there is no X server running in the
    buildroot, so we can just remove the dependency.


author: Fabio Alessandro Locati <fale@fedoraproject.org> - 5.13.1-2
changelog:
  - Provide the right font configuration
  - Drop ttf format since upstream affirms that otf is to be preferred


author: Akira TAGOH <tagoh@redhat.com> - 2.13.94-2
changelog:
  - Fix the score calculation on matching for multiple values.
  - Enable 11-lcdfilter-default.conf.
    Resolves: rhbz#1965684
  - Rebase to the latest release.
    Resolves: rhbz#2023161


author: Akira TAGOH <tagoh@redhat.com> - 2.13.95-1
changelog:
  - New upstream release.
  - Update deps to font(notosans)
    https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts


author: Akira TAGOH <tagoh@redhat.com> - 2.14.0-1
changelog:
  - New upstream release.
  - Rebase to 2.14 and revert Noto Default change happened in f36.
    Resolves: rhbz#2075393


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Benjamin Berg <bberg@redhat.com> - 1.94.0-3
changelog:
  - Use GFDL abbreviation as GFDLv1.1+ is not listed
  - Install PAM module into /usr
  - Pull in further test fixes


author: José Expósito <jexposit@redhat.com> - 3.2.1-10
changelog:
  - Fix CVE-2024-24258 and CVE-2024-24259
    Resolves: https://issues.redhat.com/browse/RHEL-25176
    Resolves: https://issues.redhat.com/browse/RHEL-25178


author: Pavel Cahyna <pcahyna@redhat.com> - 1.6.14-2
changelog:
  - Apply upstream patch 41d0d70f
    ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type


author: Ondrej Holy <oholy@redhat.com> - - 2:2.4.1-4
changelog:
  - CVE-2022-39282: Fix length checks in parallel driver (#2136152)
  - CVE-2022-39283: Add missing length check in video channel (#2136154)
  - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145140)
  - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145140)
  - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145140)
  - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145140)
  - CVE-2022-39347: Fix path validation in drive channel (#2145140)
  - CVE-2022-41877: Add missing length check in drive channel (#2145140)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.2-1
changelog:
  - Update to 2.11.2 (RHEL-4290, RHEL-4292, RHEL-4296, RHEL-4298, RHEL-4300,
    RHEL-4302, RHEL-4304, RHEL-4306, RHEL-4308, RHEL-4310, RHEL-4312,
    RHEL-10060)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
    CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
    CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)


author: Michel Lind <salimma@centosproject.org> - 2.10.4-10
changelog:
  - Fix for CVE-2025-27363 out-of-bound write vulnerability
  - Patch initially by Marc Deslauriers of Canonical
  - https://www.openwall.com/lists/oss-security/2025/03/14/3
  - Adjusted for EL9 by Jonathan Wright of AlmaLinux
  - and a member of the Meta security team
  - Resolves: RHEL-83109


author: Akira TAGOH <tagoh@redhat.com> - 1.0.10-6.el9.2
changelog:
  - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310
    Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063


author: Michal Ruprich <mruprich@redhat.com> - 8.5.3-2
changelog:
  - Resolves: RHEL-15915 - crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message
  - Resolves: RHEL-15918 - crash from malformed EOR-containing BGP UPDATE message


author: Michal Ruprich <mruprich@redhat.com> - 8.5.3-9
changelog:
  - Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions
  - Resolves: RHEL-87731 - FRR bgp session not recovered due to incorect error no AF activated for peer


author: Michal Ruprich <mruprich@redhat.com> - 0.17-85
changelog:
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Hughes <richard@hughsie.com> 1.9.26-1
changelog:
  - Rebase to get hardware support for CERTPX-13842
  - Resolves: #RHEL-16637
  - Resolves: #RHEL-35373
  - Resolves: #RHEL-61930


author: Nick Clifton <nickc@redhat.com> - 10.73-2
changelog:
  - Annocheck: Fix handling of command line options that take arguments.  (#2086850)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)


author: Nick Clifton <nickc@redhat.com> - 10.75-1
changelog:
  - Annocheck: Fix covscan detected race condition between stat() and open().
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)


author: Nick Clifton <nickc@redhat.com> - 10.76-1
changelog:
  - Spec file: Correct the Provides for the annobin-doc subpackage.  (#2097065)
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.
  - Annocheck: Fix covscan detected race condition between stat() and open().


author: Nick Clifton <nickc@redhat.com> - 11.08-4
changelog:
  - Fix building with Clang-16.  (#2216918)
  - Re-enable building with LTO.  (#2166579)
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
  - Spec file: Enable annotated building.
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158386)
  - Annocheck: Add more special glibc filenames.  (#2158100)
  - Annocheck: Improve handling of tool versions.
  - GCC Plugin: Fix building with gcc-13.
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
  - Annocheck: Use real filename rather than debuginfo filename.  (#2152280)
  - Rename gcc plugin to gts-annobin.  (#2111977)
  - Rebase to 10.94, brining in support for LLVM 15.  (#2118992)
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
  - Annocheck: Try harder not to run mutually exclusive tests.
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
  - Libannocheck: Actually set result fields after tests are run.
  - Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
  - Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
  - Libannocheck: Move into separate sub-package.
  - Libannocheck: Add libannocheck.pc pkgconfig file.
  - Libannocheck: Add libannocheck_reinit().
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Clang Plugin: Fix for building with Clang-15.  (#2125875)
  - Annocheck: Add a test for the inconsistent use of -Ofast.  (#1248744)
  - Plugin: Fix top level configuration support for RiscV.
  - Annocheck: Improvements to the size tool.
  - Annocheck: Fixes for libannocheck.h.
  - Annocheck: Add automatic profile selection.
  - Annocheck: Improve gap detection and reporting.
  - Spec File: Use the %dir directive in the %files section to ensure that
  -  plugin directories are useable.  (#2080454)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17
changelog:
  - NVR Bump: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216446)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17.1
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2220917)


author: Nick Clifton <nickc@redhat.comn> - 2.38-18
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216456)


author: Marek Polacek <polacek@redhat.com> 12.2.1-4
changelog:
  - update from releases/gcc-12 branch (#2110583)
  - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST
    (PR libstdc++/107468)


author: Marek Polacek <polacek@redhat.com> 12.2.1-7.5
changelog:
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832)


author: Kevin Buettner - 11.2-2
changelog:
  - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
    (This is a workaround for the bogus warning/error that we now see
    on i686 regarding a "may write a terminating nul past the end of
    the destination" message for the sprintf() call in
    global_symbol_searcher::search() in gdb/symtab.c.)


author: Kevin Buettner - 11.2-3
changelog:
  - Backport upstream patch which removes sizes from debuginfod download
    messages when the size is not available (RHBZ 2068280, Aaron Merey).


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-13-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 12.20-1
changelog:
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.


author: Nick Clifton <nickc@redhat.com> - 12.32-1
changelog:
  - LLVM Plugin: Fix building with LLVM version 17.  (RHEL-17311)
  - GCC Plugin: Add support for -fhardended.
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)


author: Nick Clifton <nickc@redhat.com> - 12.32-2
changelog:
  - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505)


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Rebase to 12.65.  (RHEL-51018)
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53574)


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Rebase to bring in improvements for locating string notes.  (RHEL-79807)
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.
  - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string.  (RHEL-77328)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Nick Clifton <nickc@redhat.com> - 2.40-12
changelog:
  - Spec File: Enable building with GTS-13 gcc.  (#2217819)
  - Spec File: Sync version number with c8s.


author: Nick Clifton <nickc@redhat.com> - 2.40-17
changelog:
  - Spec File: Do not use of the system zlib by default.  (RHEL-19373)
  - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303)


author: Nick Clifton <nickc@redhat.com> - 2.40-19
changelog:
  - Spec File: Restore the SElinux context to %{_libdir}.  (RHEL-22818)
  - [2.40-18: was a failed attempt to fix RHEL-22818]


author: Marek Polacek <polacek@redhat.com> 13.2.1-5
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245,
  	fortran/111837, fortran/112316, libbacktrace/111315,
  	libbacktrace/112263, libstdc++/110944, libstdc++/111172,
  	libstdc++/111936, libstdc++/112089, libstdc++/112314,
  	middle-end/111253, middle-end/111818, modula2/111756, modula2/112110,
  	target/101177, target/110170, target/111001, target/111366,
  	target/111367, target/111380, target/111935, target/112443,
  	tree-optimization/111397, tree-optimization/111445,
  	tree-optimization/111489, tree-optimization/111583,
  	tree-optimization/111614, tree-optimization/111622,
  	tree-optimization/111694, tree-optimization/111764,
  	tree-optimization/111820, tree-optimization/111833,
  	tree-optimization/111917
    - fix aarch64 RA ICE (#2241139, PR target/111528)
  - fix ia32 doubleword rotates (#2238781, PR target/110792)


author: Marek Polacek <polacek@redhat.com> 13.2.1-6
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633,
  	c/112339, fortran/111880, fortran/112764, libgomp/111413,
  	libstdc++/112348, libstdc++/112491, libstdc++/112607,
  	middle-end/111497, target/53372, target/110411, target/111408,
  	target/111815, target/111828, target/112672, tree-optimization/111137,
  	tree-optimization/111465, tree-optimization/111967,
  	tree-optimization/112496
  - add -fno-stack-protector to aarch64 tests (RHEL-17684)


author: Marek Polacek <polacek@redhat.com> 13.3.1-1
changelog:
  - update from releases/gcc-13 branch
    - GCC 13.3 release
    - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577,
  	analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882,
  	analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969,
  	analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473,
  	bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224,
  	c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769,
  	c++/113141, c++/113966, c++/114303, c++/114377, c++/114537,
  	c++/114561, c++/114562, c++/114572, c++/114580, c++/114634,
  	c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337,
  	fortran/50410, fortran/55978, fortran/89462, fortran/93678,
  	fortran/95374, fortran/101135, fortran/102003, fortran/103707,
  	fortran/103715, fortran/103716, fortran/104352, fortran/106987,
  	fortran/106999, fortran/107426, fortran/110987, fortran/112407,
  	fortran/113799, fortran/113866, fortran/113885, fortran/113956,
  	fortran/114001, fortran/114474, fortran/114535, fortran/114739,
  	fortran/114825, fortran/115039, gcov-profile/114115,
  	gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616,
  	ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731,
  	libquadmath/114533, libstdc++/66146, libstdc++/93672,
  	libstdc++/104606, libstdc++/107800, libstdc++/108976,
  	libstdc++/110050, libstdc++/110054, libstdc++/113841,
  	libstdc++/114147, libstdc++/114316, libstdc++/114359,
  	libstdc++/114367, libstdc++/114401, libstdc++/114750,
  	libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655,
  	middle-end/110027, middle-end/111151, middle-end/111632,
  	middle-end/111683, middle-end/112684, middle-end/112732,
  	middle-end/113396, middle-end/113622, middle-end/114070,
  	middle-end/114348, middle-end/114552, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/114907,
  	rtl-optimization/54052, rtl-optimization/114415,
  	rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696,
  	sanitizer/114687, sanitizer/114743, sanitizer/114956,
  	sanitizer/115172, target/88309, target/101865, target/105522,
  	target/110621, target/111234, target/111600, target/111610,
  	target/111822, target/112397, target/113095, target/113233,
  	target/113950, target/114049, target/114130, target/114160,
  	target/114172, target/114175, target/114272, target/114747,
  	target/114752, target/114794, target/114837, target/114848,
  	target/114981, testsuite/111066, testsuite/112297, testsuite/114034,
  	testsuite/114036, testsuite/114662, tree-optimization/91838,
  	tree-optimization/109925, tree-optimization/110838,
  	tree-optimization/111009, tree-optimization/111268,
  	tree-optimization/111407, tree-optimization/111736,
  	tree-optimization/111882, tree-optimization/112281,
  	tree-optimization/112303, tree-optimization/112793,
  	tree-optimization/112961, tree-optimization/112991,
  	tree-optimization/113552, tree-optimization/113630,
  	tree-optimization/113670, tree-optimization/113831,
  	tree-optimization/113910, tree-optimization/114027,
  	tree-optimization/114115, tree-optimization/114121,
  	tree-optimization/114203, tree-optimization/114231,
  	tree-optimization/114246, tree-optimization/114375,
  	tree-optimization/114396, tree-optimization/114485,
  	tree-optimization/114566, tree-optimization/114672,
  	tree-optimization/114733, tree-optimization/114736,
  	tree-optimization/114749, tree-optimization/114787,
  	tree-optimization/114799, tree-optimization/114876,
  	tree-optimization/114965, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154
  - add --without-clang-plugin --without-llvm-plugin to annobin configure
    options


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244)


author: Keith Seitz <keiths@redhat.com> - 12.1-14
changelog:
  From Sergey Mende:
  - Backport upstream patch "gdb: call check_typedef at beginning of
    dwarf_expr_context::fetch_result". (Simon Marchi)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-16
changelog:
  - Tweak gdb-6.3-rh-testversion-20041202.patch so that $_gdb_major
    and $_gdb_minor will be obtained correctly.


author: Keith Seitz <keiths@redhat.com> - 12.1-2.el9
changelog:
  - Backport binutls/29699 "Fix an illegal memory access when parsing..."
    (Nick Clifton, RHBZ 2153228)


author: Guinevere Larsen <blarsen@redhat.com> - 12.1-4.el9
changelog:
  - Backport "Fix typo in recent code to add stack recursion limit to the Rust demangler."
    (Nick Clifton)
  - Backport "Add a recursion limit to the demangle_const function in the Rust demangler."
    (Nick Clifton, RHEL-4234)


author: Nick Clifton <nickc@redhat.com> - 12.67-1
changelog:
  - Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
  - Annocheck: Stop warnings about known gaps.    (RHEL-53218)
  - Annocheck: Fix stack realign test.  (#2302427)


author: Nick Clifton <nickc@redhat.com> - 12.67-2
changelog:
  - Spec File: Use correct directory for plugin installation.  (RHEL-53209)
  - Spec File: Disable plugin when running on wrong major version of the compiler.


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53209)


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Rebase for GTS 14.1 release.  (RHEL-76932)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Marek Polacek <polacek@redhat.com> 14.2.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.2 release
    - PRs analyzer/114899, c++/99241, c++/99242, c++/104981, c++/106760,
  	c++/111890, c++/115165, c++/115476, c++/115550, c++/115561,
  	c++/115583, c++/115623, c++/115754, c++/115783, c++/115865,
  	c++/115897, c++/115900, c++/115986, fortran/59104, fortran/84006,
  	fortran/93635, fortran/98534, fortran/99798, fortran/100027,
  	fortran/103115, fortran/103312, fortran/113363, fortran/115700,
  	ipa/111613, ipa/113291, ipa/113787, ipa/114207, ipa/115033,
  	ipa/115277, ipa/116055, libstdc++/113376, libstdc++/114387,
  	libstdc++/115399, libstdc++/115482, libstdc++/115522,
  	libstdc++/115585, libstdc++/115807, libstdc++/115854,
  	libstdc++/116070, middle-end/115527, middle-end/115836,
  	middle-end/115887, pch/115312, rtl-optimization/115049,
  	rtl-optimization/115565, target/87376, target/88236, target/97367,
  	target/98762, target/105090, target/113715, target/114759,
  	target/114890, target/114936, target/114988, target/115068,
  	target/115153, target/115188, target/115351, target/115389,
  	target/115456, target/115457, target/115459, target/115475,
  	target/115526, target/115554, target/115562, target/115591,
  	target/115611, target/115691, target/115725, target/115726,
  	target/115752, target/115763, target/115840, target/115872,
  	target/115978, target/115981, target/115988, target/116035,
  	testsuite/115826, testsuite/116061, tree-optimization/113673,
  	tree-optimization/115382, tree-optimization/115646,
  	tree-optimization/115669, tree-optimization/115694,
  	tree-optimization/115701, tree-optimization/115723,
  	tree-optimization/115841, tree-optimization/115843,
  	tree-optimization/115867, tree-optimization/115868,
  	tree-optimization/116034, tree-optimization/116057


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-74061)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-70192)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-74059)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)
  - have gfortran require install-info (RHEL-62417)


author: Marek Polacek <polacek@redhat.com> 15.1.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.1 release
    - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407


author: Marek Polacek <polacek@redhat.com> 15.1.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
     c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
     c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
     fortran/102900, fortran/119928, fortran/119986, fortran/120049,
     fortran/120107, fortran/120139, fortran/120163, fortran/120179,
     fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
     libfortran/120152, libfortran/120153, libfortran/120158,
     libfortran/120196, libstdc++/118260, libstdc++/119427,
     libstdc++/119714, libstdc++/120029, libstdc++/120114,
     libstdc++/120159, libstdc++/120187, libstdc++/120190,
     libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
     modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
     preprocessor/120061, target/119610, testsuite/119909,
     tree-optimization/111873, tree-optimization/119712,
     tree-optimization/120043, tree-optimization/120048,
     tree-optimization/120074, tree-optimization/120089,
     tree-optimization/120143, tree-optimization/120211


author: Filip Januš <fjanus@redhat.com> - 2.2.5-12
changelog:
  - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src)
  - Resolves: #1599032


author: Filip Januš <fjanus@redhat.com> - 2.3.1-1
changelog:
  - Upstream released new version 2.3.1
  - patch bug615 is no more needed - fixed by upstream in release
  - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on
    x390s - XFAIL_TEST definition for x390s is no more necessary


author: Filip Januš <fjanus@redhat.com> - 2.3.2-1
changelog:
  - Add condition if fedora for packages not available in RHEL
  - enable avif support
  - use bcond
  - rebase to version 2.3.2


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Remove gdb-rhbz1261564-aarch64-hw-watchpoint-test.patch.  This test
    should be covered by gdb.base/watchpoint-unaligned.exp which was
    added upstream in commit a3b60e4588606354b93508a0008a5.


author: Guinevere Larsen <guinevere@redhat.com>
changelog:
  - remove gdb-test-bt-cfi-without-die.patch.  This test has been
    accepted upstream and will make its way back to testing with
    the GDB 17 release.


author: Alexandra Hájková <ahajkova@redhat.com> - 16.2-1
changelog:
  - Rebase to FSF GDB 16.2.
    Dropped:  gdb-backport-buildid-related-changes.patch
              gdb-catchpoint-re-set.patch
              gdb-remove-qnx-neutrino-support.patch
    Modified: gdb-add-rpm-suggestion-script.patch


author: Joan Torres <joantolo@redhat.com> - 40.1-31
changelog:
  - Fix legacy-xorg session switching
    The fix that intended to fix the issue wasn't complete and also,
    introduced a bug on user switching for non legacy-xorg servers.
    This fix addresses both issues.
  - Avoid waiting 10s when starting GDM in legacy-xorg mode
    Resolves: RHEL-72694


author: Joan Torres <joantolo@redhat.com> - 40.1-32
changelog:
  - Leave session-opened signature the same as before and use a new
    session-opened-with-session-id signal to keep ABI compatibility
    Related: RHEL-46383


author: Joan Torres <joantolo@redhat.com> - 40.1-35
changelog:
  - Instead of allowing adding custom parameters to Xorg,
    only allow adding -nocursor. Allowing adding custom parameters
    is a potential security issue.
    Related: RHEL-81194


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16
changelog:
  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-17
changelog:
  - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
  - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
  - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-18
changelog:
  - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable()
  - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Josef Ridky <jridky@redhat.com> - 2:3.0.4-2
changelog:
  - fix CVE-2025-10920
  - fix CVE-2025-10921
  - fix CVE-2025-10922
  - fix CVE-2025-10923
  - fix CVE-2025-10924
  - fix CVE-2025-10925
  - fix CVE-2025-10934


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-17
changelog:
  - Add patches for CVE-2024-52533 and CVE-2025-4373
  - Update GDateTime test for new tzdata
  - Resolves: RHEL-94483
  - Resolves: RHEL-102844


author: Frédéric Bérat <fberat@redhat.com> - 2.34-244
changelog:
  - x86-64: Add GLIBC_ABI_DT_X86_64_PLT version to enable DT_X86_64_PLT	
    compatibility. (RHEL-109622)


author: Tamar Shacked <tshacked@redhat.com> - 6.0-56.3
changelog:
  - Rebase with latest RHGS-3.5.4
  - Fix changlog chronological order by removing unneeded changelogs
  - fixes bug bz#1939340


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-13
changelog:
  - Fix: previous commit removed one function from the library and thus broke the ABI
  - function gmpn_preinv_divrem_1 should now not be removed
  Related: rhbz#2044216


author: Kalev Lember <klember@redhat.com> - 40~rc-1
changelog:
  - Update to 40.rc
  - Make -extras subpackage require the main package
  - Drop move-adwaita-backgrounds.patch
  - Remove old obsoletes


author: Bastien Nocera <bnocera@redhat.com> - 3.34.3-4
changelog:
  + gnome-bluetooth-3.34.3-4
  - Revert “Require PulseAudio _or_ Pipewire for Bluetooth audio”
  - Closes: #1928166


author: Felipe Borges <feborges@redhat.com> - 40.0-38
changelog:
  - Scale up monitors drawing in display arrangment settings when multiple monitors
    Related: RHEL-4196


author: Ray Strode <rstrode@redhat.com> - 40.0-6
changelog:
  - Copy and run the script from XDG_RUNTIME_DIR
    Resolves: https://issues.redhat.com/browse/RHEL-25536


author: Olivier Fourdan <ofourdan@redhat.com> - 40.0-8
changelog:
  - Add Xwayland and dbus-daemon as weak dependencies
    Resolves: https://issues.redhat.com/browse/RHEL-66572


author: Milan Crha <mcrha@redhat.com> - 3.40.0-4
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)


author: Milan Crha <mcrha@redhat.com> - 3.40.0-5
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)
  - backport upstream fix to use external browser for OAuth2


author: Joan Torres <joantolo@redhat.com> - 40.1.1-11
changelog:
  - Add race fixes needed when terminating a conflicting session
    on GDM greeter.
    Resolves: RHEL-92341


author: Ray Strode <rstrode@redhat.com> - 40.0.1-15
changelog:
  - Fix crashers in g-s-d and control-center related to
    making subscription-manager a soft dep
    Related: RHEL-20449


author: Felipe Borges <feborges@redhat.com> - 40.0.1-22
changelog:
  - Use mount path in "Low disk" notification when multiple mount points have same name
    Related: RHEL-11910


author: Joan Torres <joantolo@redhat.com> - 40.10-27
changelog:
  - session-opened signature is reverted to keep ABI compatibility,
    use session-opened-with-session-id instead
    Related: RHEL-92307


author: Milan Crha <mcrha@redhat.com> - 41.5-2
changelog:
  - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file)
  - Resolves: #2129021 (Hide some errors in non-debug builds)


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.1-1
changelog:
  - Update to 3.40.1
  - Rebase the patches
  - Backport yet-to-be-released patches from upstream to avoid translation
    conflicts
  Resolves: #1959384


author: Peter Jones <pjones@redhat.com> - 3.0.9-3
changelog:
  - Fix some minor rpmlint complaints
  - Pull recent patches from upstream
  - Add support for ELF constructors and destructors
  - Fix a minor licensing problem


author: Peter Jones <pjones@redhat.com> - 3.0.11-1
changelog:
  - Update to 3.0.11 (via patches generated from git)
  - Plus newer upstream fixes (also via patches generated from git)
  - Fix shell exit failures in make
  - Fix .reloc section generation
  - Fix CHAR8 definition
  - Fix "make DESTDIR=..."
  - Change the installed .a/.o layout
  - Provide makefiles for consumers to use.
  - Make the -devel noarch since it's just headers.
  - Add a bunch of compatibility symlinks for the 3.0.8 filesystem layout
    These will go away once we've migrated everything using them in fedora
    to use the newer make system...


author: Peter Jones <pjones@redhat.com> - 3.0.11-2
changelog:
  - Make a compat subpackage to provide the old paths to our libraries, linker
    script, and includes.


author: Jakub Jelen <jjelen@redhat.com> - 2.3.3-3
changelog:
  - Mark SHA-1 digest as weak to follow SHA-1 disablement in RHEL9 (#2070722)
  - Fix interaction with SSH by not requiring the MD5 digest (#2073567)
  - Fix creation of AEAD packets (#2128058)


author: Daiki Ueno <dueno@redhat.com> - 3.8.3-2
changelog:
  - Fix timing side-channel in deterministic ECDSA (RHEL-28959)
  - Fix potential crash during chain building/verification (RHEL-28954)


author: Alexander Sosedkin <asosedkin@redhat.com> - 3.8.10-1
changelog:
  - rebase to 3.8.10
  - revert defaulting to PBMAC1 in FIPS mode
  - revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification


author: David Benoit <dbenoit@redhat.com> - 1.24.3-3
changelog:
  - Update to Go 1.24.3 (fips-3)
  - Fix linkage issue in bin/go
  - Fix loading issue in non-fips mode
  - Related: RHEL-83439
  - Related: RHEL-87632


author: Alejandro Sáez <asm@redhat.com> - 1.25.0-1
changelog:
  - Update to Go 1.25.0
  - Set GOAMD64 to v2 to align with new architecture baselines
  - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2
  - Resolves: RHEL-109557


author: Parag Nemade <pnemade AT redhat DOT com> - 1:1.002-0.15.20130214
changelog:
  - Un-retire this package in F38+ (#2162532)
  - Update as per suggestions given in rename package review (#2166813)


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20200215-5
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Peng Wu <pwu@redhat.com> - 20230817-1
changelog:
  - Update Noto CJK to Sans 2.004 and Serif 2.002
  - Drop some Noto CJK Language Specific OTFs sub packages
  - Resolves: RHEL-13738


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.20.7-20
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Add upstream commits for git master which contains patches 9, 10 and 11
  - Add GCC10 fix
  - Cleanups


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-15
changelog:
  - Resolves RHEL-97518: Rework grafana-selinux spec file sections
  - Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections


author: Paul Whalen <pwhalen@fedoraproject.org> - 0.15.5-3
changelog:
  - Moved greenboot config to /etc/grub.d.
  - %post symlink greenboot.cfg to bootupd if present
  - %postun remove symlink from bootupd if present


author: Sayan Paul <paul.sayan@gmail.com> - 0.15.7-1
changelog:
  - Update to 0.15.7
  - Reword warning message for disabled checks
  - Fixed the issue that boot_counter cannot be unset and some scripts do not have executable permissions
  - Packit: only use IoT relevant branches


author: Antonio Murdaca <antoniomurdaca@gmail.com> - 0.15.8-1
changelog:
  * ci: add ci test for pull request by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/164
   * ci: add more wait time for fallback by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/167
   * ci: fix ansible check failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/169
   * ci: add test case of bootc anaconda iso by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/171
   * test github token by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/174
   * update github action by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/177
   * Update greenboot-ci.yaml by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/179
   * ci: fix iso case failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/173
   * ci: add support for fedora rawhide by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/181
   * ci: fix rahide failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/183
   * ci: fix podman retry issue by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/185
   * ci: add centos-stream-9 support by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/187
   * ci: add rhel 9.6 support by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/190
   * ci: fix rhel 9.6 anaconda case failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/193
   * ci: fix secret error by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/195
   * specfile: Stop building on ix86 by @travier in https://github.com/fedora-iot/greenboot/pull/197
   * rollback: if no bootc, fallback to rpm-ostree by @runcom in https://github.com/fedora-iot/greenboot/pull/199
   * fix:fail early for any required script failure by @say-paul in https://github.com/fedora-iot/greenboot/pull/198
   * Release 0.15.8 by @runcom in https://github.com/fedora-iot/greenboot/pull/202

   * @travier made their first contribution in https://github.com/fedora-iot/greenboot/pull/197

   **Full Changelog**: https://github.com/fedora-iot/greenboot/compare/v0.15.7...v0.15.8
  - Resolves: RHEL-78244


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Bump version
  - Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542,
    CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835
    Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037
    Resolves: RHEL-71019, RHEL-70995, RHEL-71163


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
    CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
    CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
    CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
    CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
    CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
  - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
  - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
  - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
  - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
  - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
  - Resolves: RHEL-71189


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.22.8-2
changelog:
  - Enable asfdemux, dvdlpcmdec, dvdsub, and realmedia plugins
  - Disable AMR plugins in RHEL builds
  - Resolves: rhbz#2236889


author: Kalev Lember <klember@redhat.com> - 3.24.3-1
changelog:
  - Update to 3.24.3
  - Use https source URLs
  - Re-enable LTO now that we have upstream fix in place (#1898054)
  - Switch to meson build system
  - Tighten soname globs


author: Richard W.M. Jones <rjones@redhat.com> - 1.51.6-2
changelog:
  - Rebase to guestfs-tools 1.51.6
  - Implement --key all:...
    resolves: RHEL-19030
  - Fix crash because of off-by-one error
    resolves: RHEL-19062
  - Fix virt-customize --chown invalid format
    resolves: RHEL-21899


author: Richard W.M. Jones <rjones@redhat.com> - 1.51.6-4
changelog:
  - Add support for nbd+unix:// URIs
    resolves: RHEL-33956
  - customize: Implement --inject-blnsvr operation
    resolves: RHEL-36634


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.2-2
changelog:
  - Rebase to guestfs-tools 1.52.2
    resolves: RHEL-56811
  - Replace Jansson with json-c
    resolves: RHEL-65294


author: Tom Stellard <tstellar@redhat.com> - 5.3.3-3
changelog:
  - Fix warning building with clang
  - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type]


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.5
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.0-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.1-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1
  - Resolves: RHEL-69761


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.2-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.3-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4
  - Resolves: RHEL-83036


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.6-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.7-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.7
  - Resolves: RHEL-112184


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.4.22-4
changelog:
  - Always clear retry flags in read/write functions to avoid CPU
    usage spikes
  - Fix "unable to load certificate chain from file" issue
    Resolves: RHEL-71925, RHEL-68780


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.8.14-2
changelog:
  - Add tmpfiles.d file to make systemd-tmpfiles create/set correct
    ownership/permissions of /var/lib/haproxy
    Resolves: RHEL-120178


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Filip Januš <fjanus@redhat.com> - 1.5-1
changelog:
  - Nwe upstream version 1.5
  - Add patch to solve inconsistency between configure.ac and filename
  - Add Build requirement autoconf


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-4
changelog:
  - 1912147 - Enable matching for '<model>_series' drivers in PPD search algorithm
  - rework optional gui messages


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-5
changelog:
  - 1925259 - %pre scriptlet enables and starts cups.service, which is unnecessary
  - 1919556 - hp-fab crashed: QFileDialog.getOpenFileName is not used correctly


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-3
changelog:
  - Resolves: RHEL-68660 - RewriteRule proxying to UDS (unix domain socket)
    configured in .htaccess doesn't work on httpd-2.4.62-1


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-4
changelog:
  - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode
    characters in the name


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-7
changelog:
  - Resolves: RHEL-99815 - stickysession field does not work when specifying
    it in the query parameter after upgrade to 9.5
  - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS
    upgrade (CVE-2025-49812)
  - Resolves: RHEL-99968 - httpd: access control bypass by trusted
    clients is possible using TLS 1.3 session resumption (CVE-2025-23048)
  - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied
    data in mod_ssl (CVE-2024-47252)


author: Parag Nemade <pnemade AT redhat DOT com> - 5.1-3
changelog:
  - Resolves:rhbz#1967646 - Correct the License: tag to LGPLv3+ based on LICENSE.txt file
  - Added gating tests


author: Parag Nemade <pnemade AT redhat DOT com> - 1.0.3-21
changelog:
  - Remove the duplicate source file committed to this package git repository
  - Update URL tag and files section to be more verbose


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.42.20190303git
changelog:
  - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [bz#2218931]
  - Resolves: bz#2218931
    ([Hyper-V] [RHEL-9] /usr/sbin/vmbus_testing python script prints: "SyntaxWarning: "is" with a literal.")


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.43.20190303git
changelog:
  - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-9902]
  - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-9902]
  - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-9902]
  - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-9902]
  - Resolves: RHEL-9902
    ([Hyper-V][RHEL-9] hyperv-daemons write incompatible IPv6 prefix (IPV6NETMASK) in ifcfg)


author: Jon Maloy <jmaloy@redhat.com> - 0-0.44.20190303git
changelog:
  - hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95812]
  - Resolves: RHEL-95812
    ([Hyper-V][RHEL-9]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 9)


author: Peter Robinson <pbrobinson@fedoraproject.org> - 4.2-2
changelog:
  - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package)
  - Drop/obsolete eepromer subpackage, deprecated for 6 years
  - Drop python2 conditionals
  - Minor cleanups


author: Kamal Heib <kheib@redhat.com> - 57.0-1
changelog:
  - Rebase to upstream release v57.0
  - Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449


author: Mike FABIAN <mfabian@redhat.com> - 1.4.2-1
changelog:
  - Update to  1.4.2
  - New translations: tr (Turkish) 100%, uk (Ukrainian) 100%,
    id (Indonesian) 100%, ja_JP (Japanese) 100%.
  - Translation updates: zh_CN, pt_BR


author: Mike FABIAN <mfabian@redhat.com> - 1.12.4-1
changelog:
  - Update to 1.12.4
  - Update translations from Weblate (updated es, cs, fa, pt_BR, zh_CN).
    zh_CN is 100% complete now.


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-1
changelog:
  - Update to 1.12.5
  - Return False in _execute_command_commit_candidate_number(self, number)
    if number out of range
  - Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/21
  - remove Use-from-unittest-import-mock-instead-of-just-import.patch
    (included upstream)
  - Update translations from Weblate (New translation for Sinhala (si) started)


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-3
changelog:
  - Resolves: rhbz#1974631 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE
    Resolves: https://github.com/definite/ibus-table-chinese/pull/14
  - Add SUGGESTION_MODE = TRUE to the wubi tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/15
  - Support pinyin mode also for stroke5 table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/12
  - Use nicer values for symbol and status prompt
    Resolves: https://github.com/definite/ibus-table-chinese/pull/8
  - update jyutping table; add cantonyale table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/11
  - Update jyutping and cantonese tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/9


author: Mike FABIAN <mfabian@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Use “from unittest import mock” instead of just “import mock”.
  - Update emoji annotations from CLDR
  - Translation update from Weblate for zh_CN (still 100% complete)


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-1
changelog:
  - Update to 2.10.5
  - Run the voikko tests only for libvoikko version >= 4.3
  - Adapt voikko test cases to the newest voikko version
    libvoikko-4.3-3, python3-libvoikko-4.3-3, voikko-fi-2.4-3
  - Log a warning when language is “fi” and “import libvoikko” failed
  - Return an empty list [] in spellcheck_suggest_voikko() when libvoikko was not imported
  - Update emoji annotations from CLDR, switching “no” and “nb”
    See: https://unicode-org.atlassian.net/browse/CLDR-2698
  - Remove icon in emoji-picker.appdata.xml (to avoid warnings
    from appstream-util and appstreamcli).


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-2
changelog:
  - Use the voikko build requires only for Fedora. They are only
    needed to run the voikko test cases during build.


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-3
changelog:
  - Remove gnome-desktop-testing and ibus-desktop-testing from the requires
    of the ibus-typing-booster-tests subpackage


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-1
changelog:
  - Update to 2.11.0
  - Use sensitivity feature of buttons in the setup tool tab where shortcuts are defined
  - Don’t let dialog action area of setup tool expand.
  - Improve the setup tool to make it possible to enter multi-line expansions of shortcuts
  - Resolves https://github.com/mike-fabian/ibus-typing-booster/issues/158
  - Elide extremely long candidates in the lookup table in the middle.
  - If a candidate contains newlines, replace the newlines with arrows in the lookup table.
  - If a commit string contains new-lines, commit it in several chunks
    and forward Return between the chunks.
  - Update emoji annotations from CLDR
  - Put the remote icon back in emoji-picker.appdata.xml, it was a
    false positive by appstreamcli
  - Translation update from Weblate (pt_PT updated, 100% complete now)
  - Skip the inscript2 test cases if these transliterations are not available.


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-3
changelog:
  - Resolves: rhbz#1974636 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Miguel Martín <mmartinv@redhat.com> - 2.19.0-3
changelog:
  - Update ignition-edge commit to support FIPS
      - https://github.com/fedora-iot/ignition-edge/pull/2


author: Yasmin Valim <ydesouza@redhat.com> - 2.21.0-1
changelog:
  - Re-sync with upstream changes adding ignition-grub subpackage
    and a few minor changes
  - New release


author: Martin Kolman <mkolman@redhat.com> - 0.3.84-1
changelog:
  - Adjust to logging command changes in Anaconda (#1891621) (mkolman)
  - Make sure the output from custom_getpass() is serialized after stdout (lkundrak)


author: Martin Kolman <mkolman@redhat.com> - 0.3.86-1
changelog:
  - Drop python-nose from the dependencies (#1916799) (vponcova)
  - Add the makeupdates script (vponcova)
  - Remove deprecated support for add-ons (vponcova)
  - Don't run installation tasks of add-ons in a meta task (vponcova)
  - Migrate COPR builds from Jenkins to Packit (jkonecny)
  - Add documentation for the new test solution (jkonecny)
  - Add support for custom Anaconda COPR repository (jkonecny)
  - Use `make test` to run TMT tests locally (jkonecny)
  - Add TMT configuration to get Anaconda COPR build (jkonecny)
  - Add Packit support for initial-setup (jkonecny)
  - Update and use setup.py for archive creation (jkonecny)
  - Fix ChangeLog generation in Makefile (jkonecny)


author: Martin Kolman <mkolman@redhat.com> - 0.3.89-1
changelog:
  - Include scripts in the updates image (vponcova)
  - Drop build time dependency on the anaconda package (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.1-1
changelog:
  - Add gnome-kiosk to window managers usable by initial-setup (#1962198) (vponcova)
    Resolves: rhbz#1962198


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.2-1
changelog:
  - Disable multi TTY handler when running in SSH session (#1951577) (mkolman)
    Resolves: rhbz#1951577


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.2-1
changelog:
  - fix: add missed optional deps for ls datasources (#4495)
    (xiangceliu@redhat.com)
  - feat: Add error_lines to LSlHFiles parser (#4494) (jiazhang@redhat.com)
  - fix: discard distutils (LooseVersion) in version comparison (#4490)
    (xiangceliu@redhat.com)
  - fix: endless loop caused by Mount.get_dir()  (#4489) (jiazhang@redhat.com)
  - chore: Add ceph new versions 2025_0701 (#4488) (jiazhang@redhat.com)
  - feat(client): Get list of reports for system in more efficient way (#4459)
    (pkoprda@redhat.com)
  - feat(tests): create 8 empty __init__.py files (#4492) (pschrimp@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.3-1
changelog:
  - feat(client): Exclude vendor libs from coverage stats (#4520)
    (pschrimp@redhat.com)
  - fix: handle error from relied spec for container_nginx_conf (#4514)
    (xiaoxwan@redhat.com)
  - fix: enhance RpmVPackage handles the rpm error message (#4521)
    (39508521+shlao@users.noreply.github.com)
  - fix: Enhance "IpLinkInfo" to keep the bond or slave options (#4522)
    (44796653+huali027@users.noreply.github.com)
  - chore: do not collect ls_dev anymore in core collection (#4453)
    (xiangceliu@redhat.com)
  - Replace pkg_resources with importlib.metadata (Python 3.8+) (#4500)
    (miro@hroncok.cz)
  - fix(client): remove unused format_config() function (#4519)
    (pkoprda@redhat.com)
  - fix: compatibility of version_compare (#4518) (xiangceliu@redhat.com)
  - fix: arguments passed to rpm.labelCompare (#4516) (xiangceliu@redhat.com)
  - fix: rpm_vercmp can't compare pkgs with different version length (#4515)
    (xiangceliu@redhat.com)
  - fix(spec): limit to last 10 files for eap_json_reports (#4509)
    (xiaoxwan@redhat.com)
  - chore(rpmcmp): use rpm.labelCompare first (#4501) (xiangceliu@redhat.com)
  - fix: ComplianceClient support general data collection (#4503)
    (xiangceliu@redhat.com)
  - fix: use tempfile.gettempdir as default tmpdir for obfuscation reports
    (#4496) (xiangceliu@redhat.com)
  - chore: enhance YAMLParser to parse yaml files containing = as value (#4508)
    (30404410+qinpingli@users.noreply.github.com)
  - fix: subman.identity supports multiple languages (#4505)
    (xiangceliu@redhat.com)
  - perf(client): add check before retrieving report (#4502)
    (pschrimp@redhat.com)
  - chore(ci/cd): update the codecov actions to v5 (#4504)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.4-1
changelog:
  - chore: print warning when 'subscription_manager_id' is skipped for redaction
    (#4527) (xiangceliu@redhat.com)
  - chore: update MANIFEST.in accordingly (#4531) (xiangceliu@redhat.com)
  - fix: container spec exec with env and cmd precheck (#4513)
    (xiaoxwan@redhat.com)
  - fix: console messsags for --compliance-unassign (#4530)
    (xiangceliu@redhat.com)
  - feat: Add parser and spec for compliance_policies_enabled (#4498)
    (jiazhang@redhat.com)
  - chore: Move parser "WatchDogLog" to "watchdog.py" file (#4529)
    (44796653+huali027@users.noreply.github.com)
  - fix: reduce the size of CalledProcessError exception (#4528)
    (xiangceliu@redhat.com)
  - chore(spec): remove unused *_config_perms from collection (#4526)
    (xiangceliu@redhat.com)
  - feat: New spec "/etc/watchdog.conf" and the parser (#4523)
    (44796653+huali027@users.noreply.github.com)
  - feat(client): suppress link message after upload (#4517)
    (pschrimp@redhat.com)
  - fix: hostname obfuscation issue in particular specs (#4511)
    (xiangceliu@redhat.com)
  - fix: override LANG to 'C.UTF-8' for subscription-manager (#4506)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.5-1
changelog:
  - Revert "feat: Add parser and spec for compliance_policies_enabled (#4498)"
    (#4534) (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.6-1
changelog:
  - fix: revert the cmd&args key for CommandOutputProvider in meta_data (#4539)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.7.1-1
changelog:
  - fix(parser/sshd_config): keep inline comments when parsing config lines
    (#4546) (tayushi1610@gmail.com)
  - feat: New parser MdatpManaged and the spec (#4562)
    (39508521+shlao@users.noreply.github.com)
  - fix(doc): add required configuration for readthedocs (#4565)
    (xiangceliu@redhat.com)
  - chore(doc): update the guide steps for PR to 3.0_egg (#4566)
    (xiangceliu@redhat.com)
  - fix: handle error lines of spec grubby_default_index (#4538)
    (xiaoxwan@redhat.com)
  - fix: Skip RpmVPackage only when no error and no installed (#4550)
    (39508521+shlao@users.noreply.github.com)
  - feat: Add spec and parser for compliance_policies_enabled (#4536)
    (jiazhang@redhat.com)
  - chore(script): update RPM script to use Python virtual env (#4561)
    (xiangceliu@redhat.com)
  - fix: revert the ls specs removed by mistake (#4554) (xiangceliu@redhat.com)
  - fix: exclude irrelevant logrotate configuration files (#4551)
    (xiangceliu@redhat.com)
  - doc: add RPM delivery notes to contributing (#4545) (xiangceliu@redhat.com)
  - fix: don't immediately exit collection when inventory_id is unavailable
    (#4537) (xiangceliu@redhat.com)
  - chore: sync the tito required file to master (#4547) (xiangceliu@redhat.com)
  - feat: onboard packit for build RPM on master branch (#4542)
    (xiangceliu@redhat.com)
  - fix(client): Suppress link message after upload (#4544) (mhorky@redhat.com)
  - chore: sync the changelog with the 3.0 branch (#4540) (xiangceliu@redhat.com)
  - chore: update RPM building scripts and spec file (#4533)
    (xiangceliu@redhat.com)
  - feat: New spec and parser for '/var/log/foreman-installer/foreman.log'
    (#4535) (143097963+atewari-rh@users.noreply.github.com)
  - chore: merge the two RPM build scripts (#4532) (xiangceliu@redhat.com)
  - feat: new script to build insights-core RPM (#4507) (xiangceliu@redhat.com)
  - chore: Introduce Client phase v2 (#4512) (mhorky@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.8.1-1
changelog:
  - chore(spec): Add back spec vmware_tools_conf (#4595) (jiazhang@redhat.com)
  - fix: use try_auto_configuration method for compliance (#4591)
    (xiangceliu@redhat.com)
  - fix(client): do not retry upload on successful upload (#4586)
    (pschrimp@redhat.com)
  - chore(script): update the file name typo in last operation (#4588)
    (xiangceliu@redhat.com)
  - chore: place the build target in spec instead of passing macro (#4587)
    (xiangceliu@redhat.com)
  - chore: refine the pull request template (#4585) (xiangceliu@redhat.com)
  - fix: Enhance spec 'filefrag' to check initramfs/vmlinuz files (#4574)
    (39508521+shlao@users.noreply.github.com)
  - fix: add dep ds containers_with_shell for container specs (#4581)
    (xiaoxwan@redhat.com)
  - chore: remove the unused build scripts (#4577) (xiangceliu@redhat.com)
  - fix: do not collect egg_release file in RPM delivery (#4573)
    (xiangceliu@redhat.com)
  - chore(ci/cd): do not build Egg for PRs to matser (#4578)
    (xiangceliu@redhat.com)
  - New parser for sos_commands/crio/crictl_ps (#4497) (aghodake@redhat.com)
  - fix(test): regression issue of yaml.SafeLoader in testing (#4557)
    (xiangceliu@redhat.com)
  - fix: no valid conf found issue in combiner GrubConf (#4437)
    (xiaoxwan@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.9.1-1
changelog:
  - chore(spec): change ip_route_show_table_all to filterable=True (#4597)
    (xiangceliu@redhat.com)
  - Alter malware code to use locally stored yara rules for the 3rd party feature
    (#4571) (63891960+mtclinton@users.noreply.github.com)
  - fix: collect yum_updates on all supported RHEL (#4607)
    (xiangceliu@redhat.com)
  - fix(MANIFEST): add the 'public.gpg' required by playbook_verifier (#4602)
    (xiangceliu@redhat.com)
  - chore(spec): do not collect ansible_telemetry before it's GA (#4601)
    (xiangceliu@redhat.com)
  - fix: remove the deps from insights_ausearch spec (#4603)
    (xiangceliu@redhat.com)
  - fix(doc): fix homepage example in README (#4599) (xiangceliu@redhat.com)
  - fix(rpm-spec): fix "Requires:" of selinux-policy (#4580)
    (xiangceliu@redhat.com)
  - feat: add parser for spec.nvidia_smi_query_gpu (#4600) (xiaoxwan@redhat.com)
  - feat(spec/parser): new spec and parser for AnsibleTelemetry (#4589)
    (xiangceliu@redhat.com)
  - fix: FileProvider.validate() leaked files outside root (#4474)
    (71874510+jholecek-rh@users.noreply.github.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.9.3-1
changelog:
  - spec: new spec and parser for krb5_localauth_plugin (#4632)
    (xiangceliu@redhat.com)
  - chore(uname): Support RHEL 9.7 in Uname (#4631) (jiazhang@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.10.1-1
changelog:
  - fix(spec): ignore errors when collecting bootloader data (#4636)
    (xiangceliu@redhat.com)
  - fix(spec): keyctl_show should be a simple_command (#4635)
    (xiangceliu@redhat.com)
  - Add new parser & datasource for ls -ldZ (#4622) (986222045@qq.com)
  - fix: enhance IlabModuleList parser on content change (#4624)
    (xiaoxwan@redhat.com)
  - chore(spec): don't need strictly version match (#4634)
    (xiangceliu@redhat.com)
  - chore: Update the base of SsTUPNA (#4619) (xiangceliu@redhat.com)
  - Add spec rear_default_conf (#4625) (jiazhang@redhat.com)
  - chore: Uname supports RHEL 10.1 (#4643) (xiangceliu@redhat.com)
  - spec: new datasource & parser for ls -ldH (#4620) (986222045@qq.com)
  - fix(script): revert to update setup.py (#4623) (xiangceliu@redhat.com)
  - fix(script): tarbal cannot be found when building for testing (#4621)
    (xiangceliu@redhat.com)
  - chore(script): change release to 'dev' for PR testing builds (#4618)
    (xiangceliu@redhat.com)
  - chore(spec): add new spec bootctl_status for analytics (#4613)
    (xiangceliu@redhat.com)
  - chore(spec): add new spec mokutil_list_enrolled for analytics (#4612)
    (xiangceliu@redhat.com)
  - chore(spec): add new spec keyctl_show for analytics (#4611)
    (xiangceliu@redhat.com)


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-15
changelog:
  - Resolves: RHEL-84481 Protect all IPA service principals
  - Resolves: RHEL-84277 [RFE] IDM support UIDs up to 4,294,967,293
  - Resolves: RHEL-84276 Ipa client --raw --structured throws internal error
  - Resolves: RHEL-82707 Search size limit tooltip has Search time limit tooltip text
  - Resolves: RHEL-82089 IPU 9 -> 10: ipa-server breaks the in-place upgrade due to failed scriptlet
  - Resolves: RHEL-68800 ipa-migrate with LDIF file from backup of remote server, fails with error 'change collided with another change'
  - Resolves: RHEL-30658 ipa-cacert-manage install fails with CAs having the same subject DN (subject key mismatch info)


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-16
changelog:
  - Resolves: RHEL-88900 [RFE] Add check on CA cert expiry for ipa-cert-fix
  - Resolves: RHEL-88037 Server installation: dot-forwarder not added as a forwarder
  - Resolves: RHEL-86483 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-41178 ipa-sidgen: fix memory leak in ipa_sidgen_add_post_op()


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-17
changelog:
  - Resolves: RHEL-95010 [RFE] Give warning when adding user with UID out of any ID range
  - Resolves: RHEL-93890 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-93887 ipa idrange-add --help should be more clear about required options
  - Resolves: RHEL-93483 Unable to modify IPA config; --ipaconfigstring="" causes internal error
  - Resolves: RHEL-88834 kdb: ipadb_get_connection() succeeds but returns null LDAP context
  - Resolves: RHEL-68800 ipa-migrate with LDIF file from backup of remote server, fails with error 'change collided with another change'


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-19
changelog:
  - Resolves: RHEL-100450 eDNS: multiple issues during encrypted DNS setup
  - Resolves: RHEL-89907 Privilege escalation from host to domain admin in FreeIPA
  - Resolves: RHEL-99315 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-98565 ipa-idrange-fix: 'Env' object has no attribute 'basedn'
  - Resolves: RHEL-96920 Nightly test failure (rawhide) in test_trust.py::TestTrust::test_server_option_with_unreachable_ad
  - Resolves: RHEL-31907 kdb: support storing and retrieving multiple master keys


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-20
changelog:
  - Resolves: RHEL-106285 Incorrect use of external IdP GitHub trademark
  - Resolves: RHEL-106026 Include fixes in python3-ipatests package
  - Resolves: RHEL-105512 kdb: prevent double crash in RBCD ACL free
  - Resolves: RHEL-101707 ipatests: use "sos report" instead of "sosreport" command
  - Resolves: RHEL-101544 ipa-client-encrypted-dns does not ensure bind-utils >= 9.18 for DoT-compatible nsupdate
  - Resolves: RHEL-100450 eDNS: multiple issues during encrypted DNS setup


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-22
changelog:
  - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-24
changelog:
  - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA


author: Rob Crittenden <rcritten@redhat.com> - 0.16-2
changelog:
  - Don't fail if a service name cannot be looked up in LDAP
  - Disable the ipa-ods-exporter service check


author: Phil Sutter <psutter@redhat.com> [1.8.10-3.el9]
changelog:
  - extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
  - spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
  - nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
  - spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]


author: Phil Sutter <psutter@redhat.com> [1.8.10-5.el9]
changelog:
  - xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
  - tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
  - nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
  - nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
  - nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]


author: Jan Macku <jamacku@redhat.com> - 20210202-10
changelog:
  - arping: Fix 1s delay on exit for unsolicited arpings (RHEL-34110)
  - arping: exit 0 if running in deadline mode and we see replies (RHEL-27718)
  - ping: Print reply with wrong source with warning & some follow-up fixes (RHEL-12789, RHEL-13480)
  - ping: Fix socket error reporting (RHEL-4608)


author: Jan Macku <jamacku@redhat.com> - 20210202-12
changelog:
  - Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (RHEL-94334)


author: Cole Robinson <aintdiscole@gmail.com> - 20200823-1.git4bd064de.git
changelog:
  - Update to newer git snapshot, synced with qemu.git
  - Re-enable HTTPS support, with edk2 fix included (bz 1820836)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-4.git4bd064de
changelog:
  - ipxe-Skip-some-QEMU-ROMs-when-building-for-RHEL.patch [bz#1956931]
  - ipxe-spec-combine-BIOS-and-EFI-roms-using-util-catrom.pl.patch [bz#1957246]
  - Resolves: bz#1956931
    (ipxe-roms-qemu list: Clean out old ROMs)
  - Resolves: bz#1957246
    (boot vm from pxe failed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-5.git4bd064de
changelog:
  - ipxe-Disable-SHA-1.patch [bz#1935932]
  - ipxe-Replace-genisoimage-with-xorriso.patch [bz#1971981]
  - ipxe-spec-Drop-disabled-efi-ia32-build-infrastructure.patch [bz#1980138]
  - ipxe-spec-Generate-qemu-compatible-rom-filenames.patch [bz#1980138]
  - Resolves: bz#1935932
    (ipxe implements and/or uses the deprecated SHA-1 algorithm by default ()
  - Resolves: bz#1971981
    (Please replace genisoimage with xorriso)
  - Resolves: bz#1980138
    (install qemu rom symlinks so qemu doesn't have to)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-6.git4bd064de
changelog:
  - ipxe-Add-ping-command-support.patch [bz#1985658]
  - ipxe-Add-VLAN-tagging-support.patch [bz#1985658]
  - ipxe-netdevice-Strip-802.Q-VLAN-0-priority-tags.patch [bz#1985658]
  - ipxe-Provide-snponly.efi-rom.patch [bz#1985658]
  - ipxe-Build-hwcert-subpackage.patch [bz#1985658]
  - Resolves: bz#1985658
    (carry forward rhel8 ipxe packaging changes)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.452.b09-2
changelog:
  - Update to 8u452-b09 (GA)
  - Update release notes for 8u452-b09.
  - Remove long option documentation from JDK-8335912/JDK-8337499 as not present in 8u
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86967
  - Resolves: RHEL-86620


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-3
changelog:
  - Update to 8u462-b08 (GA)
  - Update release notes for 8u462-b08.
  - Require tzdata 2025b due to upstream inclusion of JDK-8352716
  - Add early backport of JDK-8339414
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-101648
  - Resolves: RHEL-102312
  - Resolves: RHEL-97496


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-4
changelog:
  - Bump rpmrelease for CentOS build
  - Remove obsolete hack to hardcode newer portable version on RHEL
  - Related: RHEL-101648
  - Related: RHEL-102312
  - Related: RHEL-97496


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-5
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-119329


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.472.b08-1
changelog:
  - Update to 8u472-b08 (GA).
  - Update release notes for 8u472-b08.
  - Drop local JDK-8339414 fix as this is now included upstream
  - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118767
  - Resolves: RHEL-119455


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.472.b08-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118767
  - Related: RHEL-119455
  - Related: RHEL-118775


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Backport SHA-3 support for PKCS11 provider
  - Sync patch set with portable build we are using by removing rh1648644-java_access_bridge_privileged_security.patch
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-2
changelog:
  - Update to jdk-11.0.19.0+7
  - Update release notes to 11.0.19.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Rebase FIPS support against 11.0.19+6
  - Rebase RH1750419 alt-java patch against 11.0.19+6
  - Replace local copies of JDK portable binaries with build dependencies
  - Use portable build on x86_32 now one is available
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-3
changelog:
  - Revert "Restore native build for x86 as there is no portable build"
  - Reintroduce useful cleanups from x86 reversion
  - Adjust oj_vendor_version & oj_vendor_bug_url to match the portable so test passes
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-4
changelog:
  - Include the java-11-openjdk-portable.spec file with instructions on how to rebuild.
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1
changelog:
  - Update to jdk-11.0.20.0+8 (GA)
  - Update release notes to 11.0.20.0+8
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
  - Bump tzdata requirement to 2023c now it is available in the buildroot
  - Bump bundled LCMS version to 2.15 as in jdk-11.0.20+1.
  - Bump bundled HarfBuzz version to 7.0.1 as in jdk-11.0.20+7
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2217715
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-3
changelog:
  - Fix tzdata requirement copy-and-paste error that led to two BuildRequires and no Requires
  - Resolves: rhbz#2224420


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1
changelog:
  - Update to jdk-11.0.20.1+1 (GA)
  - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
  - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Resolves: rhbz#2236590


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.13.0.11-4
changelog:
  - Set this to be the default/system JDK providing 'java', 'jre', 'java-devel', etc.
  - Set rpmrelease to 4
  - Resolves: RHEL-63034


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.14+1 (EA)
  - Add to .gitignore openjdk-17.0.14+1-ea.tar.xz
  - Set updatever to 14
  - Set buildver to 1
  - Set rpmrelease to 2
  - Set is_ga to 0
  - Update sources to openjdk-17.0.14+1-ea.tar.xz
  - Double percent signs consistently throughout comments
  - Set bundled giflib provide version to 5.2.2
  - Set bundled libpng provide version to 1.6.43
  - Warn about bundled provide version bumps and backouts in openjdk_news.sh
  - Remove 0001-8332174-Remove-2-unpaired-RLO-Unicode-characters-in-.patch file
  - Revert: Use component in EPEL and Fedora bug URLs


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.7-2
changelog:
  - Update to jdk-17.0.14+7 (GA)
  - Add to .gitignore openjdk-17.0.14+7.tar.xz
  - Set buildver to 7
  - Set is_ga to 1
  - Update sources to openjdk-17.0.14+7.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Resolves: RHEL-73981
  - Resolves: RHEL-73559
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.15.0.6-2
changelog:
  - Update to jdk-17.0.15+6 (GA)
  - Add to .gitignore openjdk-17.0.15+6.tar.xz
  - Set updatever to 15
  - Set buildver to 6
  - Update sources to openjdk-17.0.15+6.tar.xz
  - Set bundled freetype provide version to 2.13.2
  - Set bundled harfbuzz provide version to 8.2.2
  - Require tzdata-java 2025a at runtime and for build
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Update FIPS patch
  - Resolves: RHEL-86627
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.16.0.8-2
changelog:
  - Update to jdk-17.0.16+8
  - Add to .gitignore openjdk-17.0.16+8.tar.xz
  - Set updatever to 16
  - Set buildver to 8
  - Set rpmrelease to 2
  - Update sources to openjdk-17.0.16+8.tar.xz
  - Resolves: RHEL-101788
  - Resolves: RHEL-101795
  - Resolves: RHEL-101796
  - Resolves: RHEL-101797
  - Resolves: RHEL-102283
  - Resolves: RHEL-102286
  - Resolves: RHEL-102285
  - Resolves: RHEL-102284
  - Require tzdata-java 2025b at runtime and for build
  - Set bundled freetype provide version to 2.13.3
  - Set bundled harfbuzz provide version to 10.4.0
  - Set bundled lcms2 provide version to 2.17.0
  - Set bundled libpng provide version to 1.6.47
  - Recommend pipewire
  - Related: RHEL-102667
  - Resolves: RHEL-102669
  - Resolves: RHEL-102670
  - Resolves: RHEL-102672
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.17.0.10-1
changelog:
  - Update to jdk-17.0.17+10 (GA)
  - Add to .gitignore openjdk-17.0.17+10.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set updatever to 17
  - Set buildver to 10
  - Set rpmrelease to 1, remove 'must start at 2' comment
  - Set bundled harfbuzz version to 11.2.0
  - Update sources to openjdk-17.0.17+10.tar.xz
  - Resolves: RHEL-119458
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.8+1 (EA)
  - Update release notes to 21.0.8+1
  - Bump freetype version to 2.13.3 following JDK-8348596
  - Bump harfbuzz version to 10.4.0 following JDK-8348597
  - Bump lcms2 version to 2.17.0 following JDK-8348110
  - Bump libpng version to 1.6.47 following JDK-8348598
  - Switch to EA mode
  - Drop JDK-8351500 local patch which is now available in 21.0.8+1 upstream
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-101798


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Related: RHEL-103209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.2-0.1.ea
changelog:
  - Update to jdk-21.0.8+2 (EA)
  - Update release notes to 21.0.8+2
  - Sync the copy of the portable specfile with the latest update
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Related: RHEL-101798
  - Resolves: RHEL-103209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.8-0.1.ea
changelog:
  - Update to jdk-21.0.8+8 (EA)
  - Update release notes to 21.0.8+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-101798


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland
  - Resolves: RHEL-102677


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Update to jdk-21.0.8+9 (GA)
  - Update release notes to 21.0.8+9
  - Switch to GA mode
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-102289


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-1
changelog:
  - Update to jdk-21.0.9+10 (GA)
  - Update release notes to 21.0.9+10
  - Bump harfbuzz version to 11.2.0 following JDK-8355528
  - Add NEWS corrections from Thomas
  - Use double spacing consistently in notes for this release
  - Correct 11u release reference to corresponding 21u release as pointed out by Kieran
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118774
  - Resolves: RHEL-119466


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118774
  - Related: RHEL-119466


author: Jiri Vanek <jvanek@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - criu-devel moved to BR
  - now requires criu-libs
  - enabled debuginfo generation
  - excluded i686 build as criu is 64b only
  - .so file moved out of jar. Required teo patches:
  - added and applied patch0 output_loc.patch
  - added and applied patch1 load_library.patch
  - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.3.20210802a3007aa
changelog:
  - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9.
  - This also ensures use of the standard build flags and installs the jar in the expected location.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.4.20210807b2d3751
changelog:
  - Update to latest upstream version with renamed package and consistent use of "jigawatts"
  - Drop library patch which is no longer needed.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.0~SNAPSHOT^20210827.a5f8e31-1
changelog:
  - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.21.0.0.0-4
changelog:
  - Bump release number to make RHEL 9.1 build later than RHEL 9 Beta & RHEL 9 GA builds
  - Resolves: rhbz#2071920


author: Zamir SUN <zsun@fedoraproject.org> - 0-0.17.20191127gitbd56a60
changelog:
  - Workaround "multiple definition of `yyin'"
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=1799559


author: Cestmir Kalina <ckalina@redhat.com> - 0.24
changelog:
  - Fix annocheck failures
  - Fix osci tier0 test reference
  - Fix ET_DYN vmlinux namespace support
  - Resolves: rhbz#2038913
  - Resolves: rhbz#2045976
  - Resolves: rhbz#2038892


author: Akira TAGOH <tagoh@redhat.com> - 2.5-35
changelog:
  - Drop gtk2 dependency completely.
  - Make anthy build conditionally for Fedora release only.
    Resolves: rhbz#1939777
  - Fix build fail without anthy-devel.


author: Christine Caulfield <ccaulfie@redhat.com> - 2.2.8-6
changelog:
  - fix "Keepalived claims that blackhole route doesn't have interface and can't be tracked"
    Resolves: RHEL-40520


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-633.el9]
changelog:
  - nbd: override creds to kernel when calling sock_{send,recv}msg() (Ming Lei) [RHEL-113752]
  - vrf: Drop existing dst reference in vrf_ip6_input_dst (Antoine Tenart) [RHEL-115636]
  - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123216]
  - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Paolo Abeni) [RHEL-115645]
  - Documentation: Fix description format for powerpc RTAS ioctls (Mamatha Inamdar) [RHEL-101838]
  - powerpc/pseries: Include linux/types.h in papr-platform-dump.h (Mamatha Inamdar) [RHEL-101838]
  - powerpc/pseries: Add a char driver for physical-attestation RTAS (Mamatha Inamdar) [RHEL-101838]
  - powerpc/pseries: Add papr-platform-dump character driver for dump retrieval (Mamatha Inamdar) [RHEL-101838]
  - powerpc/pseries: Add ibm,get-dynamic-sensor-state RTAS call support (Mamatha Inamdar) [RHEL-101838]
  - powerpc/pseries: Add ibm,set-dynamic-indicator RTAS call support (Mamatha Inamdar) [RHEL-101838]
  - powerpc/pseries: Add papr-indices char driver for ibm,get-indices (Mamatha Inamdar) [RHEL-101838]
  - powerpc/pseries: Define papr_indices_io_block for papr-indices ioctls (Mamatha Inamdar) [RHEL-101838]
  - powerpc/pseries: Define common functions for RTAS sequence calls (Mamatha Inamdar) [RHEL-101838]
  - powerpc: Find mutex struct based on RTAS tokens (Mamatha Inamdar) [RHEL-101838]
  - vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (Guillaume Nault) [RHEL-115639]
  - vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (Guillaume Nault) [RHEL-115639]
  - vxlan: vnifilter: Fix unlocked deletion of default FDB entry (Guillaume Nault) [RHEL-115639]
  - vxlan: Add RCU read-side critical sections in the Tx path (Guillaume Nault) [RHEL-115639]
  - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Guillaume Nault) [RHEL-115639]
  - geneve: Fix use-after-free in geneve_find_dev(). (Guillaume Nault) [RHEL-115639]
  - mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-16340]
  - fs: writeback: fix use-after-free in __mark_inode_dirty() (CKI Backport Bot) [RHEL-117209] {CVE-2025-39866}
  - crypto: ccp - Use int type to store negative error codes (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Fix incorrect payload size calculation in psp_poulate_hsti() (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Fix typo in psp_populate_hsti function name (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Remove redundant __GFP_ZERO (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Fix checks for SNP_VLEK_LOAD input buffer length (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Add support to enable CipherTextHiding on SNP_INIT_EX (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Introduce new API interface to indicate SEV-SNP Ciphertext hiding feature (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Add support for SNP_FEATURE_INFO command (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Cache SEV platform status and platform state (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - New bit-field definitions for SNP_PLATFORM_STATUS command (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - reduce stack usage in ccp_run_aes_gcm_cmd (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Fix crash when rebind ccp device for ccp.ko (Vladis Dronov) [RHEL-106910] {CVE-2025-38581}
  - crypto: ccp - Fix locking on alloc failure handling (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Fix SNP panic notifier unregistration (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Fix dereferencing uninitialized error pointer (Vladis Dronov) [RHEL-106910] {CVE-2025-39729}
  - crypto: ccp - Add missing bootloader info reg for pspv6 (Vladis Dronov) [RHEL-106910]
  - KVM: SVM: Add missing member in SNP_LAUNCH_START command structure (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Add missing tee info reg for teev2 (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Add missing bootloader info reg for pspv5 (Vladis Dronov) [RHEL-106910]
  - dt-bindings: crypto: Convert amd,ccp-seattle-v1a to DT schema (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Add support for PCI device 0x17D8 (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Include crypto/utils.h for crypto_memneq (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Fix __sev_snp_shutdown_locked (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Add missing header inclusions (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Silence may-be-uninitialized warning in sev_ioctl_do_pdh_export (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Move SEV/SNP Platform initialization to KVM (Vladis Dronov) [RHEL-106910]
  - KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Add new SEV/SNP platform shutdown API (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Register SNP panic notifier only if SNP is enabled (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Reset TMR size at SNP Shutdown (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Vladis Dronov) [RHEL-106910]
  - sanitize handling of long-term internal mounts (José Expósito) [RHEL-113576]
  - PM: hibernate: Add stub for pm_hibernate_is_recovering() (José Expósito) [RHEL-113576]
  - PM: hibernate: add new api pm_hibernate_is_recovering() (José Expósito) [RHEL-113576]
  - mm/kmap: Add kmap_local_page_try_from_panic() (José Expósito) [RHEL-113576]
  - firmware: sysfb: Move bpp-depth calculation into screen_info helper (José Expósito) [RHEL-113576]
  - platform/x86: apple-gmux: Add apple_gmux_detect() helper (José Expósito) [RHEL-113576]
  - platform/x86: apple-gmux: Move port defines to apple-gmux.h (José Expósito) [RHEL-113576]
  - PCI: Add pci_is_display() to check if device is a display controller (José Expósito) [RHEL-113576]
  - io_uring: fix incorrect unlikely() usage in io_waitid_prep() (Jeff Moyer) [RHEL-105612]
  - io_uring: protect mem region deregistration (Jeff Moyer) [RHEL-105612]
  - Revert "io_uring/rw: drop -EOPNOTSUPP check in __io_complete_rw_common()" (Jeff Moyer) [RHEL-105612]
  - io_uring/msg_ring: kill alloc_cache for io_kiocb allocations (Jeff Moyer) [RHEL-105612]
  - io_uring: rename the data cmd cache (Jeff Moyer) [RHEL-105612]
  - io_uring: deduplicate caches deallocation (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths (Jeff Moyer) [RHEL-105612]
  - fs: add a FMODE_ flag to indicate IOCB_HAS_METADATA availability (Jeff Moyer) [RHEL-105612]
  - io_uring/net: always use current transfer count for buffer put (Jeff Moyer) [RHEL-105612]
  - io_uring/memmap: cast nr_pages to size_t before shifting (Jeff Moyer) [RHEL-105612]
  - io_uring: fix breakage in EXPERT menu (Jeff Moyer) [RHEL-105612]
  - io_uring/poll: fix POLLERR handling (Jeff Moyer) [RHEL-105612]
  - io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: cast rw->flags assignment to rwf_t (Jeff Moyer) [RHEL-105612]
  - io_uring: don't use int for ABI (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: flag partial buffer mappings (Jeff Moyer) [RHEL-105612]
  - io_uring/net: mark iov as dynamically allocated even for single segments (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: don't rely on user vaddr alignment (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: fix folio unpinning (Jeff Moyer) [RHEL-105612]
  - io_uring: fix potential page leak in io_sqe_buffer_register() (Jeff Moyer) [RHEL-105612]
  - io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-105612]
  - io_uring: fix task leak issue in io_wq_create() (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: validate buffer count with offset for cloning (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: don't truncate end buffer for multiple buffer peeks (Jeff Moyer) [RHEL-105612]
  - io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-105612]
  - io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-105612]
  - io_uring/net: only consider msg_inq if larger than 1 (Jeff Moyer) [RHEL-105612]
  - io_uring/net: only retry recv bundle for a full transfer (Jeff Moyer) [RHEL-105612]
  - io_uring: fix overflow resched cqe reordering (Jeff Moyer) [RHEL-105612]
  - io_uring/fdinfo: grab ctx->uring_lock around io_uring_show_fdinfo() (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: account ring io_buffer_list memory (Jeff Moyer) [RHEL-105612]
  - io_uring/memmap: don't use page_address() on a highmem page (Jeff Moyer) [RHEL-105612]
  - io_uring/uring_cmd: fix hybrid polling initialization issue (Jeff Moyer) [RHEL-105612]
  - io_uring: account drain memory to cgroup (Jeff Moyer) [RHEL-105612]
  - io_uring/sqpoll: Increase task_work submission batch size (Jeff Moyer) [RHEL-105612]
  - io_uring: always arm linked timeouts prior to issue (Jeff Moyer) [RHEL-105612]
  - io_uring: fix 'sync' handling of io_fallback_tw() (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: reject zero sized provided buffers (Jeff Moyer) [RHEL-105612]
  - io_uring: don't post tag CQEs on file/buffer registration failure (Jeff Moyer) [RHEL-105612]
  - io_uring/net: account memory for zc sendmsg (Jeff Moyer) [RHEL-105612]
  - io_uring/net: fix io_req_post_cqe abuse by send bundle (Jeff Moyer) [RHEL-105612]
  - io_uring: fix retry handling off iowq (Jeff Moyer) [RHEL-105612]
  - io_uring/net: only import send_zc buffer once (Jeff Moyer) [RHEL-105612]
  - io_uring: Remove unused declaration io_alloc_async_data() (Jeff Moyer) [RHEL-105612]
  - io_uring: make io_poll_issue() sturdier (Jeff Moyer) [RHEL-105612]
  - io_uring/net: fix accept multishot handling (Jeff Moyer) [RHEL-105612]
  - io_uring: use lockless_cq flag in io_req_complete_post() (Jeff Moyer) [RHEL-105612]
  - io_uring: introduce type alias for io_tw_state (Jeff Moyer) [RHEL-105612]
  - io_uring/net: improve recv bundles (Jeff Moyer) [RHEL-105612]
  - io_uring: check for iowq alloc_workqueue failure (Jeff Moyer) [RHEL-105612]
  - io_uring/io-wq: do not use bogus hash value (Jeff Moyer) [RHEL-105612]
  - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion (Jeff Moyer) [RHEL-105612]
  - io_uring/net: fix sendzc double notif flush (Jeff Moyer) [RHEL-105612]
  - io_uring/net: don't clear REQ_F_NEED_CLEANUP unconditionally (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: ensure reissue path is correctly handled for IOPOLL (Jeff Moyer) [RHEL-105612]
  - io_uring/net: save msg_control for compat (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: clean up mshot forced sync mode (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: move ki_complete init into prep (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: don't directly use ki_complete (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: forbid multishot async reads (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: remove unused constants (Jeff Moyer) [RHEL-105612]
  - io_uring: fix spelling error in uapi io_uring.h (Jeff Moyer) [RHEL-105612]
  - io-wq: backoff when retrying worker creation (Jeff Moyer) [RHEL-105612]
  - io_uring/uring_cmd: unconditionally copy SQEs at prep time (Jeff Moyer) [RHEL-105612]
  - io_uring/waitid: setup async data in the prep handler (Jeff Moyer) [RHEL-105612]
  - io_uring/uring_cmd: remove dead req_has_async_data() check (Jeff Moyer) [RHEL-105612]
  - io_uring/uring_cmd: switch sqe to async_data on EAGAIN (Jeff Moyer) [RHEL-105612]
  - io_uring/uring_cmd: don't assume io_uring_cmd_data layout (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: reallocate buf lists on upgrade (Jeff Moyer) [RHEL-105612]
  - io_uring/waitid: don't abuse io_tw_state (Jeff Moyer) [RHEL-105612]
  - io_uring/net: don't retry connect operation on EPOLLERR (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: simplify io_rw_recycle() (Jeff Moyer) [RHEL-105612]
  - io_uring: remove !KASAN guards from cache free (Jeff Moyer) [RHEL-105612]
  - io_uring/net: extract io_send_select_buffer() (Jeff Moyer) [RHEL-105612]
  - io_uring/net: clean io_msg_copy_hdr() (Jeff Moyer) [RHEL-105612]
  - io_uring/net: make io_net_vec_assign() return void (Jeff Moyer) [RHEL-105612]
  - io_uring: add alloc_cache.c (Jeff Moyer) [RHEL-105612]
  - io_uring: dont ifdef io_alloc_cache_kasan() (Jeff Moyer) [RHEL-105612]
  - io_uring: include all deps for alloc_cache.h (Jeff Moyer) [RHEL-105612]
  - io_uring: fix multishots with selected buffers (Jeff Moyer) [RHEL-105612]
  - io_uring/register: use atomic_read/write for sq_flags migration (Jeff Moyer) [RHEL-105612]
  - futex: Pass in task to futex_queue() (Jeff Moyer) [RHEL-105612]
  - io_uring/alloc_cache: get rid of _nocache() helper (Jeff Moyer) [RHEL-105612]
  - io_uring: get rid of alloc cache init_once handling (Jeff Moyer) [RHEL-105612]
  - io_uring/uring_cmd: cleanup struct io_uring_cmd_data layout (Jeff Moyer) [RHEL-105612]
  - io_uring/uring_cmd: use cached cmd_op in io_uring_cmd_sock() (Jeff Moyer) [RHEL-105612]
  - io_uring/msg_ring: don't leave potentially dangling ->tctx pointer (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: Move lockdep assert from io_free_rsrc_node() to caller (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: remove unused parameter ctx for io_rsrc_node_alloc() (Jeff Moyer) [RHEL-105612]
  - io_uring: clean up io_uring_register_get_file() (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: Simplify buffer cloning by locking both rings (Jeff Moyer) [RHEL-105612]
  - io_uring/fdinfo: fix io_uring_show_fdinfo() misuse of ->d_iname (Jeff Moyer) [RHEL-105612]
  - io_uring: reuse io_should_terminate_tw() for cmds (Jeff Moyer) [RHEL-105612]
  - io_uring: Factor out a function to parse restrictions (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: require cloned buffers to share accounting contexts (Jeff Moyer) [RHEL-105612]
  - io_uring: simplify the SQPOLL thread check when cancelling requests (Jeff Moyer) [RHEL-105612]
  - io_uring: expose read/write attribute capability (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: don't gate retry on completion context (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: handle -EAGAIN retry at IO completion time (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: use io_rw_recycle() from cleanup path (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: simplify the bvec iter count calculation (Jeff Moyer) [RHEL-105612]
  - io_uring: ensure io_queue_deferred() is out-of-line (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: always clear ->bytes_done on io_async_rw setup (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: use NULL for rw->free_iovec assigment (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: don't mask in f_iocb_flags (Jeff Moyer) [RHEL-105612]
  - io_uring/msg_ring: Drop custom destructor (Jeff Moyer) [RHEL-105612]
  - io_uring: Move old async data allocation helper to header (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: Allocate async data through helper (Jeff Moyer) [RHEL-105612]
  - io_uring/net: Allocate msghdr async data through helper (Jeff Moyer) [RHEL-105612]
  - io_uring/uring_cmd: Allocate async data through generic helper (Jeff Moyer) [RHEL-105612]
  - io_uring/poll: Allocate apoll with generic alloc_cache helper (Jeff Moyer) [RHEL-105612]
  - io_uring/futex: Allocate ifd with generic alloc_cache helper (Jeff Moyer) [RHEL-105612]
  - io_uring: Add generic helper to allocate async data (Jeff Moyer) [RHEL-105612]
  - io_uring: Fold allocation into alloc_cache helper (Jeff Moyer) [RHEL-105612]
  - io_uring: prevent reg-wait speculations (Jeff Moyer) [RHEL-105612]
  - io_uring: don't vmap single page regions (Jeff Moyer) [RHEL-105612]
  - io_uring: clean up io_prep_rw_setup() (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: fix unintentional sign extension on shift of reg.bgid (Jeff Moyer) [RHEL-105612]
  - io_uring: introduce attributes for read/write and PI support (Jeff Moyer) [RHEL-105612]
  - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio (Jeff Moyer) [RHEL-105612]
  - io_uring/memmap: unify io_uring mmap'ing code (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: use region api for pbuf rings (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: remove pbuf ring refcounting (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: use mmap_lock to sync with mmap (Jeff Moyer) [RHEL-105612]
  - io_uring: use region api for CQ (Jeff Moyer) [RHEL-105612]
  - io_uring: use region api for SQ (Jeff Moyer) [RHEL-105612]
  - io_uring: pass ctx to io_register_free_rings (Jeff Moyer) [RHEL-105612]
  - io_uring/memmap: implement mmap for regions (Jeff Moyer) [RHEL-105612]
  - io_uring/memmap: implement kernel allocated regions (Jeff Moyer) [RHEL-105612]
  - io_uring/memmap: add IO_REGION_F_SINGLE_REF (Jeff Moyer) [RHEL-105612]
  - io_uring/memmap: helper for pinning region pages (Jeff Moyer) [RHEL-105612]
  - io_uring/memmap: optimise single folio regions (Jeff Moyer) [RHEL-105612]
  - io_uring/memmap: reuse io_free_region for failure path (Jeff Moyer) [RHEL-105612]
  - io_uring/memmap: account memory before pinning (Jeff Moyer) [RHEL-105612]
  - io_uring/memmap: flag regions with user pages (Jeff Moyer) [RHEL-105612]
  - io_uring/memmap: flag vmap'ed regions (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: export io_check_coalesce_buffer (Jeff Moyer) [RHEL-105612]
  - io_uring: rename ->resize_lock (Jeff Moyer) [RHEL-105612]
  - Reapply "io_uring/uring_cmd: defer SQE copying until it's needed" (Jeff Moyer) [RHEL-105612]
  - io_uring/register: cache old SQ/CQ head reading for copies (Jeff Moyer) [RHEL-105612]
  - io_uring/register: document io_register_resize_rings() shared mem usage (Jeff Moyer) [RHEL-105612]
  - io_uring/register: use stable SQ/CQ ring data during resize (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: fixup io_clone_buffers() error handling (Jeff Moyer) [RHEL-105612]
  - io_uring: don't touch sqd->thread off tw add (Jeff Moyer) [RHEL-105612]
  - io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (Jeff Moyer) [RHEL-105612]
  - io_uring: silence false positive warnings (Jeff Moyer) [RHEL-105612]
  - io_uring: add io_uring_cmd_get_async_data helper (Jeff Moyer) [RHEL-105612]
  - io_uring/cmd: add per-op data to struct io_uring_cmd_data (Jeff Moyer) [RHEL-105612]
  - io_uring/cmd: rename struct uring_cache to io_uring_cmd_data (Jeff Moyer) [RHEL-105612]
  - io_uring/timeout: fix multishot updates (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: use pre-committed buffer address for non-pollable file (Jeff Moyer) [RHEL-105612]
  - io_uring/net: always initialize kmsg->msg.msg_inq upfront (Jeff Moyer) [RHEL-105612]
  - io_uring/timeout: flush timeouts outside of the timeout lock (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: fix downgraded mshot read (Jeff Moyer) [RHEL-105612]
  - io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-105612]
  - io_uring/register: limit ring resizing to DEFER_TASKRUN (Jeff Moyer) [RHEL-105612]
  - io_uring: Fix registered ring file refcount leak (Jeff Moyer) [RHEL-105612]
  - io_uring: make ctx->timeout_lock a raw spinlock (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: don't put/free empty buffers (Jeff Moyer) [RHEL-105612]
  - io_uring: Change res2 parameter type in io_uring_cmd_done (Jeff Moyer) [RHEL-105612]
  - io_uring/tctx: work around xa_store() allocation error issue (Jeff Moyer) [RHEL-105612]
  - io_uring: fix task_work cap overshooting (Jeff Moyer) [RHEL-105612]
  - io_uring: check for overflows in io_pin_pages (Jeff Moyer) [RHEL-105612]
  - io_uring/nop: ensure nop->fd is always initialized (Jeff Moyer) [RHEL-105612]
  - io_uring: limit local tw done (Jeff Moyer) [RHEL-105612]
  - io_uring: add io_local_work_pending() (Jeff Moyer) [RHEL-105612]
  - io_uring/region: return negative -E2BIG in io_create_region() (Jeff Moyer) [RHEL-105612]
  - io_uring: protect register tracing (Jeff Moyer) [RHEL-105612]
  - io_uring: remove io_uring_cqwait_reg_arg (Jeff Moyer) [RHEL-105612]
  - io_uring/region: fix error codes after failed vmap (Jeff Moyer) [RHEL-105612]
  - io_uring: restore back registered wait arguments (Jeff Moyer) [RHEL-105612]
  - io_uring: add memory region registration (Jeff Moyer) [RHEL-105612]
  - io_uring: introduce concept of memory regions (Jeff Moyer) [RHEL-105612]
  - io_uring: temporarily disable registered waits (Jeff Moyer) [RHEL-105612]
  - io_uring: disable ENTER_EXT_ARG_REG for IOPOLL (Jeff Moyer) [RHEL-105612]
  - io_uring: fortify io_pin_pages with a warning (Jeff Moyer) [RHEL-105612]
  - io_uring: fix invalid hybrid polling ctx leaks (Jeff Moyer) [RHEL-105612]
  - io_uring/uring_cmd: fix buffer index retrieval (Jeff Moyer) [RHEL-105612]
  - io_uring/cmd: let cmds to know about dying task (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: add & apply io_req_assign_buf_node() (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: remove '->ctx_ptr' of 'struct io_rsrc_node' (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: pass 'struct io_ring_ctx' reference to rsrc helpers (Jeff Moyer) [RHEL-105612]
  - io_uring: Remove redundant hrtimer's callback function setup (Jeff Moyer) [RHEL-105612]
  - io_uring: avoid normal tw intermediate fallback (Jeff Moyer) [RHEL-105612]
  - io_uring/napi: add static napi tracking strategy (Jeff Moyer) [RHEL-105612]
  - io_uring/napi: clean up __io_napi_do_busy_loop (Jeff Moyer) [RHEL-105612]
  - io_uring/napi: Use lock guards (Jeff Moyer) [RHEL-105612]
  - io_uring/napi: improve __io_napi_add (Jeff Moyer) [RHEL-105612]
  - io_uring/napi: fix io_napi_entry RCU accesses (Jeff Moyer) [RHEL-105612]
  - io_uring/napi: protect concurrent io_napi_entry timeout accesses (Jeff Moyer) [RHEL-105612]
  - io_uring: prevent speculating sq_array indexing (Jeff Moyer) [RHEL-105612]
  - io_uring: move struct io_kiocb from task_struct to io_uring_task (Jeff Moyer) [RHEL-105612]
  - io_uring: remove task ref helpers (Jeff Moyer) [RHEL-105612]
  - io_uring: move cancelations to be io_uring_task based (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: split io_kiocb node type assignments (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: encode node type and ctx together (Jeff Moyer) [RHEL-105612]
  - io_uring: add support for hybrid IOPOLL (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: allow cloning with node replacements (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: allow cloning at an offset (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: get rid of the empty node and dummy_ubuf (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: add io_reset_rsrc_node() helper (Jeff Moyer) [RHEL-105612]
  - io_uring/filetable: kill io_reset_alloc_hint() helper (Jeff Moyer) [RHEL-105612]
  - io_uring/filetable: remove io_file_from_index() helper (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: add io_rsrc_node_lookup() helper (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: unify file and buffer resource tables (Jeff Moyer) [RHEL-105612]
  - io_uring: only initialize io_kiocb rsrc_nodes when needed (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: add an empty io_rsrc_node for sparse buffer entries (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: get rid of io_rsrc_node allocation cache (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: get rid of per-ring io_rsrc_node list (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: kill io_charge_rsrc_node() (Jeff Moyer) [RHEL-105612]
  - io_uring/splice: open code 2nd direct file assignment (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: move struct io_fixed_file to rsrc.h header (Jeff Moyer) [RHEL-105612]
  - io_uring/nop: add support for testing registered files and buffers (Jeff Moyer) [RHEL-105612]
  - io_uring: add support for fixed wait regions (Jeff Moyer) [RHEL-105612]
  - io_uring: change io_get_ext_arg() to use uaccess begin + end (Jeff Moyer) [RHEL-105612]
  - io_uring: switch struct ext_arg from __kernel_timespec to timespec64 (Jeff Moyer) [RHEL-105612]
  - io_uring/sqpoll: wait on sqd->wait for thread parking (Jeff Moyer) [RHEL-105612]
  - io_uring/register: add IORING_REGISTER_RESIZE_RINGS (Jeff Moyer) [RHEL-105612]
  - io_uring/memmap: explicitly return -EFAULT for mmap on NULL rings (Jeff Moyer) [RHEL-105612]
  - io_uring: abstract out a bit of the ring filling logic (Jeff Moyer) [RHEL-105612]
  - io_uring: move max entry definition and ring sizing into header (Jeff Moyer) [RHEL-105612]
  - io_uring/net: clean up io_msg_copy_hdr (Jeff Moyer) [RHEL-105612]
  - io_uring/net: don't alias send user pointer reads (Jeff Moyer) [RHEL-105612]
  - io_uring/net: don't store send address ptr (Jeff Moyer) [RHEL-105612]
  - io_uring/net: split send and sendmsg prep helpers (Jeff Moyer) [RHEL-105612]
  - io_uring: kill 'imu' from struct io_kiocb (Jeff Moyer) [RHEL-105612]
  - io_uring/net: move send zc fixed buffer import to issue path (Jeff Moyer) [RHEL-105612]
  - io_uring: remove 'issue_flags' argument for io_req_set_rsrc_node() (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: get rid of using req->imu (Jeff Moyer) [RHEL-105612]
  - io_uring/uring_cmd: get rid of using req->imu (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: don't assign bvec twice in io_import_fixed() (Jeff Moyer) [RHEL-105612]
  - io_uring: clean up cqe trace points (Jeff Moyer) [RHEL-105612]
  - io_uring: static_key for !IORING_SETUP_NO_SQARRAY (Jeff Moyer) [RHEL-105612]
  - io_uring: kill io_llist_xchg (Jeff Moyer) [RHEL-105612]
  - io_uring: move cancel hash tables to kvmalloc/kvfree (Jeff Moyer) [RHEL-105612]
  - io_uring/cancel: get rid of init_hash_table() helper (Jeff Moyer) [RHEL-105612]
  - io_uring/poll: get rid of per-hashtable bucket locks (Jeff Moyer) [RHEL-105612]
  - io_uring/poll: get rid of io_poll_tw_hash_eject() (Jeff Moyer) [RHEL-105612]
  - io_uring/poll: get rid of unlocked cancel hash (Jeff Moyer) [RHEL-105612]
  - io_uring/poll: remove 'ctx' argument from io_poll_req_delete() (Jeff Moyer) [RHEL-105612]
  - io_uring/msg_ring: add support for sending a sync message (Jeff Moyer) [RHEL-105612]
  - io_uring/msg_ring: refactor a few helper functions (Jeff Moyer) [RHEL-105612]
  - io_uring/eventfd: move ctx->evfd_last_cq_tail into io_ev_fd (Jeff Moyer) [RHEL-105612]
  - io_uring/eventfd: abstract out ev_fd grab + release helpers (Jeff Moyer) [RHEL-105612]
  - io_uring/eventfd: move trigger check into a helper (Jeff Moyer) [RHEL-105612]
  - io_uring/eventfd: move actual signaling part into separate helper (Jeff Moyer) [RHEL-105612]
  - io_uring/eventfd: check for the need to async notifier earlier (Jeff Moyer) [RHEL-105612]
  - io_uring/eventfd: abstract out ev_fd put helper (Jeff Moyer) [RHEL-105612]
  - io_uring: IORING_OP_F[GS]ETXATTR is fine with REQ_F_FIXED_FILE (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: fix wrong NOWAIT check in io_rw_init_file() (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: ignore dummy_ubuf for buffer cloning (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: allow pollable non-blocking attempts for !FMODE_NOWAIT (Jeff Moyer) [RHEL-105612]
  - io_uring: fix casts to io_req_flags_t (Jeff Moyer) [RHEL-105612]
  - io_uring: improve request linking trace (Jeff Moyer) [RHEL-105612]
  - io_uring/sqpoll: do the napi busy poll outside the submission block (Jeff Moyer) [RHEL-105612]
  - io_uring: clean up a type in io_uring_register_get_file() (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: change ubuf->ubuf_end to length tracking (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: get rid of io_mapped_ubuf->folio_mask (Jeff Moyer) [RHEL-105612]
  - io_uring: rename "copy buffers" to "clone buffers" (Jeff Moyer) [RHEL-105612]
  - io_uring: add IORING_REGISTER_COPY_BUFFERS method (Jeff Moyer) [RHEL-105612]
  - io_uring/register: provide helper to get io_ring_ctx from 'fd' (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: add reference count to struct io_mapped_ubuf (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: clear 'slot' entry upfront (Jeff Moyer) [RHEL-105612]
  - block: implement async io_uring discard cmd (Jeff Moyer) [RHEL-105612]
  - block: introduce blk_validate_byte_range() (Jeff Moyer) [RHEL-105612]
  - filemap: introduce filemap_invalidate_pages (Jeff Moyer) [RHEL-105612]
  - io_uring/cmd: give inline space in request to cmds (Jeff Moyer) [RHEL-105612]
  - io_uring/cmd: expose iowq to cmds (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: drop -EOPNOTSUPP check in __io_complete_rw_common() (Jeff Moyer) [RHEL-105612]
  - io_uring/eventfd: move refs to refcount_t (Jeff Moyer) [RHEL-105612]
  - io_uring: remove unused rsrc_put_fn (Jeff Moyer) [RHEL-105612]
  - io_uring: add new line after variable declaration (Jeff Moyer) [RHEL-105612]
  - RHEL-only: Add CONFIG_GCOV_PROFILE_URING files (Jeff Moyer) [RHEL-105612]
  - io_uring: add GCOV_PROFILE_URING Kconfig option (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: add support for incremental buffer consumption (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: pass in 'len' argument for buffer commit (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: move io_ring_head_to_buf() to kbuf.h (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: add io_kbuf_commit() helper (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: shrink nr_iovs/mode in struct buf_sel_arg (Jeff Moyer) [RHEL-105612]
  - io_uring: wire up min batch wake timeout (Jeff Moyer) [RHEL-105612]
  - io_uring: add support for batch wait timeout (Jeff Moyer) [RHEL-105612]
  - io_uring: implement our own schedule timeout handling (Jeff Moyer) [RHEL-105612]
  - io_uring: move schedule wait logic into helper (Jeff Moyer) [RHEL-105612]
  - io_uring: encapsulate extraneous wait flags into a separate struct (Jeff Moyer) [RHEL-105612]
  - io_uring: user registered clockid for wait timeouts (Jeff Moyer) [RHEL-105612]
  - io_uring: add absolute mode wait timeouts (Jeff Moyer) [RHEL-105612]
  - io_uring/napi: postpone napi timeout adjustment (Jeff Moyer) [RHEL-105612]
  - io_uring/napi: refactor __io_napi_busy_loop() (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: turn io_buffer_list booleans into flags (Jeff Moyer) [RHEL-105612]
  - io_uring/net: use ITER_UBUF for single segment send maps (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: use 'bl' directly rather than req->buf_list (Jeff Moyer) [RHEL-105612]
  - io_uring: micro optimization of __io_sq_thread() condition (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: enable multi-hugepage buffer coalescing (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: store folio shift and mask into imu (Jeff Moyer) [RHEL-105612]
  - io_uring: add napi busy settings to the fdinfo output (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: ensure compat iovecs are copied correctly (Jeff Moyer) [RHEL-105612]
  - io_uring: fix user_data field name in comment (Jeff Moyer) [RHEL-105612]
  - io_uring/sqpoll: annotate debug task == current with data_race() (Jeff Moyer) [RHEL-105612]
  - io_uring/napi: remove duplicate io_napi_entry timeout assignation (Jeff Moyer) [RHEL-105612]
  - io_uring: remove unused local list heads in NAPI functions (Jeff Moyer) [RHEL-105612]
  - io_uring/napi: pass ktime to io_napi_adjust_timeout (Jeff Moyer) [RHEL-105612]
  - io_uring/napi: use ktime in busy polling (Jeff Moyer) [RHEL-105612]
  - io_uring/msg_ring: fix uninitialized use of target_req->flags (Jeff Moyer) [RHEL-105612]
  - io_uring: align iowq and task request error handling (Jeff Moyer) [RHEL-105612]
  - io_uring: kill REQ_F_CANCEL_SEQ (Jeff Moyer) [RHEL-105612]
  - io_uring: simplify io_uring_cmd return (Jeff Moyer) [RHEL-105612]
  - io_uring/net: check socket is valid in io_bind()/io_listen() (Jeff Moyer) [RHEL-105612]
  - io_uring/napi: Remove unnecessary s64 cast (Jeff Moyer) [RHEL-105612]
  - io_uring/net: cleanup io_recv_finish() bundle handling (Jeff Moyer) [RHEL-105612]
  - io_uring/msg_ring: fix overflow posting (Jeff Moyer) [RHEL-105612]
  - net: limit scope of a skb_zerocopy_iter_stream var (Jeff Moyer) [RHEL-105612]
  - io_uring/net: move charging socket out of zc io_uring (Jeff Moyer) [RHEL-105612]
  - net: batch zerocopy_fill_skb_from_iter accounting (Jeff Moyer) [RHEL-105612]
  - net: split __zerocopy_sg_from_iter() (Jeff Moyer) [RHEL-105612]
  - io_uring/msg_ring: use kmem_cache_free() to free request (Jeff Moyer) [RHEL-105612]
  - io_uring/msg_ring: check for dead submitter task (Jeff Moyer) [RHEL-105612]
  - io_uring/msg_ring: add an alloc cache for io_kiocb entries (Jeff Moyer) [RHEL-105612]
  - io_uring/msg_ring: improve handling of target CQE posting (Jeff Moyer) [RHEL-105612]
  - io_uring: add io_add_aux_cqe() helper (Jeff Moyer) [RHEL-105612]
  - io_uring: add remote task_work execution helper (Jeff Moyer) [RHEL-105612]
  - io_uring/msg_ring: tighten requirement for remote posting (Jeff Moyer) [RHEL-105612]
  - io_uring: Allocate only necessary memory in io_probe (Jeff Moyer) [RHEL-105612]
  - io_uring: Introduce IORING_OP_LISTEN (Jeff Moyer) [RHEL-105612]
  - io_uring: Introduce IORING_OP_BIND (Jeff Moyer) [RHEL-105612]
  - net: Split a __sys_listen helper for io_uring (Jeff Moyer) [RHEL-105612]
  - net: Split a __sys_bind helper for io_uring (Jeff Moyer) [RHEL-105612]
  - io_uring/advise: support 64-bit lengths (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: remove redundant __set_current_state() post schedule() (Jeff Moyer) [RHEL-105612]
  - io_uring/io-wq: make io_wq_work flags atomic (Jeff Moyer) [RHEL-105612]
  - io_uring: use 'state' consistently (Jeff Moyer) [RHEL-105612]
  - io_uring/eventfd: move eventfd handling to separate file (Jeff Moyer) [RHEL-105612]
  - io_uring/eventfd: move to more idiomatic RCU free usage (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: Drop io_copy_iov in favor of iovec API (Jeff Moyer) [RHEL-105612]
  - io_uring: Drop per-ctx dummy_ubuf (Jeff Moyer) [RHEL-105612]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-634.el9]
changelog:
  - powerpc/crash: remove unnecessary NULL check before kvfree() (Mamatha Inamdar) [RHEL-101851]
  - powerpc/crash: add crash memory hotplug support (Mamatha Inamdar) [RHEL-101851]
  - powerpc/crash: add crash CPU hotplug support (Mamatha Inamdar) [RHEL-101851]
  - powerpc/kexec: make the update_cpus_node() function public (Mamatha Inamdar) [RHEL-101851]
  - powerpc/kexec: move *_memory_ranges functions to ranges.c (Mamatha Inamdar) [RHEL-101851]
  - platform/x86: oaktrail: Use backlight power constants (David Arcari) [RHEL-120895]
  - platform/x86: intel: oaktrail: Drop empty platform remove function (David Arcari) [RHEL-120895]
  - platform/x86: use PLATFORM_DEVID_NONE instead of -1 [partial] (David Arcari) [RHEL-120895]
  - platform/x86/intel/rst: drop owner assignment (David Arcari) [RHEL-120895]
  - platform/x86: intel_turbo_max_3: Switch to new Intel CPU model defines (David Arcari) [RHEL-120895]
  - platform/x86: intel-vbtn: Protect ACPI notify handler against recursion (David Arcari) [RHEL-120895]
  - platform/x86: intel-vbtn: Update tablet mode switch at end of probe (David Arcari) [RHEL-120895]
  - platform/x86: intel-vbtn: Use acpi_has_method to check for switch (David Arcari) [RHEL-120895]
  - platform/x86: intel-vbtn: Log event code on unexpected button events (David Arcari) [RHEL-120895]
  - platform/x86: intel-vbtn: Stop calling "VBDL" from notify_handler (David Arcari) [RHEL-120895]
  - platform/x86: intel-vbtn: Fix missing tablet-mode-switch events (David Arcari) [RHEL-120895]
  - platform/x86: intel: vbtn: Convert to platform remove callback returning void (David Arcari) [RHEL-120895]
  - platform/x86: Replace acpi_bus_get_device() [partial] (David Arcari) [RHEL-120895]
  - platform/x86: intel: telemetry: pltdrv: Convert to platform remove callback returning void (David Arcari) [RHEL-120895]
  - platform/x86: intel_telemetry: Switch to new Intel CPU model defines (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmc: Add Bartlett Lake support to intel_pmc_core (David Arcari) [RHEL-120895]
  - platform/x86/intel-uncore-freq: Check write blocked for ELC (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: support BMG crashlog (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: use a version struct (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: refactor base parameter (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: add register access helpers (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: decouple sysfs and namespace (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: correct types (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: re-order trigger logic (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: use guard(mutex) (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: mutex clean up (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: white space cleanup (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: fix a crashlog NULL pointer access (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: fix build dependency for kunit test (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt/discovery: fix format string warning (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt/discovery: Fix size_t specifiers for 32-bit (David Arcari) [RHEL-120895]
  - redhat/configs: disable CONFIG_INTEL_PMT_KUNIT_TEST (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: KUNIT test for PMT Enhanced Discovery API (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt/telemetry: Add API to retrieve telemetry regions by feature (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt/discovery: Get telemetry attributes (David Arcari) [RHEL-120895]
  - platform/x86/intel/tpmi: Get OOBMSM CPU mapping from TPMI (David Arcari) [RHEL-120895]
  - platform/x86/intel/vsec: Set OOBMSM to CPU mapping (David Arcari) [RHEL-120895]
  - platform/x86/intel/tpmi: Relocate platform info to intel_vsec.h (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: Add PMT Discovery driver (David Arcari) [RHEL-120895]
  - platform/x86/intel/vsec: Add new Discovery feature (David Arcari) [RHEL-120895]
  - platform/x86/intel/vsec: Skip driverless features (David Arcari) [RHEL-120895]
  - platform/x86/intel/vsec: Skip absent features during initialization (David Arcari) [RHEL-120895]
  - platform/x86/intel/vsec: Add device links to enforce dependencies (David Arcari) [RHEL-120895]
  - platform/x86/intel/vsec: Create wrapper to walk PCI config space (David Arcari) [RHEL-120895]
  - platform/x86/intel/vsec: Add private data for per-device data (David Arcari) [RHEL-120895]
  - platform/x86/intel/hid: Add Wildcat Lake support (David Arcari) [RHEL-120895]
  - platform/x86/intel-uncore-freq: avoid non-literal format string (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmc: Add Panther Lake support to Intel PMC SSRAM Telemetry (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmc: Add Lunar Lake support to Intel PMC SSRAM Telemetry (David Arcari) [RHEL-120895]
  - platform/x86: intel_telemetry: Remove unused telemetry_raw_read_events() (David Arcari) [RHEL-120895]
  - platform/x86: intel_telemetry: Remove unused telemetry_[gs]et_sampling_period() (David Arcari) [RHEL-120895]
  - platform/x86: intel_telemetry: Remove unused telemetry_*_events() (David Arcari) [RHEL-120895]
  - platform/x86: intel_telemetry: Fix kernel doc descriptions (David Arcari) [RHEL-120895]
  - platform/x86/intel: power-domains: Fix error code in tpmi_init() (David Arcari) [RHEL-120895]
  - platform/x86/intel-uncore-freq: Fail module load when plat_info is NULL (David Arcari) [RHEL-120895]
  - platform/x86/intel-uncore-freq: Add attributes to show die_id (David Arcari) [RHEL-120895]
  - platform/x86/intel: power-domains: Add interface to get Linux die ID (David Arcari) [RHEL-120895]
  - platform/x86/intel-uncore-freq: Add attributes to show agent types (David Arcari) [RHEL-120895]
  - platform/x86: ISST: Do Not Restore SST MSRs on CPU Online Operation (David Arcari) [RHEL-120895]
  - platform/x86: ISST: Update minor version (David Arcari) [RHEL-120895]
  - platform/x86: ISST: Support SST-PP revision 2 (David Arcari) [RHEL-120895]
  - platform/x86: ISST: Support SST-TF revision 2 (David Arcari) [RHEL-120895]
  - platform/x86:intel/pmc: Improve pmc_core_get_lpm_req() (David Arcari) [RHEL-120895]
  - platform/x86:intel/pmc: Move error handling to init function (David Arcari) [RHEL-120895]
  - platform/x86:intel/pmc: Use devm for mutex_init (David Arcari) [RHEL-120895]
  - platform/x86:intel/pmc: Create Intel PMC SSRAM Telemetry driver (David Arcari) [RHEL-120895]
  - platform/x86:intel/vsec: Change return type of intel_vsec_register (David Arcari) [RHEL-120895]
  - x86/msr: Add explicit includes of <asm/msr.h> [partial] (David Arcari) [RHEL-120895]
  - platform/x86/intel: hid: Add Pantherlake support (David Arcari) [RHEL-120895]
  - platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go 4 tablet (David Arcari) [RHEL-120895]
  - intel-hid: fix volume buttons on Thinkpad X12 Detachable Tablet Gen 1 (David Arcari) [RHEL-120895]
  - platform/x86: intel-hid: Use string_choices API instead of ternary operator (David Arcari) [RHEL-120895]
  - platform/x86/intel/hid: Add Lunar Lake and Arrow Lake support (David Arcari) [RHEL-120895]
  - platform/x86/intel/hid: Don't wake on 5-button releases (David Arcari) [RHEL-120895]
  - platform/x86/intel/hid: Add HP Dragonfly G2 to VGBS DMI quirks (David Arcari) [RHEL-120895]
  - platform/x86: intel: hid: Always call BTNL ACPI method (David Arcari) [RHEL-120895]
  - platform/x86: intel: hid: Convert to platform remove callback returning void (David Arcari) [RHEL-120895]
  - platform/x86/intel/hid: Add module-params for 5 button array + SW_TABLET_MODE reporting (David Arcari) [RHEL-120895]
  - platform/x86/intel: hid: Add Surface Go to VGBS allow list (David Arcari) [RHEL-120895]
  - platform/x86: intel-hid: fix _DSM function index handling (David Arcari) [RHEL-120895]
  - platform/x86/intel: hid: add quirk to support Surface Go 3 (David Arcari) [RHEL-120895]
  - platform/x86/intel: hid: Add DMI switches allow list (David Arcari) [RHEL-120895]
  - platform/x86/intel-uncore-freq: Fix missing uncore sysfs during CPU hotplug (David Arcari) [RHEL-120895]
  - platform/x86:intel/pmc: Remove unneeded io operations (David Arcari) [RHEL-120895]
  - platform/x86:intel/pmc: Remove unneeded header file inclusion (David Arcari) [RHEL-120895]
  - platform/x86:intel/pmc: Convert index variables to be unsigned (David Arcari) [RHEL-120895]
  - platform/x86:intel/pmc: Move PMC devid to core.h (David Arcari) [RHEL-120895]
  - platform/x86:intel/pmc: Rename core_ssram to ssram_telemetry (David Arcari) [RHEL-120895]
  - platform/x86:intel/pmc: Move PMC Core related functions (David Arcari) [RHEL-120895]
  - hwmon: (k10temp) Add device ID for Strix Halo (David Arcari) [RHEL-104300]
  - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models (David Arcari) [RHEL-104300]
  - hwmon: (k10temp) Add support for Zen5 Ryzen Desktop (David Arcari) [RHEL-104300]
  - hwmon: (k10temp) add support for cyan skillfish (David Arcari) [RHEL-104300]
  - hwmon: (k10temp): Use cpu_feature_enabled() for detecting zen (David Arcari) [RHEL-104300]
  - hwmon: (k10temp) Rename _data variable (David Arcari) [RHEL-104300]
  - hwmon: (k10temp) Remove unused HAVE_TDIE() macro (David Arcari) [RHEL-104300]
  - hwmon: (k10temp) Reduce k10temp_get_ccd_support() parameters (David Arcari) [RHEL-104300]
  - hwmon: (k10temp) Define a helper function to read CCD temperature (David Arcari) [RHEL-104300]
  - hwmon: (k10temp) Add support for AMD Family 19h Model 8h (David Arcari) [RHEL-104300]
  - hwmon: (k10temp) Enable AMD3255 Proc to show negative temperature (David Arcari) [RHEL-104300]
  - dmaengine: ti: edma: Fix memory allocation size for queue_priority_map (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Fix double free in idxd_setup_wqs() (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Remove improper idxd_free (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Remove __packed from structures (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: ti: Do not enable by default during compile testing (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: sh: Do not enable SH_DMAE_BASE by default during compile testing (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Fix warning for deadcode.deadstore (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: qcom: gpi: Drop unused gpi_write_reg_field() (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: dw-edma: Drop unused dchan2dev() and chan2dev() (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: Add devm_dma_request_chan() (Jerry Snitselaar) [RHEL-114133]
  - dma: dw-edma: Fix build warning in dw_edma_pcie_probe() (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Remove unused pointer and macro (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: sh: rz-dmac: Add RZ/V2H(P) support (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: sh: rz-dmac: Allow for multiple DMACs (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Narrow the restriction on BATCH to ver. 1 only (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: ti: Add NULL check in udma_probe() (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: dw-edma: Add HDMA NATIVE map check (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: ptdma: Remove dead code from pt_dmaengine_register() (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: ptdma: Remove unused pointer dma_cmd_cache (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Fix ->poll() return value (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Add missing idxd cleanup to fix memory leak in remove call (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: fix memory leak in error handling path of idxd_pci_probe (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Add missing cleanups in cleanup internals (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Add missing cleanup for early error out in idxd_setup_internals (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: fix memory leak in error handling path of idxd_setup_groups (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: fix memory leak in error handling path of idxd_setup_engines (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: fix memory leak in error handling path of idxd_setup_wqs (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Fix allowing write() from different address spaces (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: ti: k3-udma: Add missing locking (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: ti: k3-udma: Use cap_mask directly from dma_device structure instead of a local copy (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: cdev: Fix uninitialized use of sva in idxd_cdev_open (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: Remove device_prep_dma_imm_data from struct dma_device (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: ti: edma: support sw triggered chans in of_edma_xlate() (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: ti: k3-udma: Enable second resource range for BCDMA and PKTDMA (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: Fix typo in comment (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: bcm2835-dma: fix warning when CONFIG_PM=n (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Delete unnecessary NULL check (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: Use str_enable_disable-like helpers (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: dw: Switch to LATE_SIMPLE_DEV_PM_OPS() (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: Unify checks in dma_request_chan() (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: Add a comment on why it's okay when kasprintf() fails (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: Use dma_request_channel() instead of __dma_request_channel() (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: Replace dma_request_slave_channel() by dma_request_chan() (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: amd: qdma: make read-only arrays h2c_types and c2h_types static const (Jerry Snitselaar) [RHEL-114133]
  - x86/cpu: Make all all CPUID leaf names consistent (Jerry Snitselaar) [RHEL-114133]
  - x86/fpu: Remove unnecessary CPUID level check (Jerry Snitselaar) [RHEL-114133]
  - x86/fpu: Move CPUID leaf definitions to common code (Jerry Snitselaar) [RHEL-114133]
  - x86/tsc: Remove CPUID "frequency" leaf magic numbers. (Jerry Snitselaar) [RHEL-114133]
  - x86/cpu: Refresh DCA leaf reading code (Jerry Snitselaar) [RHEL-114133]
  - x86/cpu: Use MWAIT leaf definition (Jerry Snitselaar) [RHEL-114133]
  - x86/cpu: Move MWAIT leaf definition to common header (Jerry Snitselaar) [RHEL-114133]
  - redhat/configs: Enable CONFIG_CRASH_DM_CRYPT on RHEL (Coiby Xu) [RHEL-104939]
  - s390: kexec: initialize kexec_buf struct (Coiby Xu) [RHEL-104939]
  - arm64: kexec: initialize kexec_buf struct in load_other_segments() (Coiby Xu) [RHEL-104939]
  - crashdump: add CONFIG_KEYS dependency (Coiby Xu) [RHEL-104939]
  - crash_dump, nvme: select CONFIGFS_FS as built-in (Coiby Xu) [RHEL-104939]
  - x86/crash: make the page that stores the dm crypt keys inaccessible (Coiby Xu) [RHEL-104939]
  - x86/crash: pass dm crypt keys to kdump kernel (Coiby Xu) [RHEL-104939]
  - crash_dump: retrieve dm crypt keys in kdump kernel (Coiby Xu) [RHEL-104939]
  - crash_dump: reuse saved dm crypt keys for CPU/memory hot-plugging (Coiby Xu) [RHEL-104939]
  - crash_dump: store dm crypt keys in kdump reserved memory (Coiby Xu) [RHEL-104939]
  - crash_dump: make dm crypt keys persist for the kdump kernel (Coiby Xu) [RHEL-104939]
  - kexec_file: allow to place kexec_buf randomly (Coiby Xu) [RHEL-104939]
  - docs: core-api: document the IOVA-based API (Jerry Snitselaar) [RHEL-113839]
  - dma-mapping: add a dma_need_unmap helper (Jerry Snitselaar) [RHEL-113839]
  - dma-mapping: Implement link/unlink ranges API (Jerry Snitselaar) [RHEL-113839]
  - iommu/dma: Factor out a iommu_dma_map_swiotlb helper (Jerry Snitselaar) [RHEL-113839]
  - dma-mapping: Provide an interface to allow allocate IOVA (Jerry Snitselaar) [RHEL-113839]
  - iommu: add kernel-doc for iommu_unmap_fast (Jerry Snitselaar) [RHEL-113839]
  - iommu: generalize the batched sync after map interface (Jerry Snitselaar) [RHEL-113839]
  - dma-mapping: move the PCI P2PDMA mapping helpers to pci-p2pdma.h (Jerry Snitselaar) [RHEL-113839]
  - PCI/P2PDMA: Refactor the p2pdma mapping helpers (Jerry Snitselaar) [RHEL-113839]
  - ALSA: update RHEL kconfigs for 6.16 upstream code (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: Allow Focusrite devices to use low samplerates (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda: tas2781: reorder tas2563 calibration variables (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda: tas2781: fix tas2563 EFI data endianness (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: Intel: WCL: Add the sdw_process_wakeen op (Jaroslav Kysela) [RHEL-112755]
  - ASoC: rsnd: tidyup direction name on rsnd_dai_connect() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/tas2781: Fix EFI name for calibration beginning with 1 instead of 0 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: soc-core: tidyup snd_soc_lookup_component_nolocked() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: soc-core: care NULL dirver name on snd_soc_lookup_component_nolocked() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs35l56: Remove SoundWire Clock Divider workaround for CS35L63 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs35l56: Handle new algorithms IDs for CS35L63 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs35l56: Update Firmware Addresses for CS35L63 for production silicon (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda: tas2781: Fix wrong reference of tasdevice_priv (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: qcom: Adjust mutex unlock order (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SDCA: correct the calculation of the maximum init table size (Jaroslav Kysela) [RHEL-112755]
  - ASoC: rt5650: Eliminate the high frequency glitch (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: Intel: PTL: Add the sdw_process_wakeen op (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/realtek - Add mute LED support for HP Victus 15-fa0xxx (Jaroslav Kysela) [RHEL-112755]
  - ASoC: amd: yc: Add DMI quirk for HP Laptop 17 cp-2033dx (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: soc-acpi: add support for HP Omen14 ARL (Jaroslav Kysela) [RHEL-112755]
  - ASoC: amd: yc: Add DMI entries to support HP 15-fb1xxx (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/cs35l56: Workaround bad dev-index on Lenovo Yoga Book 9i GenX (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/realtek: Support mute LED for Yoga with ALC287 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: fix SND_SOC_SOF dependencies (Jaroslav Kysela) [RHEL-112755]
  - ASoC: rt5660: Fix the dmic data source from GPIO2 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Fix NULL ptr deref on rmmod (Jaroslav Kysela) [RHEL-112755]
  - ASoC: amd: yc: add DMI quirk for ASUS M6501RM (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/realtek: Enable headset Mic on Positivo K116J (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/tas2781: Fix calibration data parser issue (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/realtek: Add quirk for ASUS ExpertBook B9403CVAR (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: Improve filtering of sample rates on Focusrite devices (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb: qcom: fix NULL pointer dereference in qmi_stop_session (Jaroslav Kysela) [RHEL-112755]
  - ALSA: qc_audio_offload: Fix missing error code in prepare_qmi_response() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: qcom: sm8250: Fix possibly undefined reference (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/realtek: Enable headset Mic on Positivo P15X (Jaroslav Kysela) [RHEL-112755]
  - ASoC: doc: cs35l56: Add CS35L63 to the list of supported devices (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/realtek: Add quirk for Asus GA605K (Jaroslav Kysela) [RHEL-112755]
  - ASoC: apple: mca: Drop default ARCH_APPLE in Kconfig (Jaroslav Kysela) [RHEL-112755]
  - ASoC: doc: cs35l56: Update to add new SoundWire firmware filename suffix (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs35l56: Use SoundWire address as alternate firmware suffix on L56 B0 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs35l56: Use SoundWire address as firmware name suffix for new silicon (Jaroslav Kysela) [RHEL-112755]
  - ASoC: sdw_utils: Fix potential NULL pointer deref in is_sdca_endpoint_present() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: ctxfi: Replace deprecated strcpy() with strscpy() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codecs: ES8326: Modify initialization configuration (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs48l32: Fix a signedness bug in cs48l32_hw_params() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Fix rt5663 front end name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Simplify verification of parse_int_array() result (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda: cs35l41: Constify regmap_irq_chip (Jaroslav Kysela) [RHEL-112755]
  - ASoC: pcm: Do not open FEs with no BEs connected (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Include missing string.h (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Verify kcalloc() status when setting constraints (Jaroslav Kysela) [RHEL-112755]
  - ASoC: amd: yc: Add support for Lenovo Yoga 7 16ARP8 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tas571x: fix tas5733 num_controls (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tas571x: add separate tas5733 controls (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: qcom: fix USB_XHCI dependency (Jaroslav Kysela) [RHEL-112755]
  - ASoC: qdsp6: fix compile-testing without CONFIG_OF (Jaroslav Kysela) [RHEL-112755]
  - ALSA: atmel: Replace deprecated strcpy() with strscpy() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: wm_adsp: Make cirrus_dir const (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tegra: Tegra264 support in isomgr_bw (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tegra: AHUB: Add Tegra264 support (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tegra: AMX: Add Tegra264 support (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tegra: ADX: Add Tegra264 support (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tegra: I2S: Add Tegra264 support (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tegra: Update PLL rate for Tegra264 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tegra: ASRC: Update ARAM address (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tegra: ADMAIF: Add Tegra264 support (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tegra: CIF: Add Tegra264 support (Jaroslav Kysela) [RHEL-112755]
  - dt-bindings: ASoC: Document Tegra264 APE support (Jaroslav Kysela) [RHEL-112755]
  - dt-bindings: ASoC: admaif: Add missing properties (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/tas2781: Move and unified the calibrated-data getting function for SPI and I2C into the tas2781_hda lib (Jaroslav Kysela) [RHEL-112755]
  - ALSA: qc_audio_offload: try to reduce address space confusion (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/tegra: Switch to two-argument strscpy() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: qc_audio_offload: avoid leaking xfer_buf allocation (Jaroslav Kysela) [RHEL-112755]
  - ALSA: qc_audio_offload: rename dma/iova/va/cpu/phys variables (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: qcom: Fix an error handling path in qc_usb_audio_probe() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/cs35l41_hda: select FW_CS_DSP (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: sof_sdw: Add support for wclrvp & ocelot in WCL platform (Jaroslav Kysela) [RHEL-112755]
  - ALSA: amd7930: replace strcpy() with strscpy() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: soc-acpi-intel-mtl-match: Add match for CDB35L63-CB2 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: intel: sof_sdw: Add support for CS35L63 into machine driver (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda: add HDMI codec ID for Intel WCL (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: Intel: add initial support for WCL (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda: intel-dsp-config: Add WCL support (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda: hda-intel: add Wildcat Lake support (Jaroslav Kysela) [RHEL-112755]
  - PCI: Add Intel Wildcat Lake audio Device ID (Jaroslav Kysela) [RHEL-112755]
  - ALSA: dbri: replace strcpy() with strscpy() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: n64: Replace deprecated strcpy() with strscpy() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: qcom: sc8280xp: Add sound card support for QCS9100 and QCS9075 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: dt-bindings: qcom,sm8250: Add QCS9100 and QCS9075 sound card (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tas2781: Header file cleanup and Move the macro definitions to fwlib (Jaroslav Kysela) [RHEL-112755]
  - ASoC: rt722: make regmap cache-only in probe (Jaroslav Kysela) [RHEL-112755]
  - ASoC: fsl_xcvr: update platform driver name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: soc-utils: Check string pointer validity in snd_soc_dlc_is_dummy() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb: fcp: Use USB API functions rather than constants (Jaroslav Kysela) [RHEL-112755]
  - ALSA: scarlett2: Use USB API functions rather than constants (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: Rename Pioneer mixer channel controls (Jaroslav Kysela) [RHEL-112755]
  - dt-bindings: Document Tegra264 HDA Support (Jaroslav Kysela) [RHEL-112755]
  - dt-bindings: Update Tegra194 and Tegra234 HDA bindings (Jaroslav Kysela) [RHEL-112755]
  - ASoC: mediatek: mt8183-afe-pcm: Shorten irq_data table using macros (Jaroslav Kysela) [RHEL-112755]
  - ASoC: mediatek: mt8183-afe-pcm: shorten mt8183_is_volatile_reg() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: mediatek: mt8183-afe-pcm: Shorten memif_data table using macros (Jaroslav Kysela) [RHEL-112755]
  - ASoC: q6apm-lpass-dais: Print APM port id in decimal on enable error (Jaroslav Kysela) [RHEL-112755]
  - ASoC: amd: use new ACP dev names for DAI links (Jaroslav Kysela) [RHEL-112755]
  - soundwire: intel: Add awareness of ACE3+ microphone privacy (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: Intel: hda: Set the mic_privacy flag for soundwire with ACE3+ (Jaroslav Kysela) [RHEL-112755]
  - soundwire: bus: Simplify sdw_assign_device_num() (Jaroslav Kysela) [RHEL-112755]
  - soundwire: bus: Add internal slave ID and use for IRQs (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda: cs35l56: Log tuning unique identifiers during firmware load (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs35l56: Log tuning unique identifiers during firmware load (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tlv320aic3x: Use dev_err_probe (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/tas2781: Fix the ld issue reported by kernel test robot (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/tas2781: Fix the symbol was not declare warning reported by kernel test robot (Jaroslav Kysela) [RHEL-112755]
  - ALSA: sb: Replace deprecated strcpy() with strscpy() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: soc-core: merge snd_soc_unregister_component() and snd_soc_unregister_component_by_driver() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: msnd: Remove midi code (Jaroslav Kysela) [RHEL-112755]
  - ALSA: intel-hdmi-audio: Replace deprecated strcpy() with strscpy() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: wavefront: remove snd_wavefront_xxx() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: isa/gus: remove snd_gf1_lfo_xxx() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda: intel-nhlt: Print errors in intel_nhlt_ssp_device_type() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: soc.h: remove snd_soc_disconnect_sync() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: soc.h: remove unnecessary definitions (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: atom: Remove unused functions (Jaroslav Kysela) [RHEL-112755]
  - ASoC: rt712-sdca: remove redundant else path of if statement (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codecs: rt9123: Fix sparse cast warning (Jaroslav Kysela) [RHEL-112755]
  - ALSA: pci: au88x0: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: pci: asihpi: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: pci: ali5451: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb: mixer_quirks: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb: mixer_us16x08: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: sh: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: i2c: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: core: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: virtio: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: pci: hda: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb: midi: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb: mixer: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: gus: Remove deadcode (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/tas2781: Create an independent lib to save the shared parts for both SPI and I2C driver (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda: Remove unused snd_hdac_stream_get_spbmaxfifo (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda: Remove unused snd_hda_add_nid (Jaroslav Kysela) [RHEL-112755]
  - ASoC: rt712-sdca: remove redundant else path of if statement (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: soc-acpi-intel-ptl-match: Add rt713_vb_l3_rt1320_l3 support (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: soc-acpi-intel-lnl/ptl-match: Simplify variable name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tas2781: Add a debugfs node for acoustic tuning (Jaroslav Kysela) [RHEL-112755]
  - ASoC: amd: sof_amd_sdw: add logic to get cpu_pin_id for ACP7.0/ACP7.1 platforms (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: soc-acpi-intel-ptl-match: Sort ACPI link/machine tables (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: cs42l52: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: cs42l52: Drop cs42l52.h (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: cs42l52: Sort headers alphabetically (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: cs42l73: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: cs42l73: Drop cs42l73.h (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: cs42l73: Sort headers alphabetically (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: cs42l56: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: cs42l56: Drop cs42l56.h (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: cs42l56: Sort headers alphabetically (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: add disable_function_topology module parameter (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: set disable_function_topology if override_tplg_filename is set (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: add disable_function_topology flag (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs35l56: Add initial support for CS35L63 for I2C and SoundWire (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs35l56: Read Silicon ID from DIE_STS registers for CS35L63 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs35l56: Add Mute, Volume and Posture registers to firmware register list (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs35l56: Add struct to index firmware registers (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs35l56: Add Index based on ACPI HID or SDW ID to select regmap config (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: sof_sdw: Avoid NULL check fail when re-probing (Jaroslav Kysela) [RHEL-112755]
  - ASoC: sdw_utils: Remove num_platforms from simple DAI helper (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/tas2781: select CONFIG_CRC8 for SND_HDA_SCODEC_TAS2781_I2C (Jaroslav Kysela) [RHEL-112755]
  - ALSA: pcm: Remove unused snd_pcm_rate_range_to_bits (Jaroslav Kysela) [RHEL-112755]
  - ALSA: pcm: Remove unused snd_dmaengine_pcm_open_request_chan (Jaroslav Kysela) [RHEL-112755]
  - ALSA: seq: Remove unused snd_seq_queue_client_leave_cells (Jaroslav Kysela) [RHEL-112755]
  - ALSA: core: Remove unused snd_device_get_state (Jaroslav Kysela) [RHEL-112755]
  - ALSA: core: Remove unused snd_jack_set_parent (Jaroslav Kysela) [RHEL-112755]
  - ASoC: intel: atom: Return -ENOMEM if pcim_iomap() fails (Jaroslav Kysela) [RHEL-112755]
  - ASoC: intel: avs: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ASoC: intel: atom: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ASoC: sof: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: amd: add build support for soundwire (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: amd: add soundwire wake irq handling (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: amd: enable soundwire host wake irq mask (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: amd: refactor acp reset sequence (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: amd: enable ACP_PME_EN register for ACP7.0 & ACP7.1 platforms (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: amd: update soundwire specific acp descriptor fields (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: amd: add ACP7.1 platform support (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: amd: remove else condition in resume sequence (Jaroslav Kysela) [RHEL-112755]
  - ASoC: fsl_rpmsg: Allocate a smaller buffer size for capture stream (Jaroslav Kysela) [RHEL-112755]
  - ASoC: fsl_rpmsg: Configure CPU DAI for card that sits on rpmsg-micfil-channel (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codecs: tas2764: Fix Wvoid-pointer-to-enum-cast warning (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codecs: wsa88xx/wcd938x: Drop kerneldoc marker from inner comment (Jaroslav Kysela) [RHEL-112755]
  - ASoC: soc-utils: add snd_soc_dlc_is_dummy() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Fix kcalloc() sizes (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: sma1307: Remove including of_gpio.h (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: twl4030: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: twl4030: Sort headers alphabetically (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/tas2781: Remove tas2781_spi_fwlib.c and leverage SND_SOC_TAS2781_FMWLIB (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/cs35l56: Remove dependency on COMPILE_TEST (Jaroslav Kysela) [RHEL-112755]
  - ASoC: wm_adsp: Don't use no_free_ptr() when passing to PTR_ERR() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codecs: Use min() to simplify aw_dev_dsp_update_container() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: topology: Fix null pointer dereference (Jaroslav Kysela) [RHEL-112755]
  - ASoC: amd: acp: Drop superfluous assignment in acp_sof_probe() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: korg1212: Replace the pending stop check code with sync_stop PCM ops (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/hda_cs_dsp_ctl: Delete hda_cs_dsp_ctl module (Jaroslav Kysela) [RHEL-112755]
  - ASoC: fsl: don't set link->platform if not needed (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Fix NULL pointer dereference (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codecs: wcd938x: drop unnecessary mux flag assignment (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codecs: wcd938x: fix mux error handling (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: tpa6130a2: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: tpa6130a2: Remove tpa6130a2_platform_data (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: tpa6130a2: Sort headers alphabetically (Jaroslav Kysela) [RHEL-112755]
  - ALSA: riptide: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: nm256: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: ice: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: emu10k1: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: echoaudio: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: cs5535: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: cs46xx: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: ca0106: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: ali5451: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: maestro3: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: intel8x: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: fm801: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: es19x8: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: azt3328: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: als: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: oxygen: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: lx6464es: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: vx222: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: trident: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: rme9652: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: ymfpci: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: sonicvibes: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: rme96: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: rme32: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: ens1370: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: cmipci: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: via82: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: sis7019: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: HDA: Add Zhaoxin HDMI Controller and Codec support (Jaroslav Kysela) [RHEL-112755]
  - ASoC: adau7118: Allow dsp_a mode (Jaroslav Kysela) [RHEL-112755]
  - ASoC: dt-bindings: fsl,mqs: Document audio graph port (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: Add Pioneer DJ DJM-V10 support (Jaroslav Kysela) [RHEL-112755]
  - ALSA: pcm: Make snd_pcm_lib_malloc_pages() debug message say "allocate" (Jaroslav Kysela) [RHEL-112755]
  - ASoC: wm8998: Add Kconfig prompt (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codecs: Remove unused rt566[58]_sel_asrc_clk_src (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs48l32: Use modern PM_OPS (Jaroslav Kysela) [RHEL-112755]
  - ASoC: rt722: fix pop noise at the beginning of DMIC recording (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs48l32: Fix spelling mistake "exceeeds" -> "exceeds" (Jaroslav Kysela) [RHEL-112755]
  - ASoC: fsl_rpmsg: Remove useless return variable (Jaroslav Kysela) [RHEL-112755]
  - ASoC: ak4458: Remove useless return variable (Jaroslav Kysela) [RHEL-112755]
  - ASoC: rt722: fix pop noise at the beginning of headphone playback (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs-amp-lib-test: Use faux bus instead of creating a dummy platform device (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/tas2781: Create a common header for both spi and i2c tas2781 hda driver (Jaroslav Kysela) [RHEL-112755]
  - ASoC: qcom: qdsp6: Set error code in q6usb_hw_params() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: qcom: delete a stray tab (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/cirrus_scodec_test: Modernize creation of dummy devices (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs-amp-lib-test: Use flex_array_size() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs48l32: Add driver for Cirrus Logic CS48L32 audio DSP (Jaroslav Kysela) [RHEL-112755]
  - ASoC: dt-bindings: Add Cirrus Logic CS48L32 audio DSP (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs-amp-lib: Annotate struct cirrus_amp_efi_data with __counted_by() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs-amp-lib: Replace offsetof() with struct_size() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: rsnd: use snd_pcm_direction_name() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: soc_sdw_utils: skip the endpoint that doesn't present (Jaroslav Kysela) [RHEL-112755]
  - ASoC: sdw_utils: split asoc_sdw_get_codec_name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: soc-acpi-intel-mtl-match: add get_function_tplg_files ops (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: soc-acpi-intel-ptl-match: add get_function_tplg_files ops (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: soc-acpi-intel-lnl-match: set get_function_tplg_files ops (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: topology: load multiple topologies (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: topology: don't convert error code (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: topology: allocate string for tuples (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codecs: Add support for Richtek rt9123p (Jaroslav Kysela) [RHEL-112755]
  - ASoC: dt-bindings: Add bindings for Richtek rt9123p (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codecs: Add support for Richtek rt9123 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: dt-bindings: Add bindings for Richtek rt9123 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tas2770: expose die temp to hwmon (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tas2764: expose die temp to hwmon (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tas2764: Apply Apple quirks (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tas2764: Raise regmap range maximum (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tas2770: Support setting the PDM TX slot (Jaroslav Kysela) [RHEL-112755]
  - ASoC: ac97: Add DT support (Jaroslav Kysela) [RHEL-112755]
  - ASoC: dt-bindings: Add Realtek ALC203 Codec (Jaroslav Kysela) [RHEL-112755]
  - ASoC: test-component: add set_tdm_slot stub implementation (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: qcom: Add USB offload route kcontrol (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: qcom: Notify USB audio devices on USB offload probing (Jaroslav Kysela) [RHEL-112755]
  - ASoC: dt-bindings: Update example for enabling USB offload on SM8250 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: qcom: qdsp6: Introduce USB AFE port to q6dsp (Jaroslav Kysela) [RHEL-112755]
  - ASoC: qcom: qdsp6: q6afe: Increase APR timeout (Jaroslav Kysela) [RHEL-112755]
  - ASoC: qcom: qdsp6: Add headphone jack for offload connection status (Jaroslav Kysela) [RHEL-112755]
  - ASoC: qcom: qdsp6: Fetch USB offload mapped card and PCM device (Jaroslav Kysela) [RHEL-112755]
  - ASoC: qcom: qdsp6: Add USB backend ASoC driver for Q6 (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: qcom: Add USB QMI definitions (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: qcom: Don't allow USB offload path if PCM device is in use (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: qcom: Introduce QC USB SND offloading support (Jaroslav Kysela) [RHEL-112755]
  - ASoC: usb: Fetch ASoC card and pcm device information (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: Allow for rediscovery of connected USB SND devices (Jaroslav Kysela) [RHEL-112755]
  - ASoC: usb: Add PCM format check API for USB backend (Jaroslav Kysela) [RHEL-112755]
  - ASoC: usb: Create SOC USB SND jack kcontrol (Jaroslav Kysela) [RHEL-112755]
  - ASoC: usb: Rediscover USB SND devices on USB port add (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Add SoC USB APIs for adding an USB backend (Jaroslav Kysela) [RHEL-112755]
  - ASoC: doc: Add documentation for SOC USB (Jaroslav Kysela) [RHEL-112755]
  - ASoC: dt-bindings: qcom,q6dsp-lpass-ports: Add USB_RX port (Jaroslav Kysela) [RHEL-112755]
  - ALSA: Add USB audio device jack type (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: Export USB SND APIs for modules (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: Introduce USB SND platform op callbacks (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: Check for support for requested audio format (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: Save UAC sample size information (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: Prevent starting of audio stream if in use (Jaroslav Kysela) [RHEL-112755]
  - ASoC: wm_adsp: Use vmemdup_user() instead of open-coding (Jaroslav Kysela) [RHEL-112755]
  - ALSA: cs46xx: Remove commented out code (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Fix possible null-ptr-deref when initing hw (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Constrain path based on BE capabilities (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tas2781-i2c: Remove unnecessary NULL check before release_firmware() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: wm_adsp: Remove unnecessary NULL check before release_firmware() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tas2781-fmwlib: Remove unnecessary NULL check before release_firmware() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: ak5386: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Support 16 TDMs in dynamic assignment (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Iterate over correct number of TDMs (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Assign unique ID to platform devices (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Allow to specify custom configurations with i2s_test (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Allow for 16 channels configuration (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Rename AVS_CHANNELS_MAX define (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda: Allow for 16 channels configuration (Jaroslav Kysela) [RHEL-112755]
  - lib/string_helpers: Introduce parse_int_array() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change rt5682 card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change ssm4567 card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change rt5663 card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change rt5514 card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change rt298 card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change rt286 card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change rt274 card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change probe card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change pcm3168a card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change nau8825 card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change max98373 card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change max98927 card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change max98357a card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change sspX-loopback card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change hdaudio card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change es8336 card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change DMIC card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Use topology information for endpoint numbers (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change da7219 card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Add Kconfig option for obsolete card names (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Add boards definitions for FCL platform (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Conditionally add DMA config when creating Copier (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Dynamically assign ops for non-HDAudio DAIs (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: PTL-based platforms support (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hdspm: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112755]
  - ALSA: atiixp: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112755]
  - ALSA: au88x0: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112755]
  - ALSA: aw2: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112755]
  - ALSA: bt87x: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112755]
  - ALSA: cs4281: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda_intel: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112755]
  - ALSA: cs5530: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112755]
  - ALSA: lola: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112755]
  - ALSA: ad1889: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112755]
  - ASoC: sta32x: Remove unnecessary NULL check before clk_disable_unprepare() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: hdmi-codec: wire up the .prepare callback also for SPDIF DAI ops (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codecs: rt5677: Use secs_to_jiffies() instead of msecs_to_jiffies() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: dt-bindings: fsl,mqs: Reference common DAI properties (Jaroslav Kysela) [RHEL-112755]
  - ASoC: dt-bindings: maxim,max98925: Fix include placement in DTS example (Jaroslav Kysela) [RHEL-112755]
  - ASoC: sun8i-codec: Remove unnecessary NULL check before clk_prepare_enable/clk_disable_unprepare (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Permit deferred card registration (Jaroslav Kysela) [RHEL-112755]
  - ASoC: core: Complete support for card rebinding (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codecs: wcd938x: add mux control support for hp audio mux (Jaroslav Kysela) [RHEL-112755]
  - ASoC: dt-bindings: wcd93xx: add bindings for audio mux controlling hp (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codecs: wcd-mbhc: cleanup swap_gnd_mic api (Jaroslav Kysela) [RHEL-112755]
  - ASoC: fsl_sai: separate set_tdm_slot() for tx and rx (Jaroslav Kysela) [RHEL-112755]
  - ASoC: fsl_sai: separate 'is_dsp_mode' for tx and rx (Jaroslav Kysela) [RHEL-112755]
  - ASoC: fsl_sai: add xlate_tdm_slot_mask() callback (Jaroslav Kysela) [RHEL-112755]
  - ASoC: fsl_sai: allow to set mclk rate with zero clk_id (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: wcd938x: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: wcd939x: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-112755]
  - dt-bindings: Document Tegra114 HDA support (Jaroslav Kysela) [RHEL-112755]
  - dt-bindings: display: tegra: Document Tegra124 MIPI (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Support multi-channel PEAKVOL instantiation (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Honor the invert flag for mixer controls (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Add support for mute for PEAKVOL and GAIN (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Move to the new control operations (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Update VOLUME and add MUTE IPCs (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: New volume control operations (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Make PEAKVOL configurable from topology (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Add WHM module support (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Remove unused gateway configuration code (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: New gateway configuration mechanism (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Move DSP-boot steps into individual functions (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: pcm3168a board selection (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Add pcm3168a machine board (Jaroslav Kysela) [RHEL-112755]
  - ASoC: soc.h: Don't use "proxy" headers (Jaroslav Kysela) [RHEL-112755]
  - dt-bindings: sound: tegra: Add minItems for resets (Jaroslav Kysela) [RHEL-112755]
  - iavf: iavf_suspend(): take RTNL before netdev_lock() (Mohammad Heib) [RHEL-87382]
  - net: mediatek: Fix potential NULL pointer dereference in dummy net_device handling (Mohammad Heib) [RHEL-87382]
  - iavf: fix circular lock dependency with netdev_lock (Mohammad Heib) [RHEL-87382]
  - iavf: Fix a locking bug in an error path (Mohammad Heib) [RHEL-87382]
  - wifi: mt76: move napi_enable() from under BH (Mohammad Heib) [RHEL-87382]
  - eth: via-rhine: fix calling napi_enable() in atomic context (Mohammad Heib) [RHEL-87382]
  - eth: niu: fix calling napi_enable() in atomic context (Mohammad Heib) [RHEL-87382]
  - eth: 8139too: fix calling napi_enable() in atomic context (Mohammad Heib) [RHEL-87382]
  - eth: forcedeth: fix calling napi_enable() in atomic context (Mohammad Heib) [RHEL-87382]
  - eth: forcedeth: remove local wrappers for napi enable/disable (Mohammad Heib) [RHEL-87382]
  - eth: tg3: fix calling napi_enable() in atomic context (Mohammad Heib) [RHEL-87382]
  - net: mvneta: fix locking in mvneta_cpu_online() (Mohammad Heib) [RHEL-87382]
  - net: introduce netdev_napi_exit() (Mohammad Heib) [RHEL-87382]
  - net: destroy dev->lock later in free_netdev() (Mohammad Heib) [RHEL-87382]
  - netdev-genl: remove rtnl_lock protection from NAPI ops (Mohammad Heib) [RHEL-87382]
  - net: protect NAPI config fields with netdev_lock() (Mohammad Heib) [RHEL-87382]
  - net: protect napi->irq with netdev_lock() (Mohammad Heib) [RHEL-87382]
  - net: protect threaded status of NAPI with netdev_lock() (Mohammad Heib) [RHEL-87382]
  - net: make netdev netlink ops hold netdev_lock() (Mohammad Heib) [RHEL-87382]
  - net: protect NAPI enablement with netdev_lock() (Mohammad Heib) [RHEL-87382]
  - net: protect netdev->napi_list with netdev_lock() (Mohammad Heib) [RHEL-87382]
  - net: add netdev->up protected by netdev_lock() (Mohammad Heib) [RHEL-87382]
  - net: add helpers for lookup and walking netdevs under netdev_lock() (Mohammad Heib) [RHEL-87382]
  - net: make netdev_lock() protect netdev->reg_state (Mohammad Heib) [RHEL-87382]
  - net: add netdev_lock() / netdev_unlock() helpers (Mohammad Heib) [RHEL-87382]
  - eth: iavf: extend the netdev_lock usage (Mohammad Heib) [RHEL-87382]
  - net: cleanup init_dummy_netdev_core() (Mohammad Heib) [RHEL-87382]
  - net: remove init_dummy_netdev() (Mohammad Heib) [RHEL-87382]
  - selftests: drv-net: test empty queue and NAPI responses in netlink (Mohammad Heib) [RHEL-87382]
  - netdev-genl: avoid empty messages in napi get (Mohammad Heib) [RHEL-87382]
  - netdev-genl: avoid empty messages in queue dump (Mohammad Heib) [RHEL-87382]
  - IB/hfi1: allocate dummy net_device dynamically (Mohammad Heib) [RHEL-87382]
  - wifi: qtnfmac: Use netdev dummy allocator helper (Mohammad Heib) [RHEL-87382]
  - wifi: qtnfmac: allocate dummy net_device dynamically (Mohammad Heib) [RHEL-87382]
  - net: ibm/emac: allocate dummy net_device dynamically (Mohammad Heib) [RHEL-87382]
  - net: ipa: allocate dummy net_device dynamically (Mohammad Heib) [RHEL-87382]
  - net: mediatek: mtk_eth_sock: allocate dummy net_device dynamically (Mohammad Heib) [RHEL-87382]
  - drm: Use page->pgmap instead of page_pgmap() (José Expósito) [RHEL-110619]
  - drm/vkms: Fix KUnit tests (José Expósito) [RHEL-110619]
  - drm/amdgpu/mes: Remove unused function (José Expósito) [RHEL-110619]
  - drm: Use previous includes (José Expósito) [RHEL-110619]
  - Revert "drm/i915: Convert REG_GENMASK*() to fixed-width GENMASK_U*()" (José Expósito) [RHEL-110619]
  - Revert "drm/i915: Avoid open-coded use of ratelimit_state structure's ->missed field" (José Expósito) [RHEL-110619]
  - Revert "drm/amd/pm: Avoid open-coded use of ratelimit_state structure's internals" (José Expósito) [RHEL-110619]
  - Revert "i915: Use writeback_iter()" (José Expósito) [RHEL-110619]
  - Revert "ttm: Call shmem_writeout() from ttm_backup_backup_page()" (José Expósito) [RHEL-110619]
  - Revert "treewide, timers: Rename destroy_timer_on_stack() as timer_destroy_on_stack()" (José Expósito) [RHEL-110619]
  - Revert "treewide, timers: Rename from_timer() to timer_container_of()" (José Expósito) [RHEL-110619]
  - Revert "bpf: Add dmabuf iterator" (José Expósito) [RHEL-110619]
  - redhat: Add new DRM modules to mod-internal.list (José Expósito) [RHEL-110619]
  - redhat/configs: Add new configs from DRM 6.16 backport (José Expósito) [RHEL-110619]
  - Merge DRM changes from upstream v6.15..v6.16 (José Expósito) [RHEL-110619]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-635.el9]
changelog:
  - dm: fix NULL pointer dereference in __dm_suspend() (Benjamin Marzinski) [RHEL-119009]
  - dm: fix queue start/stop imbalance under suspend/load/resume races (Benjamin Marzinski) [RHEL-119009]
  - dm-raid: don't set io_min and io_opt for raid1 (Benjamin Marzinski) [RHEL-119009]
  - dm-integrity: limit MAX_TAG_SIZE to 255 (Benjamin Marzinski) [RHEL-119009]
  - dm-stripe: fix a possible integer overflow (Benjamin Marzinski) [RHEL-119009]
  - dm-stripe: limit chunk_sectors to the stripe size (Benjamin Marzinski) [RHEL-119009]
  - dm: set DM_TARGET_PASSES_CRYPTO feature for dm-thin (Benjamin Marzinski) [RHEL-119009]
  - dm-thin: update the documentation (Benjamin Marzinski) [RHEL-119009]
  - dm-raid: do not include dm-core.h (Benjamin Marzinski) [RHEL-119009]
  - md: dm-zoned-target: Initialize return variable r to avoid uninitialized use (Benjamin Marzinski) [RHEL-119009]
  - dm-verity: remove support for asynchronous hashes (Benjamin Marzinski) [RHEL-119009]
  - dm-mpath: don't print the "loaded" message if registering fails (Benjamin Marzinski) [RHEL-119009]
  - dm-mpath: make dm_unregister_path_selector return void (Benjamin Marzinski) [RHEL-119009]
  - dm: ima: avoid extra calls to strlen() (Benjamin Marzinski) [RHEL-119009]
  - dm: Simplify dm_io_complete() (Benjamin Marzinski) [RHEL-119009]
  - dm: Remove unnecessary return in dm_zone_endio() (Benjamin Marzinski) [RHEL-119009]
  - dm raid: add support for resync w/o metadata devices (Benjamin Marzinski) [RHEL-119009]
  - dm-flakey: Fix corrupt_bio_byte setup checks (Benjamin Marzinski) [RHEL-119009]
  - dm-table: fix checking for rq stackable devices (Benjamin Marzinski) [RHEL-119009]
  - dm-bufio: fix sched in atomic context (Benjamin Marzinski) [RHEL-119009]
  - dm-raid: fix variable in journal device check (Benjamin Marzinski) [RHEL-119009]
  - dm-stripe: small code cleanup (Benjamin Marzinski) [RHEL-119009]
  - dm-verity: fix a memory leak if some arguments are specified multiple times (Benjamin Marzinski) [RHEL-119009]
  - dm-mirror: fix a tiny race condition (Benjamin Marzinski) [RHEL-119009]
  - dm-table: check BLK_FEAT_ATOMIC_WRITES inside limits_lock (Benjamin Marzinski) [RHEL-119009]
  - dm-zone: Use bdev_*() helper functions where applicable (Benjamin Marzinski) [RHEL-119009]
  - dm-table: Set BLK_FEAT_ATOMIC_WRITES for target queue limits (Benjamin Marzinski) [RHEL-119009]
  - dm-flakey: make corrupting read bios work (Benjamin Marzinski) [RHEL-119009]
  - dm-flakey: remove useless ERROR_READS check in flakey_end_io (Benjamin Marzinski) [RHEL-119009]
  - dm-flakey: error all IOs when num_features is absent (Benjamin Marzinski) [RHEL-119009]
  - dm-flakey: Clean up parsing messages (Benjamin Marzinski) [RHEL-119009]
  - dm: remove unneeded kvfree from alloc_targets (Benjamin Marzinski) [RHEL-119009]
  - dm-bufio: remove maximum age based eviction (Benjamin Marzinski) [RHEL-119009]
  - dm-verity: use softirq context only when !need_resched() (Benjamin Marzinski) [RHEL-119009]
  - dm: lock limits when reading them (Benjamin Marzinski) [RHEL-119009]
  - dm: use generic functions instead of disable_discard and disable_write_zeroes (Benjamin Marzinski) [RHEL-119009]
  - dm-delay: don't busy-wait in kthread (Benjamin Marzinski) [RHEL-119009]
  - dm: fix native zone append devices on top of emulated ones (Benjamin Marzinski) [RHEL-119009]
  - dm: limit swapping tables for devices with zone write plugs (Benjamin Marzinski) [RHEL-119009]
  - dm: fix dm_blk_report_zones (Benjamin Marzinski) [RHEL-119009]
  - dm: handle failures in dm_table_set_restrictions (Benjamin Marzinski) [RHEL-119009]
  - dm: free table mempools if not used in __bind (Benjamin Marzinski) [RHEL-119009]
  - dm: don't change md if dm_table_set_restrictions() fails (Benjamin Marzinski) [RHEL-119009]
  - dm-verity: support block number limits for different ioprio classes (Benjamin Marzinski) [RHEL-119009]
  - dm-delay: support zoned devices (Benjamin Marzinski) [RHEL-119009]
  - dm: restrict dm device size to 2^63-512 bytes (Benjamin Marzinski) [RHEL-119009]
  - dm-verity: do forward error correction on metadata I/O errors (Benjamin Marzinski) [RHEL-119009]
  - dm-bufio: remove unused return value (Benjamin Marzinski) [RHEL-119009]
  - dm: Enable inline crypto passthrough for striped target (Benjamin Marzinski) [RHEL-119009]
  - dm-integrity: Document Inline mode for storing integrity data (Benjamin Marzinski) [RHEL-119009]
  - dm-verity: Document restart_on_error and panic_on_error options (Benjamin Marzinski) [RHEL-119009]
  - dm-crypt: switch to using the crc32 library (Benjamin Marzinski) [RHEL-119009]
  - thermal: Constify struct thermal_zone_device_ops (David Arcari) [RHEL-85463]
  - thermal: int340x: processor_thermal: Add Wildcat Lake PCI ID (David Arcari) [RHEL-85463]
  - ACPI: DPTF: Support for Wildcat Lake (David Arcari) [RHEL-85463]
  - thermal: intel: int340x: Allow temperature override (David Arcari) [RHEL-85463]
  - thermal: intel: int340x: Add throttling control interface to PTC (David Arcari) [RHEL-85463]
  - thermal: int340x: processor_thermal: Platform temperature control documentation (David Arcari) [RHEL-85463]
  - thermal: intel: int340x: Enable platform temperature control (David Arcari) [RHEL-85463]
  - thermal: intel: int340x: Add platform temperature control interface (David Arcari) [RHEL-85463]
  - x86/msr: Add explicit includes of <asm/msr.h> [partial] (David Arcari) [RHEL-85463]
  - thermal: intel: int340x: Add missing DVFS support flags (David Arcari) [RHEL-85463]
  - thermal: intel: Clean up zone_trips[] initialization in int340x_thermal_zone_add() (David Arcari) [RHEL-85463]
  - thermal: int340x: Use kcalloc() instead of kzalloc() with multiplication (David Arcari) [RHEL-85463]
  - thermal: int340x: Add NULL check for adev (David Arcari) [RHEL-85463]
  - selftests: tls: test skb copy under mem pressure and OOB (Sabrina Dubroca) [RHEL-115640]
  - tls: make sure to abort the stream if headers are bogus (Sabrina Dubroca) [RHEL-115640]
  - selftests: tls: make the new data_steal test less flaky (Sabrina Dubroca) [RHEL-115640]
  - selftests: tls: test TCP stealing data from under the TLS socket (Sabrina Dubroca) [RHEL-115640]
  - tls: handle data disappearing from under the TLS ULP (Sabrina Dubroca) [RHEL-115640]
  - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (Sabrina Dubroca) [RHEL-115640]
  - net/tls: fix kernel panic when alloc_page failed (Sabrina Dubroca) [RHEL-115640]
  - bpf: fix ktls panic with sockmap (Sabrina Dubroca) [RHEL-115640]
  - selftests: tls: check that disconnect does nothing (Sabrina Dubroca) [RHEL-115640]
  - net: tls: explicitly disallow disconnect (Sabrina Dubroca) [RHEL-115640]
  - Revert "drm/vkms: convert to use faux_device" (José Expósito) [RHEL-113577]
  - Revert "drm/xe/pf: Set VF LMEM BAR size" (José Expósito) [RHEL-113577]
  - Revert "drm/xe/nvm: add on-die non-volatile memory device" (José Expósito) [RHEL-113577]
  - Revert "Mark xe driver as BROKEN if kernel page size is not 4kB" (José Expósito) [RHEL-113577]
  - Revert "drm/tegra: gem: Don't attach dma-bufs when not needed" (José Expósito) [RHEL-113577]
  - Revert "PM: domains: Add flags to specify power on attach/detach" (José Expósito) [RHEL-113577]
  - Revert "relayfs: abolish prev_padding" (José Expósito) [RHEL-113577]
  - drm/sched: Add missing argument to __assign_str() (José Expósito) [RHEL-113577]
  - Revert "mm: rename call_mmap/mmap_prepare to vfs_mmap/mmap_prepare" (José Expósito) [RHEL-113577]
  - drm/sysfb: Add efidrm for EFI displays (José Expósito) [RHEL-113577]
  - redhat: Add new DRM modules to mod-internal.list (José Expósito) [RHEL-113577]
  - redhat/configs: Add new configs from DRM 6.17 backport (José Expósito) [RHEL-113577]
  - Merge DRM changes from upstream v6.17-rc7..v6.17 (José Expósito) [RHEL-113577]
  - Merge DRM changes from upstream v6.17-rc6..v6.17-rc7 (José Expósito) [RHEL-113577]
  - Merge DRM changes from upstream v6.17-rc5..v6.17-rc6 (José Expósito) [RHEL-113577]
  - Merge DRM changes from upstream v6.16..v6.17-rc5 (José Expósito) [RHEL-113577]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-636.el9]
changelog:
  - powerpc/pseries: Define __u{8,32} types in papr_hvpipe_hdr struct (Mamatha Inamdar) [RHEL-101849]
  - powerpc/pseries: HVPIPE changes to support migration (Mamatha Inamdar) [RHEL-101849]
  - powerpc/pseries: Enable hvpipe with ibm,set-system-parameter RTAS (Mamatha Inamdar) [RHEL-101849]
  - powerpc/pseries: Enable HVPIPE event message interrupt (Mamatha Inamdar) [RHEL-101849]
  - powerpc/pseries: Wakeup hvpipe FD when the payload is pending (Mamatha Inamdar) [RHEL-101849]
  - powerpc/pseries: Receive payload with ibm,receive-hvpipe-msg RTAS (Mamatha Inamdar) [RHEL-101849]
  - powerpc/pseries: Send payload with ibm,send-hvpipe-msg RTAS (Mamatha Inamdar) [RHEL-101849]
  - powerpc/pseries: Add papr-hvpipe char driver for HVPIPE interfaces (Mamatha Inamdar) [RHEL-101849]
  - powerpc/pseries: Define HVPIPE specific macros (Mamatha Inamdar) [RHEL-101849]
  - powerpc/pseries: Define papr-hvpipe ioctl (Mamatha Inamdar) [RHEL-101849]
  - Documentation: ioctl-number: Fix linuxppc-dev mailto link (Mamatha Inamdar) [RHEL-101849]
  - tracing/osnoise: Replace kmalloc + copy_from_user with memdup_user_nul (Tomas Glozar) [RHEL-117873]
  - tracing/osnoise: Fix slab-out-of-bounds in _parse_integer_limit() (Tomas Glozar) [RHEL-117873] {CVE-2025-39974}
  - tracing/osnoise: Use for_each_online_cpu() instead of for_each_cpu() (Tomas Glozar) [RHEL-117873]
  - tracing/osnoise: Fix null-ptr-deref in bitmap_parselist() (Tomas Glozar) [RHEL-117873] {CVE-2025-39887}
  - tracing/osnoise: Fix crash in timerlat_dump_stack() (Tomas Glozar) [RHEL-117873] {CVE-2025-38493}
  - tracing/osnoise: Fix possible recursive locking for cpus_read_lock() (Tomas Glozar) [RHEL-117873]
  - osnoise: provide quiescent states (Tomas Glozar) [RHEL-117873]
  - tracing/osnoise: Switch to use hrtimer_setup() (Tomas Glozar) [RHEL-117873]
  - tracing/osnoise: Fix resetting of tracepoints (Tomas Glozar) [RHEL-117873] {CVE-2025-21733}
  - tracing: Switch trace_osnoise.c code over to use guard() and __free() (Tomas Glozar) [RHEL-117873]
  - rtla: Check pkg-config install (Tomas Glozar) [RHEL-117873]
  - rtla: Define __NR_sched_setattr for LoongArch (Tomas Glozar) [RHEL-117873]
  - rtla: Add the ability to create ctags and etags (Tomas Glozar) [RHEL-117873]
  - Documentation/rtla: Add include common_appendix.rst (Tomas Glozar) [RHEL-117873]
  - Documentation/rtla: Include BPF sample collection (Tomas Glozar) [RHEL-117873]
  - Documentation/rtla: Fix typo in common_timerlat_description.rst (Tomas Glozar) [RHEL-117873]
  - Documentation/rtla: Fix typo in rtla-timerlat.rst (Tomas Glozar) [RHEL-117873]
  - Documentation/rtla: Fix duplicate text about timerlat tracer (Tomas Glozar) [RHEL-117873]
  - rtla: Documentation: Fix -t, --trace (Tomas Glozar) [RHEL-117873]
  - rtla: fix a example in rtla-timerlat-hist.rst (Tomas Glozar) [RHEL-117873]
  - net/smc: Remove validation of reserved bits in CLC Decline message (Mete Durlu) [RHEL-124197]
  - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123809]
  - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123809] {CVE-2025-39968}
  - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123809] {CVE-2025-39969}
  - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123809] {CVE-2025-39970}
  - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123809] {CVE-2025-39971}
  - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123809] {CVE-2025-39972}
  - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123809] {CVE-2025-39973}
  - io_uring: enable per-io write streams (Ming Lei) [RHEL-122870]
  - nvmet-fcloop: call done callback even when remote port is gone (Maurizio Lombardi) [RHEL-114502]
  - nvmet-tcp: fix callback lock for TLS handshake (Maurizio Lombardi) [RHEL-114502]
  - nvme: fix misaccounting of nvme-mpath inflight I/O (Maurizio Lombardi) [RHEL-114502]
  - nvme: revert the cross-controller atomic write size validation (Maurizio Lombardi) [RHEL-114502]
  - nvme: fix atomic write size validation (Maurizio Lombardi) [RHEL-114502]
  - nvme: refactor the atomic write unit detection (Maurizio Lombardi) [RHEL-114502]
  - nvme: fix endianness of command word prints in nvme_log_err_passthru() (Maurizio Lombardi) [RHEL-114502]
  - nvme: Fix incorrect cdw15 value in passthru error logging (Maurizio Lombardi) [RHEL-114502]
  - nvme: fix inconsistent RCU list manipulation in nvme_ns_add_to_ctrl_list() (Maurizio Lombardi) [RHEL-114502]
  - nvme-pci: refresh visible attrs after being checked (Maurizio Lombardi) [RHEL-114502]
  - nvmet: fix memory leak of bio integrity (Maurizio Lombardi) [RHEL-114502]
  - nvme: spelling fixes (Maurizio Lombardi) [RHEL-114502]
  - nvme-tcp: fix I/O stalls on congested sockets (Maurizio Lombardi) [RHEL-114502]
  - nvme-tcp: sanitize request list handling (Maurizio Lombardi) [RHEL-114502]
  - nvme-tcp: remove tag set when second admin queue config fails (Maurizio Lombardi) [RHEL-114502]
  - nvme: fix command limits status code (Maurizio Lombardi) [RHEL-114502]
  - nvme-pci: store aborted state in flags variable (Maurizio Lombardi) [RHEL-114502]
  - nvme-fc: do not reference lsrsp after failure (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: don't wait for lport cleanup (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: add missing fcloop_callback_host_done (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fc: take tgtport refs for portentry (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fc: free pending reqs on tgtport unregister (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: drop response if targetport is gone (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: allocate/free fcloop_lsreq directly (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: prevent double port deletion (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: access fcpreq only when holding reqlock (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: update refs on tfcp_req (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: refactor fcloop_delete_local_port (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: refactor fcloop_nport_alloc and track lport (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: remove nport from list on last user (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: track ref counts for nports (Maurizio Lombardi) [RHEL-114502]
  - nvmet-auth: use SHASH_DESC_ON_STACK (Maurizio Lombardi) [RHEL-114502]
  - nvme-auth: use SHASH_DESC_ON_STACK (Maurizio Lombardi) [RHEL-114502]
  - nvmet: simplify the nvmet_req_init() interface (Maurizio Lombardi) [RHEL-114502]
  - nvmet: support completion queue sharing (Maurizio Lombardi) [RHEL-114502]
  - nvmet: fabrics: add CQ init and destroy (Maurizio Lombardi) [RHEL-114502]
  - nvmet: cq: prepare for completion queue sharing (Maurizio Lombardi) [RHEL-114502]
  - nvmet: add a helper function for cqid checking (Maurizio Lombardi) [RHEL-114502]
  - nvmet-auth: authenticate on admin queue only (Maurizio Lombardi) [RHEL-114502]
  - nvme-auth: do not re-authenticate queues with no prior authentication (Maurizio Lombardi) [RHEL-114502]
  - nvmet-tcp: switch to using the crc32c library (Maurizio Lombardi) [RHEL-114502]
  - nvmet: replace strncpy with strscpy (Maurizio Lombardi) [RHEL-114502]
  - nvme-tcp: open-code nvme_tcp_queue_request() for R2T (Maurizio Lombardi) [RHEL-114502]
  - nvme-tcp: remove redundant check to ctrl->opts (Maurizio Lombardi) [RHEL-114502]
  - nvme: fix incorrect sizeof (Maurizio Lombardi) [RHEL-114502]
  - nvme: fix write_stream_granularity initialization (Maurizio Lombardi) [RHEL-114502]
  - nvme: use fdp streams if write stream is provided (Maurizio Lombardi) [RHEL-114502]
  - nvme: register fdp parameters with the block layer (Maurizio Lombardi) [RHEL-114502]
  - nvme: add FDP definitions (Maurizio Lombardi) [RHEL-114502]
  - nvme: pass a void pointer to nvme_get/set_features for the result (Maurizio Lombardi) [RHEL-114502]
  - nvme: add a nvme_get_log_lsi helper (Maurizio Lombardi) [RHEL-114502]
  - nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro (Maurizio Lombardi) [RHEL-114502]
  - nvme: all namespaces in a subsystem must adhere to a common atomic write size (Maurizio Lombardi) [RHEL-114502]
  - nvme: multipath: enable BLK_FEAT_ATOMIC_WRITES for multipathing (Maurizio Lombardi) [RHEL-114502]
  - nvmet: pci-epf: remove NVMET_PCI_EPF_Q_IS_SQ (Maurizio Lombardi) [RHEL-114502]
  - nvmet: pci-epf: improve debug message (Maurizio Lombardi) [RHEL-114502]
  - nvmet: pci-epf: cleanup nvmet_pci_epf_raise_irq() (Maurizio Lombardi) [RHEL-114502]
  - nvmet: pci-epf: do not fall back to using INTX if not supported (Maurizio Lombardi) [RHEL-114502]
  - nvmet: pci-epf: clear completion queue IRQ flag on delete (Maurizio Lombardi) [RHEL-114502]
  - nvme-pci: add quirks for device 126f:1001 (Maurizio Lombardi) [RHEL-114502]
  - crypto: octeontx2 - Call strscpy() with correct size argument (Vladis Dronov) [RHEL-122025]
  - crypto: octeontx2 - get engine group number for asymmetric engine (Vladis Dronov) [RHEL-122025]
  - crypto: octeontx2 - Rework how engine group number is obtained (Vladis Dronov) [RHEL-122025]
  - crypto: octeontx2 - Fix address alignment on CN10KB and CN10KA-B0 (Vladis Dronov) [RHEL-122025]
  - crypto: octeontx2 - Fix address alignment on CN10K A0/A1 and OcteonTX2 (Vladis Dronov) [RHEL-122025]
  - crypto: octeontx2 - Fix address alignment issue on ucode loading (Vladis Dronov) [RHEL-122025]
  - crypto: octeontx2 - add timeout for load_fvc completion poll (Vladis Dronov) [RHEL-122025]
  - crypto: octeontx2 - Use dynamic allocated memory region for lmtst (Vladis Dronov) [RHEL-122025]
  - crypto: octeontx2 - Initialize cptlfs device info once (Vladis Dronov) [RHEL-122025]
  - crypto: octeontx2 - Simplify multiple return statements (Vladis Dronov) [RHEL-122025]
  - crypto: lib/Kconfig - hide library options [partial] (Vladis Dronov) [RHEL-122025]
  - RDMA/core: Free pfn_list with appropriate kvfree call (Kamal Heib) [RHEL-110100]
  - IB/core: Annotate umem_mutex acquisition under fs_reclaim for lockdep (Kamal Heib) [RHEL-110100]
  - scsi: RDMA/srp: Don't set a max_segment_size when virt_boundary_mask is set (Kamal Heib) [RHEL-110100]
  - RDMA/core: Rate limit GID cache warning messages (Kamal Heib) [RHEL-110100]
  - RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work (Kamal Heib) [RHEL-110100]
  - IB/cm: Remove dead code and adjust naming (Kamal Heib) [RHEL-110100]
  - RDMA/core: Avoid hmm_dma_map_alloc() for virtual DMA devices (Kamal Heib) [RHEL-110100]
  - RDMA/umem: Separate implicit ODP initialization from explicit ODP (Kamal Heib) [RHEL-110100]
  - RDMA/core: Convert UMEM ODP DMA mapping to caching IOVA and page linkage (Kamal Heib) [RHEL-110100]
  - RDMA/umem: Store ODP access mask information in PFN (Kamal Heib) [RHEL-110100]
  - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-110100]
  - IB/cm: Drop lockdep assert and WARN when freeing old msg (Kamal Heib) [RHEL-110100]
  - RDMA/core: Move ODP capability definitions to uapi (Kamal Heib) [RHEL-110100]
  - RDMA/rxe: Enable ODP in ATOMIC WRITE operation (Kamal Heib) [RHEL-110100]
  - RDMA/rxe: Enable ODP in RDMA FLUSH operation (Kamal Heib) [RHEL-110100]
  - RDMA/cma: Remove unused rdma_res_to_id (Kamal Heib) [RHEL-110100]
  - IB/cm: use rwlock for MAD agent lock (Kamal Heib) [RHEL-110100]
  - RDMA/core: Convert to use ERR_CAST() (Kamal Heib) [RHEL-110100]
  - RDMA/uverbs: Convert to use ERR_CAST() (Kamal Heib) [RHEL-110100]
  - RDMA/core: Convert to use ERR_CAST() (Kamal Heib) [RHEL-110100]
  - mm/hmm: provide generic DMA managing logic (Kamal Heib) [RHEL-110100]
  - mm/hmm: let users to tag specific PFN with DMA mapped bit (Kamal Heib) [RHEL-110100]
  - i2c: tiny-usb: disable zero-length read messages (Desnes Nunes) [RHEL-116016]
  - i2c: Use str_read_write() helper (Desnes Nunes) [RHEL-116016]
  - memstick: core: Zero initialize id_reg in h_memstick_read_dev_id() (Desnes Nunes) [RHEL-116016]
  - usb: hub: Don't try to recover devices lost during warm reset. (Desnes Nunes) [RHEL-116016]
  - USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition (Desnes Nunes) [RHEL-116016]
  - USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI (Desnes Nunes) [RHEL-116016]
  - usb: gadget: configfs: Fix OOB read on empty string write (Desnes Nunes) [RHEL-116016] {CVE-2025-38497}
  - xhci: dbc: Flush queued requests before stopping dbc (Desnes Nunes) [RHEL-116016]
  - xhci: dbctty: disable ECHO flag by default (Desnes Nunes) [RHEL-116016]
  - xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS (Desnes Nunes) [RHEL-116016]
  - usb: xhci: quirk for data loss in ISOC transfers (Desnes Nunes) [RHEL-116016]
  - usb: typec: displayport: Fix potential deadlock (Desnes Nunes) [RHEL-116016] {CVE-2025-38404}
  - usb: typec: altmodes/displayport: do not index invalid pin_assignments (Desnes Nunes) [RHEL-116016] {CVE-2025-38391}
  - usb: typec: tcpm: apply vbus before data bringup in tcpm_src_attach (Desnes Nunes) [RHEL-116016]
  - USB: serial: option: add Foxconn T99W640 (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Fix bit masking in tb_dp_port_set_hops() (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-116016]
  - Revert "usb: xhci: Implement xhci_handshake_check_state() helper" (Desnes Nunes) [RHEL-116016]
  - usb: xhci: Skip xhci_reset in xhci_resume if xhci is being removed (Desnes Nunes) [RHEL-116016]
  - usb: gadget: u_serial: Fix race condition in TTY wakeup (Desnes Nunes) [RHEL-116016] {CVE-2025-38448}
  - usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (Desnes Nunes) [RHEL-116016] {CVE-2024-56670}
  - Revert "usb: gadget: u_serial: Add null pointer check in gs_start_io" (Desnes Nunes) [RHEL-116016]
  - usb: gadget: u_serial: Add null pointer check in gs_start_io (Desnes Nunes) [RHEL-116016]
  - usb: acpi: fix device link removal (Desnes Nunes) [RHEL-116016]
  - Logitech C-270 even more broken (Desnes Nunes) [RHEL-116016]
  - phy: use per-PHY lockdep keys (Desnes Nunes) [RHEL-116016]
  - phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode (Desnes Nunes) [RHEL-116016] {CVE-2025-38535}
  - phy: tegra: xusb: Disable periodic tracking on Tegra234 (Desnes Nunes) [RHEL-116016]
  - phy: tegra: xusb: Decouple CYA_TRK_CODE_UPDATE_ON_IDLE from trk_hw_mode (Desnes Nunes) [RHEL-116016]
  - usb: misc: onboard_usb_dev: fix build warning for CONFIG_USB_ONBOARD_DEV_USB5744=n (Desnes Nunes) [RHEL-116016]
  - usb: typec: tipd: fix typo in TPS_STATUS_HIGH_VOLAGE_WARNING macro (Desnes Nunes) [RHEL-116016]
  - USB: typec: fix const issue in typec_match() (Desnes Nunes) [RHEL-116016]
  - USB: gadget: udc: fix const issue in gadget_match_driver() (Desnes Nunes) [RHEL-116016]
  - USB: gadget: fix up const issue with struct usb_function_instance (Desnes Nunes) [RHEL-116016]
  - USB: serial: pl2303: add new chip PL2303GC-Q20 and PL2303GT-2AB (Desnes Nunes) [RHEL-116016]
  - USB: serial: bus: fix const issue in usb_serial_device_match() (Desnes Nunes) [RHEL-116016]
  - usb: misc: onboard_usb_dev: Fix usb5744 initialization sequence (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: ti,usb8041: Add binding for TI USB8044 hub controller (Desnes Nunes) [RHEL-116016]
  - usb: misc: onboard_usb_dev: Add support for TI TUSB8044 hub (Desnes Nunes) [RHEL-116016]
  - usb: Flush altsetting 0 endpoints before reinitializating them after reset. (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: Add Parade PS8833 Type-C retimer variant (Desnes Nunes) [RHEL-116016]
  - usb: gadget: u_serial: Avoid double unlock of serial_port_lock (Desnes Nunes) [RHEL-116016]
  - usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device (Desnes Nunes) [RHEL-116016]
  - usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE (Desnes Nunes) [RHEL-116016]
  - usb: typec: tcpm: Use configured PD revision for negotiation (Desnes Nunes) [RHEL-116016]
  - usb: typec: tcpm: move tcpm_queue_vdm_unlocked to asynchronous work (Desnes Nunes) [RHEL-116016] {CVE-2025-38268}
  - xhci: Add missing parameter description to xhci_get_endpoint_index() (Desnes Nunes) [RHEL-116016]
  - usb: xhci: fix host not responding after suspend and resume (Desnes Nunes) [RHEL-116016]
  - usb: xhci: rename 'irq_control' to 'imod' (Desnes Nunes) [RHEL-116016]
  - usb: xhci: rename 'irq_pending' to 'iman' (Desnes Nunes) [RHEL-116016]
  - usb: xhci: cleanup IMOD register comments (Desnes Nunes) [RHEL-116016]
  - usb: xhci: rework Event Ring Segment Table Address mask (Desnes Nunes) [RHEL-116016]
  - usb: xhci: rework Event Ring Segment Table Size mask (Desnes Nunes) [RHEL-116016]
  - usb: xhci: remove '0' write to write-1-to-clear register (Desnes Nunes) [RHEL-116016]
  - usb: xhci: guarantee that IMAN register is flushed (Desnes Nunes) [RHEL-116016]
  - usb: xhci: improve Interrupt Management register macros (Desnes Nunes) [RHEL-116016]
  - usb: xhci: set requested IMODI to the closest supported value (Desnes Nunes) [RHEL-116016]
  - usb: xhci: cleanup xhci_mem_init() (Desnes Nunes) [RHEL-116016]
  - usb: xhci: add individual allocation checks in xhci_mem_init() (Desnes Nunes) [RHEL-116016]
  - usb: xhci: move initialization of the primary interrupter (Desnes Nunes) [RHEL-116016]
  - usb: xhci: remove error handling from xhci_add_interrupter() (Desnes Nunes) [RHEL-116016]
  - usb: xhci: move enabling of USB 3 device notifications (Desnes Nunes) [RHEL-116016]
  - usb: xhci: move doorbell array pointer assignment (Desnes Nunes) [RHEL-116016]
  - usb: xhci: move DCBAA pointer write (Desnes Nunes) [RHEL-116016]
  - usb: xhci: refactor xhci_set_cmd_ring_deq() (Desnes Nunes) [RHEL-116016]
  - usb: xhci: move command ring pointer write (Desnes Nunes) [RHEL-116016]
  - usb: xhci: move device slot enabling register write (Desnes Nunes) [RHEL-116016]
  - usb: xhci: relocate pre-allocation initialization (Desnes Nunes) [RHEL-116016]
  - usb: xhci: Add debugfs support for xHCI port bandwidth (Desnes Nunes) [RHEL-116016]
  - usb: xhci: Don't log transfer ring segment list on errors (Desnes Nunes) [RHEL-116016]
  - phy: tegra: p2u: Broaden architecture dependency (Desnes Nunes) [RHEL-116016]
  - phy: fsl-imx8mq-usb: add i.MX95 tuning support (Desnes Nunes) [RHEL-116016]
  - phy: fsl-imx8mq-usb: fix phy_tx_vboost_level_from_property() (Desnes Nunes) [RHEL-116016]
  - dt-bindings: phy: imx8mq-usb: add imx95 tuning support (Desnes Nunes) [RHEL-116016]
  - dt-bindings: phy: imx8mq-usb: fix fsl,phy-tx-vboost-level-microvolt property (Desnes Nunes) [RHEL-116016]
  - phy: freescale: imx8m-pcie: Simplify with dev_err_probe() (Desnes Nunes) [RHEL-116016]
  - dt-bindings: phy: rockchip: Convert RK3399 Type-C PHY to schema (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: add rk3588 compatible to rockchip,dwc3 (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: rockchip,dwc3: Move RK3399 to its own schema (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Do not double dequeue a configuration request (Desnes Nunes) [RHEL-116016] {CVE-2025-38174}
  - usb-storage: reject probe of device one non-DMA HCDs when using highmem (Desnes Nunes) [RHEL-116016]
  - USB: serial: ti_usb_3410_5052: drop bogus read urb check (Desnes Nunes) [RHEL-116016]
  - usb: misc: onboard_usb_dev: Add Parade PS5511 hub support (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: realtek,rts5411: Adapt usb-hub.yaml (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: Add binding for PS5511 hub controller (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: Introduce usb-hub.yaml (Desnes Nunes) [RHEL-116016]
  - misc: rtsx: Remove deadcode (Desnes Nunes) [RHEL-116016]
  - usb: gadget: u_serial: Implement remote wakeup capability (Desnes Nunes) [RHEL-116016]
  - usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push (Desnes Nunes) [RHEL-116016]
  - usb: gadget: u_serial: Add null pointer check in gserial_suspend (Desnes Nunes) [RHEL-116016] {CVE-2023-53356}
  - usb: gadget: u_serial: Add null pointer check in gserial_resume (Desnes Nunes) [RHEL-116016] {CVE-2023-53551}
  - dt-bindings: usb: usb-switch: Allow data-lanes property in port (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: generic-ehci: Add VIA/WonderMedia compatible (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: Convert Nuvoton EHCI to DT schema (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: npcm7xx: Add npcm845 compatible (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: usb-device: relax compatible pattern to a contains (Desnes Nunes) [RHEL-116016]
  - usb: typec: ucsi: fix Clang -Wsign-conversion warning (Desnes Nunes) [RHEL-116016]
  - USB: host: omap: Do not enable by default during compile testing (Desnes Nunes) [RHEL-116016]
  - usb: typec: mux: fsa4480: add regulator support (Desnes Nunes) [RHEL-116016]
  - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (Desnes Nunes) [RHEL-116016] {CVE-2025-38103}
  - Documentation/admin-guide: Document Thunderbolt/USB4 tunneling events (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Notify userspace about firmware CM tunneling events (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Notify userspace about software CM tunneling events (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Introduce domain event message handler (Desnes Nunes) [RHEL-116016]
  - usb: typec: Connect Type-C port with associated USB4 port (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Add Thunderbolt/USB4 <-> USB3 match function (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Expose usb4_port_index() to other modules (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-116016]
  - misc: rtsx: Enhance the signal handling processes in SVID/SSID 1028:0CE1 platform (Desnes Nunes) [RHEL-116016]
  - usb: misc: onboard_dev: Add Realtek RTL8188ETV WiFi (0bda:0179) (Desnes Nunes) [RHEL-116016]
  - Added usb_string function to a namespace (Desnes Nunes) [RHEL-116016]
  - USB: core: Correct API usb_(enable|disable)_autosuspend() prototypes (Desnes Nunes) [RHEL-116016]
  - USB: phy: Use str_enable_disable-like helpers (Desnes Nunes) [RHEL-116016]
  - usb: common: usb-conn-gpio: use a unique name for usb connector device (Desnes Nunes) [RHEL-116016]
  - usb: hub: Fail fast in USB3 link power management enable path (Desnes Nunes) [RHEL-116016]
  - usb: hub: reorder USB3 link power management enable requests (Desnes Nunes) [RHEL-116016]
  - usb: hub: Don't disable LPM completely if device initiated LPM fails (Desnes Nunes) [RHEL-116016]
  - usb: hub: verify device is configured in usb_device_may_initiate_lpm() (Desnes Nunes) [RHEL-116016]
  - usb: hub: Block less in USB3 link power management LPM disable path (Desnes Nunes) [RHEL-116016]
  - usb: Add checks for snprintf() calls in usb_alloc_dev() (Desnes Nunes) [RHEL-116016]
  - usb: chipidea: imx: add HSIO Block Control wakeup setting (Desnes Nunes) [RHEL-116016]
  - usb: chipidea: imx: add wakeup interrupt handling (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: usbmisc-imx: add support for i.MX95 platform (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: chipidea: Add i.MX95 compatible string 'fsl,imx95-usb' (Desnes Nunes) [RHEL-116016]
  - usb: cdc-wdm: avoid setting WDM_READ for ZLP-s (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: smsc,usb3503: Correct indentation and style in DTS example (Desnes Nunes) [RHEL-116016]
  - usb: cdns3: Remove the invalid comment (Desnes Nunes) [RHEL-116016]
  - usb: typec: tcpm: Use fwnode_get_child_node_count() (Desnes Nunes) [RHEL-116016]
  - device property: Split fwnode_get_child_node_count() (Desnes Nunes) [RHEL-116016]
  - device property: Fix a typo in the description of device_get_child_node_count() (Desnes Nunes) [RHEL-116016]
  - usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode (Desnes Nunes) [RHEL-116016]
  - usb: typec: tipd: Fix wakeup source leaks on device unbind (Desnes Nunes) [RHEL-116016]
  - usb: typec: tcpci: add regulator support (Desnes Nunes) [RHEL-116016]
  - usb: typec: tcpm: allow switching to mode accessory to mux properly (Desnes Nunes) [RHEL-116016]
  - usb: typec: tcpm: allow sink (ufp) to toggle into accessory mode debug (Desnes Nunes) [RHEL-116016]
  - usb: typec: tcpm: allow to use sink in accessory mode (Desnes Nunes) [RHEL-116016]
  - usb: typec: mux: do not return on EOPNOTSUPP in {mux, switch}_set (Desnes Nunes) [RHEL-116016]
  - usb: typec: ucsi: Add the UCSI commands in debugfs (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-116016]
  - usb: host: xhci: Notify xHCI sideband on transfer ring free (Desnes Nunes) [RHEL-116016]
  - usb: host: xhci-plat: Set XHCI max interrupters if property is present (Desnes Nunes) [RHEL-116016]
  - usb: host: xhci-mem: Allow for interrupter clients to choose specific index (Desnes Nunes) [RHEL-116016]
  - usb: host: xhci-mem: Cleanup pending secondary event ring events (Desnes Nunes) [RHEL-116016]
  - redhat/configs: Adding CONFIG_USB_XHCI_SIDEBAND (Desnes Nunes) [RHEL-116016]
  - xhci: sideband: add initial api to register a secondary interrupter entity (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: gadget: Fix enter to hibernation for UTMI+ PHY (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: New bitfield definition and programming in GRSTCTL (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: Add hibernation updates for ULPI PHY (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: New bit definition in GPWRDN register (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: Add eUSB2 PHY disconnect flow support (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: Add new parameter eusb2_disc (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: New bit definition in GOTGCTL register (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: Add core new versions definition (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: qcom: Don't leave BCR asserted (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: gadget: Fix TRB reclaim logic for short transfers and ZLPs (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: Abort suspend on soft disconnect failure (Desnes Nunes) [RHEL-116016]
  - usb: gadget: epautoconf: Use USB API functions rather than constants (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: gadget: Use USB API functions rather than constants (Desnes Nunes) [RHEL-116016]
  - usb: core: config: Use USB API functions rather than constants (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: qcom: Use bulk clock API and devres (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: qcom: Fix error handling in probe (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: qcom: use modern PM macros (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: also exit clock_gating when stopping udc while suspended (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: qcom: Transition to flattened model (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: qcom: Don't rely on drvdata during probe (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: core: Don't touch resets and clocks (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: core: Expose core driver as library (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: qcom,snps-dwc3: Fix bindings for X1E80100 (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: Introduce qcom,snps-dwc3 (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: qcom: Snapshot driver for backwards compatibilty (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: dwc3: Allow connector in USB controller node (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: qcom,dwc3: Add SM8750 compatible (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: core: Avoid redundant system suspend/resume callbacks (Desnes Nunes) [RHEL-116016]
  - i2c: Set i2c pinctrl recovery info from it's device pinctrl (Desnes Nunes) [RHEL-116016]
  - pinctrl: Add an API to get the pinctrl pins if initialized (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: Specify maximum number of XHCI interrupters (Desnes Nunes) [RHEL-116016]
  - can: gs_usb: add VID/PID for the CANnectivity firmware (Desnes Nunes) [RHEL-116016]
  - can: gs_usb: add usb endpoint address detection at driver probe step (Desnes Nunes) [RHEL-116016]
  - can: gs_usb: add VID/PID for Xylanta SAINT3 product family (Desnes Nunes) [RHEL-116016]
  - ext4: fix reserved gdt blocks handling in fsmap (Brian Foster) [RHEL-109218]
  - ext4: fix fsmap end of range reporting with bigalloc (Brian Foster) [RHEL-109218]
  - ext4: fix FS_IOC_GETFSMAP handling (Brian Foster) [RHEL-109218]
  - ext4: replace the traditional ternary conditional operator with with max()/min() (Brian Foster) [RHEL-109218]
  - scsi: scsi_debug: Make read-only arrays static const (Ewan D. Milne) [RHEL-116075]
  - scsi: core: sysfs: Correct sysfs attributes access rights (Ewan D. Milne) [RHEL-116075]
  - scsi: sd: Make sd shutdown issue START STOP UNIT appropriately (Ewan D. Milne) [RHEL-116075]
  - scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_transport_fc: Add comments to describe added 'rport' parameter (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_transport_fc: Change to use per-rport devloss_work_q (Ewan D. Milne) [RHEL-116075]
  - scsi: core: Fix kernel doc for scsi_track_queue_full() (Ewan D. Milne) [RHEL-116075]
  - scsi: core: Use scsi_cmd_priv() instead of open-coding it (Ewan D. Milne) [RHEL-116075]
  - scsi: core: Enforce unlimited max_segment_size when virt_boundary_mask is set (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_devinfo: Remove redundant 'found' (Ewan D. Milne) [RHEL-116075]
  - scsi: sd: Fix VPD page 0xb7 length check (Ewan D. Milne) [RHEL-116075]
  - scsi: core: Remember if a device is an ATA device (Ewan D. Milne) [RHEL-116075]
  - scsi: error: alua: I/O errors for ALUA state transitions (Ewan D. Milne) [RHEL-116075]
  - scsi: core: devinfo: Fix typo in comment (Ewan D. Milne) [RHEL-116075]
  - scsi: sd: Remove the stream_status member from scsi_stream_status_header (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_debug: Reduce DEF_ATOMIC_WR_MAX_LENGTH (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_transport_fc: Rename del_timer() in comment (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_debug: Add ERASE for tapes (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_debug: Use scsi_device->type instead os sdebug_ptype where possible (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_debug: Move some tape-specific commands to separate definitions (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_debug: Enable different command definitions for different device types (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_debug: Fix two typos in command definitions (Ewan D. Milne) [RHEL-116075]
  - KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (Jon Maloy) [RHEL-104731] {CVE-2025-38351}
  - cgroup/rstat: avoid disabling irqs for O(num_cpu) (Radostin Stoyanov) [RHEL-94298]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-637.el9]
changelog:
  - net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync() (Mete Durlu) [RHEL-99989]
  - net/smc: fix UAF on smcsk after smc_listen_out() (Mete Durlu) [RHEL-99989]
  - smc: Fix various oops due to inet_sock type confusion. (Mete Durlu) [RHEL-99989]
  - net/smc: convert timeouts to secs_to_jiffies() (Mete Durlu) [RHEL-99989]
  - net/smc: replace strncpy with strscpy (Mete Durlu) [RHEL-99989]
  - net/smc: remove unused function smc_lo_supports_v2 (Mete Durlu) [RHEL-99989]
  - net/smc: remove unused input parameters in smc_buf_get_slot (Mete Durlu) [RHEL-99989]
  - s390: ism: Pass string literal as format argument of dev_set_name() (Mete Durlu) [RHEL-99989]
  - smc: Fix lockdep false-positive for IPPROTO_SMC. (Mete Durlu) [RHEL-99989]
  - net/smc: use the correct ndev to find pnetid by pnetid table (Mete Durlu) [RHEL-99989]
  - net/smc: fix data error when recvmsg with MSG_PEEK flag (Mete Durlu) [RHEL-99989]
  - net/smc: delete pointless divide by one (Mete Durlu) [RHEL-99989]
  - net/smc: support SMC-R V2 for rdma devices with max_recv_sge equals to 1 (Mete Durlu) [RHEL-99989]
  - net/smc: fix LGR and link use-after-free issue (Mete Durlu) [RHEL-99989]
  - net/smc: initialize close_work early to avoid warning (Mete Durlu) [RHEL-99989]
  - net/smc: do not leave a dangling sk pointer in __smc_create() (Mete Durlu) [RHEL-99989]
  - net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid (Mete Durlu) [RHEL-99989]
  - net/smc: Fix memory leak when using percpu refs (Mete Durlu) [RHEL-99989]
  - net/smc: Address spelling errors (Mete Durlu) [RHEL-99989]
  - net/smc: fix lacks of icsk_syn_mss with IPPROTO_SMC (Mete Durlu) [RHEL-99989]
  - net/smc: add sysctl for smc_limit_hs (Mete Durlu) [RHEL-99989]
  - net/smc: prevent NULL pointer dereference in txopt_get (Mete Durlu) [RHEL-99989]
  - net/smc: introduce statistics for ringbufs usage of net namespace (Mete Durlu) [RHEL-99989]
  - net/smc: introduce statistics for allocated ringbufs of link group (Mete Durlu) [RHEL-99989]
  - net/smc: Use static_assert() to check struct sizes (Mete Durlu) [RHEL-99989]
  - net/smc: add the max value of fallback reason count (Mete Durlu) [RHEL-99989]
  - net/smc: remove unused input parameters in smcr_new_buf_create (Mete Durlu) [RHEL-99989]
  - net/smc: remove redundant code in smc_connect_check_aclc (Mete Durlu) [RHEL-99989]
  - Subject: net/smc: remove the fallback in __smc_connect (Mete Durlu) [RHEL-99989]
  - Subject: net/smc: remove unreferenced header in smc_loopback.h file (Mete Durlu) [RHEL-99989]
  - Subject: net/smc: prevent UAF in inet_create() (Mete Durlu) [RHEL-99989]
  - net/smc: {at|de}tach sndbuf to peer DMB if supported (Mete Durlu) [RHEL-99989]
  - gitlab-ci: disable automotive pipelines (Scott Weaver)
  - redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
  - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
  - redhat: remove EARLY ystream bits (Jan Stancek)
  - bpf: Do not audit capability check in do_jit() (Ondrej Mosnacek) [RHEL-105376]
  - io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124973] {CVE-2025-40047}
  - mfd: intel-lpss: Add Intel Wildcat Lake LPSS PCI IDs (CKI Backport Bot) [RHEL-95651]
  - dma/mapping.c: dev_dbg support for dma_addressing_limited (Prarit Bhargava) [RHEL-117031]
  - x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Prarit Bhargava) [RHEL-117031]
  - x86/kaslr: Reduce KASLR entropy on most x86 systems (Prarit Bhargava) [RHEL-117031]
  - KVM: x86: Advertise support for AMD's PREFETCHI (Paolo Bonzini) [RHEL-98696]
  - KVM: s390: Fix access to unavailable adapter indicator pages during postcopy (Thomas Huth) [RHEL-43214]
  - iommu/s390: Make attach succeed when the device was surprise removed (Thomas Huth) [RHEL-113452]
  - iommu/s390: Fix memory corruption when using identity domain (Thomas Huth) [RHEL-113452]
  - KVM: s390: Fix incorrect usage of mmu_notifier_register() (Thomas Huth) [RHEL-113452]
  - KVM: s390: rename PROT_NONE to PROT_TYPE_DUMMY (Thomas Huth) [RHEL-113452]
  - KVM: s390: Remove unneeded srcu lock (Thomas Huth) [RHEL-113452]
  - s390/vfio-ap: Fix no AP queue sharing allowed message written to kernel log (Thomas Huth) [RHEL-113452]
  - s390/kvm: Split kvm_host header file (Thomas Huth) [RHEL-113452]
  - s390/entry: Move early program check handler to entry.S (Thomas Huth) [RHEL-113452]
  - s390: Remove 2k vs 4k page table leftovers (Thomas Huth) [RHEL-113452]
  - s390/tlb: Use mm_has_pgste() instead of mm_alloc_pgste() (Thomas Huth) [RHEL-113452]
  - s390/mm: Convert pgste_val() into function (Thomas Huth) [RHEL-113452]
  - s390/mm: Convert pgprot_val() into function (Thomas Huth) [RHEL-113452]
  - s390: Add missing _TIF defines (Thomas Huth) [RHEL-113452]
  - s390/syscall: Merge __do_syscall() and do_syscall() (Thomas Huth) [RHEL-113452]
  - KVM: s390: Don't use %pK through debug printing (Thomas Huth) [RHEL-113452]
  - KVM: s390: Don't use %pK through tracepoints (Thomas Huth) [RHEL-113452]
  - s390/asm-offsets: Rename __LC_PGM_INT_CODE (Thomas Huth) [RHEL-113452]
  - s390/vfio-ap: Notify userspace that guest's AP config changed when mdev removed (Thomas Huth) [RHEL-72996]
  - s390/vfio-ap: Signal eventfd when guest AP configuration is changed (Thomas Huth) [RHEL-72996]
  - s390/vfio-ccw: Make mdev_types not look like a fake flex array (Thomas Huth) [RHEL-113452]
  - s390/vfio-ap: Make mdev_types not look like a fake flex array (Thomas Huth) [RHEL-113452]
  - KVM: s390: Switch to use hrtimer_setup() (Thomas Huth) [RHEL-113452]
  - s390/vfio-ap: Fix indentation in vfio_ap_mdev_ioctl() (Thomas Huth) [RHEL-113452]
  - KVM: s390: vsie: stop using "struct page" for vsie page (Thomas Huth) [RHEL-113452]
  - KVM: s390: vsie: stop messing with page refcount (Thomas Huth) [RHEL-113452]
  - KVM: s390: vsie: stop using page->index (Thomas Huth) [RHEL-113452]
  - s390/vfio-ap: Remove gmap_convert_to_secure() from vfio_ap_ops (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Streamline uc_skey test to issue iske after sske (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Add has device attr check to uc_attr_mem_limit selftest (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Add ucontrol gis routing test (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Add ucontrol flic attr selftests (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Add regression tests for PFCR subfunctions (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: correct IP.b length in uc_handle_sieic debug output (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Fix whitespace confusion in ucontrol test (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Verify reject memory region operations for ucontrol VMs (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Add uc_skey VM test case (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Add uc_map_unmap VM test case (Thomas Huth) [RHEL-113452]
  - s390/vfio-ap: Switch over to sysfs_emit() (Thomas Huth) [RHEL-113452]
  - s390: Fix various typos (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Add regression tests for PLO subfunctions (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Add regression tests for KMAC, KMC, KM, KIMD and KLMD crypto subfunctions (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Add regression tests for KMCTR, KMF, KMO and PCC crypto subfunctions (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Add regression tests for PRNO, KDSA and KMA crypto subfunctions (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Add regression tests for SORTL and DFLTCC CPU subfunctions (Thomas Huth) [RHEL-113452]
  - selftests: kvm: s390: Add VM run test case (Thomas Huth) [RHEL-113452]
  - selftests: kvm: s390: Add test fixture and simple VM setup tests (Thomas Huth) [RHEL-113452]
  - selftests: kvm: s390: Add s390x ucontrol test suite with hpage test (Thomas Huth) [RHEL-113452]
  - selftests: kvm: s390: Add kvm_s390_sie_block definition for userspace tests (Thomas Huth) [RHEL-113452]
  - selftests: kvm: s390: Define page sizes in shared header (Thomas Huth) [RHEL-113452]
  - selftests/kvm: remove dead file (Thomas Huth) [RHEL-113452]
  - Revert "kvm: selftests: move base kvm_util.h declarations to kvm_util_base.h" (Thomas Huth) [RHEL-113452]
  - KVM: selftests: Define _GNU_SOURCE for all selftests code (Thomas Huth) [RHEL-113452]
  - s390/cio: Add missing MODULE_DESCRIPTION() macros (Thomas Huth) [RHEL-113452]
  - s390: Replace S390_lowcore by get_lowcore() (Thomas Huth) [RHEL-113452]
  - s390/uv: gmap_make_secure() cleanups for further changes (Thomas Huth) [RHEL-113452]
  - s390/uv: Don't call folio_wait_writeback() without a folio reference (Thomas Huth) [RHEL-113452]
  - KVM: s390x: selftests: Add shared zeropage test (Thomas Huth) [RHEL-113452]
  - KVM: s390: selftests: Add selftest for single-stepping (Thomas Huth) [RHEL-113452]
  - xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-71501]
  - sched: restore the behavior of put_task_struct() for non-rt (Luis Claudio R. Goncalves) [RHEL-40885]
  - sched: Do not call __put_task_struct() on rt if pi_blocked_on is set (Luis Claudio R. Goncalves) [RHEL-40885]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-638.el9]
changelog:
  - cpufreq: powernv: Stop setting common freq attributes (Yunming Yang) [RHEL-121364]
  - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123617]
  - selftests/bpf: Test invalid narrower ctx load (Viktor Malik) [RHEL-110274]
  - bpf: Reject narrower access to pointer ctx fields (Viktor Malik) [RHEL-110274]
  - libbpf: Fix handling of BPF arena relocations (Viktor Malik) [RHEL-110274]
  - s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again (Viktor Malik) [RHEL-110274]
  - selftests/bpf: Add negative test cases for snprintf (Viktor Malik) [RHEL-110274]
  - bpf: Reject %p% format string in bprintf-like helpers (Viktor Malik) [RHEL-110274]
  - selftests/bpf: adapt one more case in test_lru_map to the new target_free (Viktor Malik) [RHEL-110274]
  - libbpf: Fix possible use-after-free for externs (Viktor Malik) [RHEL-110274]
  - libbpf: Fix null pointer dereference in btf_dump__free on allocation failure (Viktor Malik) [RHEL-110274]
  - bpf: Adjust free target to avoid global starvation of LRU map (Viktor Malik) [RHEL-110274]
  - selftests/bpf: Add tests with stack ptr register in conditional jmp (Viktor Malik) [RHEL-110274]
  - bpf: Do not include stack ptr register in precision backtracking bookkeeping (Viktor Malik) [RHEL-110274]
  - selftests/bpf: Add unit tests with __bpf_trap() kfunc (Viktor Malik) [RHEL-110274]
  - bpf: Warn with __bpf_trap() kfunc maybe due to uninitialized variable (Viktor Malik) [RHEL-110274]
  - libbpf/btf: Fix string handling to support multi-split BTF (Viktor Malik) [RHEL-110274]
  - bpf: Pass the same orig_call value to trampoline functions (Viktor Malik) [RHEL-110274]
  - s390/bpf: Store backchain even for leaf progs (Viktor Malik) [RHEL-110274]
  - libbpf: Check bpf_map_skeleton link for NULL (Viktor Malik) [RHEL-110274]
  - bpf: Fix WARN() in get_bpf_raw_tp_regs (Viktor Malik) [RHEL-110274]
  - libbpf: Use proper errno value in nlattr (Viktor Malik) [RHEL-110274]
  - selftests/bpf: Fix caps for __xlated/jited_unpriv (Viktor Malik) [RHEL-110274]
  - bpftool: Fix cgroup command to only show cgroup bpf programs (Viktor Malik) [RHEL-110274]
  - bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels (Viktor Malik) [RHEL-110274]
  - libbpf: Use proper errno value in linker (Viktor Malik) [RHEL-110274]
  - Use thread-safe function pointer in libbpf_print (Viktor Malik) [RHEL-110274]
  - bpf: Use proper type to calculate bpf_raw_tp_null_args.mask index (Viktor Malik) [RHEL-110274]
  - selftests/bpf: Add test for attaching kprobe with long event names (Viktor Malik) [RHEL-110274]
  - selftests/bpf: Add test for attaching uprobe with long event names (Viktor Malik) [RHEL-110274]
  - libbpf: Fix event name too long error (Viktor Malik) [RHEL-110274]
  - libbpf: Verify section type in btf_find_elf_sections (Viktor Malik) [RHEL-110274]
  - libbpf: Fix buffer overflow in bpf_object__init_prog (Viktor Malik) [RHEL-110274]
  - selftests/bpf: Add test case for atomic update of fd htab (Viktor Malik) [RHEL-110274]
  - bpf: Don't allocate per-cpu extra_elems for fd htab (Viktor Malik) [RHEL-110274]
  - bpf: Add is_fd_htab() helper (Viktor Malik) [RHEL-110274]
  - bpf: Support atomic update for htab of maps (Viktor Malik) [RHEL-110274]
  - bpf: Rename __htab_percpu_map_update_elem to htab_map_update_elem_in_place (Viktor Malik) [RHEL-110274]
  - bpf: Factor out htab_elem_value helper() (Viktor Malik) [RHEL-110274]
  - bpf: Bail out early in __htab_map_lookup_and_delete_elem() (Viktor Malik) [RHEL-110274]
  - selftests/bpf: Fix bpf_nf selftest failure (Viktor Malik) [RHEL-110274]
  - bpf: Check link_create.flags parameter for multi_uprobe (Viktor Malik) [RHEL-110274]
  - bpf: Check link_create.flags parameter for multi_kprobe (Viktor Malik) [RHEL-110274]
  - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119153] {CVE-2025-39883}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-639.el9]
changelog:
  - smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-114699]
  - smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-114699]
  - smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-114699]
  - smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-114699]
  - cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-114699]
  - smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-114699]
  - smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-114699]
  - smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-114699]
  - smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-114699]
  - smb: client: remove pointless cfid->has_lease check (Paulo Alcantara) [RHEL-114699]
  - smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-114699]
  - smb: client: update cfid->last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-114699]
  - smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-114699]
  - smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-114699]
  - smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-114699]
  - smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-114699]
  - smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-114699]
  - smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-114699]
  - smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-114699]
  - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-119582]
  - smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-123665]
  - nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-111104]
  - arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-119900]
  - arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-119900]
  - arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-119900]
  - arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-119900]
  - arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-119900]
  - arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-119900]
  - arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-119900]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-640.el9]
changelog:
  - kernfs: Fix UAF in polling when open file is released (Pavel Reichl) [RHEL-122088] {CVE-2025-39881}
  - crypto: iaa - mark as supported (Vladis Dronov) [RHEL-95629]
  - dmaengine: idxd: Add a new IAA device ID for Wildcat Lake family platforms (Vladis Dronov) [RHEL-95629]
  - crypto: iaa - Optimize rebalance_wq_table() (Vladis Dronov) [RHEL-95629]
  - crypto: iaa - Adjust workqueue allocation type (Vladis Dronov) [RHEL-95629]
  - fs: Add 'initramfs_options' to set initramfs mount options (Ian Kent) [RHEL-121113]
  - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123108] {CVE-2025-39898}
  - Configs: Enable CONFIG_SCHED_MC for powerpc (Phil Auld) [RHEL-118964]
  - sched: Unify the SCHED_{SMT,CLUSTER,MC} Kconfig (Phil Auld) [RHEL-118964]
  - sched: Move STDL_INIT() functions out-of-line (Phil Auld) [RHEL-118964]
  - sched/fair: Get rid of sched_domains_curr_level hack for tl->cpumask() (Phil Auld) [RHEL-118964]
  - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled (Phil Auld) [RHEL-118964]
  - x86/smpboot: moves x86_topology to static initialize and truncate (Phil Auld) [RHEL-118964]
  - x86/smpboot: remove redundant CONFIG_SCHED_SMT (Phil Auld) [RHEL-118964]
  - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup (Phil Auld) [RHEL-118964]
  - powerpc/smp: Dynamically build Powerpc topology (Phil Auld) [RHEL-118964]
  - powerpc/smp: Avoid asym packing within thread_group of a core (Phil Auld) [RHEL-118964]
  - powerpc/smp: Add __ro_after_init attribute (Phil Auld) [RHEL-118964]
  - powerpc/smp: Disable MC domain for shared processor (Phil Auld) [RHEL-118964]
  - powerpc/smp: Enable Asym packing for cores on shared processor (Phil Auld) [RHEL-118964]
  - perf/x86/intel/uncore: Add iMC freerunning for Panther Lake (Michael Petlan) [RHEL-47456]
  - perf/x86/intel/uncore: Add Panther Lake support (Michael Petlan) [RHEL-47456]
  - perf/x86/intel/uncore: Support customized MMIO map size (Michael Petlan) [RHEL-47442 RHEL-47456]
  - perf/x86/intel/uncore: Support MSR portal for discovery tables (Michael Petlan) [RHEL-47442 RHEL-47456]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-641.el9]
changelog:
  - tools/power/x86/intel-speed-select: v1.23 release (David Arcari) [RHEL-125240]
  - tools/power/x86/intel-speed-select: Skip uncore frequency update (David Arcari) [RHEL-125240]
  - tools/power/x86/intel-speed-select: Support SST PP revision 2 fields (David Arcari) [RHEL-125240]
  - tools/power/x86/intel-speed-select: v1.22 release (David Arcari) [RHEL-125240]
  - tools/power/x86/intel-speed-select: Prefix header search path with sysroot (David Arcari) [RHEL-125240]
  - tools/power/x86/intel-speed-select: Die ID for IO dies (David Arcari) [RHEL-125240]
  - tools/power/x86/intel-speed-select: Fix the condition to check multi die system (David Arcari) [RHEL-125240]
  - tools/power/x86/intel-speed-select: Prevent increasing MAX_DIE_PER_PACKAGE (David Arcari) [RHEL-125240]
  - selftests: livepatch: test if ftrace can trace a livepatched function (Joe Lawrence) [RHEL-114920]
  - selftests: livepatch: add new ftrace helpers functions (Joe Lawrence) [RHEL-114920]
  - samples/livepatch: add module descriptions (Joe Lawrence) [RHEL-114920]
  - selftest/livepatch: Only run test-kprobe with CONFIG_KPROBES_ON_FTRACE (Joe Lawrence) [RHEL-114920]
  - docs: livepatch: move text out of code block (Joe Lawrence) [RHEL-114920]
  - livepatch: Add comment to clarify klp_add_nops() (Joe Lawrence) [RHEL-114920]
  - xfs: rework datasync tracking and execution (Pavel Reichl) [RHEL-113841]
  - xfs: rearrange code in xfs_inode_item_precommit (Pavel Reichl) [RHEL-113841]
  - dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-115369]
  - dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-115369]
  - dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-115369]
  - dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-115369]
  - dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-115369]
  - dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-115369]
  - dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-115369]
  - dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-115369]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-642.el9]
changelog:
  - kernel: extend rh_waived to cope better with the CVE mitigations case (Ricardo Robaina) [RHEL-122981]
  - Add support to rh_waived cmdline boot parameter (Ricardo Robaina) [RHEL-122981]
  - rh_flags: Rename rh_features to rh_flags (Ricardo Robaina) [RHEL-122981]
  - kernel: rh_features: fix reading empty feature list from /proc (Ricardo Robaina) [RHEL-122981]
  - rh_features: move rh_features entry to sys/kernel (Ricardo Robaina) [RHEL-122981]
  - rh_features: convert to atomic allocation (Ricardo Robaina) [RHEL-122981]
  - add rh_features to /proc (Ricardo Robaina) [RHEL-122981]
  - add support for rh_features (Ricardo Robaina) [RHEL-122981]
  - dlm: fix lkb timeout scanning lookup (Alexander Aring) [RHEL-82137]
  - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110034]


author: Tomas Halman <thalman@redhat.com> - 1.3-1
changelog:
  - Rebase to version 1.3
  - Resolves: RHEL-3336 - khci won't work with Quarkus-based Keycloak due to missing /auth path


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Julien Rische <jrische@redhat.com> - 1.21.1-9
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88704
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88048
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-82647


author: Mike FABIAN <mfabian@redhat.com> - 0.0.51-1
changelog:
  - Parse stuff in glibc locale names after @ which is not a script as a variant
  - Add ckb_IQ.UTF-8 locale


author: Mike FABIAN <mfabian@redhat.com> - 0.0.52-1
changelog:
  - Update to 0.0.52
  - add list_common_keyboards() to public api by Sundeep ANAND <suanand@redhat.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.53-1
changelog:
  - Update to 0.0.53
  - Capitalize the return values of language_name() and territory_name()
    (See: https://github.com/rhinstaller/anaconda/pull/2837).
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Mike FABIAN <mfabian@redhat.com> - 0.0.54-1
changelog:
  - Update to 0.0.54
  - add list_common_languages derived from gnome-control-center
    by Sundeep ANAND <suanand@redhat.com>


author: Tomas Halman <thalman@redhat.com> - 2.7.0-12
changelog:
  - Fixing CVE-2025-47151
    Resolves: RHEL-126685 CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso


author: Matej Matuska <mmatuska@redhat.com> - 0.18.0-4
changelog:
  - Bump leapp-framework to 6.0
  - Bump leapp-framework-dependencies to 6
  - Require python3-PyYAML
  - [Technical preview] Introduce configurability for leapp actors
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-1
changelog:
  - Rebase to new upstream version 0.19.0
  - Add possibility to use a specified execution context for snactor run in an existing leapp.db
  - Increase limits on the number of opened file descriptors and maximum size
    of manipulated files when running leapp
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-2
changelog:
  - Bump leapp-framework to 6.1
  - Create the /var/lib/leapp directory automatically if missing
  - Recognize configuration files with the .yaml suffix only
  - Fix CLI: allow to set falsy values as default for leapp's command options
  - Resolves: RHEL-86225


author: Petr Stodulka <pstodulk@redhat.com> - 0.20.0-2
changelog:
  - Bump leapp-framework to 6.2
  - Add possibility to specify aliases for CLI option
  - Resolves: RHEL-128269


author: Matej Matuska <mmatuska@redhat.com> - 0.21.0-4
changelog:
  - Require leapp-framework 6.0+
  - Update leapp-deps package to satisfy leapp-framework-dependencies 6
  - Add dependency on libdb-utils
  - Enable upgrade for systems with LUKS bound to Clevis with TPM 2.0 token
  - Adjust resource limitations for leapp to be able to perform the upgrade
  - Cap max size of the sparse files to 1TiB for storage with large amount of free space
  - Check that detected Intel CPU microarchitecture is supported on target system
  - Fix the report when handling broken parsing of kernel cmdline
  - Generate proper error message instead of ModelViolationError when parsing invalid repository definition
  - Handle default kernel cmdline when multiple boot entries for the default kernel are defined
  - Migrate Ruby IRB during the upgrade
  - Migrate pam_userdb backend during the upgrade
  - Skip checking of (PKI) `directory-hash` dir to speedup the upgrade process and clean logs
  - Update leapp upgrade data files
  - Resolves: RHEL-57043


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-5
changelog:
  - Obsolete RHEL9 GPG key signed with SHA1
  - Activate LVM VGs with `--sysinit` option to correct the use in the upgrade initramfs
  - Fix output of commands executed inside systemd-nspawn containers
  - Fix pes events scanner crashing when there are duplicate packages in the received instructions
  - Fix pes events scanner not respecting user’s transaction configuration
  - Fix remediation instructions for deprecated NM configuration
  - Fix storage scanner crashing when command outputs contain colon character
  - Minor improvements in preupgrade reports
  - Resolves: RHEL-57043, RHEL-31428, RHEL-33373, RHEL-69829, RHEL-71517


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-6
changelog:
  - Detect XFS file systems with problematic parameters
  - Raise an inhibitor if unsupported target version supplied instead of error
  - Prevent a possible crash with LiveMode when adding the upgrade boot entry on systems with LVM
  - Resolves: RHEL-57043, RHEL-52309, RHEL-60034


author: Petr Stodulka <pstodulk@redhat.com> - 0.22.0-1
changelog:
  - Rebase to new upstream 0.22.0
  - Minor updates in generated reports
  - Cover upgrades for MySQL and PostgreSQL databases
  - Detect OpenSSL engines configured in /etc/pki/tls/openssl.cnf
  - Detect deprecated network-scripts (ifcfg) files
  - Detect whether subscribed systems are using SCA
  - Inform user about Libdb removal if present
  - Check and handle upgrades with custom crypto policies
  - Update checks for SAP HANA
  - Resolves: RHEL-57043, RHEL-35618, RHEL-36661, RHEL-62689, RHEL-68309, RHEL-69831, RHEL-77169, RHEL-78396


author: Petr Stodulka <pstodulk@redhat.com> - 0.22.0-2
changelog:
  - Require leapp-framework >= 6.1
  - Simplified use of the LiveMode experimental feature with additional enhancements
  - Ensure the leapp-upgrade-el9toel10 RPM is not touched during the upgrade transaction
  - Create proper error message when swap of RHUI clients fails
  - Fix the check of deprecated PCI devices and drivers
  - Add RHEL 10.1 product certificates
  - Gracefully handle CentOS OS versioning style
  - Introduced the --enable-experimental-feature to simplify use of experimental features
  - Manage RPM GPG keys during the upgrade respecting used linux distributions
  - Prevent a crach during post-upgrade phases when no custom SELinux modules needs to be migrated
  - Update leapp upgrade data files
  - Minor fixes in reports
  - Resolves: RHEL-49402, RHEL-72544, RHEL-77175, RHEL-80334, RHEL-80335, RHEL-80336, RHEL-80550, RHEL-86689


author: Karolina Kula <kkula@redhat.com> - 0.22.0-3
changelog:
  - Fix parsing of the kernel cmdline
  - Require leapp data with provided_data_streams 4.0+
  - Respect the release_id of the OS when processing DNF repositories to apply correct mapping for CentOS Stream
  - Resolves: RHEL-80336


author: Karolina Kula <kkula@redhat.com> - 0.22.0-4
changelog:
  - Load DNF configuration correctly when using DNF libraries
  - Disable localpkg_gpgcheck during the upgrade if set to allow installation of bundled leapp and leapp-repository deps packages
  - Enable upgrades on systems using RHUI on AWS and Azure
  - Inhibit the upgrade if cgroups v1 are enabled on the system
  - The HybridImage model has been replaced by ConvertGrubenvTask
  - Check the input format of the target version properly
  - Resolves: RHEL-64910, RHEL-64911, RHEL-81212


author: Karolina Kula <kkula@redhat.com> - 0.23.0-1
changelog:
  - Rebase to new upstream 0.23.0
  - Enable in-place upgrades on CentOS Stream systems
  - Inhibit the upgrade on systems using deprecated network-legacy dracut module to prevent kernel panic
  - Introduce leapp-upgrade-el9toel10-fapolicyd subpackage with fapolicyd rules for in-place upgrades
  - Ignore Red Hat subscription-manager actions on non-RHEL distros
  - Add actors to migrate SSSD configuration
  - Update leapp upgrade data files
  - Resolves: RHEL-50847, RHEL-80333, RHEL-86226, RHEL-95975, RHEL-95982, RHEL-102591, RHEL-104389


author: Petr Stodulka <pstodulk@redhat.com> - 0.23.0-2
changelog:
  - Requires leapp-framework 6.2+
  - Modernize the storage initialization when booting to the upgrade environment
  - Fix the upgrade on s390x LPAR when rootfs is on LVM
  - Fix the detection of encrypted Ceph OSD containers
  - Fix unlocking of LUKS devices when applied on non-rootfs file systems
  - Detect potentially harmful third party python modules for the target python version
  - Handle correctly live kernel patching during IPU
  - Inhibit the upgrade if pluginpath is configured explicitly in DNF
  - Introduce `--target-os` option to specify target distribution for possible conversion during the upgrade
  - Introduce the `--target-version` alias for the `--target` option
  - Minor changes in logs and reports
  - Prevent sssdupdate actor from rising errors that could stop the upgrade
  - Respect repomapping on CentOS-like distributions
  - Respect repomapping when converting the system to different Linux distribution
  - Skip empty lines when parsing dumped DNF config to prevent confusing warning log
  - Update the leapp data files
  - Resolves: RHEL-76159, RHEL-95983, RHEL-108025, RHEL-108992, RHEL-110563, RHEL-119546


author: Michal Ruprich <mruprich@redhat.com> - 4.9.2-8
changelog:
  - Adding a timeout for TLS close
  - Resolves: RHEL-113471 - "cannot seek on data source" in TLS lftp sessions


author: RHEL Packaging Agent <jotnar@redhat.com> - 1.8.12-1
changelog:
  - Rebase to version 1.8.12
  - Update license to MIT AND X11 (SPDX migration)
  - Change source format from .tar.bz2 to .tar.xz
  - Add libtool as BuildRequires
  - Remove CVE patches (now included upstream)
  - Add patch to lower autoconf requirement to 2.69
  - Update dont-forward-keycode-0.patch for new codebase
  - Remove NEWS from %doc (file not present in 1.8.12)
  - Resolves: RHEL-111537


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: José Expósito <jexposit@redhat.com> - 3.5.13-9
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-32
changelog:
  - make up incomplete patch for host name wildcard checking (RHEL-5675)
  - eliminate use of obsolete patch syntax (RHEL-65791)
  - http2: make sure pause is done on HTTP (RHEL-85847)


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: José Expósito <jexposit@redhat.com> - 2.4.123-2
changelog:
  - Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches")
    libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x
    Resolves: https://issues.redhat.com/browse/RHEL-53869


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Resolves: rhbz#1963838 restore missing functions
    Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libformula
    didn't use its built-in loaders so libreoffice's database
    report generator didn't show all categories in formula wizard


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-3
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56809
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62935
  - Replace Jansson with json-c
    resolves: RHEL-65292


author: Richard W.M. Jones <rjones@redhat.com> - 9.2-1
changelog:
  - Rebase to ntfs-3g 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
    resolves: rhbz#2127235 rhbz#2127242
    (also 2127264 2127250 2127257)


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.19.3-6
changelog:
  - Add support for the Wacom Intuos Pro (RHEL-105483)
  - Rename existing patches for better order clarity


author: Keith Seitz <keiths@redhat.com> - 2.0.4-2
changelog:
  - Add support for pre-generated documenation, allowing removal
    of pandoc dependency. (RHBZ 1943531, Keith Seitz)


author: Mohan Boddu <mboddu@redhat.com> - 0.2.10-24
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951286 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951284 replace apache-commons-logging with java.util.logging


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libloader
    didn't use its built-in loaders so libreoffice's database
    report generator didn't work


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: Michel Normand <normand@linux.vnet.ibm.com> 1.1.0-5
changelog:
  - Add remove_2_backslashes_in_shell_call.patch
    Add remove_eng_inc_in_version_pl.patch
    to avoid f33 build failure


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Bryan Gurney <bgurney@redhat.com> - 1.12-8
changelog:
  - Apply patch to fix undefined behavior on realloc
  - Also add and apply patch to fix referencing empty array
  - Related: rhbz#2034641


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951282 replace apache-commons-logging with java.util.logging


author: Daiki Ueno <dueno@redhat.com> - 4.15-2
changelog:
  - Fix auto=ondemand connection initialization with TCP (RHEL-51879)
  - Make use of Netlink extack for additional error reporting (RHEL-51881)


author: Daiki Ueno <dueno@redhat.com> - 4.15-4
changelog:
  - pluto: fix refcounting of whack FD at CREATE_CHILD_SA request (RHEL-61461)
  - pluto: ignore CREATE_CHILD_SA request if crypto is in progress (RHEL-61461)


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.99.20-1
changelog:
  - 1900160 - sane-airscan-0.99.20 is available
  - 1897935 - Crash on libsane-airscan when trying to activate scanner


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Mohan Boddu <mboddu@redhat.com> - 1.1.2-29
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951281 replace apache-commons-logging with java.util.logging


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-9
changelog:
  - Add patches for CVE-2024-52530, CVE-2024-52531, and CVE-2024-52532
    Resolves: RHEL-67069
    Resolves: RHEL-67081


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Michal Hlavinka <mhlavink@redhat.com> - 4.4.0-14
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337)


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-8
changelog:
  - remote: add sysusers file to create 'libvirt' group (RHEL-81749)
  - qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU (RHEL-81747)
  - qemu_snapshot: allow reverting to external disk only snapshot (RHEL-21549)
  - qemu: snapshot: error out early when reverting snapshot for VM with non-file disk (RHEL-30971)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-9
changelog:
  - util: introduce object for holding a system inhibitor lock (RHEL-83064)
  - src: convert drivers over to new virInhibitor APIs (RHEL-83064)
  - rpc: remove logind support for virNetDaemon (RHEL-83064)
  - util: fix off-by-1 in inhibitor constants (RHEL-83064)
  - util: don't attempt to acquire logind inhibitor if not requested (RHEL-83064)
  - network: Free inhibitor in networkStateCleanup() (RHEL-83064)
  - conf: introduce support for multiple ACPI tables (RHEL-81041)
  - src: validate permitted ACPI table types in libxl/qemu drivers (RHEL-81041)
  - src: introduce 'raw' and 'rawset' ACPI table types (RHEL-81041)
  - qemu: support 'raw' ACPI table type (RHEL-81041)
  - libxl: support 'rawset' ACPI table type (RHEL-81041)
  - conf: support MSDM ACPI table type (RHEL-81041)
  - qemu: support MSDM ACPI table type (RHEL-81041)
  - qemuxmlconftest: Include shared memory 'net-vhostuser' test cases (RHEL-84133)
  - qemuValidateDomainDeviceDefNetwork: Require shared memory for all vhost-user interfaces (RHEL-84133)
  - qemu: process: Remove un-updated 'qemuProcessStartWarnShmem' (RHEL-84133)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-10
changelog:
  - esxConnectListAllDomains: Don't propagate failure to lookup a single domain (RHEL-80606)
  - conf: parse interface/source/@dev for all interface types (with backend type='passt') (RHEL-82539)
  - libvirt-host: Clarify/fix description of the CPU frequency field (RHEL-86197)
  - virNodeGetInfo: Improve description of the case when fake data is reported (RHEL-86197)
  - manpages: virsh: Use disclaimer from 'virNodeGetInfo()' for 'virsh nodeinfo' (RHEL-86197)
  - esx: Accept empty "path" URI component same way as "/" (RHEL-86459)
  - qemu: Rename outgoingMigration parameter in various TPM functions (RHEL-86800)
  - qemu: Properly propagate migration state to TPM cleanup code (RHEL-86800)
  - qemuDomainBlockCopyCommon: Don't revoke access to file twice on failure (RHEL-7357)
  - qemuxmlconftest: Drop s390-default-cpu-...ccw-virtio-2.7 test cases (RHEL-72976)
  - tests: add capabilities for QEMU 10.0.0 on s390x (RHEL-72976)
  - qemu: Do NOT autoadd NUMA node for s390 (RHEL-72976)
  - qemu_command: Use qemuBuildVirtioDevProps() to build cmd line for virtio-mem and virtio-pmem (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-pci-s390x.xml (RHEL-72976)
  - qemu_caps: Introduce QEMU_CAPS_DEVICE_VIRTIO_MEM_CCW (RHEL-72976)
  - qemu: Validate virtio-mem-ccw (RHEL-72976)
  - qemu: Allow virtio-mem on CCW (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-ccw-s390x.xml (RHEL-72976)
  - qemu_domain_address: fix CCW virtio-mem hotplug (RHEL-72976)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-11
changelog:
  - Add load average information type into virDomainGetGuestInfo (RHEL-88447)
  - qemu_agent: Add qemuAgentGetLoadAvg() (RHEL-88447)
  - qemu: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88447)
  - virsh: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88447)
  - qemu_capabilities: Fetch caps for virtio-mem-ccw too (RHEL-87532)
  - cpu_map: Add avx10* CPU features (RHEL-87796)
  - cpu_map: Add GraniteRapids-v2 CPU model (RHEL-87796)
  - cpu_map: Add sha512, sm3, and sm4 CPU features (RHEL-87796)
  - virsh: Introduce new hypervisor-cpu-models command (RHEL-11435)
  - qemu: remove nonsensical sanity check in processNetdevStreamDisconnectedEvent() (RHEL-80169)
  - qemu: make processNetDevStreamDisconnectedEvent() reusable (RHEL-80169)
  - qemu: respond to NETDEV_VHOST_USER_DISCONNECTED event (RHEL-80169)
  - qemu: put vhost-user code that's special for passt in a helper function (RHEL-80169)
  - qemu: make passt+vhostuser reconnect behave identically to passt+user (RHEL-80169)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-12
changelog:
  - qemuMonitorJSONGetCPUModelExpansion: refactor parsing functions (RHEL-89415)
  - qemu: parse deprecated-props from query-cpu-model-expansion response (RHEL-89415)
  - qemu_capabilities: query deprecated features for host-model (RHEL-89415)
  - libvirt-domain: introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_DISABLE_DEPRECATED_FEATURES (RHEL-89415)
  - qemu_capabilities: filter deprecated features if requested (RHEL-89415)
  - virsh: add --disable-deprecated-features flag to domcapabilities (RHEL-89415)
  - conf: add deprecated_features attribute (RHEL-89415)
  - redhat: Restore hunks in tests/qemucapabilitiesdata/caps_10.0.0_s390x.* (RHEL-89415)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-14
changelog:
  - qemu: introduce QEMU_CAPS_AMD_IOMMU (RHEL-50560)
  - qemu: introduce QEMU_CAPS_PCI_ID (RHEL-50560)
  - docs: formatdomain: document intel-only IOMMU attributes (RHEL-50560)
  - qemu: add IOMMU model amd (RHEL-50560)
  - conf: add passthrough and xtsup attributes for IOMMU (RHEL-50560)
  - esx: Allow specifying different CA bundle for remote connections (RHEL-97440)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-15
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-106276)
  - qemu: sanitize blank lines in config file (RHEL-106276)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-106276)


author: Jiri Denemark <jdenemar@redhat.com> - 11.8.0-1
changelog:
  - Rebased to libvirt-11.8.0 (RHEL-118197)
  - The rebase also fixes the following bugs:
      RHEL-15693, RHEL-95397, RHEL-111609, RHEL-116847, RHEL-117774


author: Jiri Denemark <jdenemar@redhat.com> - 11.9.0-1
changelog:
  - Rebased to libvirt-11.9.0 (RHEL-118197)
  - The rebase also fixes the following bugs:
      RHEL-114003


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-4
changelog:
  - Add support for the Cintiq Pro 27 (RHEL-101886)
  - Add support for the Intuos Pro 3rd Gen series (RHEL-101881)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-5
changelog:
  - Rearrange the OSD buttons for the Intuos Pro 3rd Gen (RHEL-101881)
  - Use separate Ring/Ring2 assignments


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-6
changelog:
  - Add stylus definitions for the propen group (RHEL-122207)
  - Add tablet definitions for the latest Cintiqs (RHEL-122206)
  - Fix the overlap for button assignments in the SVG (RHEL-126355)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: David King <dking@redhat.com> - 2.9.13-10
changelog:
  - Fix CVE-2025-6021 (RHEL-96507)
  - Fix CVE-2025-49794 (RHEL-96405)
  - Fix CVE-2025-49796 (RHEL-96431)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (RHEL-2026 RHEL-2342 RHEL-12182 RHEL-15929)
  - fix ts2phc to handle large NMEA delay (RHEL-23208)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-3
changelog:
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-39387)
  - fix ts2phc to correctly handle leap seconds (RHEL-40216)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-40947)
  - add options to configure multicast IP addresses (RHEL-31178)
  - add holdover support to ts2phc (RHEL-50216)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58213 RHEL-57040)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60027)
  - support static sink clocks in phc2sys automatic mode (RHEL-62864)
  - don't require -O option without -a and -w in phc2sys (RHEL-69138)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-2
changelog:
  - add experimental option for external PPS in ts2phc automatic mode
    (RHEL-72468)
  - add command to set external grandmaster properties (RHEL-90585)
  - refresh link status on faults (RHEL-56168)


author: Artem Egorenkov <aegorenk@redhat.com> - 3.6.0-7
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Sérgio Basto <sergio@serjux.com> - 2.14.1-1
changelog:
  - Update to 2.14.1
  - Disable javadoc (#1988896)
  - Build with jansi-2
  - Remove deps on slf4j-ext (no longer available in Fedora 35)


author: Brian C. Lane <bcl@redhat.com> 34.9.26-1
changelog:
  - monitor: Skip repo errors involving CDROM/file source (bcl) (bcl)
    Resolves: RHEL-4658
  - rsyslog.conf: Update to use current config syntax (bcl) (bcl)
    Resolves: RHEL-46857


author: Brian C. Lane <bcl@redhat.com> 34.9.27-1
changelog:
  - New lorax documentation - 34.9.27 (bcl) (bcl)
    Related: RHEL-83208
  - mkksiso: Update to newer version supporting rebuilding efiboot.img (bcl)
    Resolves: RHEL-83208
  - livemedia-creator: Set 0755 permission on / cpio overlay (bcl) (bcl)
    Resolves: RHEL-83986


author: Brian C. Lane <bcl@redhat.com> 34.9.28-1
changelog:
  - templates.d: Synchronize with lorax-templates-rhel (bcl)
    Related: RHEL-54712
    Resolves: RHEL-69019
  - lorax: Change default rootfs size to 4GiB (bcl)
    Resolves: RHEL-95360


author: Brian C. Lane <bcl@redhat.com> 34.9.29-1
changelog:
  - templates: Synchronize with lorax-templates-rhel (bcl) (bcl)
    Resolves: RHEL-54712
  - Fix tzselect path in runtime-cleanup.tmpl (jikortus) (jikortus)
    Resolves: RHEL-100463
  - lorax.spec: Fix a wrong issue reference (bcl) (bcl)
    Related: RHEL-83986


author: Brian C. Lane <bcl@redhat.com> - 9.0-38
changelog:
  - tools: Add support for Jira RHEL-XXX issues (bcl)
    Related: RHEL-15122
  - Add setpriv as ostree containers dependency (bcl)
    Resolves: RHEL-15122


author: Brian C. Lane <bcl@redhat.com> - 9.6-1
changelog:
  - Bump release version to 9.6 (bcl)
    Related: RHEL-69011
  - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl)
    Resolves: RHEL-69011


author: Brian C. Lane <bcl@redhat.com> - 9.7-1
changelog:
  - Bump release version to 9.7 (bcl)
    Related: RHEL-91930
  - Add a boot menu for fips=1 (bcl)
    Resolves: RHEL-91930


author: Brian C. Lane <bcl@redhat.com> - 9.7-3
changelog:
  - live-install.tmpl: Fix broken single item tuple (bcl)
    Related: RHEL-108149
  - libvirt.tmpl: Fix use of xrange (bcl)
    Related: RHEL-108149
  - 80-rhel: Remove unused templates and config files (bcl)
    Resolves: RHEL-108149
  - Fix tzselect path in runtime-cleanup.tmpl (jikortus)
    Resolves: RHEL-101453


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: Miro Hrončok <mhroncok@redhat.com> - 1-3
changelog:
  - Modify several conditionals to support RHEL 9+ and drop ancient Fedora 17
  - Add explicit conflict with older lua-devel
  - Require rpm, not redhat-rpm-config


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-2
changelog:
  - Fix SPDX License identifiers.
  - Fix input units for VDO LV's minimim_io_size.
  - Fix stripe count and validation for RAID LVs.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-5
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: Ondrej Dubaj <odubaj@redhat.com> - 3.0.1-1
changelog:
  - Rebase to new major version 3.0.1 (it's Beta version)
  - Removed documentation/ folder, as it was removed by upstream


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.0.3-1
changelog:
  - Rebase to 3.0.3
  - Temporarily disable generation of -javadoc.rpm, due to missing feature in xmvn,
    which leads to build crash


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1:3.6.3-22
changelog:
  - Implement new non-conflicting Java bindings
  - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.31-0.1.beta
changelog:
  - New version
    Resolves: rhbz#1758783
  - Dropped no-scp, no-optimization, compile-fix, crash-fix patches (all upstreamed)
  - Dropped fgnu89-inline patch (probably not needed)


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: José Expósito <jexposit@redhat.com> - 24.2.8-2
changelog:
  - AMD Navi4x support
    Backport fixes for radeonsi and disable GFX12 on radv
    Resolves: https://issues.redhat.com/browse/RHEL-53419


author: Anusha Srivatsa <asrivats@redhat.com> - 25.0.7-2
changelog:
  - NV dGFX fix for firefox crashing
    Backport fixes for NV dGFX driver crashing firefox
    Resolves: https://issues.redhat.com/browse/RHEL-93219


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.0
changelog:
  - Set version to 106.0.0
  - RHEL-408 - Add provides, obsoletes for mingw-qemu-ga-win
  - RHEL-385 - Rebase mingw-qemu-ga-win to QEMU 8.0


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.1
changelog:
  - Set version to 106.0.1
  - RHELPLAN-147763 - [mingw-qemu-ga-win] VSS DLL: Add logging mechanism
  - RHEL-581 - Use the SPDX vocabulary to specify the license


author: Konstantin Kostiuk <kkostiuk@redhat.com> 109.1.0
changelog:
  - RHEL-57013 - Rebase qemu-ga to 9.1.0
  - RHEL-57012 - guest agent public ssh injection api support for Windows
  - Set version to 109.1.0


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Tomas Halman <thalman@redhat.com> - 0.17.0-9
changelog:
  - Fixing mellon_create_metadata.sh script
    Resolves: RHEL-35898
  - Publishing diagnostic module in CRB repository
    Resolves: RHEL-33585


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-3
changelog:
  - Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference
    when OIDCStripCookies is set and a crafted Cookie header is supplied


author: Tomas Halman <thalman@redhat.com> - 2.4.10-1
changelog:
  Rebase to 2.4.10 version improves `state cookies piling up` problem
    Resolves: RHEL-32450 Race condition in mod_auth_openidc filecache
    Resolves: RHEL-25422 mod_auth_openidc: DoS when using
              `OIDCSessionType client-cookie` and manipulating cookies
              (CVE-2024-24814)


author: Paul Howarth <paul@city-fan.org> - 2.3.9-24
changelog:
  - Drop EL-6 support
    - Use %license unconditionally
    - _httpd_* macros always available
    - Run directory is always /run on tmpfs
    - Assume httpd ≥ 2.4 filesystem layout
    - systemd-units always provided by systemd


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-26
changelog:
  - Resolves: #1958882 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.26-5
changelog:
  - Resolves: RHEL-108706 - CVE-2025-49630 httpd: untrusted input from a client
    causes an assertion to fail in the Apache mod_proxy_http2 module


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-1
changelog:
  - Resolves: RHEL-25075 - new version 2.4.26
  - Resolves: RHEL-11838 - [RFE] add support of dns_01 challenge to mod_md
  - Resolves: RHEL-17462 - OCSP response rejected when nextUpdate field not set
  - Resolves: RHEL-17467 - mod_md should trigger the reissue of new pair
    key/certificate when OCSP reports a revoked status


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-2
changelog:
  - Resolves: RHEL-93014 - mod_security: ModSecurity Has Possible DoS
    Vulnerability (CVE-2025-47947)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-3
changelog:
  - Resolves: RHEL-100098 - mod_security: ModSecurity Denial of Service
    Vulnerability (CVE-2025-48866)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-4
changelog:
  - Resolves: RHEL-30628 - mod_security: httpd doesn't close read side of pipe
    to rotatelogs for SecAuditLog leading to frozen state during graceful restart


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-2
changelog:
  - Resolves: RHEL-16358 - A form data, "会社"(Company in Japanese) is forbade
    with REQUEST-941-APPLICATION-ATTACK-XSS.conf of mod_security_crs


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-3
changelog:
  - Resolves: #RHEL-22733 - mod_security_crs - The rule id:913100 in the
    REQUEST-913-SCANNER-DETECTION.conf blocks requests  with "User-agent:
    urlgrabber/3.10 yum/3.4.3"


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.5-3
changelog:
  - Resolves: RHEL-80178 A form data, "鹿沼市御成橋"(a name of street/city
    in Japanese) is forbade by mod_security_crs-3.3.4-3.el8.noarch


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-4
changelog:
  - Generate profiles section and modulemd-defaults file
    Related: rhbz#1801747
  - Use autosetup to automatically apply patches


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-5
changelog:
  - Don't traceback because of a modular SRPM in the repo
    Related: rhbz#2227436
  - Replace deprecated LooseVersion
  - Fix tests for new libmodulemd version 2.15.0


author: José Expósito <jexposit@redhat.com> - 2.3.4-28
changelog:
  - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
  - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap


author: Olivier Fourdan <ofourdan@redhat.com> - 2.3.4-30
changelog:
  - Keep drop-down menus on the same monitor as the pull-down button with
    Xinerama
    Resolves: RHEL-92832


author: Jan Horak <jhorak@redhat.com> - 1.9-28
changelog:
  - Removed NPAPI from the description, since is no longer supported in Mozilla
    products
    Resolves: rhbz#2041339


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Honggang Li <honli@redhat.com> - 5.7-3
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960479


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2015392


author: Davide Caratti <dcaratti@redhat.com> - 0.7-2
changelog:
  - add a simple sanity test and enable gating. Related: rhbz#1962741
  - don't overwrite global build options. Related: rhbz#1967697
  - fix 'check_conflicts' on multilib. Related: rhbz#1967697


author: Davide Caratti <dcaratti@redhat.com> - 0.8-2
changelog:
  - fix mptcpize to work also when protocol number is 0 (upstream issue #159)
    and when command resides in another file system (upstream issue #161)
    Related: rhbz#2015623


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 0.5.13-6
changelog:
  - updating line in /usr/lib/tmpfiles.d/munge.conf: /var/run/munge → /run/munge
  - add license tag
  - add requires logrotate


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-22
changelog:
  - Fix crash when moving window while switching workspace
    Resolves: RHEL-62997
  - Improve app discovery for workspace logic
    Resolves: RHEL-63000


author: Olivier Fourdan <ofourdan@redhat.com> - 40.9-31
changelog:
  - Backport linux-dmabuf v4 support to restore hardware acceleration
    in Xwayland 24.1 with Mesa 25.2
    Resolves: RHEL-129832


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-6
changelog:
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85510
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89353


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-10
changelog:
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95814


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-9
changelog:
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141902) and (#2141906)
  - fix memory leak when ipv6 disable set to 1 (#2151540)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-14
changelog:
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26649)


author: Thomas Haller <thaller@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0 release
  - Drop NotShowIn=GNOME
  - Use wireless-security code from libnma
  - Add flatpak build configuration
  - applet: hide unmanaged ethernet devices in nm-applet
  - applet: fix Wi-Fi scan requests with appindicator
  - editor: fix drop down list for connection.secondaries


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-30
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-72823)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-64340)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Steve Dickson <steved@redhat.com> 2.5.4-35
changelog:
  - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
  - nfsd: allow more than 64 backlogged connections (RHEL-87752)


author: Steve Dickson <steved@redhat.com> 2.5.4-37
changelog:
  - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
  - gssd: do not use krb5_cc_initialize (RHEL-85412)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-16
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-17
changelog:
  - bump package epoch to resolve RHEL-33939
  - Resolves: RHEL-33939 - Update path for nginx broken for existing CS
    installations


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-23
changelog:
  - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER
    at nginx with reverse-proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-24
changelog:
  - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause
    denial of service (CVE-2024-7347)
  - Resolves: RHEL-85556 - nginx: Memory disclosure in the
    ngx_http_mp4_module (CVE-2022-41742)
  - Resolves: RHEL-91446 - nginx: Memory corruption in the
    ngx_http_mp4_module (CVE-2022-41741)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1
changelog:
  - Resolves: #2096174 - RFE: add nginx:1.22 module stream
  - switch to pcre2
  - add stream_geoip_module and stream_realip_module
  - enable kTLS support


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-4
changelog:
  - Resolves: #2170808 - Running nginx with systemctl and entering ssl
    private key's pass phrase
  - added new ssl_pass_phrase_dialog directive which enables setting
    external program for entering password for encrypted private key


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-5
changelog:
  - Resolves: RHEL-12737 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Martin Osvald <mosvald@redhat.com> - 3:7.92-1
changelog:
  - New version 7.92
  - Resolves: #2180330 - Rebase nmap for TLS v1.3 support
  - Resolves: #2164833 - Remove duplicate tests


author: Mingyu Shi <mshi@redhat.com> - 2.2.43-1
changelog:
  - Upgrade to 2.2.43
  - Support for vlan-egress-priority-map configuration. RHEL-67631
  - Support FEC. RHEL-80725
  - Support quickack. RHEL-80418


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Refer route next hop interface by MAC. RHEL-32495
  - Support reapply on mac-ref interface. RHEL-87794


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91291
  - Support nmpolicy against down iface. RHEL-88989
  - Support removal VLAN connection with empty ifname. RHEL-93146


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-85787
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784
  - Support matching by PCI adress. RHEL-88993
  - Apply dispatch changes first. RHEL-101742
  - Fix SRIOV VF reference. RHEL-93180


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526
  - Fix setting DNS only with search or option. RHEL-104797


author: Mingyu Shi <mshi@redhat.com> - 2.2.50-1
changelog:
  - Upgrade to 2.2.50
  - Support MAC referring for VLAN in gen_conf. RHEL-110369
  - Introduce state: ignore for route. RHEL-107130
  - Support PCI address matching in gen_conf. RHEL-110369
  - Support MacSec interface in gen_conf. RHEL-110369


author: Gris Ge <fge@redhat.com> - 2.2.54-1
changelog:
  - Upgrade to 2.2.54.
  - Automatically set HSR port MAC address. RHEL-122171
  - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.1-1
changelog:
  - Rebase to 16.20.1
    Resolves: rhbz#2188291
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2177781


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.2-5
changelog:
  - Backport patches for several CVEs.
    Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182


author: Jan Staněk <jstanek@redhat.com> - 1:18.16.1-1
changelog:
  - Rebase to 18.16.1
    Resolves: rhbz#2188292 rhbz#2187683
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2222285


author: Jan Staněk <jstanek@redhat.com> - 1:18.17.1-1
changelog:
  - Rebase to version 18.17.1
    Resolves: rhbz#2228940
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559
  - Specify proper OpenSSL configuration section build
    Related: rhbz#2226726


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:18.19.1-1
changelog:
  - Rebase to version 18.19.1
  - Fixes: CVE-2024-21892 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 (medium)


author: Andrei Radchenko <aradchen@redhat.com> - 1:20.18.2-1
changelog:
  - Update to version 20.18.2
    Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76363 RHEL-76554 RHEL-76540


author: Jan Staněk <jstanek@redhat.com> - 1:22.13.1-1
changelog:
  - Update to version 22.13.1
    Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76354


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.13.1-2
changelog:
  - Remove obsolete lua pretransaction script from spec file
    Resolves: RHEL-81119
  - Disable npm update notifications for users
    Resolves: RHEL-81079


author: Jan Staněk <jstanek@redhat.com> - 2.0.19-1
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469
    Resolves: CVE-2020-7788


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
changelog:
  - Resolves: RHBZ#2005419
  - Resolves CVE-2020-28469
  - Rebase to newest version
  - Change source to npmjs.com


author: Stephen Gallagher <sgallagh@redhat.com> - 2021.06-1
changelog:
  - Update to 2021.06-1
  - bundler: Handle archaic license metadata
  - bundler: Warn about bundled dependencies with no license metadata


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally remvoed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Andreas Schneider <asn@redhat.com> - 1.1.11-8
changelog:
  - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install
                             smaller footprint


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jindrich Novy <jnovy@redhat.com> - 1.2.9-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 1.2.10-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.2.11-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11
  - simplify spec
  - Resolves: RHEL-86603


author: Zuzana Miklankova <zmiklank@redhat.com> - 1.9.0~beta1-1
changelog:
  - Rebase to 1.9-beta1
  - change of licences of ongres-scram and ongres-scram-javadoc to "BSD and MIT and ASL 2.0"


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-1
changelog:
  - Rebase to 12.3.5-1 [RHEL-15058]
  - Fixed CVE-2023-34058 [RHEL-14653]
  - Fixed CVE-2023-34059 [RHEL-14687]
  - Resolves: RHEL-15058
    ([ESXi][RHEL9]open-vm-tools version 12.3.5 has been released - please rebase)
  - Resolves: RHEL-14653
    (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-9.4.0])
  - Resolves: RHEL-14687
    (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-9.4.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-2
changelog:
  - ovt-Restart-tools-on-failure.patch [RHEL-15346]
  - Resolves: RHEL-15346
    (Add Restart=on-failure to vmtoolsd.service)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-1
changelog:
  - Rebase to 12.4.0 [RHEL-30341
  - Resolves: RHEL-30341
    ([ESXi][RHEL9]open-vm-tools version 12.4.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-2
changelog:
  - ovt-Require-dbus-tools.patch [RHEL-35543]
  - Resolves: RHEL-35543
    ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.5-1
changelog:
  - Rebase to 12.4.5 [RHEL-45547]
  - Resolves: RHEL-45547
    ([ESXi][RHEL9] open-vm-tools version 12.4.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.5.0-1
changelog:
  - Rebase to 12.5.0 [RHEL-63096]
  - Resolves: RHEL-63096
    ([ESXi][RHEL9] open-vm-tools version 12.5.0 has been released - please rebase)


author: Lili Du <ldu@redhat.com> - 13.0.0-1
changelog:
  - Rebase to 13.0.0 [RHEL-99158]
  - Resolves: RHEL-99158 
    ([ESXi][RHEL9] open-vm-tools version 13.0.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 13.0.0-2
changelog:
  - ovt-Address-CVE-2025-41244.patch [RHEL-117392]
  - Resolves: RHEL-117392
    ([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-9.8])


author: Lili Du <ldu@redhat.com> - 13.0.5-1
changelog:
  - Rebase to 13.0.5 [RHEL-118505]
  - Resolves: RHEL-118505
    ([ESXi][RHEL9] open-vm-tools version 13.0.5 has been released - please rebase)


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Karol Herbst <kherbst@redhat.com> - 3.0-0.20200512git5cc337c
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Bump CLHPP version to 2.0.11


author: Karol Herbst <kherbst@redhat.com> - 3.0-1.20200512gitd082d42
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Rework CLHPP handling as file is not downloadable anymore
  - Bump CLHPP version to 2.0.12


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71053)
  - Avoid SSL context cleanup during library destruction (RHEL-56502)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217442)
  - Fix systemd* probes unit enumeration (rhbz#2219532)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.11-1
changelog:
  - Upgrade to the latest upstream release (RHEL-76355)
  - Introduce "oscap-im", a tool for building hardened bootable container images
  - Fix RPM probes in bootable container images build environment (RHEL-55251)


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-45
changelog:
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465).
    Resolves: RHEL-78700


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-2
changelog:
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-119515
  - Canonicalize username when matching a user
    Resolves: RHEL-118372


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80854
    Resolves: RHEL-50208
    Resolves: RHEL-50210
    Resolves: RHEL-50211
    Resolves: RHEL-85954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-89860
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-89861
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-89862
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-89859
  - Enable sslkeylog support
    Resolves: RHEL-90854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80854
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-95239


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80854


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-104236
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-104856


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-4
changelog:
  - Make openssl speed test signatures without errors
    Resolves: RHEL-95502
  - Build tests in check and without LTO
    Resolves: RHEL-111633


author: Kseniia Nivnia <knivnia@redhat.com> - 0.107.0-2
changelog:
  - Bump revision
  - Update tarball name to match upstream
  - Upgrade the following tarball dependencies:
  - x/sys v0.23.0 to v0.29.0
  - x/crypto v0.26.0 to v0.32.0
  - x/net v0.28.0 to v0.33.0
  - x/sync v0.8.0 to v0.10.0
  - x/term v0.23.0 to v0.28.0
  - x/text v0.17.0 to v0.21.0
  - Update addresses the following CVEs:
  - CVE-2024-45338
  - CVE-2024-45337


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-3
changelog:
  - Bump revision
  - Update tarball golang from 1.21.0 to 1.22.11
  - Update addresses CVE-2024-45336
    Resolves: RHEL-79113


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-4
changelog:
  - Bump revision
  - Add runtime requirements for shadow-utils and util-linux to ensure successful creation of observability user on installation
  - Modify post-uninstallation stage to only delete delete the observability user on full uninstallation to prevent the user being deleted during upgrades
    Resolves: RHEL-81967


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-5
changelog:
  - Bump revision
  - Update Golang v1.22.11 to v1.23.0
  - Add toolchain go1.23.7
  - Update x/oauth2 v0.22.0 to v0.27.0
  - Update addresses CVE-2025-22868
    Resolves: RHEL-81359


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-6
changelog:
  - Bump revision
  - Update expr v1.16.9 to v1.17.0
  - Remove explicit go toolchain dependency
  - Update addresses CVE-2025-29786
    Resolves: RHEL-83841


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-7
changelog:
  - Bump revision
  - Update go-jose v4.0.2 to v4.0.5
  - Update testify v1.9.0 to v1.10.0
  - Update addresses CVE-2025-27144
    Resolves: RHEL-82967


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-8
changelog:
  - Bump revision
  - Update golang-jwt v5.2.1 to v5.2.2
  - Update addresses CVE-2025-30204
    Resolves: RHEL-85033


author: Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-1
changelog:
  - Collector version update
  - Go version update to v1.23.9
  - Update addresses CVE-2025-22871
    Resolves: RHEL-90050


author: Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-2
changelog:
  - Bump revision
  - Go version update to v1.24.4
  - Update addresses CVE-2025-4673
    Resolves: RHEL-105058


author: Kseniia Nivnia <knivnia@redhat.com> - 0.135.0-1
changelog:
  - Version bump to 0.135.0
  - Add systemd-journal group to Requires(pre)
  - Bump go-tpm-keyfiles
    Resolves: RHEL-119812


author: Matej Tyc <matyc@redhat.com> - 2.0.0-13
changelog:
  - Fix problems with handling multi-datastream archives
    Resolves: rhbz#2129846
  - Fix a crash when compulsively clicking in the GUI
    Resolves: rhbz#2127502


author: Jan Černý <jcerny@redhat.com> - 2.0.0-17
changelog:
  - Update translations (rhbz#2189526)
  - Fix tar file extraction (rhbz#2218875)
  - Fix conflict of tftp package with "network servers" group (rhbz#2172264)


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.2-1
changelog:
  - Update to new upstream release 0.25.2
    Resolves: RHEL-14834
  - Add IBM specific mechanisms and attributes
    Resolves: RHEL-10570


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.3-3
changelog:
  - Fix regression in trust where file creation fails for long cert labels
    Resolves: RHEL-58899
  - Fix usage message in p11-kit list-tokens command
    Resolves: RHEL-31810


author: Chris Lumens <clumens@redhat.com> - 2.1.7-2
changelog:
  - Rebase on upstream 2.1.7-rc4 release
  - Use systemd-sysusers to create user/group
  - Pacemaker Remote nodes can validate against later schema versions
  - Related: RHEL-17225
  - Resolves: RHEL-7665


author: Chris Lumens <clumens@redhat.com> - 2.1.7-3
changelog:
  - Rebase on upstream 2.1.7 final release
  - Fix documentation for Pacemaker Remote schema transfers
  - Do not check CIB feature set version when CIB_file is set
  - Consolidate attrd cache handling
  - Avoid duplicating option metadata across daemons
  - Related: RHEL-7665
  - Related: RHEL-13216
  - Resolves: RHEL-7702


author: Chris Lumens <clumens@redhat.com> - 2.1.7-4
changelog:
  - Properly validate attribute set type in pacemaker-attrd
  - Fix `crm_attribute -t nodes --node localhost`
  - Resolves: RHEL-13216
  - Resolves: RHEL-17225
  - Resolves: RHEL-23498


author: Chris Lumens <clumens@redhat.com> - 2.1.8-1
changelog:
  - Rebase on upstream 2.1.8-rc1 release
  - Fix a typo in the help output of pacemaker-fenced
  - Fix escaping characters in XML attribute output
  - Resolves: RHEL-25819
  - Resolves: RHEL-30822


author: Chris Lumens <clumens@redhat.com> - 2.1.8-2
changelog:
  - Rebase on upstream 2.1.8-rc4 release
  - Add ability to immediately shutdown system with PCMK_panic_action=
  - Fix a memory leak in the attribute daemon
  - Add ability to list options and parameters as parseable metadata
  - crm_verify now reports invalid fence level indexes
  - Fix an error in node ID handling in `crm_node -i`
  - Fix regression in attrd_updater output
  - Resolves: RHEL-39057
  - Resolves: RHEL-40117
  - Resolves: RHEL-23401
  - Resolves: RHEL-2996
  - Resolves: RHEL-47249
  - Resolves: RHEL-45935


author: Chris Lumens <clumens@redhat.com> - 2.1.9-1
changelog:
  - Rebase on upstream 2.1.9 final release
  - Use async communication to establish TLS connections
  - Fix regression in adding alerts to CIB
  - Fix a crash in command line tools when stderr is closed
  - Resolves: RHEL-61382
  - Resolves: RHEL-34276
  - Resolves: RHEL-55458
  - Resolves: RHEL-59043


author: Chris Lumens <clumens@redhat.com> - 2.1.10-1
changelog:
  - Rebase on upstream 2.1.10-rc1 release
  - Use dbus to detect completion of systemd resource start/stop actions
  - Add an option for controlling remote node fencing behavior
  - Related: RHEL-89134
  - Resolves: RHEL-86143
  - Resolves: RHEL-84018


author: Chris Lumens <clumens@redhat.com> - 2.1.10-2
changelog:
  - Handle large timeouts correctly in crm_resource --wait
  - Do not try to connect to subdaemons before they're respawned
  - Don't evict IPC clients as long as they're still processing messages
  - Don't overwhelm the FSA queue with repeated CIB queries
  - Resolves: RHEL-45869
  - Resolves: RHEL-87484
  - Resolves: RHEL-114894


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-16
changelog:
  - libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
  - fix formatting of audit messages. Resolves: RHEL-5100


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-18
changelog:
  - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
  - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-19
changelog:
  - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
    situations. CVE-2024-22365. Resolves: RHEL-21244


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-22
changelog:
  - pam_unix: always run the helper to obtain shadow password file entries.
    CVE-2024-10041. Resolves: RHEL-62879
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-23631 and RHEL-39943


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-26
changelog:
  - pam_unix: sync expiry checks with shadow.
    Resolves: RHEL-70519, RHEL-95475, RHEL-96955 and RHEL-96973
  - pam.conf: remove tallylog. Resolves: RHEL-15324
  - pam_namespace: fix potential privilege escalation.
    Resolves: CVE-2025-6020 and RHEL-96727


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: Peng Wu <pwu@redhat.com> - 1.48.7-3
changelog:
  - Update pango-emoji-table.h for emoji 14 support
  - Add pango-update-emoji.patch
  - Resolves: #2119674


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.42.2-3
changelog:
  - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use
    cairomm1.0, which may be a virtual Provides, in the manual lib Requires


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039)
  - Fix a multilib regression in PCP header files (RHEL-93186)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories


author: Lauren Chilton <lchilton@redhat.com> - 6.3.7-6
changelog:
  - Backport fix for pmdaopenmetrics metric removal (RHEL-101745)
  - Backport fix for pcp2openmetrics metric hanging (RHEL-106772)
  - Backport fix for atop cpu utilization bug (RHEL-79767)


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-28
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951271 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1:0.9.4-23
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951270 replace apache-commons-logging with java.util.logging


author: Paul Howarth <paul@city-fan.org> - 1.2000-1
changelog:
  - Update to 1.200
    - New release with no new features, just preparing for a series of bugfix
      releases
  - Specify all build dependencies
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.014-14
changelog:
  - Spec clean-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Use %{make_build} and %{make_install}
    - Fix permissions of installed files


author: Tom Callaway <spot@fedoraproject.org> - 0.44-1
changelog:
  - Update to 0.44
    - Support Perls with COW disabled
    - Bump B::COW requirement for testing
  - Disable tests until B::COW is packaged


author: Tom Stellard <tstellar@redhat.com> - 1.64-4
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Petr Pisar <ppisar@redhat.com> - 1.66-2
changelog:
  - Update DBD-SQLite-1.60-Unbundle-Test-NoWarnings.patch
  - Do not build-require unused Test::FailWarnings
  - Update the description


author: Tom Stellard <tstellar@redhat.com> - 1.642-7
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Paul Howarth <paul@city-fan.org> - 1:0.17029-1
changelog:
  - Update to 0.17029
    - Rebuild for order of 'NAME' and 'VERSION' sections in the generated POD
      documentation (VERSION used to appear before NAME)


author: Paul Howarth <paul@city-fan.org> - 1.002002-1
changelog:
  - Update to 1.002002
    - Fix bug in handling regexps in import lists; Exporter::Tiny allowed regexps
      like /foo/i but not /foo/; having trailing flags is now optional! (GH#6)
    - Tests would fail if 'PERL5OPT=-Mfeature=:5.18' environment variable was set;
      this is because bareword '-default' was being interpreted as the Perl
      'default' keyword (GH#5)
  - Unbundle newly-bundled test modules


author: Paul Howarth <paul@city-fan.org> - 1.16-18
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.72-21
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.26-1
changelog:
  - Update to 1.26
    - BUILD: Update FAIL_POSIX warning message (GH#28)
    - TEST: t/07_taint.t: Use executable name as source of taintedness (GH#21)
    - OTHER: Typographic corrections (CPAN RT#60211, CPAN RT#86403)
    - Add Travis configuration


author: Paul Howarth <paul@city-fan.org> - 1.29-1
changelog:
  - Update to 1.29
    - Improved handling of shell commands on Windows, which should get us closer
      to resolving Win32-related issues; there should be no change of
      functionality on Unix-like platforms
    - Better workaround for bug in perl-5.8.9 (GH#23)
    - Add t/args.t
    - Modify t/win32.t
    - Added Travis and AppVeyor configuration files
    - Eliminated use of Dist::Zilla for build, using older, but more reliable and
      better understood (by maintainer) ExtUtils::MakeMaker-based configuration
    - Move author testing to xt/ directory


author: Emmanuel Seyman <emmanuel@seyman.fr> - 4.03-1
changelog:
  - Update to 4.03
  - Use %{make_install} instead of "make pure_install"
  - Use %{make_build} instead of make
  - Replace calls to %{__perl} with /usr/bin/perl
  - Pass NO_PACKLIST and NO_PERLLOCAL to Makefile.PL


author: Petr Pisar <ppisar@redhat.com> - 1:0.68-3
changelog:
  - Fix resolving localhost on loopback-only machines
    (https://github.com/perl-ldap/perl-ldap/pull/60)


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix failing installation in parallel make (GH#38)
    - Infrastructure improvements and tooling updates, lots of author tests with
      corresponding fixes added
    - Added slide and slideatatime functions
    - Documentation fixes (GH#21, GH#33, GH#34, CPAN RT#126029, CPAN RT#132043,
      CPAN RT#132940)
    - Bump List::MoreUtils::XS requirement to 0.430
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix parts of CPAN RT#123989: more $a/$b/$_ refcounting bugs
      - Since some bugs are simply reported wrong, dealing with them breaks more
        (including running code) than it solves - way too heavy to feel better...
    - Introduce functions slide and slideatatime
    - Toolchain fixes
    - Fix LANG=nb_NO.utf8 related str tests fails (CPAN RT#133128)
    - Fix typo (GH#7)
    - Fix parts of CPAN RT#132043: listcmp misbehave in XS implementation
  - Use author-independent source URL


