# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-3
changelog:
  - Resolves: RHEL-18333 Can't rename users member of automember rule
  - Resolves: RHEL-61341 After an initial failure, subsequent online backups will not work.
  - Resolves: RHEL-63887 nsslapd-mdb-max-dbs autotuning doesn't work properly
  - Resolves: RHEL-63891 dbscan crashes when showing statistics for MDB
  - Resolves: RHEL-63998 dsconf should check for number of available named databases
  - Resolves: RHEL-78344 During import of entries without nsUniqueId, a supplier generates duplicate nsUniqueId (LMDB only) [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-4
changelog:
  - Resolves: RHEL-78722 - Failed to set sslversionmax to TLS1.3 in FIPS mode with dsconf $INSTANCE security set --tls-protocol-max TLS1.3


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-3
changelog:
  - Resolves: RHEL-77983 - Defects found by OpenScanHub
  - Resolves: RHEL-79673 - Improve the "result" field of ipa-healthcheck if replicas are busy
  - Resolves: RHEL-80496 - Can't rename users member of automember rule [rhel-9]
  - Resolves: RHEL-81141 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9]
  - Resolves: RHEL-89736 - dsconf backend replication monitor fails if replica id starts with 0 [rhel-9]
  - Resolves: RHEL-89745 - ns-slapd crash in dbmdb_import_prepare_worker_entry() [rhel-9]
  - Resolves: RHEL-89753 - Nested group does not receive memberOf attribute [rhel-9]
  - Resolves: RHEL-89769 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-9]
  - Resolves: RHEL-89782 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-9]
  - Resolves: RHEL-95768 - Improve error message when bulk import connection is closed [rhel-9]
  - Resolves: RHEL-101189 - lib389/replica.py is using unexisting datetime.UTC in python3.9


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-4
changelog:
  - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-5
changelog:
  - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9]
  - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry
  - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9]
  - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore.
  - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9]
  - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9]
  - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9]
  - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9]
  - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9]
  - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-7
changelog:
  - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9]
  - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9]
  - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9]
  - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9]
  - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9]
  - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9]
  - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9]
  - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9]


author: Caolán McNamara <caolanm@redhat.com> - 2.4.1-5
changelog:
  - disable building BOX2D_BUILD_UNIT_TESTS due to "SIGSTKSZ ... no
    longer constant on Linux ... redefined to sysconf(_SC_SIGSTKSZ)"
    https://github.com/bminor/glibc/blob/master/NEWS causing build failure


author: Paul Howarth <paul@city-fan.org> - 1.0.5-23
changelog:
  - Don't pass gcc-only compiler flags to other compilers, e.g. clang
    (based on https://src.fedoraproject.org/rpms/Judy/pull-request/3 from
    Timm Baeder)


author: Filip Pokrývka <fpokryvk@redhat.com> - 1:1.53.3-1
changelog:
  - Update to 1.53.3 (dev)
  - Add more IPv6 prefix delegation options (RHEL-85765)
  - Fix order of parsing port/controller properties in nmcli (RHEL-85767)
  - Improve interface activation logic (RHEL-85766)
  - Fix WireGuard IPv6 firewall rules (RHEL-85763)
  - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.4-1
changelog:
  - Update to 1.53.4 (dev)
  - initrd: add new NBFT parser (RHEL-83061)
  - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
  - Support reapply on OVS settings (RHEL-86877)
  - Add support for configuring the loopback interface in nmtui (RHEL-85770)
  - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
  - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
  - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

  Resolves: RHEL-83061
  Resolves: RHEL-59083
  Resolves: RHEL-87596
  Resolves: RHEL-85770
  Resolves: RHEL-85764
  Resolves: RHEL-85778
  Resolves: RHEL-87168


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.90-1
changelog:
  - Update to 1.54.0 (rc1)
  - Devices not becoming managed sometimes (RHEL-93108)
  - Crash on _l3cfg_notify_cb (RHEL-92314)
  - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.91-1
changelog:
  - Update to 1.54.0 (rc2)
  - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
  - Fix a race condition in ovs tun interface (RHEL-98551)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.92-1
changelog:
  - Update to 1.54.0 (rc3)
  - Fix ipv6 static route deleted with dualstack (RHEL-102772)
  - Allow setting IP method to disabled in port connection (RHEL-102768)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.54.0-1
changelog:
  - Update to 1.54.0
  - Fix reaply on bridge port VLAN (RHEL-102743)
  - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)


author: Vladimír Beneš <vbenes@redhat.com>- 1:1.54.1-1
changelog:
  - Update to 1.54.1
  - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
  - Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
  - Global DNS config without domains silently ignored from D-Bus (RHEL-115973)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.54.2-1
changelog:
  - Update to 1.54.2
  - Support setting protocol version of HSR/PRP (RHEL-122172)
  - Support interlink for HSR/PRP (RHEL-122175)
  - Improve logging of networking off (RHEL-122173 )
  - Don't delete unrelated OVS ports (RHEL-121104)


author: Vladimír Beneš <vbenes@redhat.com> - 1.2.27-1
changelog:
  - Update to later upstream release to address regressions (RHEL-56551)
  - Support rightca in ipsec section (RHEL-118819)


author: Vladimír Beneš <vbenes@redhat.com> - 1.2.27-2
changelog:
  - Symetric import/export with nm-auto-default (RHEL-122306)
  - Esp param properly exported (RHEL-122626)
  - Correct leftid export when it contains @


author: Gris Ge <fge@redhat.com> - 1.2.29-1
changelog:
  - Upgrade to 1.2.29
  - Support creating both ends of IPsec (Libreswan) tunnels. (RHEL-85789)
  - Support leftprotoport and rightprotoport options. (RHEL-130907)
  - Fix error on duplicate key 'phase2alg'. (RHEL-131233)
  - Fix import connection with RSA key. (RHEL-127863)


author: Neal Gompa <ngompa@centosproject.org> - 2.0.18-1
changelog:
  - Update to 2.0.18
    Resolves: rhbz#2028076
  - Fix multilib conflict with SDL_revision.h (rhbz#2008838)
  - Backport fix for building against wayland-1.20+
  - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-11
changelog:
  - wla-redhat-Add-a-udev-rule-to-avoid-managing-slave-NICs-.patch [RHEL-5880]
  - Resolves: RHEL-5880
    ([Azure][RHEL-9]68-azure-sriov-nm-unmanaged.rules cannot stop NetworkManager-wait-online.service checking SRIOV interface)


author: Jon Maloy <jmaloy@redhat.com> - 2.7.0.6-12
changelog:
  - wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-40957]
  - Resolves: RHEL-40957
    ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs)


author: Jon Maloy <jmaloy@redhat.com> - 2.13.1.1-2
changelog:
  - wla-docs-add-waagent-manpage-3401.patch [RHEL-109496]
  - Resolves: RHEL-109496
    ([Azure][WALA][RHEL-9] Missing man page)


author: Jon Maloy <jmaloy@redhat.com> - 2.13.1.1-3
changelog:
  - wla-Use-systemctl-instead-of-service-to-manager-services.patch [RHEL-97572]
  - Resolves: RHEL-97572
    ([Azure][RHEL-9][WALA][Image mode] Cannot find 'service' command)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.14.0.1-2
changelog:
  - wla-Remove-10-azure-unmanaged-sriov.rules.patch [RHEL-124218]
  - Resolves: RHEL-124218
    ([Azure][WALA][RHEL-9] Remove 10-azure-unmanaged-sriov.rules)


author: Jon Maloy <jmaloy@redhat.com> - 2.14.0.1-3
changelog:
  - wla-Jira-https-issues.redhat.com-browse-RHEL-133507.patch [RHEL-133507]
  - Resolves: RHEL-133507
    (Backport ConditionVirtualization=|microsoft for waagent in RHEL 9.x)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.14.0.1-4
changelog:
  - wla-Change-redhat-waagent-network-setup.service-path-to-.patch [RHEL-82232]
  - Resolves: RHEL-82232
    ([Azure][image mode][WALA][RHEL-9] Unable to setup the persistent firewall rules)


author: Ray Strode <rstrode@redhat.com> - 0.6.55-10
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations.
    Resolves: #2057576


author: Kalev Lember <klember@redhat.com> - 3.28-12
changelog:
  - Split highcontrast-icon-theme out to a new subpackage
  - Explicitly require cursor and icon themes required for the gtk2 themes


author: Radovan Sroka <rsroka@redhat.com> - 0.16-102
changelog:
  RHEL 9.5.0 ERRATUM
  - aide fails with "Not enough parameters in db:15384. Trying to continue." unexpectedly
  Resolves: RHEL-27606
  - AIDE fails when using root_prefix option
  Resolves: RHEL-28882


author: Radovan Sroka <rsroka@redhat.com> - 0.16-103
changelog:
  RHEL 9.6.0 ERRATUM
  - /boot/grub2/grubenv's timestamp is getting modified continuously due to "boot_success" implementation
  Resolves: RHEL-4331


author: Attila Lakatos <alakatos@redhat.com> - 0.16-105
changelog:
  RHEL 9.7 ERRATUM
  - CVE-2025-54389 aide: improper output neutralization enables bypassing
  Resolves: RHEL-109912


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-1
changelog:
  RHEL 9.8.0 ERRATUM
  - rebase to 0.19.2
  Resolves: RHEL-110573
  - Switch to libnettle for hashing
  - prevent aide from crashing if database is a HTTPS URL
  Resolves: RHEL-76014
  - prevent aide from exiting if a file is truncated during check
  Resolves: RHEL-1569


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-4
changelog:
  - /boot/grub2/grubenv is excluded from check due to boot_success implementation
  Resolves: RHEL-83776


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.3-1
changelog:
  - Sort RPM versions via rpm.labelCompare() and not via
    packaging.version.LegacyVersion() (miro)
    Resolves: RHEL-87358
  - rpm_ostree/installation.py: fix image deployment on s390x (rvykydal)
    Resolves: RHEL-63237
  - Add additional config_get Dracut function tests (jkonecny)
    Related: RHEL-48837
  - Update the tests/README.rst file (jkonecny)
    Related: RHEL-48837
  - Move shell testing to a separated directory (jkonecny)
    Related: RHEL-48837
  - Enable dynamic bash commands disable for tests (jkonecny)
    Related: RHEL-48837
  - Add test for config_get dracut function (jkonecny)
    Related: RHEL-48837
  - Fix trailing `/` when downloading stage2 image (jkonecny)
    Resolves: RHEL-48837
  - Fix whitespace chars broke Dracut config parsing (jkonecny)
    Related: RHEL-48837


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.4-1
changelog:
  - Revert "s390x - enable raid1 as a stage2 device" (jkonecny)
    Reverts: RHEL-21691
  - test_module_part_blivet: fix pylint disable (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module.common.task fix cyclic import (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module_manager: fix ciclic import (k.koukiou)
    Related: RHEL-85416
  - pyanaconda: bootloader: fix ImportError (k.koukiou)
    Related: RHEL-85416
  - ruff: enable isort rules and autofix all isort warnings Autofixed with: ruff
    check --exclude pyanaconda/core/kickstart/commands.py --fix --select I .
    (jkonecny)
    Resolves: RHEL-85416
  - Add ruff, a very fast linter (vslavik)
    Related: RHEL-85416
  - Relabel /var/log/ and /root/original-ks.cfg (champetier.etienne)
    Resolves: RHEL-85298


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.5-1
changelog:
  - bootloader: drop write_config_console, just preserve console= (awilliam)
    Resolves: RHEL-98670
  - payload/rpm-ostree: Include program output in exception (walters)
    Resolves: RHEL-45184


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.6-1
changelog:
  - Fix vconsole layout doesn't work for ostree (jkonecny)
    Resolves: RHEL-101057
  - test: make dnf substitutions test check only relevant values (rvykydal)
  - test: add new substitution members in dnf tests (rvykydal)


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.7-1
changelog:
  - pyanaconda: payload: return exception details for payload failures
    (k.koukiou)
  - ui: tui: installation_source: show error message in the TUI screen
    (k.koukiou)
    Resolves: RHEL-4705
  - storage: fix mount point assignment of non-formatted swap partitions
    (rvykydal)
    Related: RHEL-16355
  - storage: include only fstab devices in fsset swap devices property (rvykydal)
    Resolves: RHEL-16355


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.8-1
changelog:
  - Fix: UnboundLocalError: local variable 'e' referenced before assignment
    (k.koukiou)
    Related to: RHEL-4705
  - Emit authselect in KS when fingerprint is enabled (adamkankovsky)
    Resolves: RHEL-85175


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.9-1
changelog:
  - Set Authselect agruments after run in Security module (adamkankovsky)
    Resolves: RHEL-85175
  - Authselect code simplification (adamkankovsky)
    Resolves: RHEL-85175
  - custom: Reallocate partitions when removing a partition (vtrefny)
    Resolves: RHEL-114169


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.10-1
changelog:
  - Fixing authselect logical differences not resolved during backporting
    (adamkankovsky)
    Resolves: RHEL-85175


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.11-1
changelog:
  - bootloader: efi: utilize grub2-common script for handling config file
    generation (k.koukiou)
    Resolves: RHEL-36187


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.12-1
changelog:
  - Fix permissions of the ssh config created by Anaconda (ppolawsk)
    Resolves: RHEL-129787
  - pyanaconda: rpm_ostree: fix _handle_boot_if_not_mount_point method issues
    (k.koukiou)
    Related: RHEL-74145
  - ostree needs to have /boot be bindmounted into sysroot. (a.badger)
    Resolves: RHEL-74145


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76809)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-76040)


author: Nick Clifton <nickc@redhat.com> - 12.91-1
changelog:
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)


author: Nick Clifton <nickc@redhat.com> - 12.93-1
changelog:
  - Rebuild against LLVM v20.  (RHEL-82001)
  - Rebase to 12.93.
  - Annocheck: Fix test for GO revision.  (RHEL-56031)


author: Nick Clifton <nickc@redhat.com> - 12.96-1
changelog:
  - Annocheck: Fix bugs in debug rpm location code.  Add more glibc exceptions.  (RHEL-95216)
  - Annocheck: Improve performance with multiple debug info files and multiple files to scan.  (#2366180)
  - Annocheck: Update heuristic for detecting gcc files to cope with gcc 15.  (#2365824)


author: Nick Clifton <nickc@redhat.com> - 12.98-1
changelog:
  - Rebase to 12.98.  (RHEL-105574)
  - Improve configure and meson files for consistent builds.
  - Annocheck: Delete the temporary debug info directory after the tests have finished.


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.0-1
changelog:
  - Support installing SQL Server 2022 on RHEL 9 and running as a selinux-confined application
    Resolves: RHEL-16342
  - Remove unnecessary variable and RPM requirements for read-scale clusters
    Resolves: RHEL-3540
  - Add the mssql_ha_prep_for_pacemaker variable to configure SQL Server for Pacemaker
    Resolves: RHEL-19091
  - Deprecate `mssql_ha_cluster_run_role` for `mssql_manage_ha_cluster`
    Resolves: RHEL-19092


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-2
changelog:
  - Use latest auto-maintenance for updates in lsr_role2collection.py
  - Remove with_html, instead use built-in .README.html
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-3
changelog:
  - CHANGELOG.md was missing in some places
  - In legacy role, sed repalced unexpected strings at some places
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.3-1
changelog:
  - Add support for running SQL Server as a SELinux unconfined application with SELinux in enforcing mode on RHEL 9
    Resolves: RHEL-16342
  - ExcludeArch: i686


author: Sergei Petrosian <spetrosi@redhat.com> - 2.5.2-1
changelog:
  - Fail on RHEL or CentOS 10 because it's not supported
    Resolves: RHEL-67804
  - Use new adutil functionality to enable AES encryption
    Resolves: RHEL-67807
  - Add mssql_tools_versions, mssql_tls_self_sign to allow installing different versions of mssql-tools
    Resolves: RHEL-68374
  - Deprecate mssql_accept_microsoft_odbc_driver_17_for_sql_server_eula
    Resolves: RHEL-69311


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.1-1
changelog:
  - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database
    Resolves: RHEL-92712
  - Add secondary_role_allow_connections and mssql_ha_read_only_routing_list
    Resolves: RHEL-92718


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.2-1
changelog:
  - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database
    Resolves: RHEL-92712


author: Sergei Petrosian <spetrosi@redhat.com> - 0.0.1-1
changelog:
  - Initialize the package
  - Resolves: RHEL-117252 : [RFE] Add ansible-collection-redhat-leapp to RHEL9


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.14-1
changelog:
  - ansible-core 2.14.14 release (RHEL-23783)
  - Fix CVE-2024-0690 (possible information leak in tasks that ignore
    ANSIBLE_NO_LOG configuration) (RHEL-22124)


author: Thomas Woerner <twoerner@redhat.com> - 1.14.0-1
changelog:
  - Update to version 1.14.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.0
    Resolves: RHEL-67566
  - Multi sudorule management with the ipasudorule module
    Resolves: RHEL-61431


author: Thomas Woerner <twoerner@redhat.com> - 1.14.1-1
changelog:
  - Update to version 1.14.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1
    Resolves: RHEL-67566
  - Fix requirements for ansible-core
    Resolves: RHEL-69146


author: Thomas Woerner <twoerner@redhat.com> - 1.14.2-1
changelog:
  - Update to version 1.14.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2
    Resolves: RHEL-67566
  - ipareplica: Pass ipareplica_ip_addresses to ipaclient
    Resolves: RHEL-40227
  - ipagroup: Correctly handle externalmember in member actions
    Resolves: RHEL-25009
  - ipasudorule: Evaluate all members related to hosts and users
    Resolves: RHEL-68439
  - ipacert: Correctly handle removFromCRL revocation
    Resolves: RHEL-70016
  - Collection: No more role module duplication
    Resolves: RHEL-71123


author: Thomas Woerner <twoerner@redhat.com> - 1.14.3-1
changelog:
  - Update to version 1.14.3
    Resolves: RHEL-67566
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-25009


author: Thomas Woerner <twoerner@redhat.com> - 1.14.4-1
changelog:
  - Update to version 1.14.4
    Resolves: RHEL-67566
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-25009


author: Thomas Woerner <twoerner@redhat.com> - 1.14.5-1
changelog:
  - Update to version 1.14.5
    Resolves: RHEL-67566
  - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343)
    Resolves: RHEL-78230


author: Thomas Woerner <twoerner@redhat.com> - 1.15.0-1
changelog:
  - Update to version 1.15.0
    Resolves: RHEL-104652
  - ipaclient: Fix AttributeError by defaulting dns_over_tls to False
    Resolves: RHEL-92844
  - Provide compatibility for AAH naming
    Resolves: RHEL-94769
  - Ensure ipaidrange required parameters are correct on recent versions of IPA
    Resolves: RHEL-79820
  - Add support for DNS-over-TLS for ipaclient, ipareplica and ipaserver roles
    Resolves: RHEL-78636


author: Thomas Woerner <twoerner@redhat.com> - 1.15.1-1
changelog:
  - Update to version 1.15.1
    Resolves: RHEL-104652
  - ipaclient: client_dns has new statestore arg with IPA change e6445b8
    Resolves: RHEL-106558


author: Thomas Woerner <twoerner@redhat.com> - 1.16.0-1
changelog:
  - Update to version 1.16.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.16.0
    Resolves: RHEL-139144
  - Add suppport for passkey management
    Resolves: RHEL-139257
  - Add suppport for sysaccount management
    Resolves: RHEL-140601
  - ipadnsrecord: Allow to set any IP address if create_reverse is false
    Resolves: RHEL-140607


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.10.9-15
changelog:
  - Implement new Java bindings and fix ant-manual license
  - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519


author: Neal Gompa <ngompa@centosproject.org> - 0.15.5-2
changelog:
  - Create symlinks manually to make it build
    (the symlinks were not created because of reverting the patch to
    upgrade to Meson 0.62)


author: Neal Gompa <ngompa@centosproject.org> - 0.16.1-1
changelog:
  - Rebase to 0.16.1
    Resolves: rhbz#2169103
  - Drop unneeded downstream hacks to build with older Meson


author: Richard Hughes <richard@hughsie.com> 1:9-20240827
changelog:
  - New metadata version
  - Do not ship fedora-specific files
  - Resolves: #RHEL-4522
  - Resolves: #RHEL-19012


author: Omair Majid <omajid@redhat.com> - 10.0.100~rc.2.25502.107-0.10
changelog:
  - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
  - Resolves: RHEL-121559


author: Kalev Lember <klember@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1
  - Switch to meson build system
  - Update source URLs
  - Tighten -devel subpackage deps
  - Tighten soname globs


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3.13
changelog:
  - Sync with rhel 8.3 + cleanup
  - Add new subpackages - z{14,15}
  - Unlike in rhel8, the base subpackage still needs to be build for z12.
  - Covscan related bugfixes
  - Spec and git cleanup (remove unused patches/sources)


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-1
changelog:
  - New upstream maintenance release, 3.1.4
  - Prevent scriplets from failing
  - When upgrading, restart the daemon if it's running
  - If uninstalling, stop the daemon
  - auditctl: use pidfd_send_signal for signaling auditd
    Resolves: RHEL-45865
  - Minor doc update
    Resolves: RHEL-5186
  - augenrules: do not exit with failure if in immutable mode
    Resolves: RHEL-40110
  - auditd.service: Disable ProtectControlGroups
    Resolves: RHEL-5197
  - auditctl: correct output when displaying rules with exe/path/dir
    Resolves: RHEL-40243


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-2
changelog:
  - Disable ProtectKernelModules=true in service file
    Resolves: RHEL-59570
  - af_unix plugin: restore original behavior in binary mode
    Resolves: RHEL-59585
  - Support image mode
    Resolves: RHEL-69033
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-11252
  - Filter syscalls to ensure architecture-specific availability
    Resolves: RHEL-70455


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-5
changelog:
  - ausearch: correct search for DAEMON related events
  - allow hex digits when interpreting tty data
    Resolves: RHEL-82279
  - Fix TTY hostname in log messages
    Resolves: RHEL-78323


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-2
changelog:
  - Fix Japanese translations (RHBZ #2153364)
  - Update translations (RHBZ #2189498)
  - Do not prompt for password twice when changing password of local user (RHBZ #2228098)


author: Frederic Berat <fberat@redhat.com> - 2.71-4
changelog:
  - Cherry-pick: Fix typo in variable name (#2132715)
  - Backport: Fix testsuite failures with bash 5.2


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Michal Sekletar <msekleta@redhat.com> - 0.8-21
changelog:
  - fix file attributes on /run/avahi-daemon (RHEL-5633)
  - avahi-client: fix resource leak (RHEL-27722)
  - fix resource leak in avahi_time_event_queue_new (RHEL-27717)


author: Jerome Marchand <jmarchan@redhat.com> - 0.34.0-1
changelog:
  - Rebase to version 0.34.0 (RHEL-78920)
  - Rebuild with LLVM 20 (RHEL-81773)
  - Fix biosnoop pattern option (RHEL-90848)
  - Fix bpf-klockstat on aarch64 and ppc64le (RHEL-78619)
  - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-78166)
  - Remove unsupported slaratetop tool (RHEL-78162)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-35
changelog:
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
  - Replace downstream fixes with upstream changes
  - Address various spoofing attacks (CVE-2025-40778)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.27-2
changelog:
  - Disable building of DLZ packages
  - Conflict explicitly with more bind subpackages
  - Merge license subpackage into libs


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-2
changelog:
  - Backport nsupdate TLS support into 9.18 (RHEL-76331)
  - Update nsupdate manual about new TLS options
  - Test nsupdate TLS support


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-3
changelog:
  - Limit additional section records CPU processing (CVE-2024-11187)
  - Read HTTPS requests in limited chunks and prevent overload (CVE-2024-12705)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-6
changelog:
  - Refuse malformed DNSKEY records (CVE-2025-8677)
  - Address various spoofing attacks (CVE-2025-40778)
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-7
changelog:
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream created test to this regression


author: Nick Clifton <nickc@redhat.com> - 2.35.2-61
changelog:
  - Add an option to objcopy that creates padding sections that eliminate gaps between segments.  (RHEL-60807)


author: Nick Clifton <nickc@redhat.com> - 2.35.2-67
changelog:
  - Adds tests for the linker's --error-execstack and --error-rwx-segments command line options.  (RHEL-109970)


author: Peng Wu <pwu@redhat.com> - 0.3-33
changelog:
  - Provide OpenType Bitmap fonts
  - Use bitmapfonts2otb.py to combine bitmap fonts
  - Add bitmap-*-opentype-fonts sub packages


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-25
changelog:
  - Get the actual PV format size for LVMPV format
    Resolves: RHEL-74078
  - Include additional information in PartitioningError
    Resolves: RHEL-8005


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-26
changelog:
  - Make ActionDestroyFormat optional when the device is also scheduled to be removed
    Resolves: RHEL-8008
    Resolves: RHEL-8012


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-27
changelog:
  - Backport upstream PR 120 to fix segfault on invalid unit types
    Resolves: rhbz#2224578
  - Add vendor ID for NVIDIA BMCs
    Resolves: rhbz#2218358
  - Update /var/run to /run in ipmievd.service that systemd warns about
    Resolves: rhbz#2100475
  - Add upstream ipmievd patch to check received msg id against expectation
    Fixes problem where SEL response is not recognized correctly
    when SEL request times out
    Resolves: rhbz#2224569


author: Adrian Reber <adrian@lisas.de> - 1.2.5-1
changelog:
  - Updated to 1.2.5
  - No longer necessary to re-package sources: All problematic files have
    been re-licensed
  - All 19 patches are part of the 1.2.5 release and have been removed


author: Bryan Gurney <bgurney@redhat.com> - 1.6.1-2
changelog:
  - Add issues resolved by release 1.6.1
  - Resolves: RHEL-36001
  - Resolves: RHEL-36664
  - Resolves: RHEL-36667
  - Resolves: RHEL-36691


author: Patrick Palka <ppalka@redhat.com> - 1.75.0-9
changelog:
  - Apply upstream Boost.Asio patch to resolve RHEL-67973
  - Fix %patch directive compatibility with RPM 4.20


author: Colin Walters <walters@verbum.org> - 1.12.1-1
changelog:
  - Update to 1.12.1
  - Fix mount point check regression breaking bootc-image-builder
  - Resolves: RHEL-142112


author: Joseph Marrero <jmarrero@fedoraproject.org> - 0.2.18-1
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.18
    backport patch to support GRUB console.cfg
    Resolves: RHEL-26439


author: Viktor Malik <vmalik@redhat.com> - 0.20.3-1
changelog:
  - Rebase on bpftrace 0.20.3 (RHEL-30779)
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)
  - Fix bpftrace creating BPF programs with truncated names (RHEL-8502)


author: Viktor Malik <vmalik@redhat.com> - 0.20.4-1
changelog:
  - Rebase on bpftrace 0.20.4
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 4.0.11-1
changelog:
  - Upgrated to latest upstream version 4.0.11
  - Added a patch to fix rpm build issue caused due to misconfiguration in upstream
  - Added required additional plugins required for build


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-6
changelog:
  - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.19.1-1
changelog:
  - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
  - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
  - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
  - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
  - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-3
changelog:
  - Switch from autotools to meson; enable the tests, since the meson build system
    permits us to use a shared boost library
  - Install examples in the -doc subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-4
changelog:
  - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual
    Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name
    of a future package that continues to provide API/ABI version 1.0 after the
    upgrade.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-7
changelog:
  - Working (but weak, dependent on SHA1) source signature verification
  - Added API/ABI version to descriptions


author: Andreas Schneider <asn@redhat.com> - 0.3.12-1
changelog:
  - Update to version 0.3.12
  - resolves: RHEL-121734
  - Added channel binding support
  - resolves: RHEL-103417


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: <thalman@redhat.com> - 0.6.1-16
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Paul Murphy <murp@redhat.com> - 20.1.8-3
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-21
changelog:
  - ci-fix-Render-bridges-correctly-for-v2-on-sysconfig-wit.patch [RHEL-38927]
  - ci-fix-Render-v2-bridges-correctly-on-network-manager-w.patch [RHEL-38927]
  - Resolves: RHEL-38927
    (NoCloud - network_config bridges incorrectly configured)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-22
changelog:
  - ci-Prevent-NM-from-handling-DNS-when-network-interfaces.patch [RHEL-65768]
  - Resolves: RHEL-65768
    ([RHEL-9] Prevent NM from handling DNS when network interfaces have DNS config)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-2
changelog:
  - ci-downstream-Revert-feat-Use-NetworkManager-renderer-b.patch [RHEL-74334]
  - Resolves: RHEL-74334
    ([rhel-9.6] Suggest to continue using sysconfig as the default network renderer in rhel-9.6)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-3
changelog:
  - ci-Use-log_with_downgradable_level-for-user-password-wa.patch [RHEL-71122]
  - ci-downstream-set-deprecation-boundary-version.patch [RHEL-71122]
  - Resolves: RHEL-71122
    (Suggest to change some log messages from warning to info after rebase cloud-init-24.4 [RHEL-9.6] )


author: Jon Maloy <jmaloy@redhat.com> - 24.4-4
changelog:
  - ci-net-sysconfig-do-not-remove-all-existing-settings-of.patch [RHEL-76361]
  - Resolves: RHEL-76361
    ([c9s] cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-5
changelog:
  - ci-fix-NM-reload-and-bring-up-individual-network-conns-.patch [RHEL-81703]
  - Resolves: RHEL-81703
    (DataSourceNoCloudNet network configuration is ineffective - c9s)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-6
changelog:
  - ci-feat-aliyun-datasource-support-crawl-metadata-at-onc.patch [RHEL-88658]
  - Resolves: RHEL-88658
    (Cloud-Init Backport Optimization Features on Alibaba Cloud)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-7
changelog:
  - ci-fix-Don-t-attempt-to-identify-non-x86-OpenStack-inst.patch [RHEL-100615]
  - ci-fix-strict-disable-in-ds-identify-on-no-datasources-.patch [RHEL-100615]
  - Fix missing patch [RHEL-101692]
  - Resolves: RHEL-100615
    (CVE-2024-6174 cloud-init: From CVEorg collector [rhel-9.7])
  - Resolves: RHEL-101692
    (c9s dist-git missing patch "downstream: Retain exit code in cloud-init status for recoverable errors")


author: Jon Maloy <jmaloy@redhat.com> - 24.4-8
changelog:
  - ci-downstream-Do-not-override-changes-in-disable-sshd-k.patch [RHEL-128876]
  - Resolves: RHEL-128876
    ([rhel-9] cloud-init upgrade is overwriting modifications in disable-sshd-keygen-if-cloud-init-active.conf)


author: Bob Mader <bob@redhat.com> - 0.1.7-2
changelog:
  - Initial build for EL9
  - Applying changes for gating - adding the .fmf directory
  - Resolves: RHEL-57044


author: Packit <hello@packit.dev> - 345-1
changelog:
  - New virtual machines don't get SPICE graphics anymore
  - Support for network port forwarding
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 350-1
changelog:
  - networking: fix renaming of bridges and other groups (RHEL-117883)
  - bridge: fix OpenSSH_10.2p1 host key detection


author: Justin Stephenson <jstephen@redhat.com> - 16-1
changelog:
  - Rebase to upstream release 16
  - Config: Add sssd-proxy requirement
  - Commits from release 15
  - Config: Update to authselect with-tlog feature
  - stylelint: handle stylelint-scss deprecation
  - Add ruff configuration
  - package.json: drop flowtype plugin
  - package.json: drop po2json
  - package.json: document the required nodejs version
  - fmf: Plumb through $TEST_* variables for unexpected messages
  - tests: Use mc for testPlayBinary
  - package.json: drop deprecated eslint-plugin-standard
  - Revert "build: add support for /pybridge scenario"
  - Player: Stop making the Terminal object state
  - build.js: support flags
  - packaging: Update spec License: to SPDX format
  - build.js: Fix LINT env variable check
  - Tests: Allow charset journal messages
  - Update to the new root creation function
  - package.json: Bump stylelint to 15
  - test: add check for sssd config id_provider proxy
  - Tests: Allow invalid non-UTF8 journal messages
  - Add xterm-canvas-addon dependency for rendering
  - Minor Eslint fixes
  - Tests: Update data list to PF5 for testAppMenu
  - Update org.cockpit-project.session-recording.metainfo.xml
  - Makefile: bump our test/common dependency
  - patternfly-5-overrides should be auto-imported by the page.scss file
  - Drop obsolete pf-m-redhat-font class
  - Commits from release 14
  - Upgrade to PatternFly 5 Alpha
  - Makefile: Update Cockpit lib to da5abbb4245b0455cc8b610efe01e684
  - package.json: Pin down versions of @patternfly/react-{styles,icons}
  - Makefile: Update Cockpit lib to 947f1753867e3924b9617aaace936225
  - Makefile: Fix watch dependencies
  - Update release.yml
  - Automate the release process


author: Justin Stephenson <jstephen@redhat.com> - 17-1
changelog:
  - Rebase to upstream release 17
  - Config: Use authselect enable-feature when possible
  - Test: Move from CDP to BiDi
  - Replace jQuery extend() with standard JS spread
  - Convert to TypeScript
  - Convert Application to a functional component
  - package.json: Drop date-fns
  - Various test fixes and build related fixes


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20141121-15
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Phil Sutter <psutter@redhat.com> - 1.4.7-1
changelog:
  - config: Fix -Wimplicit-function-declaration
  - network: Fix -Wstrict-prototypes
  - build: don't suppress various warnings
  - build: conntrack-tools requires libnetfilter_conntrack >= 1.0.9
  - New version 1.4.7


author: Kelvin Fan <kfan@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Require util-linux >= 2.36-1
  - Remove files related to the issuegen and motdgen executables


author: Jindrich Novy <jnovy@redhat.com> - 3:2.236.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.236.0
  - Resolves: RHEL-80473


author: Jindrich Novy <jnovy@redhat.com> - 3:2.237.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.237.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.238.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.238.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.239.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.239.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.240.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.240.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.241.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.241.0
  - Resolves: RHEL-112187


author: Jindrich Novy <jnovy@redhat.com> - 4:2.242.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.242.0
  - Related: RHEL-111919


author: Jindrich Novy <jnovy@redhat.com> - 4:2.244.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.244.0
  - Resolves: RHEL-112187


author: Jindrich Novy <jnovy@redhat.com> - 4:2.245.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.245.0
  - Related: RHEL-111919


author: Lokesh Mandvekar <lsm5@redhat.com> - 1-14
changelog:
  - rebuild with updated dependencies:
    [python-]podman 4.8.0, buildah 1.33.2, skopeo 1.14.0,
    aardvark-dns and netavark 1.9.0
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.1
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.2-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.7.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.7.1
  - Resolves: RHEL-89428


author: Jindrich Novy <jnovy@redhat.com> - 1:1.8.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.8.0
  - Related: RHEL-111919


author: Jindrich Novy <jnovy@redhat.com> - 1:1.9.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.9.0
  - Related: RHEL-111919


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1-131
changelog:
  - fetch TMT podman revdep tests from podman dist-git
  - needs at least podman 5.4.0-8.el9
  - Related: RHEL-80816


author: Aashish Radhakrishnan <aaradhak@redhat.com> - 0.24.0-2
changelog:
  - Restore single-decimal precision to stream output
    Backport https://github.com/coreos/coreos-installer/pull/1654


author: Joel Capitao <jcapitao@redhat.com> - 0.24.0-3
changelog:
  - Use the full path for the 'root=' kernel arg when rootfs on mpath
    Backport https://github.com/coreos/coreos-installer/pull/1677


author: Florian Weimer <fweimer@redhat.com> - 11.5.0-10
changelog:
  - Exception handling performance improvements (RHEL-105072)
  - libgcc: Use _dl_find_object to find DWARF data in unwinder
  - libgcc: Use lock-free data structures for run-time unwinder registration


author: David Malcolm <dmalcolm@redhat.com> - 11.5.0-14
changelog:
  - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
    branches and calls to gcov output, but not conditions (RHEL-105416).


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-2
changelog:
  - vmware_guestdump: Version 7 support
  - Fix incorrect task state during exit
  - Add multi-threads support in crash target
  - Call cmd_bt silently after "set pid"
  - x86_64: Add gdb multi-stack unwind support
  - arm64: Add gdb multi-stack unwind support
  - ppc64: Add gdb multi-stack unwind support
  - Fix the issue of "page excluded" messages flooding
  - Fix "kmem -p" option on Linux 6.16-rc1 and later kernels


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-3
changelog:
  - x86_64: filter unwanted warning message for "bt -T" cmd
  - doc: Update requirements for building on Fedora
  - gdb: Fix a regression for eppic extension on gdb-16.2
  - Fix crash initialization failure on LoongArch with recent GDB versions
  - gdb: Disable DT_DEBUG lookup by GDB inside the vmcore


author: Vladis Dronov <vdronov@redhat.com> - 15.9-26
changelog:
  - Update cscope to 15.9-26 from Fedora (RHEL-65465)
  - Fix signal handling at exit
  - Minor edits in the rpm scripts and the changelog
  - Make xemacs a bcond


author: Pavol Zacik <pzacik@redhat.com> - 1:2.3.3op2-28
changelog:
  - RHEL-39940 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-34
changelog:
  - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
  - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-35
changelog:
  - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-37
changelog:
  - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
  - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-18
changelog:
  - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file
  - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes
  - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source


author: Jeff Moyer <jmoyer@redhat.com> - 78-1
changelog:
  - Rebase to v78
  - Add support for legacy monitor.conf file location
  - Fix a test failure.
  - Resolves: RHEL-10382
  - Resolves: RHEL-8204
  - Resolves: RHEL-29151


author: Martin Osvald <mosvald@redhat.com> - 3.4.1-11
changelog:
  - Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly
    for shared mailboxes
  - cyrus-imapd.spec: rename patches to correspond with others


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Bryan Gurney <bgurney@redhat.com> - 1.10-8.el9
changelog:
  - Supersede uninitialized value patch with upstream version
  - Add upstream patch: common: fix mismatch between prototype and body
  - Makefile: bypass check-doc in check target
  - Related: rhbz#1985096


author: Bryan Gurney <bgurney@redhat.com> - 1.10.1-1
changelog:
  - Update to PMDK version 1.10.1
  - Related: rhbz#1874208
  - Remove BuildRequires line for libfabric-devel
  - Related: rhbz#2009502


author: Mark Wielaard <mjw@redhat.com> - 5.0-8
changelog:
  - Add 0001-debug_str_offsets-header-version-and-padding-are-2-b.patch
  - Add 0001-debugedit-Handle-unused-.debug_str_offsets-entries.patch


author: Mark Wielaard <mjw@redhat.com> - 5.0-11
changelog:
  - Add 0001-Add-basic-find-debuginfo-script-tests.patch
  - Add debugedit-5.0-find-debuginfo-tests-fixups.patch


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-1
changelog:
  - Rebase to 1.21.2
  - Add support for ppc64le and aarch64
  - Enable the test suite
  - Resolves: RHEL-22429


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-2
changelog:
  - Modify ports: Some CI systems complain about the usage of the 8888 port.
  - Improve the way PPC64LE support is enabled.
  - Resolves: RHEL-22429


author: Evan Goode <egoode@redhat.com> - 4.14.0-30
changelog:
  - Mark transient transactions in DNF history (RHEL-84512)
  - Warn/disallow changes outside /usr, /etc with --transient (RHEL-84499)


author: Evan Goode <egoode@redhat.com> - 4.14.0-31
changelog:
  - Introduce $releasever_major, $releasever_minor variables, shell-style
    variable substitution (RHEL-65817)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-14
changelog:
  - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
  - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)


author: Pavel Valena <pvalena@redhat.com> - 057-67.git20240812
changelog:
  - feat(systemd): install systemd-executor
  - test: use -device instead of -watchdog to remove qemu
  - fix(fips): remove /dev/{random,urandom} pre-creation
  - fix(systemd): always include sg module
  - fix(fips): do not blindly remove /boot
  - fix(github): update format of labeler
  - fix(network-manager): add "After" dependency on dbus.service
  - fix(url-lib.sh): nfs_already_mounted() with trailing slash in
  - feat(systemd-pcrphase): introducing the systemd-pcrphase
  - fix(systemd-pcrphase): only include
  - fix(nfs): include also entries from /usr/lib/{passwd,group}


author: Pavel Valena <pvalena@redhat.com> - 057-70.git20240819
changelog:
  - fix(systemd): set right permissions for the machine-id file
  - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
  - feat(dracut-init.sh): give --force-add precedence over --omit


author: Pavel Valena <pvalena@redhat.com> - 057-79.git20241127
changelog:
  - fix(35network-manager): install nftables kernel modules
  - fix(35network-manager): install nft binary during module
  - fix(dracut-install): copy xattr when use clone ioctl
  - feat(dracut.sh): add --add-confdir option
  - fix: typo in variable name
  - feat(fips): add support for UKIs
  - fix(kernel-modules): use modalias info in get_dev_module()
  - fix(dracut-functions.sh): convert mmcblk to the real kernel


author: Pavel Valena <pvalena@redhat.com> - 057-86.git20250217
changelog:
  - fix(35network-manager): remove duplicate installkernel
  - feat(fips): include fips module unconditionally
  - fix(dracut.sh): make omit-drivers option do exact match for
  - feat: add openssl module


author: Pavel Valena <pvalena@redhat.com> - 057-101.git20250808
changelog:
  - fix(systemd): add missing modprobe@.service
  - fix: let check_vol_slaves_all return 1 when checks on all
  - improvement(74nvmf): lookup required NIC kernel modules for
  - fix(74nvmf): set root=nvmf
  - chore(multipath): remove `rd_NO_MULTIPATH` kernel command
  - refactor(multipath): remove custom multipathd.service
  - fix(systemd): systemd.volatile needs overlayfs kernel module
  - refactor(dracut): introduce clamp_mtimes helper function
  - fix(dracut): ensure hardlink deduplication is reproducible


author: Pavel Valena <pvalena@redhat.com> - 057-110.git20260130
changelog:
  - fix(systemd-repart): allow partition format
  - feat(install.d):according to the changes of
  - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  - fix(pcsc): add opensc load module file
  - fix(pcsc): add --disable-polkit to pcscd.service
  - fix(pkcs11): delete trailing dot on
  - fix(multipath): disable user_friendly_names with mpathconf
    Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-30780
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Gregory Bell <grbell@redhat.com> - 1.30-1
changelog:
  - New release: 1.30
  - Better detection of abort during DWARF loader thread processing
  - pahole now detects presence of libbpf APIs and BTF features using weak function
    declarations when built using a shared library libbpf
  - Type tags are emitted for BPF arena pointers with new BTF "attributes" feature
  - New release: 1.29
  - Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads.
  - The BTF encoding now is always reproducible, and as fast/faster than before.
  - The memory consumption is reduced.
  - Support for multiple BTF_DECL_TAGs pointing to same tag.
  - Verify that pfunct prints btf_decl_tags read from BTF.
  - Don't print functions twice when using 'pfunct -f function_name'.
  - New release: 1.28
  - Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding.
  - Show flexible arrays statistics
  - Add '--padding N' and '--padding_ge N' to show structs with paddings
  - Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel.
  - Don't stop pfunct output at the first function that matches a filter, show all of them
  - Allow encoding data about all global variables, not just per CPU ones
  - Handle .BTF_ids section endianness, fully supporting cross builds
  - Generate decl tags for bpf_fastcall for eligible kfuncs
  - Add "distilled_base" BTF feature to split BTF generation.
  - Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization
  - Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var
  - Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var
  - Serialize access to elfutils dwarf_getlocation().
  - Honour --lang_exclude when merging LTO built CUs.
  - Add the debuginfod client cache directory to the vmlinux search path.
  - Print the CU's language when a tag isn't supported.
  - Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags.
  - Improve the parameter parsing by checking DW_OP_[GNU_]entry_value
  - Introduce a tests/ directory with regression tests


author: Gregory Bell <grbell@redhat.com> - 1.31-1
changelog:
  - Rework the selection of functions to represent in BTF, for instance:
  - Skip functions that passes values thru the stack when those structs don't
  have expected alignment due to some attribute usage that then causes
  problems with BTF trampolines due to lack of expressiveness in BTF to
  signal such special cases.
  - Skip objects (compile units) without DWARF: don't stop a multi object
  encoding session just because one doesn't have any DWARF in it.
  - Fix BTF dedup by updating libbpf. 
  - Fix the inference of the explicit alignment attribute of zero length arrays,
  like struct skb_ext->data[] in the Linux kernel. Important as BTF has no no
  explicit alignment attribute encoding.
  - Fix the inference of alignments after bitfields, such as in struct
  nft_rule_dp->data[] after ->handle:42, also in the Linux kernel.    
  - Fix segfault with --show_reorg_steps option, e.g. pahole -R -S -C task_struct.
  - Add comparision of functions encoded in BTF between baseline 'master' branch
  and current branch, i.e. 'next'.


author: Hui Wang <huwang@redhat.com> - 1:4.20-4
changelog:
  - Drop unnecessary javax16.api.jar
  - Add dependency on javapackages-tools since the ecj binary requires it to run


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-9
changelog:
  - edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66230]
  - Resolves: RHEL-66230
    ([Regression] [aarch64] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])


author: Jon Maloy <jmaloy@redhat.com> - 20240524-10
changelog:
  - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-58631]
  - Resolves: RHEL-58631
    ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20241117-2
changelog:
  - edk2-Fix-amd-sev-firmware-file-for-amd-snp.patch [RHEL-72447]
  - Resolves: RHEL-72447
    ( QEMU should creating new json file that will correctly describe firmware for amd-sev-snp [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 20241117-3
changelog:
  - edk2-OvmfPkg-Use-the-OvmfPkg-version-of-CcProbeLib.patch [RHEL-70865]
  - edk2-Update-dbx-revocation-list-to-2025-02-24-version.patch [RHEL-83019]
  - Resolves: RHEL-70865
    (SNP guest failed to boot with SVSM using OVMF.amdsev.fd [rhel-9.7])
  - Resolves: RHEL-83019
    (The newer revocation file and Server 2025 required to update it [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20241117-4
changelog:
  - edk2-update-dbx-to-20250610.patch [RHEL-96869]
  - Resolves: RHEL-96869
    ([edk2,rhel-9] dbx update 20250610)


author: Jon Maloy <jmaloy@redhat.com> - 20241117-5
changelog:
  - edk2-MdePkg-Acpi66.h-Add-ACPI-6.6-header.patch [RHEL-109010]
  - edk2-OvmfPkg-WorkArea.h-Add-MAILBOX_GDT.patch [RHEL-109010]
  - edk2-OvmfPkg-Add-the-Test-command-in-TDX-MailBox.patch [RHEL-109010]
  - edk2-OvmfPkg-Add-the-ResetVector-in-TDX-MailBox.patch [RHEL-109010]
  - edk2-OvmfPkg-TdxDxe-Support-5-level-paging-for-ResetVecto.patch [RHEL-109010]
  - edk2-OvmfPkg-IoMmuDxe-Fix-1M-and-2M-buffer-handling.patch [RHEL-69780]
  - Resolves: RHEL-109010
    (TD guest dmesg reports ACPI BIOS Warning (bug): Incorrect checksum in table [APIC] - 0x29)
  - Resolves: RHEL-69780
    (Fail to create AMD SEV SLES 15 SP4 guest via virt-install --cdrom [rhel-9.8])


author: Jon Maloy <jmaloy@redhat.com> - 20241117-6
changelog:
  - edk2-OvmfPkg-MemEncryptSevLib-Evict-cache-lines-during-SN.patch [RHEL-121983]
  - edk2-MdePkg-Add-the-COHERENCY_SFW_NO-CPUID-bit-field.patch [RHEL-121983]
  - edk2-OvmfPkg-ResetVector-Make-ReceivedVc-a-flag-in-SEV-ES.patch [RHEL-121983]
  - edk2-OvmfPkg-MemEncryptSevLib-Check-if-SEV-SNP-coherency-.patch [RHEL-121983]
  - Resolves: RHEL-121983
    ([edk2] VM panic on booting SNP guest with large memory on Genoa)


author: Jon Maloy <jmaloy@redhat.com> - 20241117-7
changelog:
  - edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126100]
  - edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126100]
  - Resolves: RHEL-126100
    ([edk2,rhel-9] dbx update to 20251016 / v1.6.1)


author: Jon Maloy <jmaloy@redhat.com> - 20241117-8
changelog:
  - edk2-openssl-flatten-contents-of-openssl-tarball.patch [RHEL-115922]
  - edk2-Bumped-openssl-submodule-to-version-3.0.7-29.1.patch [RHEL-115922]
  - Resolves: RHEL-115922
    (CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap [rhel-9.8])


author: Felix Kolwa <fkolwa@redhat.com> - 1.35.1-7
changelog:
  - Bump revision number to 7.
  - Pull in changes from Major Hayden:
    - Skip version check test
      Opened upstream bug:
          https://github.com/aws/efs-utils/issues/194
    - Disable automatic version check


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-fix-free.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-stacktrace-lto.patch


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-10
changelog:
  - Disable xwidgets (RHEL-14551)
  - org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
  - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
  - Add protection for LaTeX preview (CVE-2024-30204)
  - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-18
changelog:
  - Fix nsm-should-check for "google.com" failure (RHEL-94297)
  - Fix package tests for tetris no longer existing as a package (RHEL-94297)
  - Introduce untrusted-content variable (RHEL-94297)


author: Jacek Migacz <jmigacz@redhat.com> - 12.3-1
changelog:
  - Fix build failure on CentOS Stream. Related: rhbz#1951306
  - Revert patch for FSF addresses (it became obsolete with 12.2)
  - Remove Obsoletes and Provides tetex-preview


author: Jeff Law <law@redhat.com> - 1.1.2-7
changelog:
  - Force C++14 as this code is not C++17 ready
  - Fix sprintf format issue
  - Fix ordered comparison of a pointer against zero issue
  -


author: Jack Magne <jmagne@redhat.com> - 1.1.2-14
changelog:
  Resolves: rhbs #2007544,2000928,2000929
  - Bugzilla Bug  2007544 - The esc provides outdated configuration for opensc
  - Bugzilla Bug  2000928 - ESC does not detect smart cards and crashes upon launch [rhel-9.0.0]
  - Bugzilla Bug  2000929 - [RHEL-9][AppStream] esc present in comps but missing from repository [rhel-9.0.0]


author: Jack Magne <jmagne@redhat.com> - 1.1.2-16
changelog:
  Resolves: rhbs #2050849
  - Bug 2050849 - Volkswagen Siemens CardOS M4.4 and 5.0 cards display incorrect status in ESC [RHEL 9.1]


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add requirement on ui subpackage into ui-devel subpackage


author: Milan Crha <mcrha@redhat.com> - 3.40.4-2
changelog:
  - Resolves: RHEL-19371 (Backport upstream patch to workaround broken text/calendar mail attachments by the server)


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-4
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993247

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993284


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018421

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003670


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-2
changelog:
  - Fix parsing of large tokens
  - Reject direct parameter entity recursion
  - Resolves: RHEL-29699
  - Resolves: RHEL-29696


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-3
changelog:
  - Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
  - Resolves: RHEL-56761
  - Resolves: RHEL-57520
  - Resolves: RHEL-57511


author: Radovan Sroka <rsroka@redhat.com> - 1.3.3-105
changelog:
  RHEL 9.7.0 ERRATUM
  - RPMDB crashes with SIGBUS when updating the RPMDB repeatedly
  Resolves: RHEL-63090
  - File /run/fapolicyd differs from RPM expectations
  Resolves: RHEL-59626
  - fapolicyd.service badly instructs how to start after nss-user-lookup.target
  Resolves: RHEL-21871
  - fapolicy rule containing 'pattern=normal' produces error
  Resolves: RHEL-30020
  - "fapolicyd-cli --file add" crashes when processing sockets
  Resolves: RHEL-69136


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4-1
changelog:
  - fapolicyd-1.4 and fapolicyd-selinux-1.0
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-1
changelog:
  - fapolicyd-1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-2
changelog:
  - Fix binary path of rpm-loader
  - Map file with MAP_SHARED instead of MAP_PRIVATE
  - Fix segfault when interrupting fapolicyd startup


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-87
changelog:
  - fence_ibm_vpc: refresh bearer-token if token data is corrupt, and
    avoid edge-case of writing empty token file
    Resolves: RHEL-83255


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-88
changelog:
  - fence_compute/fence_evacuate: dont use deprecated inspect.getargspec()
    Resolves: RHEL-84448
  - fence_sbd: get devices from SBD_DEVICE env variable if devices
    parameter isnt set
    Resolves: RHEL-79798


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #2005307, #1999276


author: Antonio Murdaca <amurdaca@redhat.com> - 0.5.1-1
changelog:
  * chore: update patch for new release by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/625
   * chore: fix require error with commitlint by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636
   * fix(license): replace space with - in Apache 2.0 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/632
   * fix(data-formats): use serde_tuple serializer for error messages by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/629
   * fix: cargo test for non-root users by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/635
   * fix(get_current_user_name): remove trailing whitespaces. by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/638
   * chore: bump mio from 0.8.10 to 0.8.11 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/640
   * fix: vendored tarfile creation by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/634
   * fix: static-mut-refs warning by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/651
   * Enable CentOS 9 builds and add Testing Farm e2e tests by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/650
   * Add an OV re-registration window option when using DB storage by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/643
   * chore: bump pem from 2.0.1 to 3.0.3 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/639
   * chore: bump h2 from 0.3.25 to 0.3.26 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/659
   * feat: verify trusted manufacturers by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/656
   * database enhancements by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/666
   * chore: bump openssl to 0.10.66 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/664
   * chore(store): make the store OVs agnostic by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/671
   * feat(manufacturing-server): implement an export OVs endpoint  by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/673
   * fix(systemd-units): run before powering off the system by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/676
   * fix(dracut): use isolate on error in the manufacturing-client service by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/678
   * fix(systemd-generator): write configuration to '/run' by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/677
   * fix(owner-tool): use the new API to export ovs by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/675
   * chore: update diesel to 2.2.3 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/669
   * chore: bump reqwest from 0.11.27 to 0.12.7 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/683
   * fix: use centos-stream-9 target instead of epel-9 by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/687
   * enhance onboarding testing by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/681
   * ci: add konflux test cases by @yih-redhat in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688
   * fix(make-vendored-tarfile.sh): exclude idna tests with unicode points by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/692
   * chore: bump for 0.5.1 by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/693

   * @miabbott made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636
   * @yih-redhat made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688

   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.0...v0.5.1


author: Pavel Reichl <preichl@redhat.com> - 3.35-1
changelog:
  - Rebase to new upstream release
  - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc
  - Add signature check
  - Related: rhbz#2188805


author: Eric Garver <egarver@redhat.com> - 1.3.4-17
changelog:
  - fix(server): load firewall rules before claiming dbus
  - fix(nftables): ipset: add entries from GLib loop when idle
  - fix(systemd): Requires dbus


author: Richard Hughes <richard@hughsie.com> 1.2-7
changelog:
  - Disable JLink support to remove one extra dep we are not going to support
  - Resolves: rhbz#1948597


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Adam Jackson <ajax@redhat.com> - 1.3.5-9
changelog:
  - Remove BuildRequires xprop entirely. If present, the configure script will call
    it looking for a property on the root window that Fedora's X server does not
    set, and which would not work anyway since there is no X server running in the
    buildroot, so we can just remove the dependency.


author: Fabio Alessandro Locati <fale@fedoraproject.org> - 5.13.1-2
changelog:
  - Provide the right font configuration
  - Drop ttf format since upstream affirms that otf is to be preferred


author: Akira TAGOH <tagoh@redhat.com> - 2.13.94-2
changelog:
  - Fix the score calculation on matching for multiple values.
  - Enable 11-lcdfilter-default.conf.
    Resolves: rhbz#1965684
  - Rebase to the latest release.
    Resolves: rhbz#2023161


author: Akira TAGOH <tagoh@redhat.com> - 2.13.95-1
changelog:
  - New upstream release.
  - Update deps to font(notosans)
    https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts


author: Akira TAGOH <tagoh@redhat.com> - 2.14.0-1
changelog:
  - New upstream release.
  - Rebase to 2.14 and revert Noto Default change happened in f36.
    Resolves: rhbz#2075393


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Benjamin Berg <bberg@redhat.com> - 1.94.0-3
changelog:
  - Use GFDL abbreviation as GFDLv1.1+ is not listed
  - Install PAM module into /usr
  - Pull in further test fixes


author: José Expósito <jexposit@redhat.com> - 3.2.1-10
changelog:
  - Fix CVE-2024-24258 and CVE-2024-24259
    Resolves: https://issues.redhat.com/browse/RHEL-25176
    Resolves: https://issues.redhat.com/browse/RHEL-25178


author: Pavel Cahyna <pcahyna@redhat.com> - 1.6.14-2
changelog:
  - Apply upstream patch 41d0d70f
    ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
    CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
    CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)


author: Michel Lind <salimma@centosproject.org> - 2.10.4-10
changelog:
  - Fix for CVE-2025-27363 out-of-bound write vulnerability
  - Patch initially by Marc Deslauriers of Canonical
  - https://www.openwall.com/lists/oss-security/2025/03/14/3
  - Adjusted for EL9 by Jonathan Wright of AlmaLinux
  - and a member of the Meta security team
  - Resolves: RHEL-83109


author: Akira TAGOH <tagoh@redhat.com> - 1.0.10-6.el9.2
changelog:
  - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310
    Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063


author: Michal Ruprich <mruprich@redhat.com> - 8.5.3-9
changelog:
  - Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions
  - Resolves: RHEL-87731 - FRR bgp session not recovered due to incorect error no AF activated for peer


author: Michal Ruprich <mruprich@redhat.com> - 0.17-85
changelog:
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Hughes <richard@hughsie.com> 1.9.26-1
changelog:
  - Rebase to get hardware support for CERTPX-13842
  - Resolves: #RHEL-16637
  - Resolves: #RHEL-35373
  - Resolves: #RHEL-61930


author: Nick Clifton <nickc@redhat.com> - 10.73-2
changelog:
  - Annocheck: Fix handling of command line options that take arguments.  (#2086850)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)


author: Nick Clifton <nickc@redhat.com> - 10.75-1
changelog:
  - Annocheck: Fix covscan detected race condition between stat() and open().
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)


author: Nick Clifton <nickc@redhat.com> - 10.76-1
changelog:
  - Spec file: Correct the Provides for the annobin-doc subpackage.  (#2097065)
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.
  - Annocheck: Fix covscan detected race condition between stat() and open().


author: Nick Clifton <nickc@redhat.com> - 11.08-4
changelog:
  - Fix building with Clang-16.  (#2216918)
  - Re-enable building with LTO.  (#2166579)
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
  - Spec file: Enable annotated building.
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158386)
  - Annocheck: Add more special glibc filenames.  (#2158100)
  - Annocheck: Improve handling of tool versions.
  - GCC Plugin: Fix building with gcc-13.
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
  - Annocheck: Use real filename rather than debuginfo filename.  (#2152280)
  - Rename gcc plugin to gts-annobin.  (#2111977)
  - Rebase to 10.94, brining in support for LLVM 15.  (#2118992)
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
  - Annocheck: Try harder not to run mutually exclusive tests.
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
  - Libannocheck: Actually set result fields after tests are run.
  - Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
  - Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
  - Libannocheck: Move into separate sub-package.
  - Libannocheck: Add libannocheck.pc pkgconfig file.
  - Libannocheck: Add libannocheck_reinit().
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Clang Plugin: Fix for building with Clang-15.  (#2125875)
  - Annocheck: Add a test for the inconsistent use of -Ofast.  (#1248744)
  - Plugin: Fix top level configuration support for RiscV.
  - Annocheck: Improvements to the size tool.
  - Annocheck: Fixes for libannocheck.h.
  - Annocheck: Add automatic profile selection.
  - Annocheck: Improve gap detection and reporting.
  - Spec File: Use the %dir directive in the %files section to ensure that
  -  plugin directories are useable.  (#2080454)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17
changelog:
  - NVR Bump: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216446)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17.1
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2220917)


author: Nick Clifton <nickc@redhat.comn> - 2.38-18
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216456)


author: Marek Polacek <polacek@redhat.com> 12.2.1-4
changelog:
  - update from releases/gcc-12 branch (#2110583)
  - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST
    (PR libstdc++/107468)


author: Marek Polacek <polacek@redhat.com> 12.2.1-7.5
changelog:
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832)


author: Kevin Buettner - 11.2-2
changelog:
  - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
    (This is a workaround for the bogus warning/error that we now see
    on i686 regarding a "may write a terminating nul past the end of
    the destination" message for the sprintf() call in
    global_symbol_searcher::search() in gdb/symtab.c.)


author: Kevin Buettner - 11.2-3
changelog:
  - Backport upstream patch which removes sizes from debuginfod download
    messages when the size is not available (RHBZ 2068280, Aaron Merey).


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-13-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 12.20-1
changelog:
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.


author: Nick Clifton <nickc@redhat.com> - 12.32-1
changelog:
  - LLVM Plugin: Fix building with LLVM version 17.  (RHEL-17311)
  - GCC Plugin: Add support for -fhardended.
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)


author: Nick Clifton <nickc@redhat.com> - 12.32-2
changelog:
  - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505)


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Rebase to 12.65.  (RHEL-51018)
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53574)


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Rebase to bring in improvements for locating string notes.  (RHEL-79807)
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.
  - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string.  (RHEL-77328)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Nick Clifton <nickc@redhat.com> - 2.40-17
changelog:
  - Spec File: Do not use of the system zlib by default.  (RHEL-19373)
  - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303)


author: Nick Clifton <nickc@redhat.com> - 2.40-19
changelog:
  - Spec File: Restore the SElinux context to %{_libdir}.  (RHEL-22818)
  - [2.40-18: was a failed attempt to fix RHEL-22818]


author: Marek Polacek <polacek@redhat.com> 13.2.1-5
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245,
  	fortran/111837, fortran/112316, libbacktrace/111315,
  	libbacktrace/112263, libstdc++/110944, libstdc++/111172,
  	libstdc++/111936, libstdc++/112089, libstdc++/112314,
  	middle-end/111253, middle-end/111818, modula2/111756, modula2/112110,
  	target/101177, target/110170, target/111001, target/111366,
  	target/111367, target/111380, target/111935, target/112443,
  	tree-optimization/111397, tree-optimization/111445,
  	tree-optimization/111489, tree-optimization/111583,
  	tree-optimization/111614, tree-optimization/111622,
  	tree-optimization/111694, tree-optimization/111764,
  	tree-optimization/111820, tree-optimization/111833,
  	tree-optimization/111917
    - fix aarch64 RA ICE (#2241139, PR target/111528)
  - fix ia32 doubleword rotates (#2238781, PR target/110792)


author: Marek Polacek <polacek@redhat.com> 13.2.1-6
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633,
  	c/112339, fortran/111880, fortran/112764, libgomp/111413,
  	libstdc++/112348, libstdc++/112491, libstdc++/112607,
  	middle-end/111497, target/53372, target/110411, target/111408,
  	target/111815, target/111828, target/112672, tree-optimization/111137,
  	tree-optimization/111465, tree-optimization/111967,
  	tree-optimization/112496
  - add -fno-stack-protector to aarch64 tests (RHEL-17684)


author: Marek Polacek <polacek@redhat.com> 13.3.1-1
changelog:
  - update from releases/gcc-13 branch
    - GCC 13.3 release
    - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577,
  	analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882,
  	analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969,
  	analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473,
  	bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224,
  	c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769,
  	c++/113141, c++/113966, c++/114303, c++/114377, c++/114537,
  	c++/114561, c++/114562, c++/114572, c++/114580, c++/114634,
  	c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337,
  	fortran/50410, fortran/55978, fortran/89462, fortran/93678,
  	fortran/95374, fortran/101135, fortran/102003, fortran/103707,
  	fortran/103715, fortran/103716, fortran/104352, fortran/106987,
  	fortran/106999, fortran/107426, fortran/110987, fortran/112407,
  	fortran/113799, fortran/113866, fortran/113885, fortran/113956,
  	fortran/114001, fortran/114474, fortran/114535, fortran/114739,
  	fortran/114825, fortran/115039, gcov-profile/114115,
  	gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616,
  	ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731,
  	libquadmath/114533, libstdc++/66146, libstdc++/93672,
  	libstdc++/104606, libstdc++/107800, libstdc++/108976,
  	libstdc++/110050, libstdc++/110054, libstdc++/113841,
  	libstdc++/114147, libstdc++/114316, libstdc++/114359,
  	libstdc++/114367, libstdc++/114401, libstdc++/114750,
  	libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655,
  	middle-end/110027, middle-end/111151, middle-end/111632,
  	middle-end/111683, middle-end/112684, middle-end/112732,
  	middle-end/113396, middle-end/113622, middle-end/114070,
  	middle-end/114348, middle-end/114552, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/114907,
  	rtl-optimization/54052, rtl-optimization/114415,
  	rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696,
  	sanitizer/114687, sanitizer/114743, sanitizer/114956,
  	sanitizer/115172, target/88309, target/101865, target/105522,
  	target/110621, target/111234, target/111600, target/111610,
  	target/111822, target/112397, target/113095, target/113233,
  	target/113950, target/114049, target/114130, target/114160,
  	target/114172, target/114175, target/114272, target/114747,
  	target/114752, target/114794, target/114837, target/114848,
  	target/114981, testsuite/111066, testsuite/112297, testsuite/114034,
  	testsuite/114036, testsuite/114662, tree-optimization/91838,
  	tree-optimization/109925, tree-optimization/110838,
  	tree-optimization/111009, tree-optimization/111268,
  	tree-optimization/111407, tree-optimization/111736,
  	tree-optimization/111882, tree-optimization/112281,
  	tree-optimization/112303, tree-optimization/112793,
  	tree-optimization/112961, tree-optimization/112991,
  	tree-optimization/113552, tree-optimization/113630,
  	tree-optimization/113670, tree-optimization/113831,
  	tree-optimization/113910, tree-optimization/114027,
  	tree-optimization/114115, tree-optimization/114121,
  	tree-optimization/114203, tree-optimization/114231,
  	tree-optimization/114246, tree-optimization/114375,
  	tree-optimization/114396, tree-optimization/114485,
  	tree-optimization/114566, tree-optimization/114672,
  	tree-optimization/114733, tree-optimization/114736,
  	tree-optimization/114749, tree-optimization/114787,
  	tree-optimization/114799, tree-optimization/114876,
  	tree-optimization/114965, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154
  - add --without-clang-plugin --without-llvm-plugin to annobin configure
    options


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244)


author: Keith Seitz <keiths@redhat.com> - 12.1-14
changelog:
  From Sergey Mende:
  - Backport upstream patch "gdb: call check_typedef at beginning of
    dwarf_expr_context::fetch_result". (Simon Marchi)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-16
changelog:
  - Tweak gdb-6.3-rh-testversion-20041202.patch so that $_gdb_major
    and $_gdb_minor will be obtained correctly.


author: Keith Seitz <keiths@redhat.com> - 12.1-2.el9
changelog:
  - Backport binutls/29699 "Fix an illegal memory access when parsing..."
    (Nick Clifton, RHBZ 2153228)


author: Guinevere Larsen <blarsen@redhat.com> - 12.1-4.el9
changelog:
  - Backport "Fix typo in recent code to add stack recursion limit to the Rust demangler."
    (Nick Clifton)
  - Backport "Add a recursion limit to the demangle_const function in the Rust demangler."
    (Nick Clifton, RHEL-4234)


author: Nick Clifton <nickc@redhat.com> - 12.67-1
changelog:
  - Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
  - Annocheck: Stop warnings about known gaps.    (RHEL-53218)
  - Annocheck: Fix stack realign test.  (#2302427)


author: Nick Clifton <nickc@redhat.com> - 12.67-2
changelog:
  - Spec File: Use correct directory for plugin installation.  (RHEL-53209)
  - Spec File: Disable plugin when running on wrong major version of the compiler.


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53209)


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Rebase for GTS 14.1 release.  (RHEL-76932)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-74061)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-70192)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-74059)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)
  - have gfortran require install-info (RHEL-62417)


author: Marek Polacek <polacek@redhat.com> 15.1.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.1 release
    - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407


author: Marek Polacek <polacek@redhat.com> 15.1.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
     c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
     c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
     fortran/102900, fortran/119928, fortran/119986, fortran/120049,
     fortran/120107, fortran/120139, fortran/120163, fortran/120179,
     fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
     libfortran/120152, libfortran/120153, libfortran/120158,
     libfortran/120196, libstdc++/118260, libstdc++/119427,
     libstdc++/119714, libstdc++/120029, libstdc++/120114,
     libstdc++/120159, libstdc++/120187, libstdc++/120190,
     libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
     modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
     preprocessor/120061, target/119610, testsuite/119909,
     tree-optimization/111873, tree-optimization/119712,
     tree-optimization/120043, tree-optimization/120048,
     tree-optimization/120074, tree-optimization/120089,
     tree-optimization/120143, tree-optimization/120211


author: Filip Januš <fjanus@redhat.com> - 2.2.5-12
changelog:
  - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src)
  - Resolves: #1599032


author: Filip Januš <fjanus@redhat.com> - 2.3.1-1
changelog:
  - Upstream released new version 2.3.1
  - patch bug615 is no more needed - fixed by upstream in release
  - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on
    x390s - XFAIL_TEST definition for x390s is no more necessary


author: Filip Januš <fjanus@redhat.com> - 2.3.2-1
changelog:
  - Add condition if fedora for packages not available in RHEL
  - enable avif support
  - use bcond
  - rebase to version 2.3.2


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Remove gdb-rhbz1261564-aarch64-hw-watchpoint-test.patch.  This test
    should be covered by gdb.base/watchpoint-unaligned.exp which was
    added upstream in commit a3b60e4588606354b93508a0008a5.


author: Guinevere Larsen <guinevere@redhat.com>
changelog:
  - remove gdb-test-bt-cfi-without-die.patch.  This test has been
    accepted upstream and will make its way back to testing with
    the GDB 17 release.


author: Alexandra Hájková <ahajkova@redhat.com> - 16.2-1
changelog:
  - Rebase to FSF GDB 16.2.
    Dropped:  gdb-backport-buildid-related-changes.patch
              gdb-catchpoint-re-set.patch
              gdb-remove-qnx-neutrino-support.patch
    Modified: gdb-add-rpm-suggestion-script.patch


author: Joan Torres <joantolo@redhat.com> - 40.1-32
changelog:
  - Leave session-opened signature the same as before and use a new
    session-opened-with-session-id signal to keep ABI compatibility
    Related: RHEL-46383


author: Joan Torres <joantolo@redhat.com> - 40.1-35
changelog:
  - Instead of allowing adding custom parameters to Xorg,
    only allow adding -nocursor. Allowing adding custom parameters
    is a potential security issue.
    Related: RHEL-81194


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16
changelog:
  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-17
changelog:
  - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
  - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
  - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-18
changelog:
  - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable()
  - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Josef Ridky <jridky@redhat.com> - 2:3.0.4-2
changelog:
  - fix CVE-2025-10920
  - fix CVE-2025-10921
  - fix CVE-2025-10922
  - fix CVE-2025-10923
  - fix CVE-2025-10924
  - fix CVE-2025-10925
  - fix CVE-2025-10934


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-17
changelog:
  - Add patches for CVE-2024-52533 and CVE-2025-4373
  - Update GDateTime test for new tzdata
  - Resolves: RHEL-94483
  - Resolves: RHEL-102844


author: Frédéric Bérat <fberat@redhat.com> - 2.34-244
changelog:
  - x86-64: Add GLIBC_ABI_DT_X86_64_PLT version to enable DT_X86_64_PLT	
    compatibility. (RHEL-109622)


author: Tamar Shacked <tshacked@redhat.com> - 6.0-56.3
changelog:
  - Rebase with latest RHGS-3.5.4
  - Fix changlog chronological order by removing unneeded changelogs
  - fixes bug bz#1939340


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-13
changelog:
  - Fix: previous commit removed one function from the library and thus broke the ABI
  - function gmpn_preinv_divrem_1 should now not be removed
  Related: rhbz#2044216


author: Kalev Lember <klember@redhat.com> - 40~rc-1
changelog:
  - Update to 40.rc
  - Make -extras subpackage require the main package
  - Drop move-adwaita-backgrounds.patch
  - Remove old obsoletes


author: Bastien Nocera <bnocera@redhat.com> - 3.34.3-4
changelog:
  + gnome-bluetooth-3.34.3-4
  - Revert “Require PulseAudio _or_ Pipewire for Bluetooth audio”
  - Closes: #1928166


author: Felipe Borges <feborges@redhat.com> - 40.0-38
changelog:
  - Scale up monitors drawing in display arrangment settings when multiple monitors
    Related: RHEL-4196


author: Ray Strode <rstrode@redhat.com> - 40.0-6
changelog:
  - Copy and run the script from XDG_RUNTIME_DIR
    Resolves: https://issues.redhat.com/browse/RHEL-25536


author: Olivier Fourdan <ofourdan@redhat.com> - 40.0-8
changelog:
  - Add Xwayland and dbus-daemon as weak dependencies
    Resolves: https://issues.redhat.com/browse/RHEL-66572


author: Milan Crha <mcrha@redhat.com> - 3.40.0-4
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)


author: Milan Crha <mcrha@redhat.com> - 3.40.0-5
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)
  - backport upstream fix to use external browser for OAuth2


author: Joan Torres <joantolo@redhat.com> - 40.1.1-11
changelog:
  - Add race fixes needed when terminating a conflicting session
    on GDM greeter.
    Resolves: RHEL-92341


author: Ray Strode <rstrode@redhat.com> - 40.0.1-15
changelog:
  - Fix crashers in g-s-d and control-center related to
    making subscription-manager a soft dep
    Related: RHEL-20449


author: Felipe Borges <feborges@redhat.com> - 40.0.1-22
changelog:
  - Use mount path in "Low disk" notification when multiple mount points have same name
    Related: RHEL-11910


author: Milan Crha <mcrha@redhat.com> - 41.5-2
changelog:
  - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file)
  - Resolves: #2129021 (Hide some errors in non-debug builds)


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.1-1
changelog:
  - Update to 3.40.1
  - Rebase the patches
  - Backport yet-to-be-released patches from upstream to avoid translation
    conflicts
  Resolves: #1959384


author: Peter Jones <pjones@redhat.com> - 3.0.9-3
changelog:
  - Fix some minor rpmlint complaints
  - Pull recent patches from upstream
  - Add support for ELF constructors and destructors
  - Fix a minor licensing problem


author: Peter Jones <pjones@redhat.com> - 3.0.11-1
changelog:
  - Update to 3.0.11 (via patches generated from git)
  - Plus newer upstream fixes (also via patches generated from git)
  - Fix shell exit failures in make
  - Fix .reloc section generation
  - Fix CHAR8 definition
  - Fix "make DESTDIR=..."
  - Change the installed .a/.o layout
  - Provide makefiles for consumers to use.
  - Make the -devel noarch since it's just headers.
  - Add a bunch of compatibility symlinks for the 3.0.8 filesystem layout
    These will go away once we've migrated everything using them in fedora
    to use the newer make system...


author: Peter Jones <pjones@redhat.com> - 3.0.11-2
changelog:
  - Make a compat subpackage to provide the old paths to our libraries, linker
    script, and includes.


author: Daiki Ueno <dueno@redhat.com> - 3.8.3-2
changelog:
  - Fix timing side-channel in deterministic ECDSA (RHEL-28959)
  - Fix potential crash during chain building/verification (RHEL-28954)


author: Alexander Sosedkin <asosedkin@redhat.com> - 3.8.10-1
changelog:
  - Rebase to 3.8.10
  - Revert defaulting to PBMAC1 in FIPS mode
  - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification


author: Alejandro Sáez <asm@redhat.com> - 1.25.0-1
changelog:
  - Update to Go 1.25.0
  - Set GOAMD64 to v2 to align with new architecture baselines
  - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2
  - Resolves: RHEL-109557


author: Parag Nemade <pnemade AT redhat DOT com> - 1:1.002-0.15.20130214
changelog:
  - Un-retire this package in F38+ (#2162532)
  - Update as per suggestions given in rename package review (#2166813)


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20200215-5
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Peng Wu <pwu@redhat.com> - 20230817-1
changelog:
  - Update Noto CJK to Sans 2.004 and Serif 2.002
  - Drop some Noto CJK Language Specific OTFs sub packages
  - Resolves: RHEL-13738


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.20.7-20
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Add upstream commits for git master which contains patches 9, 10 and 11
  - Add GCC10 fix
  - Cleanups


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.26.1-2
changelog:
  - fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
  - fix integer underflow in handling of Navcom packets (CVE-2025-67269)


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-15
changelog:
  - Resolves RHEL-97518: Rework grafana-selinux spec file sections
  - Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-18
changelog:
  - Resolves RHEL-125696: CVE-2025-58183
  - Resolves RHEL-132757: Grafana-selinux prevents plugins from searching cgroups


author: Paul Whalen <pwhalen@fedoraproject.org> - 0.16.0-2
changelog:
  - Update src to greenboot-rs, binaries remain greenboot
  - Obsoletes/Conflicts for bash greenboot, Provides greenboot


author: Sayan Paul <saypaul@redhat.com> - 0.16.1
changelog:
  - Ensure rollback trigger runs before systemd-update-done and only on updates
  - Log the correct system type when reporting rollback decisions
  - Fix CI/tests (Ansible callback config, GI deps) to keep gating green
  - Refresh Packit release config for Fedora delivery


author: Sayan Paul <saypaul@redhat.com> - 0.16.2
changelog:
  - restrict manual restart of healthcheck service
  - fixed error while running healtcheck inside container
  - removed bootupd dependency
  - fixed CI tests


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Bump version
  - Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542,
    CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835
    Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037
    Resolves: RHEL-71019, RHEL-70995, RHEL-71163


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
    CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
    CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
    CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
    CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
    CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
  - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
  - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
  - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
  - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
  - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
  - Resolves: RHEL-71189


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.22.8-2
changelog:
  - Enable asfdemux, dvdlpcmdec, dvdsub, and realmedia plugins
  - Disable AMR plugins in RHEL builds
  - Resolves: rhbz#2236889


author: Kalev Lember <klember@redhat.com> - 3.24.3-1
changelog:
  - Update to 3.24.3
  - Use https source URLs
  - Re-enable LTO now that we have upstream fix in place (#1898054)
  - Switch to meson build system
  - Tighten soname globs


author: Richard W.M. Jones <rjones@redhat.com> - 1.51.6-2
changelog:
  - Rebase to guestfs-tools 1.51.6
  - Implement --key all:...
    resolves: RHEL-19030
  - Fix crash because of off-by-one error
    resolves: RHEL-19062
  - Fix virt-customize --chown invalid format
    resolves: RHEL-21899


author: Richard W.M. Jones <rjones@redhat.com> - 1.51.6-4
changelog:
  - Add support for nbd+unix:// URIs
    resolves: RHEL-33956
  - customize: Implement --inject-blnsvr operation
    resolves: RHEL-36634


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.2-2
changelog:
  - Rebase to guestfs-tools 1.52.2
    resolves: RHEL-56811
  - Replace Jansson with json-c
    resolves: RHEL-65294


author: Tom Stellard <tstellar@redhat.com> - 5.3.3-3
changelog:
  - Fix warning building with clang
  - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type]


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.5
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.0-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.1-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1
  - Resolves: RHEL-69761


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.2-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.3-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4
  - Resolves: RHEL-83036


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.6-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.7-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.7
  - Resolves: RHEL-112184


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.4.22-4
changelog:
  - Always clear retry flags in read/write functions to avoid CPU
    usage spikes
  - Fix "unable to load certificate chain from file" issue
    Resolves: RHEL-71925, RHEL-68780


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.8.14-2
changelog:
  - Add tmpfiles.d file to make systemd-tmpfiles create/set correct
    ownership/permissions of /var/lib/haproxy
    Resolves: RHEL-120178


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Filip Januš <fjanus@redhat.com> - 1.5-1
changelog:
  - Nwe upstream version 1.5
  - Add patch to solve inconsistency between configure.ac and filename
  - Add Build requirement autoconf


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-4
changelog:
  - 1912147 - Enable matching for '<model>_series' drivers in PPD search algorithm
  - rework optional gui messages


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-5
changelog:
  - 1925259 - %pre scriptlet enables and starts cups.service, which is unnecessary
  - 1919556 - hp-fab crashed: QFileDialog.getOpenFileName is not used correctly


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-3
changelog:
  - Resolves: RHEL-68660 - RewriteRule proxying to UDS (unix domain socket)
    configured in .htaccess doesn't work on httpd-2.4.62-1


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-4
changelog:
  - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode
    characters in the name


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-7
changelog:
  - Resolves: RHEL-99815 - stickysession field does not work when specifying
    it in the query parameter after upgrade to 9.5
  - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS
    upgrade (CVE-2025-49812)
  - Resolves: RHEL-99968 - httpd: access control bypass by trusted
    clients is possible using TLS 1.3 session resumption (CVE-2025-23048)
  - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied
    data in mod_ssl (CVE-2024-47252)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-8
changelog:
  - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when
    updating system in image mode


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-9
changelog:
  - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child
    process is reclaimed


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-10
changelog:
  - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check
    to avoid unnecessary 421 errors after CVE-2025-23048 fix
  - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-12
changelog:
  - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
    via AllowOverride FileInfo (CVE-2025-66200)
  - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable
    override (CVE-2025-65082)
  - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds
    query string to #exec cmd=... (CVE-2025-58098)


author: Parag Nemade <pnemade AT redhat DOT com> - 5.1-3
changelog:
  - Resolves:rhbz#1967646 - Correct the License: tag to LGPLv3+ based on LICENSE.txt file
  - Added gating tests


author: Parag Nemade <pnemade AT redhat DOT com> - 1.0.3-21
changelog:
  - Remove the duplicate source file committed to this package git repository
  - Update URL tag and files section to be more verbose


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.42.20190303git
changelog:
  - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [bz#2218931]
  - Resolves: bz#2218931
    ([Hyper-V] [RHEL-9] /usr/sbin/vmbus_testing python script prints: "SyntaxWarning: "is" with a literal.")


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.43.20190303git
changelog:
  - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-9902]
  - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-9902]
  - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-9902]
  - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-9902]
  - Resolves: RHEL-9902
    ([Hyper-V][RHEL-9] hyperv-daemons write incompatible IPv6 prefix (IPV6NETMASK) in ifcfg)


author: Jon Maloy <jmaloy@redhat.com> - 0-0.44.20190303git
changelog:
  - hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95812]
  - Resolves: RHEL-95812
    ([Hyper-V][RHEL-9]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 9)


author: Peter Robinson <pbrobinson@fedoraproject.org> - 4.2-2
changelog:
  - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package)
  - Drop/obsolete eepromer subpackage, deprecated for 6 years
  - Drop python2 conditionals
  - Minor cleanups


author: Mike FABIAN <mfabian@redhat.com> - 1.4.2-1
changelog:
  - Update to  1.4.2
  - New translations: tr (Turkish) 100%, uk (Ukrainian) 100%,
    id (Indonesian) 100%, ja_JP (Japanese) 100%.
  - Translation updates: zh_CN, pt_BR


author: Mike FABIAN <mfabian@redhat.com> - 1.12.4-1
changelog:
  - Update to 1.12.4
  - Update translations from Weblate (updated es, cs, fa, pt_BR, zh_CN).
    zh_CN is 100% complete now.


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-1
changelog:
  - Update to 1.12.5
  - Return False in _execute_command_commit_candidate_number(self, number)
    if number out of range
  - Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/21
  - remove Use-from-unittest-import-mock-instead-of-just-import.patch
    (included upstream)
  - Update translations from Weblate (New translation for Sinhala (si) started)


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-3
changelog:
  - Resolves: rhbz#1974631 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE
    Resolves: https://github.com/definite/ibus-table-chinese/pull/14
  - Add SUGGESTION_MODE = TRUE to the wubi tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/15
  - Support pinyin mode also for stroke5 table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/12
  - Use nicer values for symbol and status prompt
    Resolves: https://github.com/definite/ibus-table-chinese/pull/8
  - update jyutping table; add cantonyale table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/11
  - Update jyutping and cantonese tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/9


author: Mike FABIAN <mfabian@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Use “from unittest import mock” instead of just “import mock”.
  - Update emoji annotations from CLDR
  - Translation update from Weblate for zh_CN (still 100% complete)


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-1
changelog:
  - Update to 2.10.5
  - Run the voikko tests only for libvoikko version >= 4.3
  - Adapt voikko test cases to the newest voikko version
    libvoikko-4.3-3, python3-libvoikko-4.3-3, voikko-fi-2.4-3
  - Log a warning when language is “fi” and “import libvoikko” failed
  - Return an empty list [] in spellcheck_suggest_voikko() when libvoikko was not imported
  - Update emoji annotations from CLDR, switching “no” and “nb”
    See: https://unicode-org.atlassian.net/browse/CLDR-2698
  - Remove icon in emoji-picker.appdata.xml (to avoid warnings
    from appstream-util and appstreamcli).


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-2
changelog:
  - Use the voikko build requires only for Fedora. They are only
    needed to run the voikko test cases during build.


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-3
changelog:
  - Remove gnome-desktop-testing and ibus-desktop-testing from the requires
    of the ibus-typing-booster-tests subpackage


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-1
changelog:
  - Update to 2.11.0
  - Use sensitivity feature of buttons in the setup tool tab where shortcuts are defined
  - Don’t let dialog action area of setup tool expand.
  - Improve the setup tool to make it possible to enter multi-line expansions of shortcuts
  - Resolves https://github.com/mike-fabian/ibus-typing-booster/issues/158
  - Elide extremely long candidates in the lookup table in the middle.
  - If a candidate contains newlines, replace the newlines with arrows in the lookup table.
  - If a commit string contains new-lines, commit it in several chunks
    and forward Return between the chunks.
  - Update emoji annotations from CLDR
  - Put the remote icon back in emoji-picker.appdata.xml, it was a
    false positive by appstreamcli
  - Translation update from Weblate (pt_PT updated, 100% complete now)
  - Skip the inscript2 test cases if these transliterations are not available.


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-3
changelog:
  - Resolves: rhbz#1974636 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Miguel Martín <mmartinv@redhat.com> - 2.19.0-3
changelog:
  - Update ignition-edge commit to support FIPS
      - https://github.com/fedora-iot/ignition-edge/pull/2


author: Yasmin Valim <ydesouza@redhat.com> - 2.21.0-1
changelog:
  - Re-sync with upstream changes adding ignition-grub subpackage
    and a few minor changes
  - New release


author: Kamal Heib <kheib@redhat.com> - 57.0-1
changelog:
  - Rebase to upstream release v57.0
  - Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449


author: Kamal Heib <kheib@redhat.com> - 60.0-1
changelog:
  - Rebase to upstream release v60.0
  - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331


author: Kamal Heib <kheib@redhat.com> - 60.0-2
changelog:
  - bump release to rebuild in sidetag
  - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331


author: Kamal Heib <kheib@redhat.com> - 60.0-3
changelog:
  - bump release to rebuild in sidetag
  - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331


author: Kamal Heib <kheib@redhat.com> - 61.0-1
changelog:
  - Rebase to upstream release v61.0
  - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331


author: Martin Kolman <mkolman@redhat.com> - 0.3.84-1
changelog:
  - Adjust to logging command changes in Anaconda (#1891621) (mkolman)
  - Make sure the output from custom_getpass() is serialized after stdout (lkundrak)


author: Martin Kolman <mkolman@redhat.com> - 0.3.86-1
changelog:
  - Drop python-nose from the dependencies (#1916799) (vponcova)
  - Add the makeupdates script (vponcova)
  - Remove deprecated support for add-ons (vponcova)
  - Don't run installation tasks of add-ons in a meta task (vponcova)
  - Migrate COPR builds from Jenkins to Packit (jkonecny)
  - Add documentation for the new test solution (jkonecny)
  - Add support for custom Anaconda COPR repository (jkonecny)
  - Use `make test` to run TMT tests locally (jkonecny)
  - Add TMT configuration to get Anaconda COPR build (jkonecny)
  - Add Packit support for initial-setup (jkonecny)
  - Update and use setup.py for archive creation (jkonecny)
  - Fix ChangeLog generation in Makefile (jkonecny)


author: Martin Kolman <mkolman@redhat.com> - 0.3.89-1
changelog:
  - Include scripts in the updates image (vponcova)
  - Drop build time dependency on the anaconda package (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.1-1
changelog:
  - Add gnome-kiosk to window managers usable by initial-setup (#1962198) (vponcova)
    Resolves: rhbz#1962198


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.2-1
changelog:
  - Disable multi TTY handler when running in SSH session (#1951577) (mkolman)
    Resolves: rhbz#1951577


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.7.1-1
changelog:
  - fix(parser/sshd_config): keep inline comments when parsing config lines
    (#4546) (tayushi1610@gmail.com)
  - feat: New parser MdatpManaged and the spec (#4562)
    (39508521+shlao@users.noreply.github.com)
  - fix(doc): add required configuration for readthedocs (#4565)
    (xiangceliu@redhat.com)
  - chore(doc): update the guide steps for PR to 3.0_egg (#4566)
    (xiangceliu@redhat.com)
  - fix: handle error lines of spec grubby_default_index (#4538)
    (xiaoxwan@redhat.com)
  - fix: Skip RpmVPackage only when no error and no installed (#4550)
    (39508521+shlao@users.noreply.github.com)
  - feat: Add spec and parser for compliance_policies_enabled (#4536)
    (jiazhang@redhat.com)
  - chore(script): update RPM script to use Python virtual env (#4561)
    (xiangceliu@redhat.com)
  - fix: revert the ls specs removed by mistake (#4554) (xiangceliu@redhat.com)
  - fix: exclude irrelevant logrotate configuration files (#4551)
    (xiangceliu@redhat.com)
  - doc: add RPM delivery notes to contributing (#4545) (xiangceliu@redhat.com)
  - fix: don't immediately exit collection when inventory_id is unavailable
    (#4537) (xiangceliu@redhat.com)
  - chore: sync the tito required file to master (#4547) (xiangceliu@redhat.com)
  - feat: onboard packit for build RPM on master branch (#4542)
    (xiangceliu@redhat.com)
  - fix(client): Suppress link message after upload (#4544) (mhorky@redhat.com)
  - chore: sync the changelog with the 3.0 branch (#4540) (xiangceliu@redhat.com)
  - chore: update RPM building scripts and spec file (#4533)
    (xiangceliu@redhat.com)
  - feat: New spec and parser for '/var/log/foreman-installer/foreman.log'
    (#4535) (143097963+atewari-rh@users.noreply.github.com)
  - chore: merge the two RPM build scripts (#4532) (xiangceliu@redhat.com)
  - feat: new script to build insights-core RPM (#4507) (xiangceliu@redhat.com)
  - chore: Introduce Client phase v2 (#4512) (mhorky@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.8.1-1
changelog:
  - chore(spec): Add back spec vmware_tools_conf (#4595) (jiazhang@redhat.com)
  - fix: use try_auto_configuration method for compliance (#4591)
    (xiangceliu@redhat.com)
  - fix(client): do not retry upload on successful upload (#4586)
    (pschrimp@redhat.com)
  - chore(script): update the file name typo in last operation (#4588)
    (xiangceliu@redhat.com)
  - chore: place the build target in spec instead of passing macro (#4587)
    (xiangceliu@redhat.com)
  - chore: refine the pull request template (#4585) (xiangceliu@redhat.com)
  - fix: Enhance spec 'filefrag' to check initramfs/vmlinuz files (#4574)
    (39508521+shlao@users.noreply.github.com)
  - fix: add dep ds containers_with_shell for container specs (#4581)
    (xiaoxwan@redhat.com)
  - chore: remove the unused build scripts (#4577) (xiangceliu@redhat.com)
  - fix: do not collect egg_release file in RPM delivery (#4573)
    (xiangceliu@redhat.com)
  - chore(ci/cd): do not build Egg for PRs to matser (#4578)
    (xiangceliu@redhat.com)
  - New parser for sos_commands/crio/crictl_ps (#4497) (aghodake@redhat.com)
  - fix(test): regression issue of yaml.SafeLoader in testing (#4557)
    (xiangceliu@redhat.com)
  - fix: no valid conf found issue in combiner GrubConf (#4437)
    (xiaoxwan@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.9.1-1
changelog:
  - chore(spec): change ip_route_show_table_all to filterable=True (#4597)
    (xiangceliu@redhat.com)
  - Alter malware code to use locally stored yara rules for the 3rd party feature
    (#4571) (63891960+mtclinton@users.noreply.github.com)
  - fix: collect yum_updates on all supported RHEL (#4607)
    (xiangceliu@redhat.com)
  - fix(MANIFEST): add the 'public.gpg' required by playbook_verifier (#4602)
    (xiangceliu@redhat.com)
  - chore(spec): do not collect ansible_telemetry before it's GA (#4601)
    (xiangceliu@redhat.com)
  - fix: remove the deps from insights_ausearch spec (#4603)
    (xiangceliu@redhat.com)
  - fix(doc): fix homepage example in README (#4599) (xiangceliu@redhat.com)
  - fix(rpm-spec): fix "Requires:" of selinux-policy (#4580)
    (xiangceliu@redhat.com)
  - feat: add parser for spec.nvidia_smi_query_gpu (#4600) (xiaoxwan@redhat.com)
  - feat(spec/parser): new spec and parser for AnsibleTelemetry (#4589)
    (xiangceliu@redhat.com)
  - fix: FileProvider.validate() leaked files outside root (#4474)
    (71874510+jholecek-rh@users.noreply.github.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.9.3-1
changelog:
  - spec: new spec and parser for krb5_localauth_plugin (#4632)
    (xiangceliu@redhat.com)
  - chore(uname): Support RHEL 9.7 in Uname (#4631) (jiazhang@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.10.1-1
changelog:
  - fix(spec): ignore errors when collecting bootloader data (#4636)
    (xiangceliu@redhat.com)
  - fix(spec): keyctl_show should be a simple_command (#4635)
    (xiangceliu@redhat.com)
  - Add new parser & datasource for ls -ldZ (#4622) (986222045@qq.com)
  - fix: enhance IlabModuleList parser on content change (#4624)
    (xiaoxwan@redhat.com)
  - chore(spec): don't need strictly version match (#4634)
    (xiangceliu@redhat.com)
  - chore: Update the base of SsTUPNA (#4619) (xiangceliu@redhat.com)
  - Add spec rear_default_conf (#4625) (jiazhang@redhat.com)
  - chore: Uname supports RHEL 10.1 (#4643) (xiangceliu@redhat.com)
  - spec: new datasource & parser for ls -ldH (#4620) (986222045@qq.com)
  - fix(script): revert to update setup.py (#4623) (xiangceliu@redhat.com)
  - fix(script): tarbal cannot be found when building for testing (#4621)
    (xiangceliu@redhat.com)
  - chore(script): change release to 'dev' for PR testing builds (#4618)
    (xiangceliu@redhat.com)
  - chore(spec): add new spec bootctl_status for analytics (#4613)
    (xiangceliu@redhat.com)
  - chore(spec): add new spec mokutil_list_enrolled for analytics (#4612)
    (xiangceliu@redhat.com)
  - chore(spec): add new spec keyctl_show for analytics (#4611)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.11.1-1
changelog:
  - chore: print version.release in 'insights.version' module (#4670)
    (xiangceliu@redhat.com)
  - fix(test): filters.yaml for building RPM in packit for test (#4665)
    (xiangceliu@redhat.com)
  - chore(rpmbuild): refine the RPM spec file (#4669) (xiangceliu@redhat.com)
  - fix(parser): Deprecate the SsTUPLN parser (#4662) (xiangceliu@redhat.com)
  - feat: add filter "Name:" to InstalledProductIDs spec (#4660)
    (xiaoxwan@redhat.com)
  - chore(test): replace mock with unittest.mock (#4659) (xiangceliu@redhat.com)
  - spec: do hostname obfuscation for bootctl_status (#4657)
    (xiangceliu@redhat.com)
  - spec: remove localectl_status from RPM collection (#4655)
    (xiangceliu@redhat.com)
  - chore: print current version for tmt testing convenience (#4650)
    (xiangceliu@redhat.com)
  - fix: don't import FileListing in insights (#4647) (xiangceliu@redhat.com)
  - chore(ci/cd): remove py27 pipeline tests for master  (#4654)
    (xiangceliu@redhat.com)
  - feat(test): unit test for successful upload (#4641) (pschrimp@redhat.com)
  - fix(test): update the check of obfuscation warnings (#4648)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.1.1-1
changelog:
  - fix(datasource cleanning): clean datasource based on spec entry (#4692)
    (xiangceliu@redhat.com)
  - fix: handle no account_number in response data (#4687) (lichen@redhat.com)
  - chore(build): remove python2 requires from setup/pyproject (#4686)
    (xiangceliu@redhat.com)
  - fix: apply redacting and obfuscating for datasource specs (#4681)
    (xiangceliu@redhat.com)
  - fix: remove six from the core part code (#4671) (xiangceliu@redhat.com)
  - fix(malware-detection): malware scan yara error handling (#4678)
    (63891960+mtclinton@users.noreply.github.com)
  - Add new spec sys_block_queue_max_segment_size (#4645) (986222045@qq.com)
  - Add new spec ossl_files (#4668) (986222045@qq.com)
  - Add new spec ethtool_priv_flags (#4666) (986222045@qq.com)
  - chore(build): update packit to build with specific release (#4685)
    (xiangceliu@redhat.com)
  - fix(test): modify filter for spec sshd_test_mode (#4683)
    (zhangqianqian@users.noreply.github.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.1.2-1
changelog:
  - fix: traceback info in metadata JSON of filterable specs (#4694)
    (xiangceliu@redhat.com)
  - fix(spec): stop collecting sealert on RHEL 9 and older (#4698)
    (xiangceliu@redhat.com)
  - fix(doc): avoid too extensive cross-ref check (#4695) (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.2.1-1
changelog:
  - spec: stop collecting tuned_adm on RHEL 9 when SELinux enabled (#4711)
    (xiangceliu@redhat.com)
  - chore(spec): remove cmd path added to support old RHEL (#4718)
    (xiangceliu@redhat.com)
  - spec: don't collect ansible_telemetry when SELinux is enabled (#4712)
    (xiangceliu@redhat.com)
  - fix(manifest): add SELinuxDisable to configs of default manifest (#4713)
    (xiangceliu@redhat.com)
  - chore(component): update and add new selinux components (#4709)
    (xiangceliu@redhat.com)
  - chore(parser): refine the SEStatus parser (#4706) (xiangceliu@redhat.com)
  - spec: add ansible_telemetry to collection (#4700) (xiangceliu@redhat.com)
  - fix: update the help message to -S/--show-rules option (#4702)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.7.2.2-1
changelog:
  - chore(setup): remove six from the dependencies (#4719)
    (xiangceliu@redhat.com)
  - fix(test): add filter for spec strings_shimx64_efi (#4721)
    (zhangqianqian@users.noreply.github.com)
  - chore: drop python2 support from insights-client (#4707)
    (pschrimp@redhat.com)


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-19
changelog:
  - Resolves: RHEL-100450 eDNS: multiple issues during encrypted DNS setup
  - Resolves: RHEL-89907 Privilege escalation from host to domain admin in FreeIPA
  - Resolves: RHEL-99315 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-98565 ipa-idrange-fix: 'Env' object has no attribute 'basedn'
  - Resolves: RHEL-96920 Nightly test failure (rawhide) in test_trust.py::TestTrust::test_server_option_with_unreachable_ad
  - Resolves: RHEL-31907 kdb: support storing and retrieving multiple master keys


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-20
changelog:
  - Resolves: RHEL-106285 Incorrect use of external IdP GitHub trademark
  - Resolves: RHEL-106026 Include fixes in python3-ipatests package
  - Resolves: RHEL-105512 kdb: prevent double crash in RBCD ACL free
  - Resolves: RHEL-101707 ipatests: use "sos report" instead of "sosreport" command
  - Resolves: RHEL-101544 ipa-client-encrypted-dns does not ensure bind-utils >= 9.18 for DoT-compatible nsupdate
  - Resolves: RHEL-100450 eDNS: multiple issues during encrypted DNS setup


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-22
changelog:
  - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-24
changelog:
  - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-25
changelog:
  - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9]
  - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9]
  - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
  - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9]
  - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9]
  - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package 
  - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8]
  - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.0-1
changelog:
  - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache 
  - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls
  - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service 
  - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix
  - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py
  - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-1
changelog:
  - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates
  - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS
  - Resolves: RHEL-141297 Memory leaks in IPA plugins
  - Resolves: RHEL-141054 IPA fails to sign zone
  - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
  - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8


author: Rob Crittenden <rcritten@redhat.com> - 0.16-2
changelog:
  - Don't fail if a service name cannot be looked up in LDAP
  - Disable the ipa-ods-exporter service check


author: Rob Crittenden <rcritten@redhat.com> - 0.19-1
changelog:
  - Update to 0.19 release
    - Add a message if not a trust agent/controller (RHEL-116896)
    - Check that expected NSS token matches the current FIPS state (RHEL-116897)
    - Add /etc/pki/tls/certs/ directory to file checker (RHEL-116898)
    - Check that allowed_uids in the SSSD config is valid (RHEL-79092)


author: Phil Sutter <psutter@redhat.com> [1.8.10-3.el9]
changelog:
  - extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
  - spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
  - nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
  - spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]


author: Phil Sutter <psutter@redhat.com> [1.8.10-5.el9]
changelog:
  - xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
  - tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
  - nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
  - nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
  - nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]


author: Jan Macku <jamacku@redhat.com> - 20210202-10
changelog:
  - arping: Fix 1s delay on exit for unsolicited arpings (RHEL-34110)
  - arping: exit 0 if running in deadline mode and we see replies (RHEL-27718)
  - ping: Print reply with wrong source with warning & some follow-up fixes (RHEL-12789, RHEL-13480)
  - ping: Fix socket error reporting (RHEL-4608)


author: Jan Macku <jamacku@redhat.com> - 20210202-12
changelog:
  - Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (RHEL-94334)


author: Cole Robinson <aintdiscole@gmail.com> - 20200823-1.git4bd064de.git
changelog:
  - Update to newer git snapshot, synced with qemu.git
  - Re-enable HTTPS support, with edk2 fix included (bz 1820836)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-4.git4bd064de
changelog:
  - ipxe-Skip-some-QEMU-ROMs-when-building-for-RHEL.patch [bz#1956931]
  - ipxe-spec-combine-BIOS-and-EFI-roms-using-util-catrom.pl.patch [bz#1957246]
  - Resolves: bz#1956931
    (ipxe-roms-qemu list: Clean out old ROMs)
  - Resolves: bz#1957246
    (boot vm from pxe failed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-5.git4bd064de
changelog:
  - ipxe-Disable-SHA-1.patch [bz#1935932]
  - ipxe-Replace-genisoimage-with-xorriso.patch [bz#1971981]
  - ipxe-spec-Drop-disabled-efi-ia32-build-infrastructure.patch [bz#1980138]
  - ipxe-spec-Generate-qemu-compatible-rom-filenames.patch [bz#1980138]
  - Resolves: bz#1935932
    (ipxe implements and/or uses the deprecated SHA-1 algorithm by default ()
  - Resolves: bz#1971981
    (Please replace genisoimage with xorriso)
  - Resolves: bz#1980138
    (install qemu rom symlinks so qemu doesn't have to)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-6.git4bd064de
changelog:
  - ipxe-Add-ping-command-support.patch [bz#1985658]
  - ipxe-Add-VLAN-tagging-support.patch [bz#1985658]
  - ipxe-netdevice-Strip-802.Q-VLAN-0-priority-tags.patch [bz#1985658]
  - ipxe-Provide-snponly.efi-rom.patch [bz#1985658]
  - ipxe-Build-hwcert-subpackage.patch [bz#1985658]
  - Resolves: bz#1985658
    (carry forward rhel8 ipxe packaging changes)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.452.b09-2
changelog:
  - Update to 8u452-b09 (GA)
  - Update release notes for 8u452-b09.
  - Remove long option documentation from JDK-8335912/JDK-8337499 as not present in 8u
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86967
  - Resolves: RHEL-86620


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-3
changelog:
  - Update to 8u462-b08 (GA)
  - Update release notes for 8u462-b08.
  - Require tzdata 2025b due to upstream inclusion of JDK-8352716
  - Add early backport of JDK-8339414
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-101648
  - Resolves: RHEL-102312
  - Resolves: RHEL-97496


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-4
changelog:
  - Bump rpmrelease for CentOS build
  - Remove obsolete hack to hardcode newer portable version on RHEL
  - Related: RHEL-101648
  - Related: RHEL-102312
  - Related: RHEL-97496


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-5
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-119329


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.472.b08-1
changelog:
  - Update to 8u472-b08 (GA).
  - Update release notes for 8u472-b08.
  - Drop local JDK-8339414 fix as this is now included upstream
  - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118767
  - Resolves: RHEL-119455


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.472.b08-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118767
  - Related: RHEL-119455
  - Related: RHEL-118775


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Backport SHA-3 support for PKCS11 provider
  - Sync patch set with portable build we are using by removing rh1648644-java_access_bridge_privileged_security.patch
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-2
changelog:
  - Update to jdk-11.0.19.0+7
  - Update release notes to 11.0.19.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Rebase FIPS support against 11.0.19+6
  - Rebase RH1750419 alt-java patch against 11.0.19+6
  - Replace local copies of JDK portable binaries with build dependencies
  - Use portable build on x86_32 now one is available
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-3
changelog:
  - Revert "Restore native build for x86 as there is no portable build"
  - Reintroduce useful cleanups from x86 reversion
  - Adjust oj_vendor_version & oj_vendor_bug_url to match the portable so test passes
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-4
changelog:
  - Include the java-11-openjdk-portable.spec file with instructions on how to rebuild.
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1
changelog:
  - Update to jdk-11.0.20.0+8 (GA)
  - Update release notes to 11.0.20.0+8
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
  - Bump tzdata requirement to 2023c now it is available in the buildroot
  - Bump bundled LCMS version to 2.15 as in jdk-11.0.20+1.
  - Bump bundled HarfBuzz version to 7.0.1 as in jdk-11.0.20+7
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2217715
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-3
changelog:
  - Fix tzdata requirement copy-and-paste error that led to two BuildRequires and no Requires
  - Resolves: rhbz#2224420


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1
changelog:
  - Update to jdk-11.0.20.1+1 (GA)
  - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
  - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Resolves: rhbz#2236590


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.13.0.11-4
changelog:
  - Set this to be the default/system JDK providing 'java', 'jre', 'java-devel', etc.
  - Set rpmrelease to 4
  - Resolves: RHEL-63034


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.14+1 (EA)
  - Add to .gitignore openjdk-17.0.14+1-ea.tar.xz
  - Set updatever to 14
  - Set buildver to 1
  - Set rpmrelease to 2
  - Set is_ga to 0
  - Update sources to openjdk-17.0.14+1-ea.tar.xz
  - Double percent signs consistently throughout comments
  - Set bundled giflib provide version to 5.2.2
  - Set bundled libpng provide version to 1.6.43
  - Warn about bundled provide version bumps and backouts in openjdk_news.sh
  - Remove 0001-8332174-Remove-2-unpaired-RLO-Unicode-characters-in-.patch file
  - Revert: Use component in EPEL and Fedora bug URLs


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.7-2
changelog:
  - Update to jdk-17.0.14+7 (GA)
  - Add to .gitignore openjdk-17.0.14+7.tar.xz
  - Set buildver to 7
  - Set is_ga to 1
  - Update sources to openjdk-17.0.14+7.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Resolves: RHEL-73981
  - Resolves: RHEL-73559
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.15.0.6-2
changelog:
  - Update to jdk-17.0.15+6 (GA)
  - Add to .gitignore openjdk-17.0.15+6.tar.xz
  - Set updatever to 15
  - Set buildver to 6
  - Update sources to openjdk-17.0.15+6.tar.xz
  - Set bundled freetype provide version to 2.13.2
  - Set bundled harfbuzz provide version to 8.2.2
  - Require tzdata-java 2025a at runtime and for build
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Update FIPS patch
  - Resolves: RHEL-86627
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.16.0.8-2
changelog:
  - Update to jdk-17.0.16+8
  - Add to .gitignore openjdk-17.0.16+8.tar.xz
  - Set updatever to 16
  - Set buildver to 8
  - Set rpmrelease to 2
  - Update sources to openjdk-17.0.16+8.tar.xz
  - Resolves: RHEL-101788
  - Resolves: RHEL-101795
  - Resolves: RHEL-101796
  - Resolves: RHEL-101797
  - Resolves: RHEL-102283
  - Resolves: RHEL-102286
  - Resolves: RHEL-102285
  - Resolves: RHEL-102284
  - Require tzdata-java 2025b at runtime and for build
  - Set bundled freetype provide version to 2.13.3
  - Set bundled harfbuzz provide version to 10.4.0
  - Set bundled lcms2 provide version to 2.17.0
  - Set bundled libpng provide version to 1.6.47
  - Recommend pipewire
  - Related: RHEL-102667
  - Resolves: RHEL-102669
  - Resolves: RHEL-102670
  - Resolves: RHEL-102672
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.17.0.10-1
changelog:
  - Update to jdk-17.0.17+10 (GA)
  - Add to .gitignore openjdk-17.0.17+10.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set updatever to 17
  - Set buildver to 10
  - Set rpmrelease to 1, remove 'must start at 2' comment
  - Set bundled harfbuzz version to 11.2.0
  - Update sources to openjdk-17.0.17+10.tar.xz
  - Resolves: RHEL-119458
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.8+1 (EA)
  - Update release notes to 21.0.8+1
  - Bump freetype version to 2.13.3 following JDK-8348596
  - Bump harfbuzz version to 10.4.0 following JDK-8348597
  - Bump lcms2 version to 2.17.0 following JDK-8348110
  - Bump libpng version to 1.6.47 following JDK-8348598
  - Switch to EA mode
  - Drop JDK-8351500 local patch which is now available in 21.0.8+1 upstream
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-101798


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Related: RHEL-103209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.2-0.1.ea
changelog:
  - Update to jdk-21.0.8+2 (EA)
  - Update release notes to 21.0.8+2
  - Sync the copy of the portable specfile with the latest update
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Related: RHEL-101798
  - Resolves: RHEL-103209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.8-0.1.ea
changelog:
  - Update to jdk-21.0.8+8 (EA)
  - Update release notes to 21.0.8+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-101798


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland
  - Resolves: RHEL-102677


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Update to jdk-21.0.8+9 (GA)
  - Update release notes to 21.0.8+9
  - Switch to GA mode
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-102289


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-1
changelog:
  - Update to jdk-21.0.9+10 (GA)
  - Update release notes to 21.0.9+10
  - Bump harfbuzz version to 11.2.0 following JDK-8355528
  - Add NEWS corrections from Thomas
  - Use double spacing consistently in notes for this release
  - Correct 11u release reference to corresponding 21u release as pointed out by Kieran
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118774
  - Resolves: RHEL-119466


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118774
  - Related: RHEL-119466


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Create java-25-openjdk package based on java-21-openjdk
  - Update to jdk-25.0.1+8 (GA)
  - Update release notes with features of JDK 22, 23, 24 & 25
  - Mention finalisation JEP for features finalised in JDK 22, 23 & 24
  - Update release notes to 25.0.1+8
  - Update README file for java-25-openjdk
  - Make sure this is not the default/system JDK providing 'java', 'jre', 'java-devel' ,etc.
  - Remove 21u FIPS patch and disable use until we are ready for the 25 version
  - Adjust CLDR expectations in TestTranslations.java after JDK-8317979 started using tzdata values
  - Adjust TestTranslations.java to expect the same short name throughout for fr_FR and de_DE (bug?)
  - Remove references to libsystemconf.so and nss.fips.cfg from the 21u FIPS patch
  - Include static libraries in the vm_variant subdirectory after JDK-8307858 (libjvm.a)
  - Flip equals test in TestSecurityProperties.java to handle null values from Security.getProperty
  - Introduce crypto_policy_active to designate whether we should expect policy adherence in testing
  - Flip crypto_policy_active to false while the crypto policy & FIPS patch is not present
  - Handle new libsimdsort.so introduced on x86_64 only by JDK-8309130
  - Remove lible.so handling following its removal in JDK-8327476: "Upgrade JLine to 3.26.1"
  - Install jaxp-strict.properties.template added by JDK-8330542: "Template for Creating Strict JAXP Configuration File"
  - alt-java man page installation is now handled by the OpenJDK build
  - Adjust TestTranslations.java with updated German translations from CLDR 46 (JDK-8333582) (Mountain->Mountains)
  - Run javap with the disassembled code (-c) option now required for -l by JDK-8345145
  - Remove default.policy and java.policy following JDK-8338411: "Permanently Disable the Security Manager"
  - Make man page handling dependent on pandoc being available during the portable build
  - Handle new CDS archive variants (*_coh*) added by Compact Object Headers (JDK-8305895)
  - Add missing man page alternatives for jdeprscan, jfr, jhsdb, jimage, jlink & jmod and fix alphabetical ordering
  - Support jnativescan added by JDK-8317611: "Add a tool like jdeprscan to find usage of restricted methods"
  - Add recent native libraries to _privatelibs (libjsvml.so, libsimdsort.so, libsyslookup.so)
  - Support libsleef on AArch64 & RISC-V added by JDK-8329816, JDK-8320500 (RISC-V) & JDK-8312425 (AArch64)
  - Remove superfluous backslashes that cause two alternative commands to be combined
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-126022


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Add libnssadapter.so
  - Add FIPS crypto-policies configuration
  - Remove obsolete security.useSystemPropertiesFile setup
  - Update TestSecurityProperties.java test and calling convention
  - Resolves: RHEL-128414
  - Resolves: RHEL-128412


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS
  - Patch the nssadapter build to recognise LDFLAGS
  - Resolves: RHEL-131898


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-2
changelog:
  - Add java-25-openjdk-crypto-adapter subpackage
  - Update library setting in create-redhat-properties-files.bash
  - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties
  - Resolves: RHEL-132520
  - Resolves: RHEL-132523


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-2
changelog:
  - Incorporate new FIPS patch for 25u
  - Drop static libjvm.a following adjusted build target for portable build
  - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image
  - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-133743
  - Resolves: RHEL-133737
  - Related: RHEL-131898


author: Jiri Vanek <jvanek@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - criu-devel moved to BR
  - now requires criu-libs
  - enabled debuginfo generation
  - excluded i686 build as criu is 64b only
  - .so file moved out of jar. Required teo patches:
  - added and applied patch0 output_loc.patch
  - added and applied patch1 load_library.patch
  - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.3.20210802a3007aa
changelog:
  - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9.
  - This also ensures use of the standard build flags and installs the jar in the expected location.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.4.20210807b2d3751
changelog:
  - Update to latest upstream version with renamed package and consistent use of "jigawatts"
  - Drop library patch which is no longer needed.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.0~SNAPSHOT^20210827.a5f8e31-1
changelog:
  - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.21.0.0.0-4
changelog:
  - Bump release number to make RHEL 9.1 build later than RHEL 9 Beta & RHEL 9 GA builds
  - Resolves: rhbz#2071920


author: Zamir SUN <zsun@fedoraproject.org> - 0-0.17.20191127gitbd56a60
changelog:
  - Workaround "multiple definition of `yyin'"
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=1799559


author: Cestmir Kalina <ckalina@redhat.com> - 0.24
changelog:
  - Fix annocheck failures
  - Fix osci tier0 test reference
  - Fix ET_DYN vmlinux namespace support
  - Resolves: rhbz#2038913
  - Resolves: rhbz#2045976
  - Resolves: rhbz#2038892


author: Akira TAGOH <tagoh@redhat.com> - 2.5-35
changelog:
  - Drop gtk2 dependency completely.
  - Make anthy build conditionally for Fedora release only.
    Resolves: rhbz#1939777
  - Fix build fail without anthy-devel.


author: Christine Caulfield <ccaulfie@redhat.com> - 2.2.8-6
changelog:
  - fix "Keepalived claims that blackhole route doesn't have interface and can't be tracked"
    Resolves: RHEL-40520


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-667.el9]
changelog:
  - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() (Maurizio Lombardi) [RHEL-87800]
  - ata: libata-scsi: Fix system suspend for a security locked drive (Tomas Henzl) [RHEL-106827]
  - ata: ahci: Use correct DMI identifier for ASUSPRO-D840SA LPM quirk (Tomas Henzl) [RHEL-106827]
  - ata: libata-scsi: Fix ata_to_sense_error() status handling (Tomas Henzl) [RHEL-106827]
  - ata: ahci: Disallow LPM for Asus B550-F motherboard (Tomas Henzl) [RHEL-106827]
  - ata: ahci: Disallow LPM for ASUSPRO-D840SA motherboard (Tomas Henzl) [RHEL-106827]
  - ata: libata-scsi: Fix offsets for the fixed format sense data (Tomas Henzl) [RHEL-106827]
  - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137065] {CVE-2025-38024}
  - scsi: qla2xxx: Update version to 10.02.10.100-k (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Fix bsg_done() causing double free (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Query FW again before proceeding with login (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Validate sp before freeing associated memory (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Free sp in error path to fix system crash (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Delay module unload while fabric scan in progress (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Allow recovery for tape devices (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Add bsg interface to support firmware img validation (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Validate MCU signature before executing MBC 03h (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Add load flash firmware mailbox support for 28xxx (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Add support for 64G SFP speed (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Add Speed in SFP print information (Nilesh Javali) [RHEL-136530]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-668.el9]
changelog:
  - bonding: don't set oif to bond dev when getting NS target destination (CKI Backport Bot) [RHEL-128764]
  - thunderbolt: Add support for Intel Wildcat Lake (Desnes Nunes) [RHEL-95661]
  - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt (Xin Long) [RHEL-118175]
  - redhat: hsr: Remove tech preview tainting (Felix Maurer) [RHEL-100941]
  - redhat: Package net/hsr selftests (Felix Maurer) [RHEL-127796]
  - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (Felix Maurer) [RHEL-127794]
  - hsr: Follow standard for HSRv0 supervision frames (Felix Maurer) [RHEL-127794]
  - hsr: Fix supervision frame sending on HSRv0 (Felix Maurer) [RHEL-127794]
  - net: hsr: prevent creation of HSR device with slaves from another netns (Felix Maurer) [RHEL-127794]
  - net/hsr: add interlink to fill_info output (Felix Maurer) [RHEL-127764 RHEL-127794]
  - net/hsr: add protocol version to fill_info output (Felix Maurer) [RHEL-127764 RHEL-127794]
  - hsr: hold rcu and dev lock for hsr_get_port_ndev (Felix Maurer) [RHEL-127794]
  - hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr (Felix Maurer) [RHEL-127794]
  - hsr: use rtnl lock when iterating over ports (Felix Maurer) [RHEL-127794]
  - hsr: use netdev_master_upper_dev_link() when linking lower ports (Felix Maurer) [RHEL-127794]
  - net, hsr: reject HSR frame if skb can't hold tag (Felix Maurer) [RHEL-127794] {CVE-2025-39703}
  - net: hsr: sync hw addr of slave2 according to slave1 hw addr on PRP (Felix Maurer) [RHEL-127794 RHEL-130474]
  - redhat: hsr: Enable KUnit test for PRP duplicate discard (Felix Maurer) [RHEL-127794]
  - net: hsr: Add KUnit test for PRP (Felix Maurer) [RHEL-127794]
  - net: hsr: Fix PRP duplicate detection (Felix Maurer) [RHEL-127794]
  - net: hsr: Create and export hsr_get_port_ndev() (Felix Maurer) [RHEL-127794]
  - net: hsr: remove synchronize_rcu() from hsr_add_port() (Felix Maurer) [RHEL-127794]
  - net: hsr: remove one synchronize_rcu() from hsr_del_port() (Felix Maurer) [RHEL-127794]
  - net: hsr: must allocate more bytes for RedBox support (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Add test for VLAN (Felix Maurer) [RHEL-127794 RHEL-130476]
  - net: hsr: Add VLAN CTAG filter support (Felix Maurer) [RHEL-127794 RHEL-130476]
  - net: hsr: Add VLAN support (Felix Maurer) [RHEL-127794 RHEL-130476]
  - tests: hsr: Increase timeout to 50 seconds (Felix Maurer) [RHEL-127794]
  - net: hsr: convert to use new timer APIs (Felix Maurer) [RHEL-127794]
  - net: hsr: Remove interlink_sequence_nr. (Felix Maurer) [RHEL-127794]
  - net: hsr: Use the seqnr lock for frames received via interlink port. (Felix Maurer) [RHEL-127794]
  - net: hsr: prevent NULL pointer dereference in hsr_proxy_announce() (Felix Maurer) [RHEL-127794]
  - net: hsr: cosmetic: Remove extra white space (Felix Maurer) [RHEL-127794]
  - treewide, timers: Rename from_timer() to timer_container_of() (Felix Maurer) [RHEL-100940 RHEL-127794]
  - net: hsr: Send supervisory frames to HSR network with ProxyNodeTable data (Felix Maurer) [RHEL-100940 RHEL-127794]
  - selftests: hsr: Extend the hsr_ping.sh test to use fixed MAC addresses (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Extend the hsr_redbox.sh test to use fixed MAC addresses (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Fix "File exists" errors for hsr_ping (Felix Maurer) [RHEL-127794]
  - test: hsr: Extend the hsr_redbox.sh to have more SAN devices connected (Felix Maurer) [RHEL-127794]
  - test: hsr: Call cleanup_all_ns when hsr_redbox.sh script exits (Felix Maurer) [RHEL-100940 RHEL-127794]
  - net: hsr: init prune_proxy_timer sooner (Felix Maurer) [RHEL-100940 RHEL-127794]
  - test: hsr: Add test for HSR RedBOX (HSR-SAN) mode of operation (Felix Maurer) [RHEL-100940 RHEL-127794]
  - test: hsr: Extract version agnostic information from ping command output (Felix Maurer) [RHEL-100940 RHEL-127794]
  - test: hsr: Move common code to hsr_common.sh file (Felix Maurer) [RHEL-100940 RHEL-127794]
  - test: hsr: Remove script code already implemented in lib.sh (Felix Maurer) [RHEL-100940 RHEL-127794]
  - net: hsr: Provide RedBox support (HSR-SAN) (Felix Maurer) [RHEL-100940 RHEL-127794]
  - net: hsr: Use full string description when opening HSR network device (Felix Maurer) [RHEL-127794]
  - net: hsr: Fix typo in the hsr_forward_do() function comment (Felix Maurer) [RHEL-127794]
  - net: hsr: constify the struct device_type usage (Felix Maurer) [RHEL-127794]
  - net: fill in MODULE_DESCRIPTION()s for HSR (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Extend the testsuite to also cover HSRv1. (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Reorder the testsuite. (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Use `let' properly. (Felix Maurer) [RHEL-127794]
  - net/hsr: Remove unused function declarations (Felix Maurer) [RHEL-127794]
  - net: ionic: map SKB after pseudo-header checksum prep (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: add dma_wmb() before ringing TX doorbell (Jakub Ramaseuski) [RHEL-127815]
  - ionic: convert to ndo_hwtstamp API (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Fix memory leak of admin q_wr (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Use ether_addr_copy instead of memcpy (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Fix build failure on SPARC due to xchg() operand size (Jakub Ramaseuski) [RHEL-127815]
  - ionic: use int type for err in ionic_get_module_eeprom_by_page (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Add Makefile/Kconfig to kernel build environment (Jakub Ramaseuski) [RHEL-127815]
  - RDMA: Add IONIC to rdma_driver_id definition (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Implement device stats ops (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Register device ops for miscellaneous functionality (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Register device ops for datapath (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Register device ops for control path (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Create device queues to support admin operations (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Register auxiliary module for ionic ethernet adapter (Jakub Ramaseuski) [RHEL-127815]
  - redhat/configs: Disable CONFIG_INFINIBAND_IONIC in generic (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Provide doorbell and CMB region information (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Provide interrupt allocation support for the RDMA driver (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Provide RDMA reset support for the RDMA driver (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Export the APIs from net driver to support device commands (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Update LIF identity with additional RDMA capabilities (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Create an auxiliary device for rdma driver (Jakub Ramaseuski) [RHEL-127815]
  - ethernet: ionic: Fix DMA mapping tests (Jakub Ramaseuski) [RHEL-127815]
  - ionic: cancel delayed work earlier in remove (Jakub Ramaseuski) [RHEL-127815]
  - ionic: clean dbpage in de-init (Jakub Ramaseuski) [RHEL-127815]
  - ionic: print firmware heartbeat as unsigned (Jakub Ramaseuski) [RHEL-127815]
  - ionic: Prevent driver/fw getting out of sync on devcmd(s) (Jakub Ramaseuski) [RHEL-127815]
  - redhat: enable TDX host config (Paolo Bonzini) [RHEL-115482]
  - KVM: TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-115482]
  - x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-115482]
  - x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-115482]
  - x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-115482]
  - x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-115482]
  - x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-115482]
  - x86/virt/tdx: Avoid indirect calls to TDX assembly functions (Paolo Bonzini) [RHEL-115482]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-669.el9]
changelog:
  - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144333] {CVE-2026-22998}
  - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-141483]
  - virtio-net: remove unused delayed refill worker (Laurent Vivier) [RHEL-139819]
  - virtio-net: don't schedule delayed refill worker (Laurent Vivier) [RHEL-139819]
  - virtio-net: don't re-enable refill work too early when NAPI is disabled (Laurent Vivier) [RHEL-139819]
  - virtio-net: disable delayed refill when pausing rx (Laurent Vivier) [RHEL-139819]
  - virtio-net: Refactor napi_disable paths (Laurent Vivier) [RHEL-139819]
  - virtio-net: Refactor napi_enable paths (Laurent Vivier) [RHEL-139819]
  - virtio_net: separate virtnet_tx_resize() (Laurent Vivier) [RHEL-139819]
  - virtio_net: separate virtnet_rx_resize() (Laurent Vivier) [RHEL-139819]
  - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137698] {CVE-2025-38403}
  - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Mamatha Inamdar) [RHEL-14156]
  - ftrace: Fix BPF fexit with livepatch (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/modules: replace stub allocation sentinel with an explicit counter (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: ensure ftrace record ops are always set for NOPs (Mamatha Inamdar) [RHEL-14156]
  - redhat: Add CONFIG_PPC_FTRACE_OUT_OF_LINE_NUM_RESERVE (Mamatha Inamdar) [RHEL-14156]
  - ftrace: fix incorrect hash size in register_ftrace_direct() (Mamatha Inamdar) [RHEL-14156]
  - kbuild: dummy-tools: pretend we understand -fpatchable-function-entry (Mamatha Inamdar) [RHEL-14156]
  - ftrace: Fix modification of direct_function hash while in use (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/ftrace: fix module loading without patchable function entries (Mamatha Inamdar) [RHEL-14156]
  - powerpc: Replace kretprobe code with rethook on powerpc (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/ftrace: fix clobbered r15 during livepatching (Mamatha Inamdar) [RHEL-14156]
  - powerpc/bpf: fix JIT code size calculation of bpf trampoline (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Fix ftrace bug with KASAN=y (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/bpf: Add support for bpf trampolines (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add support for DYNAMIC_FTRACE_WITH_DIRECT_CALLS (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add support for DYNAMIC_FTRACE_WITH_CALL_OPS (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/ftrace: Support .text larger than 32MB with out-of-line stubs (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/ftrace: Move ftrace sequence out of line (Mamatha Inamdar) [RHEL-14156]
  - kbuild: Add generic hook for architectures to use before the final vmlinux link (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add a postlink script to validate function tracer (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/bpf: Fold bpf_jit_emit_func_call_hlp() into bpf_jit_emit_func_call_rel() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Move ftrace stub used for init text before _einittext (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Skip instruction patching if the instructions are the same (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Remove pointer to struct module from dyn_arch_ftrace (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/ftrace: Nop out additional 'std' instruction emitted by gcc v5.x (Mamatha Inamdar) [RHEL-14156]
  - powerpc/kprobes: Use ftrace to determine if a probe is at function entry (Mamatha Inamdar) [RHEL-14156]
  - powerpc/trace: Account for -fpatchable-function-entry support by toolchain (Mamatha Inamdar) [RHEL-14156]
  - kbuild: move vmlinux.o rule to the top Makefile (Mamatha Inamdar) [RHEL-14156]
  - powerpc/code-patching: Use dedicated memory routines for patching (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Ignore ftrace locations in exit text sections (Mamatha Inamdar) [RHEL-14156]
  - powerpc: Fix build issue with LD_DEAD_CODE_DATA_ELIMINATION and FTRACE_MCOUNT_USE_PATCHABLE_FUNCTION_ENTRY (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add support for -fpatchable-function-entry (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Implement ftrace_replace_code() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Replace use of ftrace_call_replace() with ftrace_create_branch_inst() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Simplify ftrace_modify_call() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Simplify ftrace_make_call() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Simplify ftrace_make_nop() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add separate ftrace_init_nop() with additional validation (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Stop re-purposing linker generated long branches for ftrace (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Refactor ftrace_modify_code() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Simplify function_graph support in ftrace.c (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Use patch_instruction() return directly (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Refactor prepare_ftrace_return() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Have arch_ftrace_get_regs() return NULL unless FL_SAVE_REGS is set (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add recursion protection in prepare_ftrace_return() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Also save r1 in ftrace_caller() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: directly call of function graph tracer by ftrace caller (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Refactor ftrace_{en/dis}able_ftrace_graph_caller (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Implement CONFIG_DYNAMIC_FTRACE_WITH_ARGS (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Prepare PPC64's ftrace_caller() for CONFIG_DYNAMIC_FTRACE_WITH_ARGS (Mamatha Inamdar) [RHEL-14156]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-670.el9]
changelog:
  - memblock: Accept allocated memory before use in memblock_double_array() (Aristeu Rozanski) [RHEL-140475]
  - Reapply "Bluetooth: revert TX timestamping" for kernel v6.18 rebase. (David Marlin) [RHEL-141499]
  - Bluetooth: hci_sync: enable PA Sync Lost event (David Marlin) [RHEL-141499]
  - Bluetooth: SMP: Fix not generating mackey and ltk when repairing (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: mediatek: Avoid btusb_mtk_claim_iso_intf() NULL deref (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: lookup hci_conn on RX path on protocol side (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: Fix triggering cmd_timer for HCI_OP_NOP (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface (David Marlin) [RHEL-141499]
  - Bluetooth: btrtl: Avoid loading the config file on security chips (David Marlin) [RHEL-141499]
  - Bluetooth: hci_event: Fix not handling PA Sync Lost event (David Marlin) [RHEL-141499]
  - Bluetooth: hci_conn: Fix not cleaning up PA_LINK connections (David Marlin) [RHEL-141499]
  - Bluetooth: 6lowpan: add missing l2cap_chan_lock() (David Marlin) [RHEL-141499]
  - Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions (David Marlin) [RHEL-141499]
  - Bluetooth: L2CAP: export l2cap_chan_hold for modules (David Marlin) [RHEL-141499]
  - Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion (David Marlin) [RHEL-141499]
  - Bluetooth: 6lowpan: reset link-local header on ipv6 recv path (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-141499]
  - Bluetooth: MGMT: cancel mesh send timer when hdev removed (David Marlin) [RHEL-141499]
  - Bluetooth: btrtl: Fix memory leak in rtlbt_parse_firmware_v2() (David Marlin) [RHEL-141499]
  - Bluetooth: hci_event: validate skb length for unknown CC opcode (David Marlin) [RHEL-141499]
  - Bluetooth: rfcomm: fix modem control handling (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: Fix tracking of periodic advertisement (David Marlin) [RHEL-141499]
  - Bluetooth: hci_conn: Fix connection cleanup with BIG with 2 or more BIS (David Marlin) [RHEL-141499]
  - Bluetooth: fix corruption in h4_recv_buf() after cleanup (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Fix event packet loss issue (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: Fix another instance of dst_type handling (David Marlin) [RHEL-141499]
  - Bluetooth: btmtksdio: Add pmctrl handling for BT closed state during reset (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: Fix BIS connection dst_type handling (David Marlin) [RHEL-141499]
  - Bluetooth: Avoid a couple dozen -Wflex-array-member-not-at-end warnings (David Marlin) [RHEL-141499]
  - Bluetooth: hci_sync: Fix using random address for BIG/PA advertisements (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: don't leak skb in ISO_CONT RX (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: free rx_skb if not consumed (David Marlin) [RHEL-141499]
  - Bluetooth: SCO: Fix UAF on sco_conn_free (David Marlin) [RHEL-141499]
  - Bluetooth: bcsp: receive data only if registered (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: Add new VID/PID 13d3/3633 for MT7922 (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: Add new VID/PID 13d3/3627 for MT7925 (David Marlin) [RHEL-141499]
  - Bluetooth: remove duplicate h4_recv_buf() in header (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: Check for unexpected bytes when defragmenting HCI frames (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: Print information of hcon on hci_low_sent (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: Print number of packets in conn->data_q (David Marlin) [RHEL-141499]
  - Bluetooth: Add function and line information to bt_dbg (David Marlin) [RHEL-141499]
  - Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: Detect if an ISO link has stalled (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: Use sk_sndtimeo as conn_timeout (David Marlin) [RHEL-141499]
  - Bluetooth: HCI: Fix using LE/ACL buffers for ISO packets (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: Don't initiate CIS connections if there are no buffers (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Refactor Device Coredump (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Use strscpy() instead of strscpy_pad() (David Marlin) [RHEL-141499]
  - Bluetooth: Annotate struct hci_drv_rp_read_info with __counted_by_le() (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Define hdev->wakeup() callback (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: Add USB ID 2001:332a for D-Link AX9U rev. A1 (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Move model comment before its definition (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Add id of Scorpious, Panther Lake-H484 (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Add Bluetooth core/platform as comments (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Add support for _suspend() / _resume() (David Marlin) [RHEL-141499]
  - Bluetooth: btintel: Add support for BlazarIW core (David Marlin) [RHEL-141499]
  - Revert "Bluetooth: revert TX timestamping" (David Marlin) [RHEL-141499]
  - dm log-writes: Add missing set_freezable() for freezable kthread (Benjamin Marzinski) [RHEL-136400]
  - dm-raid: fix possible NULL dereference with undefined raid type (Benjamin Marzinski) [RHEL-136400]
  - dm-snapshot: fix 'scheduling while atomic' on real-time kernels (Benjamin Marzinski) [RHEL-136400]
  - dm-verity: fix unreliable memory allocation (Benjamin Marzinski) [RHEL-136400]
  - perf jitdump: Add sym/str-tables to build-ID generation (Michael Petlan) [RHEL-139923]
  - perf genelf: Fix NO_LIBDW=1 build (Michael Petlan) [RHEL-139923]
  - perf genelf: Remove libcrypto dependency and use built-in sha1() (Michael Petlan) [RHEL-139923]
  - perf util: add a basic SHA-1 implementation (Michael Petlan) [RHEL-139923]
  - dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-139700]
  - net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-131711]
  - net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-131711]
  - net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-131711]
  - gfs2: Clean up quotad timeout handling (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: Minor cosmetic remote delete cleanups (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: fix remote evict for read-only filesystems (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: fix freeze error handling (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129403]
  - redhat/configs: Add CONFIG_CRYPTO_DEV_QAT_6XXX (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix warning on adf_pfvf_pf_proto.c (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add bank state save and restore for qat_420xx (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix parameter order used in ICP_QAT_FW_COMN_FLAGS_BUILD (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix duplicate restarting msg during AER error (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add WQ_PERCPU to alloc_workqueue users (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - use simple_strtoull to improve qat_uclo_parse_num (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - Return pointer directly in adf_ctl_alloc_resources (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - Replace kzalloc() + copy_from_user() with memdup_user() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - use kcalloc() in qat_uclo_map_objs_from_mof() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add command queue telemetry counters for GEN6 (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add ring buffer idle telemetry counter for GEN6 (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - make adf_dev_autoreset() static (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - refactor ring-related debug functions (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix seq_file position update in adf_ring_next() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix DMA direction for compression on GEN2 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - flush misc workqueue during device shutdown (Vladislav Dronov) [RHEL-94929] {CVE-2025-39721}
  - crypto: qat - enable rate limiting feature for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add compression slice count for rate limiting (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add get_svc_slice_cnt() in device data structure (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add adf_rl_get_num_svc_aes() in rate limiting (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - relocate service related functions (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - consolidate service enums (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add decompression service for rate limiting (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - validate service in rate limiting sysfs api (Vladislav Dronov) [RHEL-94929]
  - Documentation: qat: update debugfs-driver-qat_telemetry for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - enable telemetry for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add decompression service to telemetry (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - enable power management debugfs for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - relocate power management debugfs helper APIs (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix virtual channel configuration for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add live migration enablers for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - relocate and rename bank state structure definition (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - relocate bank state helper functions (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - replace CHECK_STAT macro with static inline function (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - use pr_fmt() in adf_gen4_hw_data.c (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - disable ZUC-256 capability for QAT GEN5 (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - restore ASYM service support for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - remove duplicate masking for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - lower priority for skcipher and aead algorithms (Vladislav Dronov) [RHEL-94929]
  - Documentation: qat: update sysfs-driver-qat for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add support for decompression service to GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix state restore for banks with exceptions (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - allow enabling VFs in the absence of IOMMU (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - use unmanaged allocation for dc_data (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add missing header inclusion (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - enable reporting of error counters for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - enable RAS support for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat/qat_6xxx - Fix NULL vs IS_ERR() check in adf_probe() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add qat_6xxx driver (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add firmware headers for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - update firmware api (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - export adf_init_admin_pm() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - expose configuration functions (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - export adf_get_service_mask() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add GEN6 firmware loader (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - refactor FW signing algorithm (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - use pr_fmt() in qat uclo.c (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - refactor compression template logic (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - rename and relocate timer logic (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - include qat_common in top Makefile (Vladislav Dronov) [RHEL-94929]
  - workqueue: Add new WQ_PERCPU flag (Vladislav Dronov) [RHEL-94929]
  - bitfield: Add FIELD_MODIFY() helper (Vladislav Dronov) [RHEL-94929]
  - sprintf.h requires stdarg.h (Vladislav Dronov) [RHEL-94929]
  - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (CKI Backport Bot) [RHEL-130018] {CVE-2025-40168}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-671.el9]
changelog:
  - ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-137910]
  - ice: fix devlink reload call trace (Michal Schmidt) [RHEL-141485]
  - ice: add missing ice_deinit_hw() in devlink reinit path (Michal Schmidt) [RHEL-141485]
  - ice: Fix persistent failure in ice_get_rxfh (Michal Schmidt) [RHEL-141485]
  - ice: Fix incorrect timeout ice_release_res() (Michal Schmidt) [RHEL-141485]
  - ice: Avoid detrimental cleanup for bond during interface stop (Michal Schmidt) [RHEL-141485]
  - ice: initialize ring_stats->syncp (Michal Schmidt) [RHEL-141485]
  - ice: remove duplicate call to ice_deinit_hw() on error paths (Michal Schmidt) [RHEL-141485]
  - ice: move ice_deinit_dev() to the end of deinit paths (Michal Schmidt) [RHEL-141485]
  - ice: extract ice_init_dev() from ice_init() (Michal Schmidt) [RHEL-141485]
  - ice: move ice_init_pf() out of ice_init_dev() (Michal Schmidt) [RHEL-141485]
  - ice: move udp_tunnel_nic and misc IRQ setup into ice_init_pf() (Michal Schmidt) [RHEL-141485]
  - iavf: add RSS support for GTP protocol via ethtool (Michal Schmidt) [RHEL-141485]
  - ice: implement GTP RSS context tracking and configuration (Michal Schmidt) [RHEL-141485]
  - ice: add virtchnl definitions and static data for GTP RSS (Michal Schmidt) [RHEL-141485]
  - ice: ice_init_pf: destroy mutexes and xarrays on memory alloc failure (Michal Schmidt) [RHEL-141485]
  - ice: refactor to use helpers (Michal Schmidt) [RHEL-141485]
  - ice: add E830 Earliest TxTime First Offload support (Michal Schmidt) [RHEL-141485]
  - ice, libie: move fwlog code to libie (Michal Schmidt) [RHEL-141485]
  - ice: support egress drop rules on PF (Michal Schmidt) [RHEL-141485]
  - iavf: fix off-by-one issues in iavf_config_rss_reg() (Michal Schmidt) [RHEL-141485] {CVE-2025-71087}
  - iavf: clarify VLAN add/delete log messages and lower log level (Michal Schmidt) [RHEL-141485]
  - ice: fix comment typo and correct module format string (Michal Schmidt) [RHEL-141485]
  - iavf: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-141485] {CVE-2025-68752}
  - ice: fix PTP cleanup on driver removal in error path (Michal Schmidt) [RHEL-141485] {CVE-2025-68215}
  - ice: Extend PTYPE bitmap coverage for GTP encapsulated flows (Michal Schmidt) [RHEL-141485]
  - ice: improve TCAM priority handling for RSS profiles (Michal Schmidt) [RHEL-141485]
  - ice: add flow parsing for GTP and new protocol field support (Michal Schmidt) [RHEL-141485]
  - ice: Allow 100M speed for E825C SGMII device (Michal Schmidt) [RHEL-141485]
  - ice: fix usage of logical PF id (Michal Schmidt) [RHEL-141485]
  - ice: fix destination CGU for dual complex E825 (Michal Schmidt) [RHEL-141485]
  - ice: fix lane number calculation (Michal Schmidt) [RHEL-141485]
  - ice: move ice_init_interrupt_scheme() prior ice_init_pf() (Michal Schmidt) [RHEL-141485]
  - ice: move service task start out of ice_init_pf() (Michal Schmidt) [RHEL-141485]
  - ice: enforce RTNL assumption of queue NAPI manipulation (Michal Schmidt) [RHEL-141485]
  - ice: implement transmit hardware timestamp statistics (Michal Schmidt) [RHEL-141485]
  - ice: add tracking of good transmit timestamps (Michal Schmidt) [RHEL-141485]
  - ice: implement ethtool standard stats (Michal Schmidt) [RHEL-141485]
  - libie: fix string names for AQ error codes (Michal Schmidt) [RHEL-141485]
  - iavf: fix proper type for error code in iavf_resume() (Michal Schmidt) [RHEL-141485]
  - ice: Remove deprecated ice_lag_move_new_vf_nodes() call (Michal Schmidt) [RHEL-141485]
  - ice: move ice_qp_[ena|dis] for reuse (Michal Schmidt) [RHEL-141485]
  - ice: reregister fwlog after driver reinit (Michal Schmidt) [RHEL-141485]
  - ice: prepare for moving file to libie (Michal Schmidt) [RHEL-141485]
  - ice: move debugfs code to fwlog (Michal Schmidt) [RHEL-141485]
  - libie, ice: move fwlog admin queue to libie (Michal Schmidt) [RHEL-141485]
  - ice: drop driver specific structure from fwlog code (Michal Schmidt) [RHEL-141485]
  - ice: check for PF number outside the fwlog code (Michal Schmidt) [RHEL-141485]
  - ice: move out debugfs init from fwlog (Michal Schmidt) [RHEL-141485]
  - ice: allow calling custom send function in fwlog (Michal Schmidt) [RHEL-141485]
  - ice: add pdev into fwlog structure and use it for logging (Michal Schmidt) [RHEL-141485]
  - ice: introduce ice_fwlog structure (Michal Schmidt) [RHEL-141485]
  - ice: drop ice_pf_fwlog_update_module() (Michal Schmidt) [RHEL-141485]
  - ice: move get_fwlog_data() to fwlog file (Michal Schmidt) [RHEL-141485]
  - ice: make fwlog functions static (Michal Schmidt) [RHEL-141485]
  - ice: finish virtchnl.c split into rss.c (Michal Schmidt) [RHEL-141485]
  - ice: extract virt/rss.c: cleanup - p2 (Michal Schmidt) [RHEL-141485]
  - ice: extract virt/rss.c: cleanup - p1 (Michal Schmidt) [RHEL-141485]
  - ice: split RSS stuff out of virtchnl.c - copy back (Michal Schmidt) [RHEL-141485]
  - ice: split RSS stuff out of virtchnl.c - tmp rename (Michal Schmidt) [RHEL-141485]
  - ice: finish virtchnl.c split into queues.c (Michal Schmidt) [RHEL-141485]
  - ice: extract virt/queues.c: cleanup - p3 (Michal Schmidt) [RHEL-141485]
  - ice: extract virt/queues.c: cleanup - p2 (Michal Schmidt) [RHEL-141485]
  - ice: extract virt/queues.c: cleanup - p1 (Michal Schmidt) [RHEL-141485]
  - ice: split queue stuff out of virtchnl.c - copy back (Michal Schmidt) [RHEL-141485]
  - ice: split queue stuff out of virtchnl.c - tmp rename (Michal Schmidt) [RHEL-141485]
  - ice: fix incorrect counter for buffer allocation failures (Michal Schmidt) [RHEL-141485]
  - ice: add virt/ and move ice_virtchnl* files there (Michal Schmidt) [RHEL-141485]
  - ice: Implement support for SRIOV VFs across Active/Active bonds (Michal Schmidt) [RHEL-141485]
  - ice: cleanup capabilities evaluation (Michal Schmidt) [RHEL-141485]
  - ice: Cleanup variable initialization in LAG code (Michal Schmidt) [RHEL-141485]
  - ice: move LAG function in code to prepare for Active-Active (Michal Schmidt) [RHEL-141485]
  - ice: Add driver specific prefix to LAG defines (Michal Schmidt) [RHEL-141485]
  - ice: replace u8 elements with bool where appropriate (Michal Schmidt) [RHEL-141485]
  - ice: Remove casts on void pointers in LAG code (Michal Schmidt) [RHEL-141485]
  - ice: Don't use %pK through printk or tracepoints (Michal Schmidt) [RHEL-141485]
  - net: Fix typos [partial:ice] (Michal Schmidt) [RHEL-141485]
  - iavf: use libie_aq_str (Michal Schmidt) [RHEL-141485]
  - ice: use libie_aq_str (Michal Schmidt) [RHEL-141485]
  - libie: add adminq helper for converting err to str (Michal Schmidt) [RHEL-141485]
  - iavf: use libie adminq descriptors (Michal Schmidt) [RHEL-141485]
  - i40e: use libie adminq descriptors [partial:ice,libie] (Michal Schmidt) [RHEL-141485]
  - ixgbe: use libie adminq descriptors [partial:libie] (Michal Schmidt) [RHEL-141485]
  - ice, libie: move generic adminq descriptors to lib (Michal Schmidt) [RHEL-141485]
  - ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (Michal Schmidt) [RHEL-141485] {CVE-2025-38664}
  - ice: breakout common LAG code into helpers (Michal Schmidt) [RHEL-141485]
  - ice: convert ice_add_prof() to bitmap (Michal Schmidt) [RHEL-141485]
  - ice: add E835 device IDs (Michal Schmidt) [RHEL-141485]
  - ice: add 40G speed to Admin Command GET PORT OPTION (Michal Schmidt) [RHEL-141485]
  - ice: check correct pointer in fwlog debugfs (Michal Schmidt) [RHEL-141485]
  - ice: add NULL check in eswitch lag check (Michal Schmidt) [RHEL-141485] {CVE-2025-38526}
  - ice: introduce ice_get_vf_by_dev() wrapper (Michal Schmidt) [RHEL-141485]
  - ice: avoid rebuilding if MSI-X vector count is unchanged (Michal Schmidt) [RHEL-141485]
  - ice: use pci_iov_vf_id() to get VF ID (Michal Schmidt) [RHEL-141485]
  - ice: expose VF functions used by live migration (Michal Schmidt) [RHEL-141485]
  - ice: move ice_vsi_update_l2tsel to ice_lib.c (Michal Schmidt) [RHEL-141485]
  - ice: save RSS hash configuration for migration (Michal Schmidt) [RHEL-141485]
  - ice: add functions to get and set Tx queue context (Michal Schmidt) [RHEL-141485]
  - ice: add support for reading and unpacking Rx queue context (Michal Schmidt) [RHEL-141485]
  - eth: ice: drop the dead code related to rss_contexts (Michal Schmidt) [RHEL-141485]
  - ice: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Michal Schmidt) [RHEL-141485]
  - ice: add ref-sync dpll pins (Michal Schmidt) [RHEL-141485]
  - net: ice: Perform accurate aRFS flow match (Michal Schmidt) [RHEL-141485]
  - ice: add phase offset monitor for all PPS dpll inputs (Michal Schmidt) [RHEL-141485]
  - ice: add a separate Rx handler for flow director commands (Michal Schmidt) [RHEL-141485]
  - ice: change SMA pins to SDP in PTP API (Michal Schmidt) [RHEL-141485]
  - ice: redesign dpll sma/u.fl pins control (Michal Schmidt) [RHEL-141485]
  - ice: add link_down_events statistic (Michal Schmidt) [RHEL-141485]
  - net: intel: move RSS packet classifier types to libie (Michal Schmidt) [RHEL-141485]
  - net: intel: rename 'hena' to 'hashcfg' for clarity (Michal Schmidt) [RHEL-141485]
  - iavf: extract iavf_watchdog_step() out of iavf_watchdog_task() (Michal Schmidt) [RHEL-141485]
  - iavf: simplify watchdog_task in terms of adminq task scheduling (Michal Schmidt) [RHEL-141485]
  - iavf: centralize watchdog requeueing itself (Michal Schmidt) [RHEL-141485]
  - ice: make const read-only array dflt_rules static (Michal Schmidt) [RHEL-141485]
  - ice: improve error message for insufficient filter space (Michal Schmidt) [RHEL-141485]
  - ice: enable LLDP TX for VFs through tc (Michal Schmidt) [RHEL-141485]
  - ice: remove headers argument from ice_tc_count_lkups (Michal Schmidt) [RHEL-141485]
  - ice: receive LLDP on trusted VFs (Michal Schmidt) [RHEL-141485]
  - ice: do not add LLDP-specific filter if not necessary (Michal Schmidt) [RHEL-141485]
  - ice: fix check for existing switch rule (Michal Schmidt) [RHEL-141485]
  - ice: clear NAPI's IRQ numbers in ice_vsi_clear_napi_queues() (Michal Schmidt) [RHEL-141485]
  - ice: refactor ICE_TC_FLWR_FIELD_ENC_OPTS (Michal Schmidt) [RHEL-141485]
  - Revert "ice: Fix ice VF reset during iavf initialization" (Michal Schmidt) [RHEL-141485]
  - ice: Fix ice VF reset during iavf initialization (Michal Schmidt) [RHEL-141485]
  - net/ena: fix missing lock when update devlink params (Kamal Heib) [RHEL-127326]
  - net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable (Kamal Heib) [RHEL-127326]
  - net: ena: View PHC stats using debugfs (Kamal Heib) [RHEL-127326]
  - net: ena: Add debugfs support to the ENA driver (Kamal Heib) [RHEL-127326]
  - net: ena: Control PHC enable through devlink (Kamal Heib) [RHEL-127326]
  - net: ena: Add devlink port support (Kamal Heib) [RHEL-127326]
  - net: ena: Add device reload capability through devlink (Kamal Heib) [RHEL-127326]
  - net: ena: PHC silent reset (Kamal Heib) [RHEL-127326]
  - net: ena: Add PHC support in the ENA driver (Kamal Heib) [RHEL-127326]
  - net: ena: resolve WARN_ON when freeing IRQs (Kamal Heib) [RHEL-127326]
  - net: ena: use napi's aRFS rmap notifers (Kamal Heib) [RHEL-127326]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-672.el9]
changelog:
  - net: ipv4: convert ip_rcv_options to drop reasons (Antoine Tenart) [RHEL-139236]
  - net: ipv4: simplify drop reason handling in ip_rcv_finish_core (Antoine Tenart) [RHEL-139236]
  - net: ipv4: make udp_v4_early_demux explicitly return drop reason (Antoine Tenart) [RHEL-139236]
  - net/sched: Add precise drop reason for pfifo_fast queue overflows (Antoine Tenart) [RHEL-139236]
  - net: track pfmemalloc drops via SKB_DROP_REASON_PFMEMALLOC (Antoine Tenart) [RHEL-139236]
  - net: arp: use kfree_skb_reason() in arp_rcv() (Antoine Tenart) [RHEL-139236]
  - can: add drop reasons in CAN protocols receive path (Antoine Tenart) [RHEL-139236]
  - can: add drop reasons in the receive path of AF_CAN (Antoine Tenart) [RHEL-139236]
  - net: neigh: use kfree_skb_reason() in neigh_resolve_output() and neigh_connected_output() (Antoine Tenart) [RHEL-139236]
  - net: flush_backlog() small changes (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: let it work finally in tcp_send_active_reset() (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: introduce SK_RST_REASON_TCP_DISCONNECT_WITH_DATA for active reset (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: introduce SK_RST_REASON_TCP_KEEPALIVE_TIMEOUT for active reset (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: introduce SK_RST_REASON_TCP_STATE for active reset (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: introduce SK_RST_REASON_TCP_ABORT_ON_MEMORY for active reset (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: introduce SK_RST_REASON_TCP_ABORT_ON_LINGER for active reset (Antoine Tenart) [RHEL-139236]
  - tcp: rstreason: introduce SK_RST_REASON_TCP_ABORT_ON_CLOSE for active reset (Antoine Tenart) [RHEL-139236]
  - x86/lam: Disable ADDRESS_MASKING in most cases (Rafael Aquini) [RHEL-109600]
  - svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142791] {CVE-2025-68811}
  - mm: Create/affine kswapd to its preferred node (Rafael Aquini) [RHEL-135521]
  - mm: Create/affine kcompactd to its preferred node (Rafael Aquini) [RHEL-135521]
  - mm/vmscan: print err before panic (Rafael Aquini) [RHEL-135521]
  - kthread: Fix return value on kzalloc() failure in kthread_affine_preferred() (Rafael Aquini) [RHEL-135521]
  - kthread: Implement preferred affinity (Rafael Aquini) [RHEL-135521]
  - kthread: Default affine kthread to its preferred NUMA node (Rafael Aquini) [RHEL-135521]
  - kthread: Make sure kthread hasn't started while binding it (Rafael Aquini) [RHEL-135521]
  - sched,arm64: Handle CPU isolation on last resort fallback rq selection (Rafael Aquini) [RHEL-135521]
  - arm64: Exclude nohz_full CPUs from 32bits el0 support (Rafael Aquini) [RHEL-135521]
  - blk-mq: skip CPU offline notify on unmapped hctx (Ming Lei) [RHEL-140714]
  - padata: remove __padata_list_init() (Herbert Xu) [RHEL-127800]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-673.el9]
changelog:
  - s390/cio: Update purge function to unregister the unused subchannels (Mete Durlu) [RHEL-145337]
  - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145338]
  - platform/x86:intel/pmc: Enable SSRAM support for Wildcat Lake (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Remove redundant has_die_c6 variable (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Relocate lpm_req_guid to pmc_reg_map (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Rename PMC index variable to pmc_idx (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Add DMU GUID to Arrow Lake U/H (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Add support for multiple DMU GUIDs (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Update Arrow Lake telemetry GUID (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Replace dev_warn() with dev_dbg() (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Enable SSRAM support for Panther Lake (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Show substate requirement for S0ix blockers (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Improve function to show substate header (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Move telemetry endpoint register handling (David Arcari) [RHEL-95637]
  - platform/x86:intel/pmc: Enable SSRAM support for Lunar Lake (David Arcari) [RHEL-95637]
  - platform/x86/intel/pmc: Add Wildcat Lake support to Intel PMC SSRAM Telemetry (David Arcari) [RHEL-95637]
  - platform/x86/intel/pmc: use kcalloc() instead of kzalloc() (David Arcari) [RHEL-95637]
  - platform/x86/intel/vsec: Add support for Wildcat Lake (David Arcari) [RHEL-95637]
  - platform/x86/amd/hsmp: Replace amd_num_nodes() with topology_max_packages() (David Arcari) [RHEL-122802]
  - tools/power turbostat: Add Wildcat Lake and Nova Lake support (CKI Backport Bot) [RHEL-95677]
  - EDAC/i10nm: Add Intel Clearwater Forest server support (Aristeu Rozanski) [RHEL-45085]
  - ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-97718]
  - ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-97718]
  - ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-97718]
  - ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-97718]
  - ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-97718]
  - ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-97718]
  - ipmi:si: Merge some if statements (Tony Camuso) [RHEL-97718]
  - ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-97718]
  - ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-97718]
  - ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-97718]
  - ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-97718]
  - ipmi: Rework user message limit handling (Tony Camuso) [RHEL-97718]
  - Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-97718]
  - ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-97718]
  - char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-97718]
  - ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-97718]
  - ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-97718]
  - ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-97718]
  - ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-97718]
  - ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-97718]
  - ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-97718]
  - ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-97718]
  - ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-97718]
  - ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-97718]
  - i40e: add rh_phys_port_name mod option to behave like upstream (Michal Schmidt) [RHEL-126034]
  - ice: add rh_phys_port_name mod option to behave like upstream (Michal Schmidt) [RHEL-126034]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-674.el9]
changelog:
  - s390/drivers: Remove unnecessary include <linux/export.h> (Mete Durlu) [RHEL-99995]
  - scsi: zfcp: Simplify workqueue allocation (Mete Durlu) [RHEL-99995]
  - s390/zfcp: Remove outdated email address (Mete Durlu) [RHEL-99995]
  - rcu/nocb: Add Safe checks for access offloaded rdp (Luis Claudio R. Goncalves) [RHEL-144727]
  - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137596] {CVE-2025-38459}
  - drm/amdkfd: Fix improper NULL termination of queue restore SMI event string (José Expósito) [RHEL-135337]
  - drm/amd/display: Fix DP no audio issue (José Expósito) [RHEL-135337]
  - drm/amd/pm: force send pcie parmater on navi1x (José Expósito) [RHEL-135337]
  - drm/amd/pm: fix wrong pcie parameter on navi1x (José Expósito) [RHEL-135337]
  - drm/amd/display: shrink struct members (José Expósito) [RHEL-135337]
  - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] (José Expósito) [RHEL-135337]
  - drm/tidss: Fix enable/disable order (José Expósito) [RHEL-135337]
  - drm/atomic-helper: Export and namespace some functions (José Expósito) [RHEL-135337]
  - drm/amdgpu: Fix query for VPE block_type and ip_count (José Expósito) [RHEL-135337]
  - drm/amd/display: Apply e4479aecf658 to dml (José Expósito) [RHEL-135337]
  - Revert "drm/atomic-helper: Re-order bridge chain pre-enable and post-disable" (José Expósito) [RHEL-135337]
  - nouveau: don't attempt fwsec on sb on newer platforms. (José Expósito) [RHEL-135337]
  - drm/imagination: Disallow exporting of PM/FW protected objects (José Expósito) [RHEL-135337]
  - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb (José Expósito) [RHEL-135337]
  - drm/pagemap, drm/xe: Ensure that the devmem allocation is idle before use (José Expósito) [RHEL-135337]
  - drm/xe/svm: Fix a debug printout (José Expósito) [RHEL-135337]
  - drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer (José Expósito) [RHEL-135337]
  - drm/xe: Drop preempt-fences when destroying imported dma-bufs. (José Expósito) [RHEL-135337]
  - drm/xe: Use usleep_range for accurate long-running workload timeslicing (José Expósito) [RHEL-135337]
  - drm/xe: Adjust long-running workload timeslices to reasonable values (José Expósito) [RHEL-135337]
  - drm/xe/eustall: Disallow 0 EU stall property values (José Expósito) [RHEL-135337]
  - drm/xe/oa: Disallow 0 OA property values (José Expósito) [RHEL-135337]
  - drm/xe/bo: Don't include the CCS metadata in the dma-buf sg-table (José Expósito) [RHEL-135337]
  - drm: Fix object leak in DRM_IOCTL_GEM_CHANGE_HANDLE (José Expósito) [RHEL-135337]
  - drm/mgag200: Fix big-endian support (José Expósito) [RHEL-135337]
  - drm/ttm: Avoid NULL pointer deref for evicted BOs (José Expósito) [RHEL-135337]
  - drm/i915: Fix format string truncation warning (José Expósito) [RHEL-135337]
  - drm/amdkfd: Trap handler support for expert scheduling mode (José Expósito) [RHEL-135337]
  - drm/amdkfd: bump minimum vgpr size for gfx1151 (José Expósito) [RHEL-135337]
  - drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace (José Expósito) [RHEL-135337]
  - drm/nouveau/gsp: Allocate fwsec-sb at boot (José Expósito) [RHEL-135337]
  - drm/bridge: ti-sn65dsi83: ignore PLL_UNLOCK errors (José Expósito) [RHEL-135337]
  - drm/amd: Fix unbind/rebind for VCN 4.0.5 (José Expósito) [RHEL-135337]
  - drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl() (José Expósito) [RHEL-135337]
  - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() (José Expósito) [RHEL-135337]
  - drm/buddy: Separate clear and dirty free block trees (José Expósito) [RHEL-135337]
  - drm/buddy: Optimize free block management with RB tree (José Expósito) [RHEL-135337]
  - drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling (José Expósito) [RHEL-135337]
  - drm/amdgpu/sdma6: Update SDMA 6.0.3 FW version to include UMQ protected-fence fix (José Expósito) [RHEL-135337]
  - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma (José Expósito) [RHEL-135337]
  - drm/amdgpu: Forward VMID reservation errors (José Expósito) [RHEL-135337]
  - drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling (José Expósito) [RHEL-135337]
  - Revert "drm/amd: Skip power ungate during suspend for VPE" (José Expósito) [RHEL-135337]
  - drm/xe/guc: READ/WRITE_ONCE g2h_fence->done (José Expósito) [RHEL-135337]
  - drm/gem-shmem: Fix the MODULE_LICENSE() string (José Expósito) [RHEL-135337]
  - drm/amdgpu: don't attach the tlb fence for SI (José Expósito) [RHEL-135337]
  - drm/displayid: add quirk to ignore DisplayID checksum errors (José Expósito) [RHEL-135337]
  - drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct drm_edid_ident (José Expósito) [RHEL-135337]
  - drm: nova: depend on CONFIG_64BIT (José Expósito) [RHEL-135337]
  - drm/displayid: pass iter to drm_find_displayid_extension() (José Expósito) [RHEL-135337]
  - drm/amd/display: Fix scratch registers offsets for DCN351 (José Expósito) [RHEL-135337]
  - drm/amd/display: Fix scratch registers offsets for DCN35 (José Expósito) [RHEL-135337]
  - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() (José Expósito) [RHEL-135337]
  - Revert "drm/amd/display: Fix pbn to kbps Conversion" (José Expósito) [RHEL-135337]
  - drm/xe/oa: Always set OAG_OAGLBCTXCTRL_COUNTER_RESUME (José Expósito) [RHEL-135337]
  - drm/xe/oa: Limit num_syncs to prevent oversized allocations (José Expósito) [RHEL-135337]
  - drm/xe: Limit num_syncs to prevent oversized allocations (José Expósito) [RHEL-135337]
  - drm/amdgpu: fix a job->pasid access race in gpu recovery (José Expósito) [RHEL-135337]
  - drm/panel: sony-td4353-jdi: Enable prepare_prev_first (José Expósito) [RHEL-135337]
  - drm/xe: Restore engine registers before restarting schedulers after GT reset (José Expósito) [RHEL-135337]
  - drm/xe: Increase TDF timeout (José Expósito) [RHEL-135337]
  - drm/me/gsc: mei interrupt top half should be in irq disabled context (José Expósito) [RHEL-135337]
  - drm/xe: fix drm_gpusvm_init() arguments (José Expósito) [RHEL-135337]
  - drm/xe: Apply Wa_14020316580 in xe_gt_idle_enable_pg() (José Expósito) [RHEL-135337]
  - drm/xe: Fix freq kobject leak on sysfs_create_files failure (José Expósito) [RHEL-135337]
  - drm/tests: Handle EDEADLK in set_up_atomic_state() (José Expósito) [RHEL-135337]
  - drm/tests: Handle EDEADLK in drm_test_check_valid_clones() (José Expósito) [RHEL-135337]
  - drm/tests: hdmi: Handle drm_kunit_helper_enable_crtc_connector() returning EDEADLK (José Expósito) [RHEL-135337]
  - drm/i915/fbdev: Hold runtime PM ref during fbdev BO creation (José Expósito) [RHEL-135337]
  - drm/{i915, xe}/fbdev: deduplicate struct drm_mode_fb_cmd2 init (José Expósito) [RHEL-135337]
  - drm/{i915, xe}/fbdev: pass struct drm_device to intel_fbdev_fb_alloc() (José Expósito) [RHEL-135337]
  - drm/i915/fbdev: make intel_framebuffer_create() error return handling explicit (José Expósito) [RHEL-135337]
  - drm/xe/fbdev: use the same 64-byte stride alignment as i915 (José Expósito) [RHEL-135337]
  - drm/amdkfd: Use huge page size to check split svm range alignment (José Expósito) [RHEL-135337]
  - drm/nouveau: fix circular dep oops from vendored i2c encoder (José Expósito) [RHEL-135337]
  - drm/nouveau: refactor deprecated strcpy (José Expósito) [RHEL-135337]
  - drm/plane: Fix IS_ERR() vs NULL check in drm_plane_create_hotspot_properties() (José Expósito) [RHEL-135337]
  - drm/panel: novatek-nt35560: avoid on-stack device structure (José Expósito) [RHEL-135337]
  - drm/panthor: Prevent potential UAF in group creation (José Expósito) [RHEL-135337]
  - drm/amdkfd: assign AID to uuid in topology for SPX mode (José Expósito) [RHEL-135337]
  - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() (José Expósito) [RHEL-135337]
  - drm/panthor: Avoid adding of kernel BOs to extobj list (José Expósito) [RHEL-135337]
  - drm/nouveau: restrict the flush page to a 32-bit address (José Expósito) [RHEL-135337]
  - drm/tidss: Move OLDI mode validation to OLDI bridge mode_valid hook (José Expósito) [RHEL-135337]
  - drm/tidss: Remove max_pclk_khz and min_pclk_khz from tidss display features (José Expósito) [RHEL-135337]
  - drm/panthor: Fix potential memleak of vma structure (José Expósito) [RHEL-135337]
  - drm/panthor: Fix UAF on kernel BO VA nodes (José Expósito) [RHEL-135337]
  - drm/panthor: Fix race with suspend during unplug (José Expósito) [RHEL-135337]
  - drm/panthor: Fix UAF race between device unplug and FW event processing (José Expósito) [RHEL-135337]
  - drm/panthor: Fix group_free_queue() for partially initialized queues (José Expósito) [RHEL-135337]
  - drm/panthor: Handle errors returned by drm_sched_entity_init() (José Expósito) [RHEL-135337]
  - drm/imagination: Fix reference to devm_platform_get_and_ioremap_resource() (José Expósito) [RHEL-135337]
  - accel/ivpu: Fix race condition when unbinding BOs (José Expósito) [RHEL-135337]
  - drm: nova: select NOVA_CORE (José Expósito) [RHEL-135337]
  - accel/ivpu: Remove skip of dma unmap for imported buffers (José Expósito) [RHEL-135337]
  - drm/rcar-du: dsi: Fix missing parameter in RXSETR_...EN macros (José Expósito) [RHEL-135337]
  - drm/amdgpu/userq: fix SDMA and compute validation (José Expósito) [RHEL-135337]
  - drm/amdgpu: add userq object va track helpers (José Expósito) [RHEL-135337]
  - accel/ivpu: Fix race condition when mapping dmabuf (José Expósito) [RHEL-135337]
  - drm: atmel-hlcdc: fix atmel_xlcdc_plane_setup_scaler() (José Expósito) [RHEL-135337]
  - drm/vgem-fence: Fix potential deadlock on release (José Expósito) [RHEL-135337]
  - accel/ivpu: Fix DCT active percent format (José Expósito) [RHEL-135337]
  - accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context() (José Expósito) [RHEL-135337]
  - accel/ivpu: Rework bind/unbind of imported buffers (José Expósito) [RHEL-135337]
  - drm/panel: visionox-rm69299: Don't clear all mode flags (José Expósito) [RHEL-135337]
  - drm/panel: visionox-rm69299: Fix clock frequency for SHIFT6mq (José Expósito) [RHEL-135337]
  - accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume fail (José Expósito) [RHEL-135337]
  - Reapply "drm/vkms: convert to use faux_device" (José Expósito) [RHEL-135337]
  - printk: Use console_is_usable on console_unblank (Derek Barbosa) [RHEL-141481]
  - printk: Check CON_SUSPEND when unblanking a console (Derek Barbosa) [RHEL-141481]
  - printk: Avoid irq_work for printk_deferred() on suspend (Derek Barbosa) [RHEL-141481]
  - printk: Avoid scheduling irq_work on suspend (Derek Barbosa) [RHEL-141481]
  - printk: nbcon: Allow reacquire during panic (Derek Barbosa) [RHEL-141481]
  - printk: Allow printk_trigger_flush() to flush all types (Herton R. Krzesinski) [RHEL-141481]
  - printk: nbcon: Use raw_cpu_ptr() instead of open coding (Herton R. Krzesinski) [RHEL-141481]
  - backport "printk: Add helper for flush type logic" and associated changes (Herton R. Krzesinski) [RHEL-141481]
  - printk: Remove redundant deferred check in vprintk() (Herton R. Krzesinski) [RHEL-141481]
  - printk: Introduce force_legacy_kthread() macro (Herton R. Krzesinski) [RHEL-141481]
  - printk: Add is_printk_legacy_deferred() (Herton R. Krzesinski) [RHEL-141481]
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132890] {CVE-2023-53034}
  - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138020] {CVE-2025-38415}
  - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138020] {CVE-2025-38415}
  - scsi: qla2xxx: Enable/disable IRQD_NO_BALANCING during reset (Ewan D. Milne) [RHEL-89559]
  - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset (Ewan D. Milne) [RHEL-89559]
  - perf/x86/intel/cstate: Add Clearwater Forest support (Michael Petlan) [RHEL-45067]
  - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-7971]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-675.el9]
changelog:
  - sched: Fix tracepoint called from set_tsk_need_resched() more (Phil Auld) [RHEL-145368]
  - smb: client: fix oops in smbd_post_send_data() (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix UBSAN array-index-out-of-bounds in smb2_copychunk_range (Paulo Alcantara) [RHEL-116058]
  - smb3 client: add missing tracepoint for unsupported ioctls (Paulo Alcantara) [RHEL-116058]
  - cifs: Fix memory and information leak in smb3_reconfigure() (Paulo Alcantara) [RHEL-116058] {CVE-2025-71151}
  - smb: move some SMB1 definitions into common/smb1pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: align durable reconnect v2 context to 8 byte boundary (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.connect.{lock,work} (Paulo Alcantara) [RHEL-116058]
  - smb/client: remove DeviceType Flags and Device Characteristics definitions (Paulo Alcantara) [RHEL-116058]
  - smb: move File Attributes definitions into common/fscc.h (Paulo Alcantara) [RHEL-116058]
  - smb: update struct duplicate_extents_to_file_ex (Paulo Alcantara) [RHEL-116058]
  - smb: move file_notify_information to common/fscc.h (Paulo Alcantara) [RHEL-116058]
  - smb: move SMB2 Notify Action Flags into common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move notify completion filter flags into common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb/client: add parentheses to NT error code definitions containing bitwise OR operator (Paulo Alcantara) [RHEL-116058]
  - smb: add documentation references for smb2 change notify definitions (Paulo Alcantara) [RHEL-116058]
  - smb/client: add 4 NT error code definitions (Paulo Alcantara) [RHEL-116058]
  - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value (Paulo Alcantara) [RHEL-116058]
  - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value (Paulo Alcantara) [RHEL-116058]
  - smb/client: fix NT_STATUS_NO_DATA_DETECTED value (Paulo Alcantara) [RHEL-116058]
  - smb/client: update some SMB2 status strings (Paulo Alcantara) [RHEL-116058]
  - cifs: Remove dead function prototypes (Paulo Alcantara) [RHEL-116058]
  - smb/client: add two elements to smb2_error_map_table array (Paulo Alcantara) [RHEL-116058]
  - smb: rename to STATUS_SMB_NO_PREAUTH_INTEGRITY_HASH_OVERLAP (Paulo Alcantara) [RHEL-116058]
  - smb/client: remove unused elements from smb2_error_map_table array (Paulo Alcantara) [RHEL-116058]
  - smb/client: reduce loop count in map_smb2_to_linux_error() by half (Paulo Alcantara) [RHEL-116058]
  - smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-116058]
  - smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-116058]
  - smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-116058]
  - cifs: client: allow changing multichannel mount options on remount (Paulo Alcantara) [RHEL-116058]
  - cifs: Do some preparation prior to organising the function declarations (Paulo Alcantara) [RHEL-116058]
  - cifs: Don't need state locking in smb2_get_mid_entry() (Paulo Alcantara) [RHEL-116058]
  - cifs: Remove the server pointer from smb_message (Paulo Alcantara) [RHEL-116058]
  - cifs: Fix specification of function pointers (Paulo Alcantara) [RHEL-116058]
  - cifs: Replace SendReceiveBlockingLock() with SendReceive() plus flags (Paulo Alcantara) [RHEL-116058]
  - cifs: Clean up some places where an extra kvec[] was required for rfc1002 (Paulo Alcantara) [RHEL-116058]
  - cifs: Make smb1's SendReceive() wrap cifs_send_recv() (Paulo Alcantara) [RHEL-116058]
  - cifs: Remove the RFC1002 header from smb_hdr (Paulo Alcantara) [RHEL-116058]
  - cifs: client: enforce consistent handling of multichannel and max_channels (Paulo Alcantara) [RHEL-116058]
  - smb: client: show smb lease key in open_dirs output (Paulo Alcantara) [RHEL-116058]
  - smb: client: show smb lease key in open_files output (Paulo Alcantara) [RHEL-116058]
  - smb: client: relax WARN_ON_ONCE(SMBDIRECT_SOCKET_*) checks in recv_done() and smbd_conn_upcall() (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce SMBDIRECT_CHECK_STATUS_{WARN,DISCONNECT}() (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce SMBDIRECT_DEBUG_ERR_PTR() helper (Paulo Alcantara) [RHEL-116058]
  - smb: move FILE_SYSTEM_ATTRIBUTE_INFO to common/fscc.h (Paulo Alcantara) [RHEL-116058]
  - smb: move create_durable_reconn to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: fix some warnings reported by scripts/checkpatch.pl (Paulo Alcantara) [RHEL-116058]
  - smb: do some cleanups (Paulo Alcantara) [RHEL-116058]
  - smb: move FILE_SYSTEM_SIZE_INFO to common/fscc.h (Paulo Alcantara) [RHEL-116058]
  - smb: move some duplicate struct definitions to common/fscc.h (Paulo Alcantara) [RHEL-116058]
  - smb: move list of FileSystemAttributes to common/fscc.h (Paulo Alcantara) [RHEL-116058]
  - smb: move SMB_NEGOTIATE_REQ to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move some duplicate definitions to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move create_durable_rsp_v2 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move create_durable_handle_reconnect_v2 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move create_durable_req_v2 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move MAX_CIFS_SMALL_BUFFER_SIZE to common/smbglob.h (Paulo Alcantara) [RHEL-116058]
  - smb/client: fix CAP_BULK_TRANSFER value (Paulo Alcantara) [RHEL-116058]
  - smb: move resume_key_ioctl_rsp to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move copychunk definitions to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move smb_sockaddr_in and smb_sockaddr_in6 to common/smb2pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: move SMB1_PROTO_NUMBER to common/smbglob.h (Paulo Alcantara) [RHEL-116058]
  - smb: move get_rfc1002_len() to common/smbglob.h (Paulo Alcantara) [RHEL-116058]
  - smb: move smb_version_values to common/smbglob.h (Paulo Alcantara) [RHEL-116058]
  - smb: rename common/cifsglob.h to common/smbglob.h (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix memory leak in cifs_construct_tcon() (Paulo Alcantara) [RHEL-116058] {CVE-2025-68295}
  - cifs: fix memory leak in smb3_fs_context_parse_param error path (Paulo Alcantara) [RHEL-116058] {CVE-2025-68219}
  - smb: client: introduce close_cached_dir_locked() (Paulo Alcantara) [RHEL-116058]
  - smb: client: let smbd_disconnect_rdma_connection() turn CREATED into DISCONNECTED (Paulo Alcantara) [RHEL-116058]
  - smb: fix invalid username check in smb3_fs_context_parse_param() (Paulo Alcantara) [RHEL-116058]
  - cifs: client: fix memory leak in smb3_fs_context_parse_param (Paulo Alcantara) [RHEL-116058] {CVE-2025-40268}
  - smb: client: fix cifs_pick_channel when channel needs reconnect (Paulo Alcantara) [RHEL-116058]
  - smb: client: validate change notify buffer before copy (Paulo Alcantara) [RHEL-116058]
  - smb: client: call smbd_destroy() in the same splace as kernel_sock_shutdown()/sock_release() (Paulo Alcantara) [RHEL-116058]
  - cifs: fix typo in enable_gcm_256 module parameter (Paulo Alcantara) [RHEL-116058]
  - cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-116058]
  - cifs: Call the calc_signature functions directly (Paulo Alcantara) [RHEL-116058]
  - cifs: Fix TCP_Server_Info::credits to be signed (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.send_io.lcredits.* (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.send_io.lcredits.* (Paulo Alcantara) [RHEL-116058]
  - smb: client: allocate enough space for MR WRs and ib_drain_qp() (Paulo Alcantara) [RHEL-116058]
  - smb: client: let smbd_destroy() wait for SMBDIRECT_SOCKET_DISCONNECTED (Paulo Alcantara) [RHEL-116058]
  - smb: move some duplicate definitions to common/cifsglob.h (Paulo Alcantara) [RHEL-116058]
  - smb: client: let destroy_mr_list() keep smbdirect_mr_io memory if registered (Paulo Alcantara) [RHEL-116058]
  - smb: client: let destroy_mr_list() call ib_dereg_mr() before ib_dma_unmap_sg() (Paulo Alcantara) [RHEL-116058]
  - smb: client: call ib_dma_unmap_sg if mr->sgt.nents is not 0 (Paulo Alcantara) [RHEL-116058]
  - smb: client: improve logic in smbd_deregister_mr() (Paulo Alcantara) [RHEL-116058]
  - smb: client: improve logic in smbd_register_mr() (Paulo Alcantara) [RHEL-116058]
  - smb: client: improve logic in allocate_mr_list() (Paulo Alcantara) [RHEL-116058]
  - smb: client: let destroy_mr_list() remove locked from the list (Paulo Alcantara) [RHEL-116058]
  - smb: client: let destroy_mr_list() call list_del(&mr->list) (Paulo Alcantara) [RHEL-116058]
  - smb: client: change smbd_deregister_mr() to return void (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_mr_io.{kref,mutex} and SMBDIRECT_MR_DISABLED (Paulo Alcantara) [RHEL-116058]
  - smb: client: Omit one redundant variable assignment in cifs_xattr_set() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-116058]
  - cifs: Add comments for DeletePending assignments in open functions (Paulo Alcantara) [RHEL-116058]
  - cifs: Add fallback code path for cifs_mkdir_setinfo() (Paulo Alcantara) [RHEL-116058]
  - cifs: Allow fallback code in smb_set_file_info() also for directories (Paulo Alcantara) [RHEL-116058]
  - cifs: Query EA $LXMOD in cifs_query_path_info() for WSL reparse points (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove redudant assignment in cifs_strict_fsync() (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix race with fallocate(2) and AIO+DIO (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix missing timestamp updates after ftruncate(2) (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix missing timestamp updates with O_TRUNC (Paulo Alcantara) [RHEL-116058]
  - smb: client: batch SRV_COPYCHUNK entries to cut round trips (Paulo Alcantara) [RHEL-116058]
  - smb: client: Omit an if branch in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Return directly after a failed genlmsg_new() in cifs_swn_send_register_message() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Use common code in cifs_do_create() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Improve unlocking of a mutex in cifs_get_swn_reg() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Return a status code only as a constant in cifs_spnego_key_instantiate() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Use common code in cifs_lookup() (Paulo Alcantara) [RHEL-116058]
  - smb: client: Reduce the scopes for a few variables in two functions (Paulo Alcantara) [RHEL-116058]
  - cifs: client: force multichannel=off when max_channels=1 (Paulo Alcantara) [RHEL-116058]
  - smb: client: transport: avoid reconnects triggered by pending task work (Paulo Alcantara) [RHEL-116058]
  - smb: client: add tcon information to smb2_reconnect() debug messages (Paulo Alcantara) [RHEL-116058]
  - smb: client: let smbd_post_send_iter() call ib_dma_map_single() for the header first (Paulo Alcantara) [RHEL-116058]
  - smb: client: defer calling ib_alloc_pd() after we are connected (Paulo Alcantara) [RHEL-116058]
  - smb: client: allocate smbdirect workqueue at the beginning of _smbd_get_connection() (Paulo Alcantara) [RHEL-116058]
  - smb: client: make consitent use of spin_lock_irq{save,restore}() in smbdirect.c (Paulo Alcantara) [RHEL-116058]
  - smb: client: let smbd_{destroy,disconnect_rdma_{work,connection}}() wake up all wait queues (Paulo Alcantara) [RHEL-116058]
  - smb: client: let smbd_disconnect_rdma_connection() disable all work but disconnect_work (Paulo Alcantara) [RHEL-116058]
  - smb: client: fill in smbdirect_socket.first_error on error (Paulo Alcantara) [RHEL-116058]
  - smb: client: let smbd_disconnect_rdma_connection() set SMBDIRECT_SOCKET_ERROR... (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to get_mr() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_negotiate() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_negotiate_req() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_ia_open() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_create_id() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_qp_async_error_upcall() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_conn_upcall() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_full_iter() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_empty() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_post_send_iter() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to manage_keep_alive_before_sending() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_post_send() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to manage_credits_prior_sending() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_post_recv() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to smbd_disconnect_rdma_connection() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to {allocate,destroy}_mr_list() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to {enqueue,_get_first}_reassembly() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to {allocate,destroy}_caches_and_workqueue() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to {allocate,destroy}_receive_buffers() (Paulo Alcantara) [RHEL-116058]
  - smb: client: pass struct smbdirect_socket to {get,put}_receive_buffer() (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.mr_io (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket_parameters.max_frmr_depth (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of struct smbdirect_mr_io (Paulo Alcantara) [RHEL-116058]
  - smb: client: add and use smbd_get_parameters() (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.workqueue (Paulo Alcantara) [RHEL-116058]
  - smb: client: move rdma_readwrite_threshold from smbd_connection to TCP_Server_Info (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.statistics (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove unused smbd_connection.count_reassembly_queue (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove unused smbd_connection->protocol (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.idle.{keepalive,immediate_work,timer_work} (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix smbdirect keep alive handling to match the documentation (Paulo Alcantara) [RHEL-116058]
  - smb: client: send empty packets via send_immediate_work (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.rdma.legacy_iwarp (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket_parameters.{initiator_depth,responder_resources} (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket_parameters.{resolve_{addr,route},rdma_connect,negotiate}_timeout_msec (Paulo Alcantara) [RHEL-116058]
  - smb: client: fill smbdirect_socket_parameters at the beginning and use the values from there (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove useless smbd_connection.send_immediate (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.recv_io.{posted,credits} (Paulo Alcantara) [RHEL-116058]
  - smb: client: count the number of posted recv_io messages in order to calculated credits (Paulo Alcantara) [RHEL-116058]
  - smb: client: limit the range of info->receive_credit_target (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove info->wait_receive_queues handling in smbd_destroy() (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of ib_wc_status_msg() and skip IB_WC_WR_FLUSH_ERR logging (Paulo Alcantara) [RHEL-116058]
  - smb: client: queue post_recv_credits_work also if the peer raises the credit target (Paulo Alcantara) [RHEL-116058]
  - smb: client: make sure smbd_disconnect_rdma_work() doesn't run after smbd_destroy() took over (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.send_io.credits.{count,wait_queue} (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.send_io.pending.{count,{dec,zero}_wait_queue} (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.disconnect_work (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket_init() (Paulo Alcantara) [RHEL-116058]
  - smb: client: make only use of wake_up[_all]() in smbdirect.c (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.status_wait (Paulo Alcantara) [RHEL-116058]
  - smb: client: use status_wait and SMBDIRECT_SOCKET_RESOLVE_{ADDR,ROUTE}_RUNNING for completion (Paulo Alcantara) [RHEL-116058]
  - smb: client: use status_wait and SMBDIRECT_SOCKET_NEGOTIATE_RUNNING for completion (Paulo Alcantara) [RHEL-116058]
  - smb: client: adjust smbdirect related output of cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.first_error (Paulo Alcantara) [RHEL-116058]
  - smb: client/smbdirect: introduce SMBDIRECT_SOCKET_ERROR (Paulo Alcantara) [RHEL-116058]
  - smb: client/smbdirect: replace SMBDIRECT_SOCKET_CONNECTING with more detailed states (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix sending the iwrap custom IRD/ORD negotiation messages (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: let smbdirect_socket_init() initialize all [delayed_]work_structs as disabled (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.mr_io.* (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket_parameters.max_frmr_depth (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce struct smbdirect_mr_io (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.workqueue (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.statistics (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.idle.{keepalive,immediate_work,timer_work} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.rdma.legacy_iwarp (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket_parameters.{initiator_depth,responder_resources} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket_parameters.{resolve_{addr,route},rdma_connect,negotiate}_timeout_msec (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.{posted,credits} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce struct smbdirect_rw_io (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.rw_io.credits (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce struct smbdirect_send_batch (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.send_io.credits.{count,wait_queue} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.send_io.pending.{count,{dec,zero}_wait_queue} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.disconnect_work (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket_init() (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.status_wait (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket_status_string() (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path (Paulo Alcantara) [RHEL-116058] {CVE-2025-39929}
  - smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work) (Paulo Alcantara) [RHEL-116058] {CVE-2025-39932}
  - smb: client: use disable[_delayed]_work_sync in smbdirect.c (Paulo Alcantara) [RHEL-116058]
  - cifs: prevent NULL pointer dereference in UTF16 conversion (Paulo Alcantara) [RHEL-116058] {CVE-2025-39838}
  - smb: client: fix spellings in comments (Paulo Alcantara) [RHEL-116058]
  - smb3 client: fix return code mapping of remap_file_range (Paulo Alcantara) [RHEL-116058]
  - smb: client: don't wait for info->send_pending == 0 on error (Paulo Alcantara) [RHEL-116058]
  - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-116058]
  - cifs: avoid extra calls to strlen() in cifs_get_spnego_key() (Paulo Alcantara) [RHEL-116058]
  - cifs: Fix collect_sample() to handle any iterator type (Paulo Alcantara) [RHEL-116058]
  - smb: client: only use a single wait_queue to monitor smbdirect connection status (Paulo Alcantara) [RHEL-116058]
  - smb: client: don't call init_waitqueue_head(&info->conn_wait) twice in _smbd_get_connection (Paulo Alcantara) [RHEL-116058]
  - smb: client: improve logging in smbd_conn_upcall() (Paulo Alcantara) [RHEL-116058]
  - smb: client: return an error if rdma_connect does not return within 5 seconds (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.{send,recv}_io.mem.{cache,pool} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: add smbdirect_socket.{send,recv}_io.mem.{cache,pool} (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of struct smbdirect_send_io (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce struct smbdirect_send_io (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of SMBDIRECT_RECV_IO_MAX_SGE (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: add SMBDIRECT_RECV_IO_MAX_SGE (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove unused enum smbd_connection_status (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket.recv_io.reassembly.* (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.reassembly.* (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smb: smbdirect_socket.recv_io.free.{list,lock} (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.free.{list,lock} (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of struct smbdirect_recv_io (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce struct smbdirect_recv_io (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of smbdirect_socket->recv_io.expected (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket.recv_io.expected (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove unused smbd_connection->fragment_reassembly_remaining (Paulo Alcantara) [RHEL-116058]
  - smb: client: let recv_done() avoid touching data_transfer after cleanup/move (Paulo Alcantara) [RHEL-116058]
  - smb: client: let recv_done() cleanup before notifying the callers. (Paulo Alcantara) [RHEL-116058]
  - smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (Paulo Alcantara) [RHEL-116058]
  - smb: client: remove separate empty_packet_queue (Paulo Alcantara) [RHEL-116058]
  - smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection() (Paulo Alcantara) [RHEL-116058]
  - cifs: Move the SMB1 transport code out of transport.c (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-116058]
  - smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-116058]
  - smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-116058]
  - r8152: Advertise software timestamp information. (Jose Ignacio Tornos Martinez) [RHEL-132607]
  - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137684] {CVE-2025-40304}
  - fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136943] {CVE-2025-40322}
  - ixgbe: use EOPNOTSUPP instead of ENOTSUPP in ixgbe_ptp_feature_enable() (Corinna Vinschen) [RHEL-97675]
  - ixgbe: fix memory leak and use-after-free in ixgbe_recovery_probe() (Corinna Vinschen) [RHEL-97675]
  - ixgbe: fix too early devlink_free() in ixgbe_remove() (Corinna Vinschen) [RHEL-97675]
  - ixgbe: handle IXGBE_VF_FEATURES_NEGOTIATE mbox cmd (Corinna Vinschen) [RHEL-97675]
  - ixgbevf: fix mailbox API compatibility by negotiating supported features (Corinna Vinschen) [RHEL-97673]
  - ixgbe: handle IXGBE_VF_GET_PF_LINK_STATE mailbox operation (Corinna Vinschen) [RHEL-97675]
  - ixgbevf: fix getting link speed data for E610 devices (Corinna Vinschen) [RHEL-97673]
  - ixgbe: fix typos and docstring inconsistencies (Corinna Vinschen) [RHEL-97675]
  - ixgbevf: fix proper type for error code in ixgbevf_resume() (Corinna Vinschen) [RHEL-97673]
  - ixgbe: destroy aci.lock later within ixgbe_remove path (Corinna Vinschen) [RHEL-97675]
  - ixgbe: initialize aci.lock before it's used (Corinna Vinschen) [RHEL-97675]
  - ixgbe: fix typo in function comment for ixgbe_get_num_per_func() (Corinna Vinschen) [RHEL-97675]
  - ixgbe: drop unnecessary casts to u16 / int (Corinna Vinschen) [RHEL-97675]
  - ixgbe: reduce number of reads when getting OROM data (Corinna Vinschen) [RHEL-97675]
  - ixgbe: add the 2.5G and 5G speeds in auto-negotiation for E610 (Corinna Vinschen) [RHEL-97675]
  - ixgbe: fix incorrect map used in eee linkmode (Corinna Vinschen) [RHEL-97675]
  - ixgbe: fix ndo_xdp_xmit() workloads (Corinna Vinschen) [RHEL-97675]
  - ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc (Corinna Vinschen) [RHEL-97675]
  - eth: intel: use vmalloc_array() to simplify code [ixgbevf] (Corinna Vinschen) [RHEL-97673]
  - eth: intel: use vmalloc_array() to simplify code [ixgbe] (Corinna Vinschen) [RHEL-97675]
  - net: Fix typos [ixgbevf] (Corinna Vinschen) [RHEL-97673]
  - ixgbevf: remove unused fields from struct ixgbevf_adapter (Corinna Vinschen) [RHEL-97673]
  - ethernet: intel: fix building with large NR_CPUS [ixgbe] (Corinna Vinschen) [RHEL-97675]
  - ixgbe: spelling corrections (Corinna Vinschen) [RHEL-97675]
  - ixgbe: turn off MDD while modifying SRRCTL (Corinna Vinschen) [RHEL-97675]
  - ixgbe: add Tx hang detection unhandled MDD (Corinna Vinschen) [RHEL-97675]
  - ixgbe: check for MDD events (Corinna Vinschen) [RHEL-97675]
  - ixgbe: add MDD support (Corinna Vinschen) [RHEL-97675]
  - ixgbe: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Corinna Vinschen) [RHEL-97675]
  - ixgbe: Fix typos and clarify comments in X550 driver code (Corinna Vinschen) [RHEL-97675]
  - ixgbe: add link_down_events statistic (Corinna Vinschen) [RHEL-97675]
  - ixgbe: devlink: add devlink region support for E610 (Corinna Vinschen) [RHEL-97675]
  - ixgbe: add E610 .set_phys_id() callback implementation (Corinna Vinschen) [RHEL-97675]
  - ixgbe: apply different rules for setting FC on E610 (Corinna Vinschen) [RHEL-97675]
  - ixgbe: add support for ACPI WOL for E610 (Corinna Vinschen) [RHEL-97675]
  - ixgbe: create E610 specific ethtool_ops structure (Corinna Vinschen) [RHEL-97675]
  - ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5 (Corinna Vinschen) [RHEL-97673]
  - ixgbevf: Add support for new mailbox communication between PF and VF (Corinna Vinschen) [RHEL-97673]
  - igc: Reduce TSN TX packet buffer from 7KB to 5KB per queue (Corinna Vinschen) [RHEL-97650]
  - igc: fix race condition in TX timestamp read for register 0 (Corinna Vinschen) [RHEL-97650]
  - igc: Restore default Qbv schedule when changing channels (Corinna Vinschen) [RHEL-97650]
  - igc: extract GRXRINGS from .get_rxnfc (Corinna Vinschen) [RHEL-97650]
  - igc: use EOPNOTSUPP instead of ENOTSUPP in igc_ethtool_get_sset_count() (Corinna Vinschen) [RHEL-97650]
  - igc: power up the PHY before the link test (Corinna Vinschen) [RHEL-97650]
  - igc: don't fail igc_probe() on LED setup error (Corinna Vinschen) [RHEL-97650] {CVE-2025-39956}
  - igc: drop unnecessary constant casts to u16 (Corinna Vinschen) [RHEL-97650]
  - igc: fix disabling L1.2 PCI-E link substate on I226 on init (Corinna Vinschen) [RHEL-97650]
  - eth: intel: use vmalloc_array() to simplify code [igc] (Corinna Vinschen) [RHEL-97650]
  - net: Fix typos [igc] (Corinna Vinschen) [RHEL-97650]
  - igc: Add wildcard rule support to ethtool NFC using Default Queue (Corinna Vinschen) [RHEL-97650]
  - igc: Relocate RSS field definitions to igc_defines.h (Corinna Vinschen) [RHEL-97650]
  - igc: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Corinna Vinschen) [RHEL-97650]
  - igc: disable L1.2 PCI-E link substate to avoid performance issue (Corinna Vinschen) [RHEL-97650]
  - igc: Make the const read-only array supported_sizes static (Corinna Vinschen) [RHEL-97650]
  - igc: add preemptible queue support in mqprio (Corinna Vinschen) [RHEL-97650]
  - igc: add preemptible queue support in taprio (Corinna Vinschen) [RHEL-97650]
  - igc: add private flag to reverse TX queue priority in TSN mode (Corinna Vinschen) [RHEL-97650]
  - igc: assign highest TX queue number as highest priority in mqprio (Corinna Vinschen) [RHEL-97650]
  - igc: refactor TXDCTL macros to use FIELD_PREP and GEN_MASK (Corinna Vinschen) [RHEL-97650]
  - igc: add DCTL prefix to related macros (Corinna Vinschen) [RHEL-97650]
  - igc: move TXDCTL and RXDCTL related macros (Corinna Vinschen) [RHEL-97650]
  - igc: Change Tx mode for MQPRIO offloading (Corinna Vinschen) [RHEL-97650]
  - igc: Limit netdev_tc calls to MQPRIO (Corinna Vinschen) [RHEL-97650]
  - igc: add support to get frame preemption statistics via ethtool (Corinna Vinschen) [RHEL-97650]
  - igc: add support to get MAC Merge data via ethtool (Corinna Vinschen) [RHEL-97650]
  - igc: block setting preemptible traffic class in taprio (Corinna Vinschen) [RHEL-97650]
  - igc: add support to set tx-min-frag-size (Corinna Vinschen) [RHEL-97650]
  - igc: add support for frame preemption verification (Corinna Vinschen) [RHEL-97650]
  - igc: Fix TX drops in XDP ZC (Corinna Vinschen) [RHEL-97650]
  - igc: Add launch time support to XDP ZC (Corinna Vinschen) [RHEL-97650]
  - igc: Refactor empty frame insertion for launch time support (Corinna Vinschen) [RHEL-97650]
  - igc: Switch to use hrtimer_setup() (Corinna Vinschen) [RHEL-97650]
  - igb: extract GRXRINGS from .get_rxnfc (Corinna Vinschen) [RHEL-97672]
  - igbvf: fix misplaced newline in VLAN add warning message (Corinna Vinschen) [RHEL-97690]
  - igb: use EOPNOTSUPP instead of ENOTSUPP in igb_get_sset_count() (Corinna Vinschen) [RHEL-97672]
  - igb: fix link test skipping when interface is admin down (Corinna Vinschen) [RHEL-97672]
  - igb: Fix NULL pointer dereference in ethtool loopback test (Corinna Vinschen) [RHEL-97672]
  - igb: drop unnecessary constant casts to u16 (Corinna Vinschen) [RHEL-97672]
  - igbvf: remove redundant counter rx_long_byte_count from ethtool statistics (Corinna Vinschen) [RHEL-97690]
  - igbvf: add lbtx_packets and lbtx_bytes to ethtool statistics (Corinna Vinschen) [RHEL-97690]
  - eth: intel: use vmalloc_array() to simplify code [igb] (Corinna Vinschen) [RHEL-97672]
  - igbvf: remove unused fields from struct igbvf_adapter (Corinna Vinschen) [RHEL-97690]
  - igbvf: add tx_timeout_count to ethtool statistics (Corinna Vinschen) [RHEL-97690]
  - igbvf: remove unused interrupt counter fields from struct igbvf_adapter (Corinna Vinschen) [RHEL-97690]
  - igb: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Corinna Vinschen) [RHEL-97672]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-676.el9]
changelog:
  - io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths [partial] (Jeff Moyer) [RHEL-141266]
  - io_uring: fix filename leak in __io_openat_prep() (Jeff Moyer) [RHEL-141266]
  - io_uring: fix min_wait wakeups for SQPOLL (Jeff Moyer) [RHEL-141266]
  - io_uring/kbuf: use READ_ONCE() for userspace-mapped memory (Jeff Moyer) [RHEL-141266]
  - io_uring/rsrc: fix lost entries after cloned range (Jeff Moyer) [RHEL-141266]
  - io_uring/poll: correctly handle io_poll_add() return value on update (Jeff Moyer) [RHEL-141266]
  - io_uring: use WRITE_ONCE for user shared memory (Jeff Moyer) [RHEL-141266]
  - io_uring: correct __must_hold annotation in io_install_fixed_file (Jeff Moyer) [RHEL-141266]
  - io_uring/sqpoll: be smarter on when to update the stime usage (Jeff Moyer) [RHEL-141266]
  - io_uring/sqpoll: switch away from getrusage() for CPU accounting (Jeff Moyer) [RHEL-141266]
  - io_uring: fix incorrect io_kiocb reference in io_link_skb (Jeff Moyer) [RHEL-141266]
  - io_uring: include dying ring in task_work "should cancel" state (Jeff Moyer) [RHEL-141266]
  - io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-141266]
  - io_uring: finish IOU_OK -> IOU_COMPLETE transition (Jeff Moyer) [RHEL-141266]
  - io_uring: unify STOP_MULTISHOT with IOU_OK (Jeff Moyer) [RHEL-141266]
  - io_uring: return -EAGAIN to continue multishot (Jeff Moyer) [RHEL-141266]
  - RDMA/efa: Remove possible negative shift (Kamal Heib) [RHEL-140844]
  - RDMA/efa: Extend admin timeout error print (Kamal Heib) [RHEL-140844]
  - RDMA/efa: Add Network HW statistics counters (Kamal Heib) [RHEL-140844]
  - e1000e: Introduce private flag to disable K1 (Corinna Vinschen) [RHEL-134986]
  - e1000e: drop unnecessary constant casts to u16 (Corinna Vinschen) [RHEL-134986]
  - e1000e: ignore uninitialized checksum word on tgp (Corinna Vinschen) [RHEL-134986]
  - e1000e: disregard NVM checksum on tgp when valid checksum bit is not set (Corinna Vinschen) [RHEL-134986]
  - e1000e: set fixed clock frequency indication for Nahum 11 and Nahum 13 (Corinna Vinschen) [RHEL-134986]
  - e1000e: change k1 configuration on MTP and later platforms (Corinna Vinschen) [RHEL-134986]
  - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-129138]
  - x86/microcode: Mark early_parse_cmdline() as __init (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-129138]
  - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-129138]
  - redhat/configs: Add CONFIG_MICROCODE_DBG [=n] (Waiman Long) [RHEL-129138]
  - x86/microcode: Add microcode loader debugging functionality (Waiman Long) [RHEL-129138]
  - x86/microcode: Add microcode= cmdline parsing (Waiman Long) [RHEL-129138]
  - x86/microcode/intel: Refresh the revisions that determine old_microcode (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Do not return error when microcode update is not necessary (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Clean the cache if update did not load microcode (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Make __verify_patch_size() return bool (Waiman Long) [RHEL-129138]
  - x86/microcode/AMD: Remove bogus comment from parse_container() (Waiman Long) [RHEL-129138]
  - mm: memcg: add NULL check to obj_cgroup_put() (Radostin Stoyanov) [RHEL-113275]
  - mm: memcg: use rstat for non-hierarchical stats (Radostin Stoyanov) [RHEL-113275]
  - mm: memcg: change flush_next_time to flush_last_time (Radostin Stoyanov) [RHEL-113275]
  - zswap: export compression failure stats (Radostin Stoyanov) [RHEL-113275]
  - Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline" (Radostin Stoyanov) [RHEL-113275]
  - cgroup/rstat: Fix forceidle time in cpu.stat (Radostin Stoyanov) [RHEL-113275]
  - memcg: drain obj stock on cpu hotplug teardown (Radostin Stoyanov) [RHEL-113275]
  - memcg: avoid dead loop when setting memory.max (Radostin Stoyanov) [RHEL-113275]
  - cgroup: Add compatibility option for content of /proc/cgroups (Radostin Stoyanov) [RHEL-113275]
  - cgroup: Print message when /proc/cgroups is read on v2-only system (Radostin Stoyanov) [RHEL-113275]
  - cgroup,freezer: fix incomplete freezing when attaching tasks (Radostin Stoyanov) [RHEL-113275]
  - cgroup: add helper for checking when css is cgroup::self (Radostin Stoyanov) [RHEL-113275]
  - include/cgroup: separate {get,put}_cgroup_ns no-op case (Radostin Stoyanov) [RHEL-113275]
  - sched: Factor out cgroup weight conversion functions (Radostin Stoyanov) [RHEL-113275]
  - blk-cgroup: Simplify policy files registration (Radostin Stoyanov) [RHEL-113275]
  - selftests/bpf: Add a test for bpf_cgroup_from_id lookup in non-root cgns (Radostin Stoyanov) [RHEL-113275]
  - bpf: Do not limit bpf_cgroup_from_id to current's namespace (Radostin Stoyanov) [RHEL-113275]
  - mm: cleanup WORKINGSET_NODES in workingset (Radostin Stoyanov) [RHEL-113275]
  - memcg: cleanup __mod_memcg_lruvec_state (Radostin Stoyanov) [RHEL-113275]
  - memcg: reduce memory size of mem_cgroup_events_index (Radostin Stoyanov) [RHEL-113275]
  - sched/headers: Move 'struct sched_param' out of uapi, to work around glibc/musl breakage (Radostin Stoyanov) [RHEL-113275]
  - cgroup/bpf: only cgroup v2 can be attached by bpf programs (Radostin Stoyanov) [RHEL-113275]
  - cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Radostin Stoyanov) [RHEL-113275]
  - Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Radostin Stoyanov) [RHEL-113275]


author: Tomas Halman <thalman@redhat.com> - 1.3-1
changelog:
  - Rebase to version 1.3
  - Resolves: RHEL-3336 - khci won't work with Quarkus-based Keycloak due to missing /auth path


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Julien Rische <jrische@redhat.com> - 1.21.1-9
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88704
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88048
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-82647


author: Mike FABIAN <mfabian@redhat.com> - 0.0.51-1
changelog:
  - Parse stuff in glibc locale names after @ which is not a script as a variant
  - Add ckb_IQ.UTF-8 locale


author: Mike FABIAN <mfabian@redhat.com> - 0.0.52-1
changelog:
  - Update to 0.0.52
  - add list_common_keyboards() to public api by Sundeep ANAND <suanand@redhat.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.53-1
changelog:
  - Update to 0.0.53
  - Capitalize the return values of language_name() and territory_name()
    (See: https://github.com/rhinstaller/anaconda/pull/2837).
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Mike FABIAN <mfabian@redhat.com> - 0.0.54-1
changelog:
  - Update to 0.0.54
  - add list_common_languages derived from gnome-control-center
    by Sundeep ANAND <suanand@redhat.com>


author: Tomas Halman <thalman@redhat.com> - 2.7.0-12
changelog:
  - Fixing CVE-2025-47151
    Resolves: RHEL-126685 CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso


author: Matej Matuska <mmatuska@redhat.com> - 0.18.0-4
changelog:
  - Bump leapp-framework to 6.0
  - Bump leapp-framework-dependencies to 6
  - Require python3-PyYAML
  - [Technical preview] Introduce configurability for leapp actors
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-1
changelog:
  - Rebase to new upstream version 0.19.0
  - Add possibility to use a specified execution context for snactor run in an existing leapp.db
  - Increase limits on the number of opened file descriptors and maximum size
    of manipulated files when running leapp
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-2
changelog:
  - Bump leapp-framework to 6.1
  - Create the /var/lib/leapp directory automatically if missing
  - Recognize configuration files with the .yaml suffix only
  - Fix CLI: allow to set falsy values as default for leapp's command options
  - Resolves: RHEL-86225


author: Petr Stodulka <pstodulk@redhat.com> - 0.20.0-2
changelog:
  - Bump leapp-framework to 6.2
  - Add possibility to specify aliases for CLI option
  - Resolves: RHEL-128269


author: Matej Matuska <mmatuska@redhat.com> - 0.21.0-4
changelog:
  - Require leapp-framework 6.0+
  - Update leapp-deps package to satisfy leapp-framework-dependencies 6
  - Add dependency on libdb-utils
  - Enable upgrade for systems with LUKS bound to Clevis with TPM 2.0 token
  - Adjust resource limitations for leapp to be able to perform the upgrade
  - Cap max size of the sparse files to 1TiB for storage with large amount of free space
  - Check that detected Intel CPU microarchitecture is supported on target system
  - Fix the report when handling broken parsing of kernel cmdline
  - Generate proper error message instead of ModelViolationError when parsing invalid repository definition
  - Handle default kernel cmdline when multiple boot entries for the default kernel are defined
  - Migrate Ruby IRB during the upgrade
  - Migrate pam_userdb backend during the upgrade
  - Skip checking of (PKI) `directory-hash` dir to speedup the upgrade process and clean logs
  - Update leapp upgrade data files
  - Resolves: RHEL-57043


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-5
changelog:
  - Obsolete RHEL9 GPG key signed with SHA1
  - Activate LVM VGs with `--sysinit` option to correct the use in the upgrade initramfs
  - Fix output of commands executed inside systemd-nspawn containers
  - Fix pes events scanner crashing when there are duplicate packages in the received instructions
  - Fix pes events scanner not respecting user’s transaction configuration
  - Fix remediation instructions for deprecated NM configuration
  - Fix storage scanner crashing when command outputs contain colon character
  - Minor improvements in preupgrade reports
  - Resolves: RHEL-57043, RHEL-31428, RHEL-33373, RHEL-69829, RHEL-71517


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-6
changelog:
  - Detect XFS file systems with problematic parameters
  - Raise an inhibitor if unsupported target version supplied instead of error
  - Prevent a possible crash with LiveMode when adding the upgrade boot entry on systems with LVM
  - Resolves: RHEL-57043, RHEL-52309, RHEL-60034


author: Petr Stodulka <pstodulk@redhat.com> - 0.22.0-1
changelog:
  - Rebase to new upstream 0.22.0
  - Minor updates in generated reports
  - Cover upgrades for MySQL and PostgreSQL databases
  - Detect OpenSSL engines configured in /etc/pki/tls/openssl.cnf
  - Detect deprecated network-scripts (ifcfg) files
  - Detect whether subscribed systems are using SCA
  - Inform user about Libdb removal if present
  - Check and handle upgrades with custom crypto policies
  - Update checks for SAP HANA
  - Resolves: RHEL-57043, RHEL-35618, RHEL-36661, RHEL-62689, RHEL-68309, RHEL-69831, RHEL-77169, RHEL-78396


author: Petr Stodulka <pstodulk@redhat.com> - 0.22.0-2
changelog:
  - Require leapp-framework >= 6.1
  - Simplified use of the LiveMode experimental feature with additional enhancements
  - Ensure the leapp-upgrade-el9toel10 RPM is not touched during the upgrade transaction
  - Create proper error message when swap of RHUI clients fails
  - Fix the check of deprecated PCI devices and drivers
  - Add RHEL 10.1 product certificates
  - Gracefully handle CentOS OS versioning style
  - Introduced the --enable-experimental-feature to simplify use of experimental features
  - Manage RPM GPG keys during the upgrade respecting used linux distributions
  - Prevent a crach during post-upgrade phases when no custom SELinux modules needs to be migrated
  - Update leapp upgrade data files
  - Minor fixes in reports
  - Resolves: RHEL-49402, RHEL-72544, RHEL-77175, RHEL-80334, RHEL-80335, RHEL-80336, RHEL-80550, RHEL-86689


author: Karolina Kula <kkula@redhat.com> - 0.22.0-3
changelog:
  - Fix parsing of the kernel cmdline
  - Require leapp data with provided_data_streams 4.0+
  - Respect the release_id of the OS when processing DNF repositories to apply correct mapping for CentOS Stream
  - Resolves: RHEL-80336


author: Karolina Kula <kkula@redhat.com> - 0.22.0-4
changelog:
  - Load DNF configuration correctly when using DNF libraries
  - Disable localpkg_gpgcheck during the upgrade if set to allow installation of bundled leapp and leapp-repository deps packages
  - Enable upgrades on systems using RHUI on AWS and Azure
  - Inhibit the upgrade if cgroups v1 are enabled on the system
  - The HybridImage model has been replaced by ConvertGrubenvTask
  - Check the input format of the target version properly
  - Resolves: RHEL-64910, RHEL-64911, RHEL-81212


author: Karolina Kula <kkula@redhat.com> - 0.23.0-1
changelog:
  - Rebase to new upstream 0.23.0
  - Enable in-place upgrades on CentOS Stream systems
  - Inhibit the upgrade on systems using deprecated network-legacy dracut module to prevent kernel panic
  - Introduce leapp-upgrade-el9toel10-fapolicyd subpackage with fapolicyd rules for in-place upgrades
  - Ignore Red Hat subscription-manager actions on non-RHEL distros
  - Add actors to migrate SSSD configuration
  - Update leapp upgrade data files
  - Resolves: RHEL-50847, RHEL-80333, RHEL-86226, RHEL-95975, RHEL-95982, RHEL-102591, RHEL-104389


author: Petr Stodulka <pstodulk@redhat.com> - 0.23.0-2
changelog:
  - Requires leapp-framework 6.2+
  - Modernize the storage initialization when booting to the upgrade environment
  - Fix the upgrade on s390x LPAR when rootfs is on LVM
  - Fix the detection of encrypted Ceph OSD containers
  - Fix unlocking of LUKS devices when applied on non-rootfs file systems
  - Detect potentially harmful third party python modules for the target python version
  - Handle correctly live kernel patching during IPU
  - Inhibit the upgrade if pluginpath is configured explicitly in DNF
  - Introduce `--target-os` option to specify target distribution for possible conversion during the upgrade
  - Introduce the `--target-version` alias for the `--target` option
  - Minor changes in logs and reports
  - Prevent sssdupdate actor from rising errors that could stop the upgrade
  - Respect repomapping on CentOS-like distributions
  - Respect repomapping when converting the system to different Linux distribution
  - Skip empty lines when parsing dumped DNF config to prevent confusing warning log
  - Update the leapp data files
  - Resolves: RHEL-76159, RHEL-95983, RHEL-108025, RHEL-108992, RHEL-110563, RHEL-119546


author: Karolina Kula <kkula@redhat.com> - 0.23.0-3
changelog:
  - Fix handling of LVM during the upgrade
  - Deliver initial improvements for Multipath during the upgrade
  - Fix remediation command to make symlimk in root directory relative
  - Remove RPM GPG keys of the source distribution when converting system
  - Replace distro specific packages during conversion
  - Improve error message when scanning invalid SSHD configuration
  - Update the leapp data files
  - Minor changes in logs and reports
  - Resolves: RHEL-110190, RHEL-110568


author: Michal Ruprich <mruprich@redhat.com> - 4.9.2-8
changelog:
  - Adding a timeout for TLS close
  - Resolves: RHEL-113471 - "cannot seek on data source" in TLS lftp sessions


author: RHEL Packaging Agent <jotnar@redhat.com> - 1.8.12-1
changelog:
  - Rebase to version 1.8.12
  - Update license to MIT AND X11 (SPDX migration)
  - Change source format from .tar.bz2 to .tar.xz
  - Add libtool as BuildRequires
  - Remove CVE patches (now included upstream)
  - Add patch to lower autoconf requirement to 2.69
  - Update dont-forward-keycode-0.patch for new codebase
  - Remove NEWS from %doc (file not present in 1.8.12)
  - Resolves: RHEL-111537


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: José Expósito <jexposit@redhat.com> - 3.5.13-9
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-32
changelog:
  - make up incomplete patch for host name wildcard checking (RHEL-5675)
  - eliminate use of obsolete patch syntax (RHEL-65791)
  - http2: make sure pause is done on HTTP (RHEL-85847)


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: José Expósito <jexposit@redhat.com> - 2.4.123-2
changelog:
  - Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches")
    libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x
    Resolves: https://issues.redhat.com/browse/RHEL-53869


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Resolves: rhbz#1963838 restore missing functions
    Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libformula
    didn't use its built-in loaders so libreoffice's database
    report generator didn't show all categories in formula wizard


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-3
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56809
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62935
  - Replace Jansson with json-c
    resolves: RHEL-65292


author: Richard W.M. Jones <rjones@redhat.com> - 9.2-1
changelog:
  - Rebase to ntfs-3g 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
    resolves: rhbz#2127235 rhbz#2127242
    (also 2127264 2127250 2127257)


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.19.3-6
changelog:
  - Add support for the Wacom Intuos Pro (RHEL-105483)
  - Rename existing patches for better order clarity


author: Keith Seitz <keiths@redhat.com> - 2.0.4-2
changelog:
  - Add support for pre-generated documenation, allowing removal
    of pandoc dependency. (RHBZ 1943531, Keith Seitz)


author: Mohan Boddu <mboddu@redhat.com> - 0.2.10-24
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951286 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951284 replace apache-commons-logging with java.util.logging


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libloader
    didn't use its built-in loaders so libreoffice's database
    report generator didn't work


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: Michel Normand <normand@linux.vnet.ibm.com> 1.1.0-5
changelog:
  - Add remove_2_backslashes_in_shell_call.patch
    Add remove_eng_inc_in_version_pl.patch
    to avoid f33 build failure


author: Bryan Gurney <bgurney@redhat.com> - 1.12-8
changelog:
  - Apply patch to fix undefined behavior on realloc
  - Also add and apply patch to fix referencing empty array
  - Related: rhbz#2034641


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951282 replace apache-commons-logging with java.util.logging


author: Daiki Ueno <dueno@redhat.com> - 4.15-2
changelog:
  - Fix auto=ondemand connection initialization with TCP (RHEL-51879)
  - Make use of Netlink extack for additional error reporting (RHEL-51881)


author: Daiki Ueno <dueno@redhat.com> - 4.15-4
changelog:
  - pluto: fix refcounting of whack FD at CREATE_CHILD_SA request (RHEL-61461)
  - pluto: ignore CREATE_CHILD_SA request if crypto is in progress (RHEL-61461)


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.99.20-1
changelog:
  - 1900160 - sane-airscan-0.99.20 is available
  - 1897935 - Crash on libsane-airscan when trying to activate scanner


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Mohan Boddu <mboddu@redhat.com> - 1.1.2-29
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951281 replace apache-commons-logging with java.util.logging


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-9
changelog:
  - Add patches for CVE-2024-52530, CVE-2024-52531, and CVE-2024-52532
    Resolves: RHEL-67069
    Resolves: RHEL-67081


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Pavol Žáčik <pzacik@redhat.com> - 0.10.4-16
changelog:
  - Fix CVE-2025-5987
    Resolves: RHEL-130051
  - Workaround sshd failure rate limiting in tests
    Resolves: RHEL-135506


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Michal Hlavinka <mhlavink@redhat.com> - 4.4.0-14
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337)


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Jeff Moyer <jmoyer@redhat.com> - 2.12-1.el9
changelog:
  - Rebase to version 2.12.  Follow fedora and get rid of explicit %
    attr for library files
  - Resolves: RHEL-114115


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-12
changelog:
  - qemuMonitorJSONGetCPUModelExpansion: refactor parsing functions (RHEL-89415)
  - qemu: parse deprecated-props from query-cpu-model-expansion response (RHEL-89415)
  - qemu_capabilities: query deprecated features for host-model (RHEL-89415)
  - libvirt-domain: introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_DISABLE_DEPRECATED_FEATURES (RHEL-89415)
  - qemu_capabilities: filter deprecated features if requested (RHEL-89415)
  - virsh: add --disable-deprecated-features flag to domcapabilities (RHEL-89415)
  - conf: add deprecated_features attribute (RHEL-89415)
  - redhat: Restore hunks in tests/qemucapabilitiesdata/caps_10.0.0_s390x.* (RHEL-89415)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-14
changelog:
  - qemu: introduce QEMU_CAPS_AMD_IOMMU (RHEL-50560)
  - qemu: introduce QEMU_CAPS_PCI_ID (RHEL-50560)
  - docs: formatdomain: document intel-only IOMMU attributes (RHEL-50560)
  - qemu: add IOMMU model amd (RHEL-50560)
  - conf: add passthrough and xtsup attributes for IOMMU (RHEL-50560)
  - esx: Allow specifying different CA bundle for remote connections (RHEL-97440)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-15
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-106276)
  - qemu: sanitize blank lines in config file (RHEL-106276)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-106276)


author: Jiri Denemark <jdenemar@redhat.com> - 11.8.0-1
changelog:
  - Rebased to libvirt-11.8.0 (RHEL-118197)
  - The rebase also fixes the following bugs:
      RHEL-15693, RHEL-95397, RHEL-111609, RHEL-116847, RHEL-117774


author: Jiri Denemark <jdenemar@redhat.com> - 11.9.0-1
changelog:
  - Rebased to libvirt-11.9.0 (RHEL-118197)
  - The rebase also fixes the following bugs:
      RHEL-114003


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-1
changelog:
  - Rebased to libvirt-11.10.0 (RHEL-118197)
  - The rebase also fixes the following bugs:
      RHEL-126090, RHEL-128107
  - spec: Fix RPM build when %{fedora} is undefined (RHEL-118197)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-2
changelog:
  - qemu: tpm: Account for possible migration without actually sharing storage (RHEL-108915)
  - tests: Test virFileIsSharedFSOverride (RHEL-135287)
  - util: Fix race condition in virFileIsSharedFSType (RHEL-135287)
  - util: Fix race condition in virFileIsSharedFSOverride (RHEL-135287)
  - util: Rework virFileIsSharedFSOverride using virFileCheckParents (RHEL-135287)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-3
changelog:
  - util: json: Increase JSON nesting limit when parsing to 300 (RHEL-135128)
  - virjsontest: Add test for nesting depth (RHEL-135128)
  - qemu_validate: Drop VIR_DOMAIN_HYPERV_SYNIC dependency on VIR_DOMAIN_HYPERV_VPINDEX (RHEL-138689)
  - qemu_validate: Drop VIR_DOMAIN_HYPERV_STIMER dependency on VIR_DOMAIN_HYPERV_VPINDEX (RHEL-138689)
  - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-134127)
  - esx: URI encode inventory objects twice (RHEL-134127)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-4
changelog:
  - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624)
  - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010)
  - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010)
  - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010)
  - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010)
  - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090)
  - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090)
  - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090)
  - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090)
  - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090)


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-4
changelog:
  - Add support for the Cintiq Pro 27 (RHEL-101886)
  - Add support for the Intuos Pro 3rd Gen series (RHEL-101881)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-5
changelog:
  - Rearrange the OSD buttons for the Intuos Pro 3rd Gen (RHEL-101881)
  - Use separate Ring/Ring2 assignments


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-6
changelog:
  - Add stylus definitions for the propen group (RHEL-122207)
  - Add tablet definitions for the latest Cintiqs (RHEL-122206)
  - Fix the overlap for button assignments in the SVG (RHEL-126355)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Toke Høiland-Jørgensen <toke@redhat.com> 1.5.7-1
changelog:
  - Upstream version bump
  - Add annocheck exceptions for BPF objects (Felix)
  - Re-enable debug builds (Felix)
  - Add libcap-ng-devel to BuildDepends


author: David King <dking@redhat.com> - 2.9.13-10
changelog:
  - Fix CVE-2025-6021 (RHEL-96507)
  - Fix CVE-2025-49794 (RHEL-96405)
  - Fix CVE-2025-49796 (RHEL-96431)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (RHEL-2026 RHEL-2342 RHEL-12182 RHEL-15929)
  - fix ts2phc to handle large NMEA delay (RHEL-23208)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-3
changelog:
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-39387)
  - fix ts2phc to correctly handle leap seconds (RHEL-40216)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-40947)
  - add options to configure multicast IP addresses (RHEL-31178)
  - add holdover support to ts2phc (RHEL-50216)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58213 RHEL-57040)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60027)
  - support static sink clocks in phc2sys automatic mode (RHEL-62864)
  - don't require -O option without -a and -w in phc2sys (RHEL-69138)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-2
changelog:
  - add experimental option for external PPS in ts2phc automatic mode
    (RHEL-72468)
  - add command to set external grandmaster properties (RHEL-90585)
  - refresh link status on faults (RHEL-56168)


author: Artem Egorenkov <aegorenk@redhat.com> - 3.6.0-7
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Sérgio Basto <sergio@serjux.com> - 2.14.1-1
changelog:
  - Update to 2.14.1
  - Disable javadoc (#1988896)
  - Build with jansi-2
  - Remove deps on slf4j-ext (no longer available in Fedora 35)


author: Brian C. Lane <bcl@redhat.com> 34.9.26-1
changelog:
  - monitor: Skip repo errors involving CDROM/file source (bcl) (bcl)
    Resolves: RHEL-4658
  - rsyslog.conf: Update to use current config syntax (bcl) (bcl)
    Resolves: RHEL-46857


author: Brian C. Lane <bcl@redhat.com> 34.9.27-1
changelog:
  - New lorax documentation - 34.9.27 (bcl) (bcl)
    Related: RHEL-83208
  - mkksiso: Update to newer version supporting rebuilding efiboot.img (bcl)
    Resolves: RHEL-83208
  - livemedia-creator: Set 0755 permission on / cpio overlay (bcl) (bcl)
    Resolves: RHEL-83986


author: Brian C. Lane <bcl@redhat.com> 34.9.28-1
changelog:
  - templates.d: Synchronize with lorax-templates-rhel (bcl)
    Related: RHEL-54712
    Resolves: RHEL-69019
  - lorax: Change default rootfs size to 4GiB (bcl)
    Resolves: RHEL-95360


author: Brian C. Lane <bcl@redhat.com> 34.9.29-1
changelog:
  - templates: Synchronize with lorax-templates-rhel (bcl) (bcl)
    Resolves: RHEL-54712
  - Fix tzselect path in runtime-cleanup.tmpl (jikortus) (jikortus)
    Resolves: RHEL-100463
  - lorax.spec: Fix a wrong issue reference (bcl) (bcl)
    Related: RHEL-83986


author: Brian C. Lane <bcl@redhat.com> - 9.0-38
changelog:
  - tools: Add support for Jira RHEL-XXX issues (bcl)
    Related: RHEL-15122
  - Add setpriv as ostree containers dependency (bcl)
    Resolves: RHEL-15122


author: Brian C. Lane <bcl@redhat.com> - 9.6-1
changelog:
  - Bump release version to 9.6 (bcl)
    Related: RHEL-69011
  - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl)
    Resolves: RHEL-69011


author: Brian C. Lane <bcl@redhat.com> - 9.7-1
changelog:
  - Bump release version to 9.7 (bcl)
    Related: RHEL-91930
  - Add a boot menu for fips=1 (bcl)
    Resolves: RHEL-91930


author: Brian C. Lane <bcl@redhat.com> - 9.7-3
changelog:
  - live-install.tmpl: Fix broken single item tuple (bcl)
    Related: RHEL-108149
  - libvirt.tmpl: Fix use of xrange (bcl)
    Related: RHEL-108149
  - 80-rhel: Remove unused templates and config files (bcl)
    Resolves: RHEL-108149
  - Fix tzselect path in runtime-cleanup.tmpl (jikortus)
    Resolves: RHEL-101453


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: Miro Hrončok <mhroncok@redhat.com> - 1-3
changelog:
  - Modify several conditionals to support RHEL 9+ and drop ancient Fedora 17
  - Add explicit conflict with older lua-devel
  - Require rpm, not redhat-rpm-config


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-2
changelog:
  - Fix SPDX License identifiers.
  - Fix input units for VDO LV's minimim_io_size.
  - Fix stripe count and validation for RAID LVs.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-5
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: Ondrej Dubaj <odubaj@redhat.com> - 3.0.1-1
changelog:
  - Rebase to new major version 3.0.1 (it's Beta version)
  - Removed documentation/ folder, as it was removed by upstream


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.0.3-1
changelog:
  - Rebase to 3.0.3
  - Temporarily disable generation of -javadoc.rpm, due to missing feature in xmvn,
    which leads to build crash


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1:3.6.3-22
changelog:
  - Implement new non-conflicting Java bindings
  - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.31-0.1.beta
changelog:
  - New version
    Resolves: rhbz#1758783
  - Dropped no-scp, no-optimization, compile-fix, crash-fix patches (all upstreamed)
  - Dropped fgnu89-inline patch (probably not needed)


author: José Expósito <jexposit@redhat.com> - 24.2.8-2
changelog:
  - AMD Navi4x support
    Backport fixes for radeonsi and disable GFX12 on radv
    Resolves: https://issues.redhat.com/browse/RHEL-53419


author: Anusha Srivatsa <asrivats@redhat.com> - 25.0.7-2
changelog:
  - NV dGFX fix for firefox crashing
    Backport fixes for NV dGFX driver crashing firefox
    Resolves: https://issues.redhat.com/browse/RHEL-93219


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.0
changelog:
  - Set version to 106.0.0
  - RHEL-408 - Add provides, obsoletes for mingw-qemu-ga-win
  - RHEL-385 - Rebase mingw-qemu-ga-win to QEMU 8.0


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.1
changelog:
  - Set version to 106.0.1
  - RHELPLAN-147763 - [mingw-qemu-ga-win] VSS DLL: Add logging mechanism
  - RHEL-581 - Use the SPDX vocabulary to specify the license


author: Konstantin Kostiuk <kkostiuk@redhat.com> 109.1.0
changelog:
  - RHEL-57013 - Rebase qemu-ga to 9.1.0
  - RHEL-57012 - guest agent public ssh injection api support for Windows
  - Set version to 109.1.0


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Tomas Halman <thalman@redhat.com> - 0.17.0-9
changelog:
  - Fixing mellon_create_metadata.sh script
    Resolves: RHEL-35898
  - Publishing diagnostic module in CRB repository
    Resolves: RHEL-33585


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-3
changelog:
  - Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference
    when OIDCStripCookies is set and a crafted Cookie header is supplied


author: Tomas Halman <thalman@redhat.com> - 2.4.10-1
changelog:
  Rebase to 2.4.10 version improves `state cookies piling up` problem
    Resolves: RHEL-32450 Race condition in mod_auth_openidc filecache
    Resolves: RHEL-25422 mod_auth_openidc: DoS when using
              `OIDCSessionType client-cookie` and manipulating cookies
              (CVE-2024-24814)


author: Paul Howarth <paul@city-fan.org> - 2.3.9-24
changelog:
  - Drop EL-6 support
    - Use %license unconditionally
    - _httpd_* macros always available
    - Run directory is always /run on tmpfs
    - Assume httpd ≥ 2.4 filesystem layout
    - systemd-units always provided by systemd


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-26
changelog:
  - Resolves: #1958882 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.26-5
changelog:
  - Resolves: RHEL-108706 - CVE-2025-49630 httpd: untrusted input from a client
    causes an assertion to fail in the Apache mod_proxy_http2 module


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-1
changelog:
  - Resolves: RHEL-25075 - new version 2.4.26
  - Resolves: RHEL-11838 - [RFE] add support of dns_01 challenge to mod_md
  - Resolves: RHEL-17462 - OCSP response rejected when nextUpdate field not set
  - Resolves: RHEL-17467 - mod_md should trigger the reissue of new pair
    key/certificate when OCSP reports a revoked status


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-2
changelog:
  - Resolves: RHEL-134497 - httpd: Apache HTTP Server: mod_md (ACME), unintended
    retry intervals (CVE-2025-55753)


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-2
changelog:
  - Resolves: RHEL-93014 - mod_security: ModSecurity Has Possible DoS
    Vulnerability (CVE-2025-47947)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-3
changelog:
  - Resolves: RHEL-100098 - mod_security: ModSecurity Denial of Service
    Vulnerability (CVE-2025-48866)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-4
changelog:
  - Resolves: RHEL-30628 - mod_security: httpd doesn't close read side of pipe
    to rotatelogs for SecAuditLog leading to frozen state during graceful restart


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-2
changelog:
  - Resolves: RHEL-16358 - A form data, "会社"(Company in Japanese) is forbade
    with REQUEST-941-APPLICATION-ATTACK-XSS.conf of mod_security_crs


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-3
changelog:
  - Resolves: #RHEL-22733 - mod_security_crs - The rule id:913100 in the
    REQUEST-913-SCANNER-DETECTION.conf blocks requests  with "User-agent:
    urlgrabber/3.10 yum/3.4.3"


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.5-3
changelog:
  - Resolves: RHEL-80178 A form data, "鹿沼市御成橋"(a name of street/city
    in Japanese) is forbade by mod_security_crs-3.3.4-3.el8.noarch


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-4
changelog:
  - Generate profiles section and modulemd-defaults file
    Related: rhbz#1801747
  - Use autosetup to automatically apply patches


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-5
changelog:
  - Don't traceback because of a modular SRPM in the repo
    Related: rhbz#2227436
  - Replace deprecated LooseVersion
  - Fix tests for new libmodulemd version 2.15.0


author: José Expósito <jexposit@redhat.com> - 2.3.4-28
changelog:
  - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
  - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap


author: Olivier Fourdan <ofourdan@redhat.com> - 2.3.4-30
changelog:
  - Keep drop-down menus on the same monitor as the pull-down button with
    Xinerama
    Resolves: RHEL-92832


author: Jan Horak <jhorak@redhat.com> - 1.9-28
changelog:
  - Removed NPAPI from the description, since is no longer supported in Mozilla
    products
    Resolves: rhbz#2041339


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Honggang Li <honli@redhat.com> - 5.7-3
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960479


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2015392


author: Davide Caratti <dcaratti@redhat.com> - 0.7-2
changelog:
  - add a simple sanity test and enable gating. Related: rhbz#1962741
  - don't overwrite global build options. Related: rhbz#1967697
  - fix 'check_conflicts' on multilib. Related: rhbz#1967697


author: Davide Caratti <dcaratti@redhat.com> - 0.8-2
changelog:
  - fix mptcpize to work also when protocol number is 0 (upstream issue #159)
    and when command resides in another file system (upstream issue #161)
    Related: rhbz#2015623


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 0.5.13-6
changelog:
  - updating line in /usr/lib/tmpfiles.d/munge.conf: /var/run/munge → /run/munge
  - add license tag
  - add requires logrotate


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Olivier Fourdan <ofourdan@redhat.com> - 40.9-31
changelog:
  - Backport linux-dmabuf v4 support to restore hardware acceleration
    in Xwayland 24.1 with Mesa 25.2
    Resolves: RHEL-129832


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-6
changelog:
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85510
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89353


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-10
changelog:
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95814


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-9
changelog:
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141902) and (#2141906)
  - fix memory leak when ipv6 disable set to 1 (#2151540)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-14
changelog:
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26649)


author: Thomas Haller <thaller@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0 release
  - Drop NotShowIn=GNOME
  - Use wireless-security code from libnma
  - Add flatpak build configuration
  - applet: hide unmanaged ethernet devices in nm-applet
  - applet: fix Wi-Fi scan requests with appindicator
  - editor: fix drop down list for connection.secondaries


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Steve Dickson <steved@redhat.com> 2.5.4-35
changelog:
  - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
  - nfsd: allow more than 64 backlogged connections (RHEL-87752)


author: Steve Dickson <steved@redhat.com> 2.5.4-37
changelog:
  - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
  - gssd: do not use krb5_cc_initialize (RHEL-85412)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-17
changelog:
  - bump package epoch to resolve RHEL-33939
  - Resolves: RHEL-33939 - Update path for nginx broken for existing CS
    installations


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-23
changelog:
  - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER
    at nginx with reverse-proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-24
changelog:
  - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause
    denial of service (CVE-2024-7347)
  - Resolves: RHEL-85556 - nginx: Memory disclosure in the
    ngx_http_mp4_module (CVE-2022-41742)
  - Resolves: RHEL-91446 - nginx: Memory corruption in the
    ngx_http_mp4_module (CVE-2022-41741)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-25
changelog:
  - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log
    is not created when updating system in image mode


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1
changelog:
  - Resolves: #2096174 - RFE: add nginx:1.22 module stream
  - switch to pcre2
  - add stream_geoip_module and stream_realip_module
  - enable kTLS support


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-4
changelog:
  - Resolves: #2170808 - Running nginx with systemctl and entering ssl
    private key's pass phrase
  - added new ssl_pass_phrase_dialog directive which enables setting
    external program for entering password for encrypted private key


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-5
changelog:
  - Resolves: RHEL-12737 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Refer route next hop interface by MAC. RHEL-32495
  - Support reapply on mac-ref interface. RHEL-87794


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91291
  - Support nmpolicy against down iface. RHEL-88989
  - Support removal VLAN connection with empty ifname. RHEL-93146


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-85787
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784
  - Support matching by PCI adress. RHEL-88993
  - Apply dispatch changes first. RHEL-101742
  - Fix SRIOV VF reference. RHEL-93180


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526
  - Fix setting DNS only with search or option. RHEL-104797


author: Mingyu Shi <mshi@redhat.com> - 2.2.50-1
changelog:
  - Upgrade to 2.2.50
  - Support MAC referring for VLAN in gen_conf. RHEL-110369
  - Introduce state: ignore for route. RHEL-107130
  - Support PCI address matching in gen_conf. RHEL-110369
  - Support MacSec interface in gen_conf. RHEL-110369


author: Gris Ge <fge@redhat.com> - 2.2.54-1
changelog:
  - Upgrade to 2.2.54.
  - Automatically set HSR port MAC address. RHEL-122171
  - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992


author: Gris Ge <fge@redhat.com> - 2.2.56-1
changelog:
  - Upgrade to 2.2.56
  - Allow using VRF name to specify route table. RHEL-123541
  - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052
  - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731
  - Support rightca ipsec option. RHEL-123542


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.1-1
changelog:
  - Rebase to 16.20.1
    Resolves: rhbz#2188291
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2177781


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.2-5
changelog:
  - Backport patches for several CVEs.
    Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182


author: Jan Staněk <jstanek@redhat.com> - 1:18.16.1-1
changelog:
  - Rebase to 18.16.1
    Resolves: rhbz#2188292 rhbz#2187683
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2222285


author: Jan Staněk <jstanek@redhat.com> - 1:18.17.1-1
changelog:
  - Rebase to version 18.17.1
    Resolves: rhbz#2228940
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559
  - Specify proper OpenSSL configuration section build
    Related: rhbz#2226726


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:18.19.1-1
changelog:
  - Rebase to version 18.19.1
  - Fixes: CVE-2024-21892 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 (medium)


author: Andrei Radchenko <aradchen@redhat.com> - 1:20.18.2-1
changelog:
  - Update to version 20.18.2
    Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76363 RHEL-76554 RHEL-76540


author: Jan Staněk <jstanek@redhat.com> - 1:22.13.1-1
changelog:
  - Update to version 22.13.1
    Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76354


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.13.1-2
changelog:
  - Remove obsolete lua pretransaction script from spec file
    Resolves: RHEL-81119
  - Disable npm update notifications for users
    Resolves: RHEL-81079


author: Jan Staněk <jstanek@redhat.com> - 2.0.19-1
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469
    Resolves: CVE-2020-7788


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
changelog:
  - Resolves: RHBZ#2005419
  - Resolves CVE-2020-28469
  - Rebase to newest version
  - Change source to npmjs.com


author: Stephen Gallagher <sgallagh@redhat.com> - 2021.06-1
changelog:
  - Update to 2021.06-1
  - bundler: Handle archaic license metadata
  - bundler: Warn about bundled dependencies with no license metadata


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally remvoed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Andreas Schneider <asn@redhat.com> - 1.1.11-8
changelog:
  - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install
                             smaller footprint


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jindrich Novy <jnovy@redhat.com> - 1.2.9-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 1.2.10-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.2.11-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11
  - simplify spec
  - Resolves: RHEL-86603


author: Zuzana Miklankova <zmiklank@redhat.com> - 1.9.0~beta1-1
changelog:
  - Rebase to 1.9-beta1
  - change of licences of ongres-scram and ongres-scram-javadoc to "BSD and MIT and ASL 2.0"


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-1
changelog:
  - Rebase to 12.3.5-1 [RHEL-15058]
  - Fixed CVE-2023-34058 [RHEL-14653]
  - Fixed CVE-2023-34059 [RHEL-14687]
  - Resolves: RHEL-15058
    ([ESXi][RHEL9]open-vm-tools version 12.3.5 has been released - please rebase)
  - Resolves: RHEL-14653
    (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-9.4.0])
  - Resolves: RHEL-14687
    (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-9.4.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-2
changelog:
  - ovt-Restart-tools-on-failure.patch [RHEL-15346]
  - Resolves: RHEL-15346
    (Add Restart=on-failure to vmtoolsd.service)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-1
changelog:
  - Rebase to 12.4.0 [RHEL-30341
  - Resolves: RHEL-30341
    ([ESXi][RHEL9]open-vm-tools version 12.4.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-2
changelog:
  - ovt-Require-dbus-tools.patch [RHEL-35543]
  - Resolves: RHEL-35543
    ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.5-1
changelog:
  - Rebase to 12.4.5 [RHEL-45547]
  - Resolves: RHEL-45547
    ([ESXi][RHEL9] open-vm-tools version 12.4.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.5.0-1
changelog:
  - Rebase to 12.5.0 [RHEL-63096]
  - Resolves: RHEL-63096
    ([ESXi][RHEL9] open-vm-tools version 12.5.0 has been released - please rebase)


author: Lili Du <ldu@redhat.com> - 13.0.0-1
changelog:
  - Rebase to 13.0.0 [RHEL-99158]
  - Resolves: RHEL-99158 
    ([ESXi][RHEL9] open-vm-tools version 13.0.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 13.0.0-2
changelog:
  - ovt-Address-CVE-2025-41244.patch [RHEL-117392]
  - Resolves: RHEL-117392
    ([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-9.8])


author: Lili Du <ldu@redhat.com> - 13.0.5-1
changelog:
  - Rebase to 13.0.5 [RHEL-118505]
  - Resolves: RHEL-118505
    ([ESXi][RHEL9] open-vm-tools version 13.0.5 has been released - please rebase)


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Karol Herbst <kherbst@redhat.com> - 3.0-0.20200512git5cc337c
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Bump CLHPP version to 2.0.11


author: Karol Herbst <kherbst@redhat.com> - 3.0-1.20200512gitd082d42
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Rework CLHPP handling as file is not downloadable anymore
  - Bump CLHPP version to 2.0.12


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71053)
  - Avoid SSL context cleanup during library destruction (RHEL-56502)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.11-1
changelog:
  - Upgrade to the latest upstream release (RHEL-76355)
  - Introduce "oscap-im", a tool for building hardened bootable container images
  - Fix RPM probes in bootable container images build environment (RHEL-55251)


author: Matthew Burket <mburket@redhat.com> - 1:1.3.13-1
changelog:
  - Upgrade to the latest upstream release (RHEL-133976)
  - Fix Filepath and Pattern Fields inversion (RHEL-104073)
  - Fix verbose flag (RHEL-53859)


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-45
changelog:
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465).
    Resolves: RHEL-78700


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-2
changelog:
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-119515
  - Canonicalize username when matching a user
    Resolves: RHEL-118372


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-3
changelog:
  - Enable support for DSA keys
    Resolves: RHEL-127624
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-133959
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-133960


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-89860
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-89861
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-89862
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-89859
  - Enable sslkeylog support
    Resolves: RHEL-90854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80854
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-95239


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80854


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-104236
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-104856


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-4
changelog:
  - Make openssl speed test signatures without errors
    Resolves: RHEL-95502
  - Build tests in check and without LTO
    Resolves: RHEL-111633


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.5-1
changelog:
  - Rebase to OpenSSL 3.5.5
    Resolves: RHEL-136895
    Resolves: RHEL-142004
    Resolves: RHEL-142012
    Resolves: RHEL-142020
    Resolves: RHEL-142024
    Resolves: RHEL-142028
    Resolves: RHEL-142032
    Resolves: RHEL-142036
    Resolves: RHEL-142040
    Resolves: RHEL-142044
    Resolves: RHEL-142048
    Resolves: RHEL-142052
    Resolves: RHEL-142056


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-4
changelog:
  - Bump revision
  - Add runtime requirements for shadow-utils and util-linux to ensure successful creation of observability user on installation
  - Modify post-uninstallation stage to only delete delete the observability user on full uninstallation to prevent the user being deleted during upgrades
    Resolves: RHEL-81967


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-5
changelog:
  - Bump revision
  - Update Golang v1.22.11 to v1.23.0
  - Add toolchain go1.23.7
  - Update x/oauth2 v0.22.0 to v0.27.0
  - Update addresses CVE-2025-22868
    Resolves: RHEL-81359


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-6
changelog:
  - Bump revision
  - Update expr v1.16.9 to v1.17.0
  - Remove explicit go toolchain dependency
  - Update addresses CVE-2025-29786
    Resolves: RHEL-83841


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-7
changelog:
  - Bump revision
  - Update go-jose v4.0.2 to v4.0.5
  - Update testify v1.9.0 to v1.10.0
  - Update addresses CVE-2025-27144
    Resolves: RHEL-82967


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-8
changelog:
  - Bump revision
  - Update golang-jwt v5.2.1 to v5.2.2
  - Update addresses CVE-2025-30204
    Resolves: RHEL-85033


author: Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-1
changelog:
  - Collector version update
  - Go version update to v1.23.9
  - Update addresses CVE-2025-22871
    Resolves: RHEL-90050


author: Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-2
changelog:
  - Bump revision
  - Go version update to v1.24.4
  - Update addresses CVE-2025-4673
    Resolves: RHEL-105058


author: Kseniia Nivnia <knivnia@redhat.com> - 0.135.0-1
changelog:
  - Version bump to 0.135.0
  - Add systemd-journal group to Requires(pre)
  - Bump go-tpm-keyfiles
    Resolves: RHEL-119812


author: Matej Tyc <matyc@redhat.com> - 2.0.0-13
changelog:
  - Fix problems with handling multi-datastream archives
    Resolves: rhbz#2129846
  - Fix a crash when compulsively clicking in the GUI
    Resolves: rhbz#2127502


author: Jan Černý <jcerny@redhat.com> - 2.0.0-17
changelog:
  - Update translations (rhbz#2189526)
  - Fix tar file extraction (rhbz#2218875)
  - Fix conflict of tftp package with "network servers" group (rhbz#2172264)


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2025.7-1
changelog:
  - Rebase to 2025.7
    Backport https://github.com/ostreedev/ostree/pull/3555
    Resolves: #RHEL-129049


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.3-3
changelog:
  - Fix regression in trust where file creation fails for long cert labels
    Resolves: RHEL-58899
  - Fix usage message in p11-kit list-tokens command
    Resolves: RHEL-31810


author: Chris Lumens <clumens@redhat.com> - 2.1.7-2
changelog:
  - Rebase on upstream 2.1.7-rc4 release
  - Use systemd-sysusers to create user/group
  - Pacemaker Remote nodes can validate against later schema versions
  - Related: RHEL-17225
  - Resolves: RHEL-7665


author: Chris Lumens <clumens@redhat.com> - 2.1.7-3
changelog:
  - Rebase on upstream 2.1.7 final release
  - Fix documentation for Pacemaker Remote schema transfers
  - Do not check CIB feature set version when CIB_file is set
  - Consolidate attrd cache handling
  - Avoid duplicating option metadata across daemons
  - Related: RHEL-7665
  - Related: RHEL-13216
  - Resolves: RHEL-7702


author: Chris Lumens <clumens@redhat.com> - 2.1.7-4
changelog:
  - Properly validate attribute set type in pacemaker-attrd
  - Fix `crm_attribute -t nodes --node localhost`
  - Resolves: RHEL-13216
  - Resolves: RHEL-17225
  - Resolves: RHEL-23498


author: Chris Lumens <clumens@redhat.com> - 2.1.8-1
changelog:
  - Rebase on upstream 2.1.8-rc1 release
  - Fix a typo in the help output of pacemaker-fenced
  - Fix escaping characters in XML attribute output
  - Resolves: RHEL-25819
  - Resolves: RHEL-30822


author: Chris Lumens <clumens@redhat.com> - 2.1.8-2
changelog:
  - Rebase on upstream 2.1.8-rc4 release
  - Add ability to immediately shutdown system with PCMK_panic_action=
  - Fix a memory leak in the attribute daemon
  - Add ability to list options and parameters as parseable metadata
  - crm_verify now reports invalid fence level indexes
  - Fix an error in node ID handling in `crm_node -i`
  - Fix regression in attrd_updater output
  - Resolves: RHEL-39057
  - Resolves: RHEL-40117
  - Resolves: RHEL-23401
  - Resolves: RHEL-2996
  - Resolves: RHEL-47249
  - Resolves: RHEL-45935


author: Chris Lumens <clumens@redhat.com> - 2.1.9-1
changelog:
  - Rebase on upstream 2.1.9 final release
  - Use async communication to establish TLS connections
  - Fix regression in adding alerts to CIB
  - Fix a crash in command line tools when stderr is closed
  - Resolves: RHEL-61382
  - Resolves: RHEL-34276
  - Resolves: RHEL-55458
  - Resolves: RHEL-59043


author: Chris Lumens <clumens@redhat.com> - 2.1.10-1
changelog:
  - Rebase on upstream 2.1.10-rc1 release
  - Use dbus to detect completion of systemd resource start/stop actions
  - Add an option for controlling remote node fencing behavior
  - Related: RHEL-89134
  - Resolves: RHEL-86143
  - Resolves: RHEL-84018


author: Chris Lumens <clumens@redhat.com> - 2.1.10-2
changelog:
  - Handle large timeouts correctly in crm_resource --wait
  - Do not try to connect to subdaemons before they're respawned
  - Don't evict IPC clients as long as they're still processing messages
  - Don't overwhelm the FSA queue with repeated CIB queries
  - Resolves: RHEL-45869
  - Resolves: RHEL-87484
  - Resolves: RHEL-114894


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-18
changelog:
  - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
  - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-19
changelog:
  - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
    situations. CVE-2024-22365. Resolves: RHEL-21244


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-22
changelog:
  - pam_unix: always run the helper to obtain shadow password file entries.
    CVE-2024-10041. Resolves: RHEL-62879
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-23631 and RHEL-39943


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-27
changelog:
  - pam_unix: sync expiry checks with shadow.
    Resolves: RHEL-70519, RHEL-95475, RHEL-96955 and RHEL-96973
  - pam.conf: remove tallylog. Resolves: RHEL-15324
  - pam_namespace: fix potential privilege escalation.
    Resolves: CVE-2025-6020 and RHEL-96727


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: Peng Wu <pwu@redhat.com> - 1.48.7-3
changelog:
  - Update pango-emoji-table.h for emoji 14 support
  - Add pango-update-emoji.patch
  - Resolves: #2119674


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.42.2-3
changelog:
  - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use
    cairomm1.0, which may be a virtual Provides, in the manual lib Requires


author: RHEL Packaging Agent <jotnar@redhat.com> - 7.2.0-1
changelog:
  - Rebase to papi 7.2.0
  - Update license tag to BSD-3-Clause
  - Remove old patches and add new patches for 7.2.0 compatibility
  - Update configure options and package files
  - Resolves: RHEL-121673


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039)
  - Fix a multilib regression in PCP header files (RHEL-93186)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories


author: Lauren Chilton <lchilton@redhat.com> - 6.3.7-6
changelog:
  - Backport fix for pmdaopenmetrics metric removal (RHEL-101745)
  - Backport fix for pcp2openmetrics metric hanging (RHEL-106772)
  - Backport fix for atop cpu utilization bug (RHEL-79767)


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-28
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951271 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1:0.9.4-23
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951270 replace apache-commons-logging with java.util.logging


author: Paul Howarth <paul@city-fan.org> - 1.2000-1
changelog:
  - Update to 1.200
    - New release with no new features, just preparing for a series of bugfix
      releases
  - Specify all build dependencies
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.014-14
changelog:
  - Spec clean-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Use %{make_build} and %{make_install}
    - Fix permissions of installed files


author: Tom Callaway <spot@fedoraproject.org> - 0.44-1
changelog:
  - Update to 0.44
    - Support Perls with COW disabled
    - Bump B::COW requirement for testing
  - Disable tests until B::COW is packaged


author: Tom Stellard <tstellar@redhat.com> - 1.64-4
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Petr Pisar <ppisar@redhat.com> - 1.66-2
changelog:
  - Update DBD-SQLite-1.60-Unbundle-Test-NoWarnings.patch
  - Do not build-require unused Test::FailWarnings
  - Update the description


author: Tom Stellard <tstellar@redhat.com> - 1.642-7
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Paul Howarth <paul@city-fan.org> - 1:0.17029-1
changelog:
  - Update to 0.17029
    - Rebuild for order of 'NAME' and 'VERSION' sections in the generated POD
      documentation (VERSION used to appear before NAME)


author: Paul Howarth <paul@city-fan.org> - 1.002002-1
changelog:
  - Update to 1.002002
    - Fix bug in handling regexps in import lists; Exporter::Tiny allowed regexps
      like /foo/i but not /foo/; having trailing flags is now optional! (GH#6)
    - Tests would fail if 'PERL5OPT=-Mfeature=:5.18' environment variable was set;
      this is because bareword '-default' was being interpreted as the Perl
      'default' keyword (GH#5)
  - Unbundle newly-bundled test modules


author: Paul Howarth <paul@city-fan.org> - 1.16-18
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.72-21
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.26-1
changelog:
  - Update to 1.26
    - BUILD: Update FAIL_POSIX warning message (GH#28)
    - TEST: t/07_taint.t: Use executable name as source of taintedness (GH#21)
    - OTHER: Typographic corrections (CPAN RT#60211, CPAN RT#86403)
    - Add Travis configuration


author: Paul Howarth <paul@city-fan.org> - 1.29-1
changelog:
  - Update to 1.29
    - Improved handling of shell commands on Windows, which should get us closer
      to resolving Win32-related issues; there should be no change of
      functionality on Unix-like platforms
    - Better workaround for bug in perl-5.8.9 (GH#23)
    - Add t/args.t
    - Modify t/win32.t
    - Added Travis and AppVeyor configuration files
    - Eliminated use of Dist::Zilla for build, using older, but more reliable and
      better understood (by maintainer) ExtUtils::MakeMaker-based configuration
    - Move author testing to xt/ directory


author: Emmanuel Seyman <emmanuel@seyman.fr> - 4.03-1
changelog:
  - Update to 4.03
  - Use %{make_install} instead of "make pure_install"
  - Use %{make_build} instead of make
  - Replace calls to %{__perl} with /usr/bin/perl
  - Pass NO_PACKLIST and NO_PERLLOCAL to Makefile.PL


author: Petr Pisar <ppisar@redhat.com> - 1:0.68-3
changelog:
  - Fix resolving localhost on loopback-only machines
    (https://github.com/perl-ldap/perl-ldap/pull/60)


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix failing installation in parallel make (GH#38)
    - Infrastructure improvements and tooling updates, lots of author tests with
      corresponding fixes added
    - Added slide and slideatatime functions
    - Documentation fixes (GH#21, GH#33, GH#34, CPAN RT#126029, CPAN RT#132043,
      CPAN RT#132940)
    - Bump List::MoreUtils::XS requirement to 0.430
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix parts of CPAN RT#123989: more $a/$b/$_ refcounting bugs
      - Since some bugs are simply reported wrong, dealing with them breaks more
        (including running code) than it solves - way too heavy to feel better...
    - Introduce functions slide and slideatatime
    - Toolchain fixes
    - Fix LANG=nb_NO.utf8 related str tests fails (CPAN RT#133128)
    - Fix typo (GH#7)
    - Fix parts of CPAN RT#132043: listcmp misbehave in XS implementation
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.70-1
changelog:
  - Update to 0.70
    - Protect ourselves from Module::Metadata parsing problems (CPAN RT#130939)
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.86-1
changelog:
  - Update to 0.86
    - Update PAUSE and ANDK keys to 2020
    - Update documentation pertaining to SHA1
    - Fix compatibility with Crypt::OpenPGP
  - Use mktemp to create temporary GPG directory


author: Paul Howarth <paul@city-fan.org> - 0.21-26
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-1
changelog:
  - Resolves: RHEL-40758
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list
  - Package tests


author: Paul Howarth <paul@city-fan.org> - 1.106-20
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build requirements
    - Drop support for building with Test::More < 0.88
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license macro


author: Paul Howarth <paul@city-fan.org> - 1:0.38-458
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Tom Stellard <tstellar@redhat.com> - 0.29-6
changelog:
  - Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.36-3
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Petr Pisar <ppisar@redhat.com> - 3:1.302177-1
changelog:
  - Update to 1.302177
    - Minor fix to author downstream test
    - No significant changes since the last trial
    - Fix Test::More's $TODO inside intercept (#862)


author: Paul Howarth <paul@city-fan.org> - 3:1.302180-1
changelog:
  - Update to 1.302180
    - Move try_sig_mask to the only module that uses it
    - Inherit warnings bitmask in cmp_ok string eval
    - Update copyright date
    - Improved API for intercept {} and what it returns
    - Bump minimum List::Util version (for uniq)


author: Paul Howarth <paul@city-fan.org> - 3:1.302181-1
changelog:
  - Update to 1.302181
    - Put try_sig_mask back where it goes (and add test to prevent this in the
      future)
    - Drop new List::Util requirement back down


author: Tom Stellard <tstellar@redhat.com> - 1.1-36
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Paul Howarth <paul@city-fan.org> - 1.30-1
changelog:
  - Update to 1.30
    - Breaking Change: Set $YAML::LoadBlessed default to false to make it more
      secure


author: Paul Howarth <paul@city-fan.org> - 1:0.238-1
changelog:
  - Update to 0.238
    - Move the prerequisite Test::More from being a runtime prerequisite to a
      test time / build time prerequisite (GH#11)


author: Filip Janus <fjanus@redhat.com> - 1.7.0-1
changelog:
  - Initial import for postgresql 15 module
  - Update to 1.7.0
  - Support postgresql 15
  - Related: #2128410


author: Remi Collet <rcollet@redhat.com> - 8.0.30-2
changelog:
  - Fix Leak partial content of the heap through heap buffer over-read
    CVE-2024-8929
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233
  - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
    CVE-2024-8927
  - Fix Logs from childrens may be altered
    CVE-2024-9026
  - Fix Erroneous parsing of multipart form data
    CVE-2024-8925
  - Fix filter bypass in filter_var FILTER_VALIDATE_URL
    CVE-2024-5458
  - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
    CVE-2024-2756
  - Fix password_verify can erroneously return true opening ATO risk
    CVE-2024-3096


author: Remi Collet <rcollet@redhat.com> - 8.0.30-3
changelog:
  - Fix libxml streams use wrong `content-type` header when requesting a redirected resource
    CVE-2025-1219
  - Fix Stream HTTP wrapper header check might omit basic auth header
    CVE-2025-1736
  - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
    CVE-2025-1861
  - Fix Streams HTTP wrapper does not fail for headers without colon
    CVE-2025-1734
  - Fix Header parser of `http` stream wrapper does not handle folded headers
    CVE-2025-1217


author: Remi Collet <rcollet@redhat.com> - 8.0.30-4
changelog:
  - Fix pgsql extension does not check for errors during escaping
    CVE-2025-1735
  - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix
    CVE-2025-6491
  - Fix Null byte termination in hostnames
    CVE-2025-1220
  - Fix soap memory corruption
  - Fix ldap_set_option() not applied on different ldap connections


author: Remi Collet <rcollet@redhat.com> - 8.0.30-5
changelog:
  - Fix Null byte termination in dns_get_record()
    GHSA-www2-q4fc-65wf
  - Fix Heap buffer overflow in array_merge()
    CVE-2025-14178
  - Fix Information Leak of Memory in getimagesize
    CVE-2025-14177


author: Remi Collet <rcollet@redhat.com> - 8.1.6-2
changelog:
  - add upstream patch to initialize pcre before mbstring
  - add upstream patch to use more sha256 in openssl tests


author: Remi Collet <rcollet@redhat.com> - 8.2.13-1
changelog:
  - rebase to 8.2.13 RHEL-14699
  - add %__phpize and %__phpconfig macros
  - move httpd/nginx wants directives to config files in /etc
  - php-fpm.conf: move include directive after [global] section
    following upstream example, allowing overriding
  - use SPDX license IDs


author: Remi Collet <rcollet@redhat.com> - 8.3.12-1
changelog:
  - rebase to 8.3.12 RHEL-62189
  - enable command history in phpdbg
  - backport Argon2 password hashing in OpenSSL ext
  - build sockets extension statically
  - switch to nikic/php-parser version 5
  - openssl: always warn about missing curve_name


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Jakub Jelen <jjelen@redhat.com> - 1.1.1-2
changelog:
  - Move pinentry-tty to separate subpackage (#1782442)
  - Update the wrapper selecting the appropriate version (#1918969)


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.30-1
changelog:
  - Resolves: rhbz#1721684 Rebase pki-servlet-engine to 9.0.30
  - Update to JWS 5.3.0 distribution
  - Remove new dependencies that PKI doesn't need (and are not provided by RHEL 8)


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.43-1
changelog:
  - Update to JWS 5.5, and drop jakarta-saaj dependency
  - Updates to javapackages-local removed %add_maven_depmap which broke the build,
    so I removed most of the maven artifacts as they aren't very useful anyway
  - Cleaned up a few unnecessary patches


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.43-2
changelog:
  - Related: rhbz#1977948 Cleanup unused tomcat-juli.jar copy now that the maven artifacts have been removed


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing"
  - Resolves: RHEL-86200


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/0ee1d49)
  - fixes "podman tests are failing - [RHEL-10.1.GA]"
  - Resolves: RHEL-88191


author: Jindrich Novy <jnovy@redhat.com> - 5:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Petr Lautrbach <lautrbach@redhat.com> - 3.6-5
changelog:
  - sandbox/seunshare: Replace system() with execv() to prevent shell injection
  - seunshare: fix the frail tmpdir cleanup


author: Jan Rybar <jrybar@redhat.com> - 0.117-13
changelog:
  - session-monitor: watch sessions only
  - PolkitPermission: react on really changed sessions
  - allow polkit-pkla-compat to be uninstalled if no .pkla rules
  - Resolves: RHEL-39063


author: Masahiro Matsuya <mmatsuya@redhat.com> - 15.5-1
changelog:
  - update to 15.5
  - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, CVE-2023-39417, and CVE-2023-39418


author: Filip Janus <fjanus@redhat.com> - 16.0-1
changelog:
  - New postgresql stream - 16
  - Remove pdf documentation
  - Update postgresql-setup to 8.9
  - postmaster binary no more shipped
  - Resolves: RHEL-3636


author: Kate Hsuan <hpa@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Support multi-drivers mode and amdgpu
  - Support dynamically adjusts amd-pstate EPP values between battery and AC modes.
  - Resolves: RHEL-23395


author: Than Ngo <than@redhat.com> - 1.3.10-6
changelog:
  - Resolves: #2166870, lparstat: Fix display of mode for dedicated-donating partition
  - Resolves: #2169269, lparstat: Fix negative values seen while running lparstat with -E option


author: Than Ngo <than@redhat.com> - 1.3.10-7
changelog:
  - Fix negative values seen while running lpar
  - Fix lparstat error with mixed SMT state
  Resolves: #2225371


author: Than Ngo <than@redhat.com> - 1.3.10-8
changelog:
  - Resolves: RHEL-16045, Support partial SMT level through SYS FS smt/control files
  - Resolves: RHEL-11456, LPM hooks


author: Than Ngo <than@redhat.com> - 1.3.10-9
changelog:
  - Resolves: RHEL-20350, getting larger Negative value while running rtas_dbg -l
  - Resolves: RHEL-19076, installation fails if nsid of nvme device is greater than 10
  - Resolves: RHEL-11456, add new /etc/drmgr.d/pmig hierarchy


author: Than Ngo <than@redhat.com> - 1.3.10-11
changelog:
  - Resolves: RHEL-23620, nvram help page and man page are not in sync
  - Resolves: RHEL-23619, segault when running nvram --nvram-size 268435456
  - Resolves: RHEL-23624, segault when running nvram --print-config


author: Than Ngo <than@redhat.com> - 1.3.13-1
changelog:
  - Resolves: RHEL-30880, multipath - drmgr support
  - Resolces: RHEL-61089, lparstat -E Fails to Display Correct Values for %Busy and %Idle States


author: Than Ngo <than@redhat.com> - 1.3.13-2
changelog:
  - Resolves: RHEL-80729, drmgr: return correct value
  - Resolves: RHEL-80277, lparstat: print memory mode correctly


author: Than Ngo <than@redhat.com> - 2.7.9-5
changelog:
  - man and help of diag_nvme are not in sync
  - compiler warnings
  - diag_nvme: call_home command fails on nvmf drive
  - rtas_errd: Fix core dump with large filename passed to -f option
  Resolves: RHEL-55398


author: Adrian Reber <areber@redhat.com> - 3.14.0-14
changelog:
  - Applied patch for CVE-2022-1941 (#RHEL-40872)
  - Applied patch to make emacs dependency optional (#RHEL-40572)


author: Jan Rybar <jrybar@redhat.com> - 3.6-16
changelog:
  - output is not redirected when ps_mem is killed
  - cmdline unwanted blank spaces fixed
  - Resolves: rhbz#2033997
  - Resolves: rhbz#2049743


author: Tomas Popela <tpopela@redhat.com> - 1.20.1-1
changelog:
  - Update to 1.20.1
  - Resolves: rhbz#2016905
  - Ship python3-cairo-devel in CRB
  - Resolves: rhbz#2053665


author: Dominik Mierzejewski <rpm@greysector.net> - 0.26-1
changelog:
  - update to 0.26 (#1780153)
  - make main package archful to run tests on all arches
    (pythonN-pyelftools subpackages are still noarch)
  - run readelf tests on x86_64 only for now
  - rename binaries to conform to Python packaging guidelines
  - enable python3 subpackage for EPEL7
  - declare bundled old construct module instead of needlessly requiring it


author: Brian C. Lane <bcl@redhat.com> - 3.32.11-1
changelog:
  - tox: Only run unit tests for python 3.6 (bcl)
    Related: RHEL-17662
  - Add conflict test between ostree sources (#2125655) (jkonecny)
    Related: RHEL-17662
  - Fix missing seen check for output generation (#2125655) (jkonecny)
    Related: RHEL-17662
  - Add new ostreecontainer command (#2125655) (jkonecny)
    Resolves: RHEL-17662
  - Check the conflicting commands automatically (vponcova)
    Related: RHEL-17662
  - Fix tests for conflicting commands (vponcova)
    Related: RHEL-17662
  - Add conflicting commands support (bcl)
    Related: RHEL-17662


author: Brian C. Lane <bcl@redhat.com> - 3.32.12-1
changelog:
  - Add support for inline certificates with `%certificate` section (k.koukiou)
    Resolves: RHEL-61432


author: Brian C. Lane <bcl@redhat.com> - 3.32.14-1
changelog:
  - Update %certificate section documentation (rvykydal)
    Related: RHEL-61432
  - Make %certificate section option --dir mandatory. (rvykydal)
    Resolves: RHEL-76501


author: Brian C. Lane <bcl@redhat.com> - 3.32.15-1
changelog:
  - workflows: run tests using only python 3.9 (bcl)
    Related: RHEL-75659
  - workflows: Switch to using ubuntu-latest (bcl)
    Related: RHEL-75659
  - Do not remove "md" prefix from RAID names (vtrefny)
    Resolves: RHEL-75659


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.7-1
changelog:
  - Upgrade to pyparted-3.11.7 (BZ#1890443)
  - Set PY_SSIZE_T_CLEAN for the build (bcl)
  - add nvme support
  - Update RELEASE file to make last step be "make pypi" (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.12.0-1
changelog:
  - Patch pyparted to handle PED_DISK_TYPE_PARTITION_TYPE_ID for the
    msdos disk type and PED_DISK_TYPE_PARTITION_TYPE_UUID for the gpt
    label
    Resolves: rhbz#2103243


author: Miro Hrončok <miro@hroncok.cz> - 1.17.0-1
changelog:
  - Add the -M flag to %pyproject_save_files
  - The flag can be used to indicate no Python modules should be saved


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.0-1
changelog:
  - Make %pyproject_buildrequires -t/-e and %tox fail when no suitable tox configuration exists
  - The %pyproject_buildrequires -t/-e case is temporarily allowed on Fedora 40-42
  - Requires tox-current-env >= 0.0.16


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.3-1
changelog:
  - %pyproject_buildrequires: Do not generate BuildRequires from Requires core metadata fields
  - That field is deprecated and should include importable module names, not distribution packages
  - Related: rhbz#2378463


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.4-1
changelog:
  - Don't exit from pyproject-srpm-macros implementation of %pyproject_buildrequires
  - Fixes: rhbz#2391290
  - On RPM 4.20+ don't put pyproject-macros-specific files in %buildsubdir
  - Works around https://github.com/rpm-software-management/rpm/issues/3890
  - Speed %pyproject_save_files up significantly


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.5-1
changelog:
  - %pyproject_extras_subpkg: Only %ghost the dist-info directory, not the content
  - That way, accidentally unpackaged files within are reported as errors
  - %pyproject_save_files: Also save top level typing stub files (.pyi)


author: Miro Hrončok <mhroncok@redhat.com> - 3.4-6
changelog:
  - Subpackage python2-pyserial has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomas Orsava <torsava@redhat.com> - 0.10.1-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 1.4.3-12
changelog:
  - Subpackage python2-appdirs has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.5.0-18
changelog:
  - Subpackage python2-augeas has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Pino Toscano <ptoscano@redhat.com> - 0.5.0-20
changelog:
  - Backport upstream commit d93e1563add8c40450556b7d74520439ee792bd9 to fix
    the discovery of location in the test
  - Execute the tests at build time
  - Add a simple gating test to execute the test script, and make it gating for
    the python-augeas source


author: Miro Hrončok <mhroncok@redhat.com> - 5.0.6-19
changelog:
  - Subpackage python2-configobj has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Bryan Gurney <bgurney@redhat.com> - 0.8-4
changelog:
  - Remove check test
  - Remove BuildRequires for python3-dbus and python3-into-dbus-python
  - Resolves: rhbz#1986608


author: Bryan Gurney <bgurney@redhat.com> - 0.04-4
changelog:
  - Remove check test
  - Remove Requires and BuildRequires for python3-pyparsing
  - Resolves: rhbz#1986574


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-2
changelog:
  - Fix Python configuration for ELN/RHEL 9
  - Rework bconds for Python now that there are no Fedoras left that should
    use Python2


author: Bryan Gurney <bgurney@redhat.com> - 0.08-4
changelog:
  - Remove check test
  - Remove BuildRequires for python3-dbus-signature-pyparsing and python3-dbus
  - Resolves: rhbz#1986609


author: Miro Hrončok <mhroncok@redhat.com> - 1.10-18
changelog:
  - Subpackage python2-jsonpointer has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Bryan Gurney <bgurney@redhat.com> - 0.15-5
changelog:
  - Remove check test
  - Remove BuildRequires and Requires for python3-justbases
  - Resolves: rhbz#1986913


author: Julien Rische <jrische@redhat.com> - 1.1.0-1
changelog:
  - New upstream version (1.1.0)
  - Use DNS discovery for declared realms only (CVE-2025-59088)
    Resolves: RHEL-113677
  - Fix DoS vulnerability based on unbounded TCP buffering (CVE-2025-59089)
    Resolves: RHEL-113681


author: Miro Hrončok <mhroncok@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.2
  - Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
  - Fixes: rhbz#1855415
  - Fixes: rhbz#1901634


author: Petr Viktorin <pviktori@redhat.com> - 1.1.4-1
changelog:
  - Update to version 1.1.4
  - Avoids test warnings on Python 3.10
    Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1907474


author: Martin Kolman <mkolman@redhat.com> - 0.48-1
changelog:
  - Merge pull request #23 from poncovka/master-decode_bytes (mkolman)
  - Handle bytes and strings from RPM (#1764642) (vponcova)


author: Martin Kolman <mkolman@redhat.com> - 0.49-1
changelog:
  - Merge pull request #31 from jkonecny12/master-fix-make-archive (mkolman)
  - Fix make archive command after pot file removal (jkonecny)
  - Merge pull request #29 from jkonecny12/master-weblate-support (jkonecny)
  - Add Readme with description and translation badge (jkonecny)
  - Add pot file to the git ignore (jkonecny)
  - Pause release when making bumpver to check and solve translations (jkonecny)
  - Remove unused PREFIX from Makefile (jkonecny)
  - Remove Zanata (jkonecny)
  - Push translations to our translation repository (jkonecny)
  - Download translations from Weblate (jkonecny)
  - Remove pot file (jkonecny)
  - Merge pull request #24 from M4rtinK/master-fix_zanata_client_detection_in_makefile (mkolman)
  - Fix Zanata client detection in Makefile (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.50-1
changelog:
  - Merge pull request #33 from mzidek-gh/master (mkolman)
  - dump: Use exception's type and value when calculating hash (mzidek)


author: Miro Hrončok <mhroncok@redhat.com> - 0.10.6-9
changelog:
  - Subpackage python2-netifaces has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-2
changelog:
  - Limit BuildRequires to necessary minimum in Red Hat Enterprise Linux
  - Skip pytest in Red Hat Enterprise Linux
  - Do not build -doc subpackage for Red Hat Enterprise Linux


author: Jakub Hrozek <jhrozek@redhat.com> - 3.1.0-1
changelog:
  - Resolves: rhbz#1922352 - python-oauthlib requires python-mock
  - Update to upstream 3.1.0
  - Gets rid of obsolete python-nose dependency
  - Nuke the python2/python3 conditionals, let's only support python3


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.0-2
changelog:
  - Remove the python3-oauthlib+signedtoken package
  - When building, skip tests that require jwt
  - Resolves: rhbz#1966407 - Drop python-jwt dependency from python-oauthlib


author: Jakub Hrozek <jhrozek@redhat.com> - 3.1.1-1
changelog:
  - Resolves: rhbz#1935433 - python-oauthlib implements and/or uses the
                             deprecated SHA1 algorithm by default


author: TomasHalman <thalman@redhat.com> - 3.1.1-3
changelog:
  - Remove RSA support
  - Remove build dependency on blinker
    Resolves: rhbz#1984046 - python-oauthlib depends on jwt for RSA


author: Miro Hrončok <mhroncok@redhat.com> - 0.7.2-21
changelog:
  - Subpackage python2-prettytable has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomas Orsava <torsava@redhat.com> - 5.8.0-5
changelog:
  - Remove unnecessary test dependency on python3-mock
  - Remove unnecessary macro __provides_exclude_from


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.8.6-6
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Add manual Obsoletes for python39-psycopg2-doc
  - Related: rhbz#1990421


author: Pavel Cahyna <pcahyna@redhat.com> - 1.5.29-1
changelog:
  - Updated to 1.5.29.
  - Avoid dependency on python-pbr, conditionalize docs build, to allow building in RHEL.
    Inspired by python-sushy.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.3-3
changelog:
  - Replace pypi_name macro with srcname
  - Update BR’s
  - Run the doctests
  - Build documentation in a new -doc subpackage


author: Miro Hrončok <mhroncok@redhat.com> - 0.17.3-7
changelog:
  - Don't BuildRequire python3-hypothesis and exclude affected tests from %check
  - Resolves: rhbz#1928125


author: Christian Heimes <cheimes@redhat.com> - 6.1-10
changelog:
  - Resolves: #1935839 Remove python-imaging build requirements for RHEL
  - Run unit tests during build


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.0-11
changelog:
  - Don't use SIGNATURE_RSA
  - Related: #1935433 - python-oauthlib implements and/or uses the deprecated
                        SHA1 algorithm by default


author: Paul Belanger <pabelanger@redhat.com> - 0.5.4-1
changelog:
  - Initial package.
  - Forked from https://fedora.pkgs.org/rawhide/fedora-x86_64/python3-resolvelib-0.5.5-2.fc35.noarch.rpm.html however
    downgraded to 0.5.4 due to 0.5.5 being yanked from pypi.


author: Tomas Orsava <torsava@redhat.com> - 12-8
changelog:
  - From `python3-foo` packages automatically generate `python3.X-foo` Obsoletes
    tags on CentOS/RHEL
  - Resolves: rhbz#1990421


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Packit Service <user-cont-team+packit-service@redhat.com> - 1.8-1
changelog:
  - New version - 1.8 (Jiri Konecny)
  - Add missing make command to spec file (Jiri Konecny)
  - Don't translate the prompt keys (Vendula Poncova)
  - Enable daily build for Anaconda-devel COPR repository (Jiri Konecny)
  - Use Fedora container registry instead of Dockerhub (Jiri Konecny)
  - Migrate COPR daily COPR builds to Packit (Jiri Konecny)
  - Test build on Fedora ELN (Jiri Konecny)
  - Remove packit get-current-action (Jiri Konecny)
  - Run tests in GitHub workflow (Martin Pitt)
  - Fix raise-missing-from (W0707) pylint warnings (Martin Pitt)
  - Fix pylint to check test code correctly (Jiri Konecny)
  - Use script to run unit tests (Jiri Konecny)
  - Use relative imports in tests (Jiri Konecny)
  - Change directory structure of unit tests (Jiri Konecny)
  - Fix documentation of _process_screen method (Jiri Konecny)
  - Fix pylint issues (Jiri Konecny)
  - Use pylint instead of pocketlint (Jiri Konecny)
  - Add coverage support (Jiri Konecny)
  - Make link to exmples directory in Readme (Jiri Konecny)
  - Fix homepage of the project in setup.py (Jiri Konecny)
  - Fix classifiers in setup.py (Jiri Konecny)
  - Add pypi-upload to Makefile (Jiri Konecny)
  - Use correct variant of the field (Jiri Konecny)
  - Propose Fedora update only to Fedora in development (Jiri Konecny)
  - Add upstream tag template to packit for releasing (Jiri Konecny)
  - Packit will download archive from Source0 if needed (Jiri Konecny)


author: Jiri Konecny <jkonecny@redhat.com> - 1.8.3-1
changelog:
  - Fix bumpver Makefile target (Jiri Konecny)
  - Add tests for UIScreen wide disabling of concurrency check (Jiri Konecny)
    Related: rhbz#2134889
  - Abstract registering signal handler in the InputHandler constructor (Jiri Konecny)
    Related: rhbz#2134889
  - Allow to disable concurrency check for all UIScreen inputs (Jiri Konecny)
    Resolves: rhbz#2134889
  - Add Makefile target for local container tests (Jiri Konecny)
  - Use localization from rhel-9 weblate translation component (Jiri Konecny)
  - Remove changelog from the upstream spec file (Jiri Konecny)
  - Fix spec file archive link (Jiri Konecny)
  - Include also documentation to the tarball (Jiri Konecny)
  - Rename doc directory to docs (Jiri Konecny)
  - Add explanations of what is included in the MANIFEST.in file (Jiri Konecny)
  - Update packit config to reflect new tag naming (Jiri Konecny)
  - Change tag name to just version (Jiri Konecny)
  - Fix GitHub workflow checkout (Jiri Konecny)
  - Switch to packit new fedora-latest alias (Jiri Konecny)
  - Disable duplicate-code in pylint test (Jiri Konecny)
  - Remove duplicate of code between event loops (Jiri Konecny)


author: Nils Philippsen <nils@tiptoe.de> - 1.4.32-1
changelog:
  - version 1.4.32
  - don't BR: python3-pytest-xdist on EL9
  - remove obsolete (no-op) tweak of setup.cfg


author: Sergio Correia <scorreia@redhat.com> - 1.4.37-3
changelog:
  - Remove obsolete cruft from the specfile, follow the packaging guidelines
  - Remove also extra packages we have no runtime dependencies for
    Related: rhbz#2084556


author: Miro Hrončok <mhroncok@redhat.com> - 2.0.1-5
changelog:
  - Initial package for RHEL 9
  - Resolves: rhbz#2175213
  - Fedora+EPEL contributions by:
        Maxwell G <gotmax@e.email>
        Michel Alexandre Salim <salimma@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.21-1
changelog:
  - Update to 3.9.21
  - Security fix for CVE-2024-11168 and CVE-2024-9287
  Resolves: RHEL-64889
  Resolves: RHEL-69942


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.23-1
changelog:
  - Update to 3.9.23
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218


author: Petr Pisar <ppisar@redhat.com> - 4.3.0-16
changelog:
  - Revert needs-restarting prefers to obtain a boot time from systemd to deal
    with RTCs running in local time (RHEL-39775)


author: Marek Blaha <mblaha@redhat.com> - 4.3.0-21
changelog:
  - reposync: Avoid multiple downloads of duplicate packages (RHEL-64320)
  - Fix bogus changelog entry date


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Chris Leech <cleech@redhat.com> - 6.2.1.9-18.gita65a472
changelog:
  - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
  - new meson build system, sync with fedora packaging


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Tony Asleson <tasleson@redhat.com> - 0.14.6-6
changelog:
  - Fix build failure
    Bad source: /builddir/build/SOURCES/pywbem-0.14.6.tar.gz: No such file or directory


author: Miro Hrončok <mhroncok@redhat.com> - 0.26-8
changelog:
  - Subpackage python2-pyxdg has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Andrea Claudi <aclaudi@redhat.com> - 2.5.0-1.el9
changelog:
  - Don't package scapy tests (Andrea Claudi)
  - Fix scapy compliance with pep-0440 (Andrea Claudi) [2162667]
  - New version 2.5.0 (Andrea Claudi) [RHEL-657]


author: Pavel Simovec <psimovec@redhat.com> - 1.9.3-2
changelog:
  - Apply upstream patch: MAINT:linalg:Adjust lwork/liwork changes OpenBLAS 0.3.26
  - Resolves: RHEL-70908


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.9-1
changelog:
  - Create /var/run/reboot-required file (frostyx@email.cz)
  - Recommend the correct command for restarting auditd (frostyx@email.cz)
  - Add python3-setuptools dependency (frostyx@email.cz)
  - Fix argument passed to print_helper() (ferdnyc@gmail.com)
  - Add similar software to the readme (frostyx@email.cz)
  - Update url references to point to tracer.readthedocs.io (dcampano@gmail.com)
  - Oracle Linux 8 uses dnf, too (suttner@atix.de)
  - Drop python-setuptools runtime dependency (frostyx@email.cz)
  - Fix Python DeprecationWarning: invalid escape sequence
    (jvanderwaa@redhat.com)
  - Add readthedocs configuration file (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 1.0-1
changelog:
  - Fix querying RPM files on EPEL7 (frostyx@email.cz)
  - Use backported lru_cache on EPEL7 (frostyx@email.cz)
  - Don't hang forever when executed via SSH (frostyx@email.cz)
  - Don't check if package is installed before listing its files
    (frostyx@email.cz)
  - Replace regexes where they are not needed (frostyx@email.cz)
  - Query all packages at once, its faster than one by one (frostyx@email.cz)
  - Cache some properties for a massive performance boost (frostyx@email.cz)
  - Refactor unnecessary condition (frostyx@email.cz)
  - Fix weird indentation (frostyx@email.cz)
  - Pass the whole application to the provided_by function, not just its name
    (frostyx@email.cz)
  - Stop using deprecated rpm.fi (frostyx@email.cz)
  - Attempt to fix readthedocs deprecation error (frostyx@email.cz)
  - More reliable check if /usr/lib/sysimage/dnf/ database should be used
    (frostyx@email.cz)


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-1
changelog:
  - Update to 3.11.13
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.13-2
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-101551


author: Charalampos Stratakis <cstratak@redhat.com> - 1.0.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Carl George <carl@george.computer>
        Damien Ciabrini <dciabrin@redhat.com>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Itamar Reis Peixoto <itamar@ispbrasil.com.br>
        Julien Enselme <jujens@jujens.eu>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.15.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Joel Capitao <jcapitao@redhat.com>
        John Dulaney <jdulaney@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Parag Nemade <pnemade@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.1.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Gwyn Ciesla <limb@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 37.0.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Paul Wouters <pwouters@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Tom Prince <tom.prince@ualberta.net>


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <fale@redhat.com>
        Igor Raits <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jcollie@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomas Orsava <torsava@redhat.com> - 4.9.2-4
changelog:
  - Bring back the isoschematron submodule,
    but without the validation of the schema file itself
  - Resolves: RHEL-5570


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.23.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <sharkcz@fedoraproject.org>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <limburgher@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tom spot Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim GÜNDÜZ <devrim@fedoraproject.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.20-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.7.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Carl George <carl@george.computer>
        Charalampos Stratakis <cstratak@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Raphael Groner <raphgro@fedoraproject.org>
        Tim Orling <timothy.t.orling@linux.intel.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 6.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <ausil@fedoraproject.org>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.28.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Arun SAG <sagarun@gmail.com>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Rex Dieter <rdieter@math.unl.edu>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        yatinkarel <ykarel@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.8.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.16.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@nwra.com>
        Pádraig Brady <P@draigBrady.com>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        yatin <ykarel@redhat.com>


